eclipse-score / eclipse-score/tooling

Version 1.2.0 unusable due to broken `grpc-java` transitive dependency

Open
#145 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
8
Forks
37
Avg merge
2d 13h
Merged PRs (30d)
22

Description

### Description

I'm unable to update to the `score_tooling@1.2.0` in https://github.com/eclipse-score/baselibs/
Running `bazel mod deps --lockfile_mode=update` fails immediately with:

```
ERROR: module extension @@grpc+//bazel:grpc_deps.bzl%grpc_repo_deps_ext does not generate repository "com_envoyproxy_protoc_gen_validate", yet it is imported as "com_envoyproxy_protoc_gen_validate" in the usage at https://bcr.bazel.build/modules/grpc-java/1.66.0/MODULE.bazel:68:35
(score_baselibs@_)

ERROR: Results may be incomplete as 1 extension failed.
```

### Analysis results

The dependency chain that introduces this broken module is:
```
score_tooling@1.2.0
└── flatbuffers@25.9.23
└── grpc@1.70.1
└── googleapis@0.0.0-20240819-fe8ba054a
└── grpc-java@1.66.0 ← broken
```
Looks like a recent dependency to `flatbuffers` is causing an issue.

### Solution

_No response_

### Error Occurrence Rate

None

### How to reproduce

Update to `1.2.0` in baselibs module and run `bazel mod deps --lockfile_mode=update`

### Supporting Information

_No response_

### Classification

Major

### First Affected Release

not released (main)

### Last Affected Release

not released (main)

### Expected Fixed Release

before release (main)

### Category

- [ ] Safety Relevant
- [ ] Security Relevant

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.