googleapis / googleapis/google-cloud-java

[sdk-platform-java] [Hermetic Build] Libraries BOM version rendered in README.md may not be up to date

未关闭
#12,374 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
priority: p3 type: feature request
主要语言
Java
星标
2.1k
派生
1.2k
平均合并
1 天 23 小时
30 天内合并 PR
154

描述

We found out that java-storage had only one of the versions updated in https://github.com/googleapis/java-storage/pull/3267, where the BOM setup section was missing the version update.
This was also found in https://github.com/googleapis/java-bigquerystorage/pull/3070.

The root cause is in owl-bot relying on sample snippets instead of the BOM version of the config yaml. From internal investigation:

## "
Turns out that the value of libraries bom doesn't come from a template, but from a snippet in java-storage ([link](https://github.com/googleapis/java-storage/blob/e3d2d379db2e59b3fd0ab1c1a95bba32eb52d48d/samples/snippets/pom.xml#L28-L50)). The template readme [will render this if present](https://github.com/googleapis/sdk-platform-java/blob/f18318660c05d0d8466e3ead7127f0747fac2e2e/hermetic_build/library_generation/owlbot/templates/java_library/README.md?plain=1#L31-L36), which is the case in java-storage.

This seems to be an ambiguous case where hermetic build tries to manage the bom version when rendering templates, but the legacy synthtool under the hood would first try to fetch existing code which may or may not be updated beforehand ([renovate-bot takes care of this](https://github.com/googleapis/java-storage/commits/main/samples/snippets/pom.xml)).

On one hand, we have documentation pointing to libraries bom (this case) and other places, such as root pom.xml files, where the version is used in production code.

What if we simply use [the other case for installing it with BOM](https://github.com/googleapis/sdk-platform-java/blob/f18318660c05d0d8466e3ead7127f0747fac2e2e/hermetic_build/library_generation/owlbot/templates/java_library/README.md?plain=1#L39-L48) by default? We can do a survey and find out whether there are any repos using a special version of "install_with_bom" that is not covered by that default template.
## "

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。