Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

declare used transitive deps whose version we manage #142

Merged
merged 1 commit into from
Mar 13, 2023

Conversation

jtnord
Copy link
Member

@jtnord jtnord commented Mar 10, 2023

Due to jenkinsci/plugin-pom#705 and https://issues.apache.org/jira/browse/MNG-7003 using dependencyManagement to manage the transitive dependencies is not a good idea if you are going to be consumed by something else.

this keeps the dependencyManagement so we can manage the verions as one, but where we use a transitive dependency that has had its version managed we inline it into the dependencies

  • Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
  • Ensure that the pull request title represents the desired changelog entry
  • Please describe what you did
  • Link to relevant issues in GitHub or Jira
  • Link to relevant pull requests, esp. upstream and downstream changes
  • Ensure you have provided tests - that demonstrates feature works or fixes the issue

Due to jenkinsci/plugin-pom#705 and
https://issues.apache.org/jira/browse/MNG-7003 using
dependencyManagement to manage the transitive dependencies is not a good
idea if you are going to be consumed by something else.

this keeps the dependencyManagement so we can manage the verions as one,
but where we use a transitive dependency that has had its version
managed we inline it into the dependencies
Copy link
Member

@basil basil left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

https://github.com/jenkinsci/bom/blob/01f2b04ced89b4743411c9fdfe74c9814e37d40b/sample-plugin/pom.xml#L29-L36 can be made less ugly after this PR. The only remaining require upper bound dependencies error after this PR is for org.jetbrains:annotations between okhttp-api and io.jenkins.configuration-as-code:test-harness.

@jtnord jtnord added the bug Something isn't working label Mar 10, 2023
@jtnord jtnord requested a review from jglick March 10, 2023 18:13
@jtnord jtnord enabled auto-merge March 10, 2023 18:14
@jglick
Copy link
Member

jglick commented Mar 10, 2023

(suggest labeling as developer rather than bug)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants