-
Notifications
You must be signed in to change notification settings - Fork 2.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): update dependency com.google.cloud:google-cloud-kms to v1.39.0 #3235
chore(deps): update dependency com.google.cloud:google-cloud-kms to v1.39.0 #3235
Conversation
Your PR has attempted to merge for 3 hours. Please check that all required checks have passed, you have an automerge label, and that all your reviewers have approved the PR |
Merge-on-green attempted to merge your PR for 6 hours, but it was not mergeable because either one of your required status checks failed, or one of your required reviews was not approved. Learn more about your required status checks here: https://help.github.com/en/github/administering-a-repository/enabling-required-status-checks. You can remove and reapply the label to re-run the bot. |
Java 11@chingor13 @stephaniewang526 @sethvargo PTAL - same problem as secrets manager
|
@lesv Is that class deprecated or removed? |
1 similar comment
@lesv Is that class deprecated or removed? |
Upon checking java-kms code, FieldMaskUtil class has been removed from the client -- the samples need to be rewritten/removed. |
@stephaniewang526 that class is used everywhere across all the client libraries. Why was it removed? It's also the only reasonable way to build a field mask as far as I know. |
@sethvargo actually I'm checking and seeing that |
This keeps failing and has been run 3 times now. |
Since this is affecting multiple packages, I'm relatively confident it's not unique to the java or secret manager samples, and is likely an indication of a larger, upstream breaking change. |
This is happening because protobuf-java-utils was changed from a compile dependency to runtime dependency (it's not used at compile time by google-cloud-kms). The flatten-maven-plugin likely has something to do with this (@stephaniewang526). In any case, these sample are using protobuf-java-utils directly and thus should be explicitly declaring that dependency. |
Regardless, this is a breaking change and should be reverted. |
It's not a breaking change as that class is not part of the google-cloud-kms library and is not necessary to run the library. Removing an unnecessary dependency is actually a bugfix. google-cloud-kms should not force applications to install libraries that are not necessary. The reason it looks like a breaking change is that this sample is relying on a transitive dependency when it should be declared explicitly. |
At t0, it worked. At t1, it's broken. Nothing in this repository has changed between t0 and t1. That's definitionally a breaking change. I'm not an expert in the Java ecosystem, but what caused the dependency to be dropped? |
As a user, previously I added the following to my <dependency>
<groupId>com.google.cloud</groupId>
<artifactId>google-cloud-kms</artifactId>
<version>1.38.1</version>
</dependency> And I had access to the |
@chingor13 If you remove something from the library, you should bump the major version. |
It doesn't seem anything was removed from the library. This sample was depending on transitive dependencies, which is always a bad idea. In google3 this isn't allowed at all, and blaze would fail the build. Maven isn't quite so strict, though there might be an enforcer rule that can check this. |
Since samples/ is using it, it should directly declare it as compile scope dep. No breaking change was made on the client library side -- this exposes a problem on the consuming side. |
This PR contains the following updates:
1.38.1
->1.39.0
Release Notes
googleapis/java-kms
v1.39.0
Compare Source
Features
Bug Fixes
Dependencies
Documentation
1.38.1 (2020-04-20)
Dependencies
Renovate configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻️ Rebasing: Never, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.