Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make sure dependencies converges #1659

Closed
wants to merge 14 commits into from

Conversation

rborer
Copy link

@rborer rborer commented Feb 24, 2017

Hi,

I'm planning to use the BigQuery client in one of my project where I have have enabled dependency convergence (see 1). Unfortunately, it seems that the client has quite a few dependencies that do not converge, so I've started to fix them as I cannot build my project.

This is a work in progress, please let me know if this would make sense to you or if I have to sort things out at my project level only.

Also, the policy I've chosen when a conflict has been detected is to always pick the highest version number.

I've also added in the modified pom.xml (only core project for the moment) which lower versions are excluded for reference.

Thanks,
Reynald

Use the maven enforcer plugin dependencyConvergence ([1]) rule to make sure that all dependencies converge. When conflicts were detected, the higher version has been choosen.

Note that this is a work in progress...

[1]: http://maven.apache.org/enforcer/enforcer-rules/dependencyConvergence.html
@googlebot
Copy link

Thanks for your pull request. It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

📝 Please visit https://cla.developers.google.com/ to sign.

Once you've signed, please reply here (e.g. I signed it!) and we'll verify. Thanks.


  • If you've already signed a CLA, it's possible we don't have your GitHub username or you're using a different email address. Check your existing CLA data and verify that your email is set on your git commits.
  • If you signed the CLA as a corporation, please let us know the company's name.

@googlebot googlebot added the cla: no This human has *not* signed the Contributor License Agreement. label Feb 24, 2017
@rborer
Copy link
Author

rborer commented Feb 24, 2017

I signed it!

@googlebot
Copy link

CLAs look good, thanks!

@googlebot googlebot added cla: yes This human has signed the Contributor License Agreement. and removed cla: no This human has *not* signed the Contributor License Agreement. labels Feb 24, 2017
@rborer
Copy link
Author

rborer commented Feb 24, 2017

Now that I'm doing it, I see that there a quite a few common deps that does not converge (guava, joda-time, ...). Another solution could be to have a dependencyManagement block at the root pom.xml to force those libraries to be at the specified version globally. Thoughts?

Reynald Borer added 7 commits February 27, 2017 10:15
…ttp & api-client-appengine clients to 1.22.0"

This reverts commit c5ee626.
This is done using dependencyManagement at the root pom
@coveralls
Copy link

Coverage Status

Changes Unknown when pulling 44409b9 on rborer:dependency-convergence into ** on GoogleCloudPlatform:master**.

@@ -51,7 +51,6 @@
<dependency>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
<version>4.12</version>
<scope>test</scope>

This comment was marked as spam.

This comment was marked as spam.

@coveralls
Copy link

Coverage Status

Changes Unknown when pulling 7d5ad6b on rborer:dependency-convergence into ** on GoogleCloudPlatform:master**.

@rborer
Copy link
Author

rborer commented Mar 16, 2017

Any news on this one? Let me know if my explanation is not clear or if I need to improve my PR :-)

@garrettjonesgoogle
Copy link
Member

I intend on circling back - we're trying to get a lot of breaking changes through at the moment so we're concentrating on that.

@rborer
Copy link
Author

rborer commented Mar 24, 2017

Thanks @garrettjonesgoogle I fully understand, it looks like things are moving at an interesting pace. Ping me when you intend to have a look at this one, there will probably be some conflicts to fix first. Also, I think we should compare the output of mvn dependency:tree before & after to spot differences in dependencies.

@garrettjonesgoogle
Copy link
Member

@rborer I went ahead and re-implemented this with the latest versions in #1943 .

@garrettjonesgoogle
Copy link
Member

Closing out because #1943 was submitted.

@rborer
Copy link
Author

rborer commented Apr 24, 2017

@garrettjonesgoogle thanks!

github-actions bot pushed a commit that referenced this pull request Nov 9, 2022
Co-authored-by: Jeffrey Rennie <[email protected]>
Co-authored-by: Tomo Suzuki <[email protected]>
Source-Link: https://togithub.com/googleapis/synthtool/commit/b59cf7b5a91ecab29e21fdfbb7e3b81066229be4
Post-Processor: gcr.io/cloud-devrel-public-resources/owlbot-java:latest@sha256:894d56f45fc3f4f0d5f3bcf790846419ee2d8e44715eae8917d6a1bba2b7283d
suztomo added a commit that referenced this pull request Feb 1, 2023
Co-authored-by: Jeffrey Rennie <[email protected]>
Co-authored-by: Tomo Suzuki <[email protected]>
Source-Link: https://togithub.com/googleapis/synthtool/commit/b59cf7b5a91ecab29e21fdfbb7e3b81066229be4
Post-Processor: gcr.io/cloud-devrel-public-resources/owlbot-java:latest@sha256:894d56f45fc3f4f0d5f3bcf790846419ee2d8e44715eae8917d6a1bba2b7283d
suztomo added a commit that referenced this pull request Feb 1, 2023
Co-authored-by: Jeffrey Rennie <[email protected]>
Co-authored-by: Tomo Suzuki <[email protected]>
Source-Link: https://togithub.com/googleapis/synthtool/commit/b59cf7b5a91ecab29e21fdfbb7e3b81066229be4
Post-Processor: gcr.io/cloud-devrel-public-resources/owlbot-java:latest@sha256:894d56f45fc3f4f0d5f3bcf790846419ee2d8e44715eae8917d6a1bba2b7283d
suztomo added a commit that referenced this pull request Feb 1, 2023
Co-authored-by: Jeffrey Rennie <[email protected]>
Co-authored-by: Tomo Suzuki <[email protected]>
Source-Link: https://togithub.com/googleapis/synthtool/commit/b59cf7b5a91ecab29e21fdfbb7e3b81066229be4
Post-Processor: gcr.io/cloud-devrel-public-resources/owlbot-java:latest@sha256:894d56f45fc3f4f0d5f3bcf790846419ee2d8e44715eae8917d6a1bba2b7283d
suztomo pushed a commit that referenced this pull request Feb 1, 2023
…500)

Revert "chore(deps): update dependency protobuf to v3.20.2 (#1659)"

This reverts commit b59cf7b5a91ecab29e21fdfbb7e3b81066229be4.
Source-Link: https://togithub.com/googleapis/synthtool/commit/a66e34625d760ad299627f6613a1bd438c1b62a9
Post-Processor: gcr.io/cloud-devrel-public-resources/owlbot-java:latest@sha256:bd316b9a591c45264775ecaba72e37d65905925c323b68e51a08c4126e4b6d0a
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cla: yes This human has signed the Contributor License Agreement.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants