[BUILD-612] Make the dependency bot able to resolve deps even in the case where the dep must be kept in sync with others Created: 20/Dec/21  Updated: 01/Apr/22  Resolved: 01/Apr/22

Status: Closed
Project: Build
Component/s: None
Affects Version/s: None
Fix Version/s: None

Type: Improvement Priority: Neutral
Reporter: Maxime Michel Assignee: Unassigned
Resolution: Won't Do Votes: 0
Labels: foundation_team
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
relation
is related to BUILD-511 Implement a dependency bot (for boms ... Closed
Template:
Acceptance criteria:
Empty
Epic Link: Dependency bot

 Description   

How?

  • using Maven Central's REST API? doesn't seem to have any API to browse deps
  • look it up manually on a case-by-case basis? e.g. https://github.com/aws/aws-sdk-java/blob/1.12.144/pom.xml would do the trick initially but couldn't be applied to all deps
  • with Maven itself resolving the dependency with a Jenkins job?

TODO's:

  • see which dep has fastest lifecycle in order to know which to look up first in a given set of related deps
  • send a Slack notification or submit a PR? PR would require refactoring current dependency bot implementation, worth the effort?

Generated at Sun Feb 11 23:43:29 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.