On Thu, 29 Feb 2024 at 09:53, Piotr P. Karwasz <piotr.karw...@gmail.com> wrote:
>
> Hi sebb,
>
> On Thu, 29 Feb 2024 at 10:25, sebb <seb...@gmail.com> wrote:
> > > but dependency management can be used to
> > > prevent version mismatches.
> >
> > What dependency management is that? Does Maven manage this?
> > Seems like users would be forced to use extra controls to ensure only
> > comaptible combinations of artifacts were used.
>
> Maven users would be forced to add a new `commons-compress-bom`
> artifact (in my PR) to their dependency management. As far as I know
> other build systems (Gradle, Coursier, probably Apache Ivy) resolve
> version conflicts with a "highest version wins strategy", so the
> change will be a no-op for them.

Are you sure about that?
What if a component specifies a version range?

> Yes, this change might require a developer to supervise the upgrade,
> so it might require a major version bump to drive their attention.
> However personally I find it less problematic than having half the
> dependency stack using `o.a.c.compress` and half of it using
> `o.a.c.compress2`.

Agreed that might be harder to change automatically.
But my solution in this case would be a complete package/Maven coord break.

A one-off global edit, but no worries about missing dependency restrictions.

> The necessity to align the versions of a multi-module project is
> something many users are aware of (and the others use Spring Boot
> dependency management ;-) ).

Or they expect Maven to take care of version management for them.

> Piotr
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Reply via email to