nebula-plugins/gradle-dependency-lock-plugin
View on GitHub ↗ ★ 302 Groovy
A plugin to allow people using dynamic dependency versions to lock them to specific versions.
3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2017-11-11 · latest 2018-12-06
20082026
-
rely on package developers following semver Well, that seems naive. Almost 1/4th of Maven Central libraries broke binary compatibility in patch updates: https://avandeursen.com/2014/10/09/semantic-versioning-in-ma... Netflix, at least,…
comment by icebraining · 2018-12-06 · in Pipenv: promises a lot, delivers very little -
Exactly this. Or at least it's a way this can be achieved, assuming solid testing & some tooling in the mix. For folks unfamiliar with it, the issue is something like: 1. You find a bug in a library A. 2. Libraries B, C and D depend on A.…
comment by thomaslee · 2018-07-25 · in Why Google Stores Billions of Lines of Code in a Single Repository (2016) -
No mention of Java, but I feel like this works reasonably well: https://github.com/nebula-plugins/gradle-dependency-lock-plu... You specify what version constraint you want for each dependency (latest.release, major.+, major.minor.+, a…
comment by drdrey · 2017-11-11 · in The cargo cult of versioning