Bump com.autonomousapps.dependency-analysis from app.web.drjackycv.buildsrc.Depends.Versions.dependencyAnalysisVersion to 1.19.0 - #45
Conversation
Bumps [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) from app.web.drjackycv.buildsrc.Depends.Versions.dependencyAnalysisVersion to 1.19.0. - [Release notes](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/releases) - [Changelog](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/blob/main/CHANGELOG.md) - [Commits](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/commits/v1.19.0) --- updated-dependencies: - dependency-name: com.autonomousapps.dependency-analysis dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
|
Kudos, SonarCloud Quality Gate passed!
|
| id("com.osacky.doctor") version app.web.drjackycv.buildsrc.Depends.Versions.gradleDoctorVersion | ||
| id("com.autonomousapps.dependency-analysis") version app.web.drjackycv.buildsrc.Depends.Versions.dependencyAnalysisVersion | ||
| id("com.autonomousapps.dependency-analysis") version 1.19.0 | ||
| id("org.sonatype.gradle.plugins.scan") version app.web.drjackycv.buildsrc.Depends.Versions.sonatypeScanGradleVersion |
There was a problem hiding this comment.
Update the version catalog entry for dependency-analysis instead of hard-coding 1.19.0. Hard-coded versions violate the central version catalog policy and will cause version inconsistency.
| id("com.github.ben-manes.versions") version app.web.drjackycv.buildsrc.Depends.Versions.checkDependencyVersionsVersion | ||
| id("com.osacky.doctor") version app.web.drjackycv.buildsrc.Depends.Versions.gradleDoctorVersion | ||
| id("com.autonomousapps.dependency-analysis") version app.web.drjackycv.buildsrc.Depends.Versions.dependencyAnalysisVersion | ||
| id("com.autonomousapps.dependency-analysis") version 1.19.0 |
There was a problem hiding this comment.
Use version catalog alias instead of hard-coding the version (1.19.0) - this breaks the single source of truth for dependency versions. Update the version catalog file at {project}/gradle/libs.versions.toml and use an alias here.
| id("com.osacky.doctor") version app.web.drjackycv.buildsrc.Depends.Versions.gradleDoctorVersion | ||
| id("com.autonomousapps.dependency-analysis") version app.web.drjackycv.buildsrc.Depends.Versions.dependencyAnalysisVersion | ||
| id("com.autonomousapps.dependency-analysis") version 1.19.0 | ||
| id("org.sonatype.gradle.plugins.scan") version app.web.drjackycv.buildsrc.Depends.Versions.sonatypeScanGradleVersion |
There was a problem hiding this comment.
Hard-coding the version number breaks the version catalog pattern. Keep the version reference in libs.versions.toml and update the value there instead.
| id("com.osacky.doctor") version app.web.drjackycv.buildsrc.Depends.Versions.gradleDoctorVersion | ||
| id("com.autonomousapps.dependency-analysis") version app.web.drjackycv.buildsrc.Depends.Versions.dependencyAnalysisVersion | ||
| id("com.autonomousapps.dependency-analysis") version 1.19.0 | ||
| id("org.sonatype.gradle.plugins.scan") version app.web.drjackycv.buildsrc.Depends.Versions.sonatypeScanGradleVersion |
There was a problem hiding this comment.
Hardcodes version 1.19.0 breaks dependency centralization. Use version catalog entry or gradle property placeholder instead - follow Troubleshooting → Hardcoding versions.
| id("com.github.ben-manes.versions") version app.web.drjackycv.buildsrc.Depends.Versions.checkDependencyVersionsVersion | ||
| id("com.osacky.doctor") version app.web.drjackycv.buildsrc.Depends.Versions.gradleDoctorVersion | ||
| id("com.autonomousapps.dependency-analysis") version app.web.drjackycv.buildsrc.Depends.Versions.dependencyAnalysisVersion | ||
| id("com.autonomousapps.dependency-analysis") version 1.19.0 |
There was a problem hiding this comment.
You removed the version reference from the version catalog but did not add the corresponding entry to your catalog’s [versions] table. Add
dependencyAnalysisVersion = "1.19.0"
to gradle/libs.versions.toml and reference it as id("com.autonomousapps.dependency-analysis") version libs.versions.dependencyAnalysis to keep version management centralized for dependabot updates.
1 participant
Bumps com.autonomousapps.dependency-analysis from app.web.drjackycv.buildsrc.Depends.Versions.dependencyAnalysisVersion to 1.19.0.
Changelog
Sourced from com.autonomousapps.dependency-analysis's changelog.
... (truncated)
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)