[
https://issues.apache.org/jira/browse/BEAM-8654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16973722#comment-16973722
]
Yifan Zou commented on BEAM-8654:
---------------------------------
>From the gradle-versions-plugin document:
* release: selects the latest release
* milestone: select the latest version being either a milestone or a release
(default)
When we design and implement the beam dependency tool, we wanted the report to
be readable and less spamy. We expect to highlight the dependencies which have
high risk using an old version, for example, an old version could lead to a
dependency diamond. Thus, having the revision=release to check on the latest
release version only does make sense to us.
To this specific case, I have no answer on why bigtable-client-core 1.12.1
didn't show up in the plugin checking results. We also don't understand what
does a "milestone" version stand for.
> [Java] beam_Dependency_Check's not getting outdated report from Gradle
> ----------------------------------------------------------------------
>
> Key: BEAM-8654
> URL: https://issues.apache.org/jira/browse/BEAM-8654
> Project: Beam
> Issue Type: Improvement
> Components: build-system
> Reporter: Tomo Suzuki
> Priority: Major
>
> Cont. of https://issues.apache.org/jira/browse/BEAM-8621
> https://builds.apache.org/view/A-D/view/Beam/view/All/job/beam_Dependency_Check/234/consoleFull
> says
> {noformat}
> 18:23:12 The following dependencies are using the latest release version:
> ...
> 18:23:12 - com.google.cloud.bigdataoss:util:1.9.16
> 18:23:12 - com.google.cloud.bigtable:bigtable-client-core:1.8.0
> {noformat}
> But they are not the latest release.
> *
> https://search.maven.org/artifact/com.google.cloud.bigdataoss/util/2.0.0/jar
> *
> https://search.maven.org/artifact/com.google.cloud.bigtable/bigtable-client-core/1.12.1/jar
> Why does Gradle think they're the latest release?
> It seems that " -Drevision=release" flag plays some role here. Without the
> flag, Gradle reports these artifacts are not the latest.
> https://gist.github.com/suztomo/1460f2be48025c8ea764e86a2c6e39a8
> Even with the flag, it should report the following
> {noformat}
> The following dependencies have later release versions:
> - com.google.cloud.bigtable:bigtable-client-core [1.8.0 -> 1.12.1]
> https://cloud.google.com/bigtable/
> {noformat}
> https://gist.github.com/suztomo/13473e6b9765c0e96c22aeffab18ef66
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
