Patrick Rhomberg created GEODE-6926:
---------------------------------------
Summary: BOMs constrain all our dependencies, including test-only
dependencies
Key: GEODE-6926
URL: https://issues.apache.org/jira/browse/GEODE-6926
Project: Geode
Issue Type: Improvement
Reporter: Patrick Rhomberg
Because we include every version for every dependency we consume in one place
(i.e. {{buildSrc/.../DependencyConstraints}}), and because we build our
{{geode-all-bom}} from this single versions store, we are publishing a BOM that
constrains more than it should.
For instance, a consumer of the {{geode-all-bom}} will have JUnit constrained
to version 4.12, which as a geode _product_ consumer is both unnecessary and
potentially breaking.
We need to audit our dependencies and identify those dependencies which do not
reach a consumer.
This ticket may be partially coupled with GEODE-6532, which audits product
dependencies to distinguish _our_ compile/runtime dependencies from a
_consumer's_ transitive compile and runtime dependencies.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
