search

Azure / azure-sdk-for-java

This repository is for active development of the Azure SDK for Java. For consumers of the SDK we recommend visiting our public developer docs at https://docs.microsoft.com/java/azure/ or our versioned developer docs at https://azure.github.io/azure-sdk-for-java.
MIT License
2.33k stars 1.97k forks source link

[FEATURE REQ] Regular BOM releases #18759

Closed ppalaga closed 3 years ago

ppalaga commented 3 years ago

Working without BOM in a project that has thousands of dependencies coming from many third party organizations is rather painful. The hardest part is to figure our which artifact versions are compatible with each other. Using a BOM (Bill of Materials) is a common practice to solve this problem. It is nice to see that azure-sdk-bom exists. However, it is a bit out of date now. It was released on 2020-06-19 which 7 was months ago https://repo1.maven.org/maven2/com/azure/azure-sdk-bom/

So would it please be possible to update it regularly?

joshfree commented 3 years ago

Thanks for filing this issue, @ppalaga. We do plan to release an updated BOM a few times per year. The background discussion is captured in this issue: https://github.com/Azure/azure-sdk-for-java/issues/7280.

I'd be interested in learning if the update cadence we've landed on is sufficient for your needs. Thanks.

ppalaga commented 3 years ago

Ideally, the BoM should be up-to-date at any point in time because once I start relying on it, I'd like to get all kinds of updates through it, including security patches.

But OTOH, I know it may be hard to do for you depending on how independent your clients are and whether their release schedules are synchronized in some way.

So if https://github.com/Azure/azure-sdk-for-java/issues/7280 states

[BOM] should have a release cadence somewhere in the order of every 3-6 months

my preference would be more towards the faster release cadence.

joshfree commented 3 years ago

@alzimmermsft please update this issue once the BOM has been released

alzimmermsft commented 3 years ago

Hi @ppalaga,

Thank you for your feedback on the release cycle timelines for updating the azure-sdk-bom. We're currently investigating adding infrastructure which will simplify preparing and ensuring a new version of azure-sdk-bom is ready for release. With this we'll be aiming to have a release cadence closer to the lower bound of 3-6 months.

An updated version of azure-sdk-bom was just released. If you have any questions about it please don't hesitate to ask and don't hesitate to provide additional feedback, we're still looking at anyway we can improve this offering.

iliassk commented 3 years ago

Hi, are you planning to add net.java.dev.jna:jna:5.6.0 to your dependencies since you're using net.java.dev.jna:jna-platform:5.6.0?

Otherwise, if we're using an older version of jna, we're getting this error: java.lang.NoSuchMethodError: 'com.sun.jna.Library com.sun.jna.Native.load(java.lang.String, java.lang.Class)'

Also, if I understand correctly, we should expect the next update in the next 1-4 months?