search

OpenRailAssociation / osrd

An open source web application for railway infrastructure design, capacity analysis, timetabling and simulation
https://osrd.fr
457 stars 43 forks source link

core: enable dependency locking #7139

Open multun opened 6 months ago

multun commented 6 months ago

Description and goal

Currently, builds of core aren't quite reproducible: if a new version of a dependency is published that matches our version specification, it may cause the build or runtime to fail without notice, nor easy way to understand what happened.

We should instead:

Acceptance criteria

A list of conditions which define when this task shall be considered complete

Khoyo commented 6 months ago

This is dependabot's gradle lockfile issue: https://github.com/dependabot/dependabot-core/issues/2222