search

grails / grails-gradle-plugin

Apache License 2.0
6 stars 9 forks source link

Drop Spring Dependency Management plugin in favor of Gradle's platform #62

Open musketyr opened 2 years ago

musketyr commented 2 years ago

The Spring Dependency Management plugin provides some strange behavior. For example, it's very difficult to fix Log4Shell issue as the plugin still forces the old versions from the Spring's BOM. Gradle's platform works well as a substitute. See for example Micronaut Gradle plugins implementation:

https://github.com/micronaut-projects/micronaut-gradle-plugin/blob/6e4bbc1825aa3ed4210c0c0a69150add2c0ce2d7/src/main/java/io/micronaut/gradle/MicronautLibraryPlugin.java#L92-L98

musketyr commented 2 years ago

yet another reason is that Spring Dependency Management plugin uses detached configuration which cannot be cached.