search

microsoft / kiota-java

Java libraries for Kiota-generated API clients.
https://aka.ms/kiota/docs
MIT License
24 stars 25 forks source link

Use Gradle version catalogs to have a single source of truth for dependency versions #1594

Open calebkiage opened 2 days ago

calebkiage commented 2 days ago

I propose using Gradle's version catalogs to have a single source of truth for the project's dependency versions and also (hopefully) reduce the number of dependabot PRs for the same dependency in the project. This feature should also be supported by gradle 8.9 which this project uses. See https://docs.gradle.org/8.9/userguide/platforms.html

baywet commented 2 days ago

Hey @calebkiage We're already using that to share dependencies between main/java-8/android projects for each package. I don't think we can use it across packages since they have different dependencies (e.g. azure identity authentication provider needs azure core that's not needed in other packages)

Can you provide more information on how you'd use this feature in addition to the current configuration please?

baywet commented 2 days ago

Ah scratch the last comment, I thought we were referring to a dependencies catalog, but eventually clicked on the link. Yes a version catalog would be interesting. We should double check that dependenbot supports it first though.