search

rtimush / sbt-updates

sbt plugin that can check Maven and Ivy repositories for dependency updates
BSD 3-Clause "New" or "Revised" License
761 stars 55 forks source link

typelevel/fs2: new versions not reported #314

Closed satorg closed 2 years ago

satorg commented 2 years ago

Versions used:

Consider this simple build.sbt:

scalaVersion := "2.13.8"

libraryDependencies ++= Seq("co.fs2" %% "fs2-core" % "3.2.6")

then run sbt dependencyUpdates:

~/projects/probes/dependency-updates-fs2$ sbt dependencyUpdates
[info] welcome to sbt 1.6.2 (Homebrew Java 11.0.15)
[info] loading settings for project global-plugins from plugins.sbt ...
[info] loading global plugins from /Users/satorg/.sbt/1.0/plugins
[info] loading project definition from /Users/satorg/projects/probes/dependency-updates-fs2/project
[info] loading settings for project dependency-updates-fs2 from build.sbt ...
[info] set current project to dependency-updates-fs2 (in build file:/Users/satorg/projects/probes/dependency-updates-fs2/)
[info] No dependency updates found for dependency-updates-fs2
[success] Total time: 0 s, completed May 24, 2022, 10:50:42 AM

So no updates found although there's definitely a newer version: v3.2.7

The plugin still works for all other libraries I got a chance to try.

rtimush commented 2 years ago

sbt-updates relies on the metadata files for maven repositories, and the maven-metadata.xml for fs2-core doesn't actually contain 3.2.7. This seem to be the same issue as in MVNCENTRAL-6820 — the newer versions are most likely published to the "new" s01 Sonatype server, but it looks like there was a build of an older version that published artifacts to the "old" Sonatype server, and this screwed up the metadata. Hopefully, it will get fixed next time fs2 publishes any artifact.

That said, the same can potentially affect any library backporting fixes to older versions, so maybe I should make sbt-update check not only the metadata file, but also the directory listing for Maven Central as well.

satorg commented 2 years ago

Actually, I did more checks on that and noticed that the last FS2 version that sbt-updates still able to find updates for is "3.0.0" – it shows that "3.0.1" is available. But seems that all other subsequent versions are not detected by sbt-update anymore.

rtimush commented 2 years ago

Fixed in #317

satorg commented 2 years ago

Cool, thanks!