search

spring-attic / bomr

Command-line tool for creating and updating a Maven bom
32 stars 5 forks source link

Dependency that is newer due to the addition of a yyyymmdd qualifier is not reported #16

Closed snicoll closed 5 years ago

snicoll commented 5 years ago

Spring Boot had a dependency on the Jackson bom 2.9.9. A number of fixes to that bom were published:

com.fasterxml.jackson | jackson-bom | ‎ 2.9.9.20190807 | 06-Aug-2019
com.fasterxml.jackson | jackson-bom | ‎ 2.9.9.20190806 | 06-Aug-2019
com.fasterxml.jackson | jackson-bom | ‎ 2.9.9.20190727 | 27-Jul-2019
com.fasterxml.jackson | jackson-bom | ‎ 2.8.11.20190726 | 26-Jul-2019
com.fasterxml.jackson | jackson-bom | ‎ 2.10.0.pr1 | 19-Jul-2019

When running bomr on a project that uses 2.9.9 the timestamp version do not show up. Note that this is not related on the policy in use. A version that accept the same generation will output this:

Jackson 2.9.9

    1. 2.10.0.pr1

Please select a version: