world-federation-of-advertisers / cross-media-measurement

A privacy centric system for cross publisher, cross media ads measurement through secure multiparty computations.
https://halo.wfanet.org/
Apache License 2.0
36 stars 11 forks source link

Use BOMs for Maven dependencies where available #1794

Closed SanjayVas closed 2 months ago

SanjayVas commented 2 months ago

rules_jvm_external now supports using bill of materials (BOM) for Maven dependencies via the new maven resolver. This reduces the risk of having incompatible versions when we update a dependency. In particular, it should reduce the "dependency hell" of trying to find compatible versions of low-level dependencies.

https://rally1.rallydev.com/#/?detail=/userstory/807695041095&fdp=true

SanjayVas commented 2 months ago

I discovered the new support when trying to update the Spanner library which requires updating gRPC which requires updating protobuf which leads to a slew of conflicts with Beam. This change makes that whole process much more manageable :)