Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Skip classifier when checking for internal dep #4117

Merged

Conversation

honnix
Copy link
Contributor

@honnix honnix commented Aug 3, 2021

When building up the list of internal dependencies, it is not possible
to know the classifiers, so we skip appending classifier to a dependency
name when checking whether it is an internal dependency or not.

The details of this proposed change is described by https://github.com/dependabot/dependabot-core/pull/1924#issuecomment-891981747https://github.com/dependabot/dependabot-core/pull/1924#issuecomment-891981747

When building up the list of internal dependencies, it is not possible
to know the classifiers, so we skip appending classifier to a dependency
name when checking whether it is an internal dependency or not.
@honnix honnix requested a review from a team as a code owner August 3, 2021 20:41
@honnix honnix marked this pull request as draft August 3, 2021 20:41
@honnix
Copy link
Contributor Author

honnix commented Aug 3, 2021

cc @a1flecke

@honnix honnix marked this pull request as ready for review August 3, 2021 21:01
<groupId>net.evenh.multimodule</groupId>
<artifactId>util</artifactId>
<version>${project.version}</version>
<classifier>sources</classifier>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you add a test case in the filer_parser spec covering this case? Does this change mean we correctly detect internal dependencies?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is already a test case for this. Adding this classified dependency should cover the change. And yes, without the patch this added dependency will fail a test case where it asserts all dependencies to look for updates.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh gotcha! Thanks for linking 👍

@feelepxyz feelepxyz merged commit f2987e8 into dependabot:main Aug 4, 2021
@mctofu mctofu mentioned this pull request Aug 4, 2021
@honnix honnix deleted the fix-maven-internal-dep-classifier branch August 6, 2021 10:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants