You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@beam.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2021/02/01 00:15:00 UTC

[jira] [Work logged] (BEAM-10961) Enable strict dependency analysis on all Java modules

     [ https://issues.apache.org/jira/browse/BEAM-10961?focusedWorklogId=544994&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-544994 ]

ASF GitHub Bot logged work on BEAM-10961:
-----------------------------------------

                Author: ASF GitHub Bot
            Created on: 01/Feb/21 00:14
            Start Date: 01/Feb/21 00:14
    Worklog Time Spent: 10m 
      Work Description: shehzaadn-vd commented on a change in pull request #13830:
URL: https://github.com/apache/beam/pull/13830#discussion_r567508007



##########
File path: sdks/java/extensions/sql/datacatalog/build.gradle
##########
@@ -20,13 +20,23 @@ import groovy.json.JsonOutput
 
 plugins { id 'org.apache.beam.module' }
 
-applyJavaNature(automaticModuleName: 'org.apache.beam.sdk.extensions.sql.datacatalog')
+applyJavaNature(
+  enableStrictDependencies: true,
+  automaticModuleName: 'org.apache.beam.sdk.extensions.sql.datacatalog')
 
 dependencies {
   compile enforcedPlatform(library.java.google_cloud_platform_libraries_bom)
   compile(library.java.google_cloud_datacatalog_v1beta1) {
     exclude group: 'io.grpc', module: 'grpc-core' // Use Beam's version
   }
+  compile library.java.gax
+  compile library.java.google_auth_library_credentials
+  compile library.java.protobuf_java
+  compile library.java.slf4j_api
+  compile library.java.vendored_guava_26_0_jre
+  compile project(path: ":sdks:java:core", configuration: "shadow")
+  compile "com.google.api.grpc:proto-google-cloud-datacatalog-v1beta1:0.32.1"

Review comment:
       @ibzib the declaration in BeamModulePlugin is 
   `google_cloud_datacatalog_v1beta1            : "com.google.cloud:google-cloud-datacatalog", // google_cloud_platform_libraries_bom sets version`
   whereas what's used here is:
   `"com.google.api.grpc:proto-google-cloud-datacatalog-v1beta1:0.32.1"`
   which doesn't exist in the BOM
   https://storage.googleapis.com/java-cloud-bom-dashboard/com.google.cloud/google-cloud-bom/0.147.0/index.html
   




----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Issue Time Tracking
-------------------

    Worklog Id:     (was: 544994)
    Time Spent: 101h 40m  (was: 101.5h)

> Enable strict dependency analysis on all Java modules 
> ------------------------------------------------------
>
>                 Key: BEAM-10961
>                 URL: https://issues.apache.org/jira/browse/BEAM-10961
>             Project: Beam
>          Issue Type: Improvement
>          Components: java-fn-execution
>            Reporter: Shehzaad Nakhoda
>            Assignee: Shehzaad Nakhoda
>            Priority: P2
>          Time Spent: 101h 40m
>  Remaining Estimate: 0h
>
> This is an IWYU analysis. If the module is using its transitive deps without depending on them, or if it has direct dependencies it doesn't use, the build fails. The work involves adding dependencies or adding exclusion rules (example: https://github.com/wfhartford/gradle-dependency-analyze#configurations). Even if they just add exclusions across the board, it will be a big win because it will prevent new violations.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)