Should the includes option of RequireUpperBoundDeps match wildcards

[Nick Stolwijk <ni...@gmail.com>]

Hi,

I was playing around with the RequireUpperBoundDeps includes option to only
fail the build on some specific artifacts.

I wanted to include a bom artifact, but found out that didn't match the
filtering. Second attempt was to filter out with a wildcard, but that also
didn't match.

Are wildcard / bom resolution a good idea for the includes? Wildcard looks
a lot simpler to implement.

Examples:

<requireUpperBoundDeps>
  <includes>
    <include>software.amazon.awssdk:bom</include> <!-- preferred way?
Should match software.amazon.awssdk:sdk-core for example -->
    <include>software.amazon.awssdk:*</include> <!-- alternative way, looks
simple to implement with regex matching instead of exact matching -->
  </includes>
</requireUpperBoundDeps>

What do you think?

Nick Stolwijk

~~~ Try to leave this world a little better than you found it and, when
your turn comes to die, you can die happy in feeling that at any rate you
have not wasted your time but have done your best ~~~

Lord Baden-Powell