Skip to content

Broaden dependency force coverage to all configurations and buildscripts via gradle.beforeProject#3

Merged
pzverkov merged 1 commit into
mainfrom
update/broaden-dependency-force
May 3, 2026
Merged

Broaden dependency force coverage to all configurations and buildscripts via gradle.beforeProject#3
pzverkov merged 1 commit into
mainfrom
update/broaden-dependency-force

Conversation

@pzverkov

@pzverkov pzverkov commented May 3, 2026

Copy link
Copy Markdown
Member

The previous force in root build.gradle.kts only covered root's buildscript classpath, so AGP-internal tooling configurations (R8, lint, sdk-common, bundletool) still resolved unforced versions and Dependabot kept 18 of 20 alerts open after the dependency-graph submission.

This moves the force into settings.gradle.kts behind a gradle.beforeProject hook that installs the eachDependency rule on every project Configuration and every buildscript classpath across all projects. Also expands the list to cover bcutil-jdk18on, all netty-* siblings, and wire-runtime-jvm so versions stay consistent within each toolchain instead of mixing patched and unpatched modules.

Verified locally:

  • ./gradlew buildEnvironment shows BC, jose4j, jdom2, commons-lang3, wire all resolving to forced versions
  • :filesigner-core:assembleRelease passes
  • :filesigner-core:testDebugUnitTest passes

@pzverkov pzverkov self-assigned this May 3, 2026
@pzverkov pzverkov merged commit e228ed0 into main May 3, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant