Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Drop Spring Dependency Management plugin in favor of Gradle's platform #62

Open
musketyr opened this issue Dec 14, 2021 · 1 comment
Open

Comments

@musketyr
Copy link

The Spring Dependency Management plugin provides some strange behavior. For example, it's very difficult to fix Log4Shell issue as the plugin still forces the old versions from the Spring's BOM. Gradle's platform works well as a substitute. See for example Micronaut Gradle plugins implementation:

https://github.com/micronaut-projects/micronaut-gradle-plugin/blob/6e4bbc1825aa3ed4210c0c0a69150add2c0ce2d7/src/main/java/io/micronaut/gradle/MicronautLibraryPlugin.java#L92-L98

@musketyr
Copy link
Author

yet another reason is that Spring Dependency Management plugin uses detached configuration which cannot be cached.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants