Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[2.x] Merge develop into wip/sbt-2.x #442

Merged
merged 89 commits into from
May 30, 2024
Merged

Conversation

adpi2
Copy link
Member

@adpi2 adpi2 commented May 23, 2024

We will probably need to release this to make sbt/sbt#7554 compile and pass the test.

And we should do the same for Zinc.

armanbilge and others added 30 commits January 16, 2022 21:34
Add predefined list of licenses
Deprecate `sonatypeRepo`, add `sonatypeOssRepos` to `Resolver`
Ref sbt/sbt#6912

Problem
-------
There's apparently a security issue with OkHttp 3.x,
which I am not really sure how applicable it is to our usage
of OkHttp but it is there.

Solution
--------
Since most of OkHttp-specic usage within LM is for Apache Ivy
downloading, I am going to drop this.
Since `sbt.librarymanagement.Http.http` is a public API,
I am substituting this with Apache HTTP backed implementation.
Add CrossVersionExtra.isBinaryCompatible utility
Problem
-------
Current impl is relaxed about comparing non-release Scala 2.x versions.

Solutution
----------
Use scalaApiVersion to compare two Scala 2 versions.
Better deprecation message for `sonatypeRepo`
Ivy 2.3.0-sbt-a8f9eb5bf09d0539ea3658a2c2d4e09755b5133e
Bump io, util, and scala-xml
sbt plugins were published to an invalid path with regard to Maven's
specifictation.

As of sbt 1.9 we produce two POMs, a deprecated one and a new one,
that is valid with regard to Maven resolution. When resolving,
we first try to resolve the new valid POM and we fallback to
the invalid one if needed.

In the new POM format, we append the sbt cross-version to all
artifactIds of sbt plugins. This is because we want Maven to be
able to resolve the plugin and all its dependencies.

When parsing it, we remove the cross-version suffix so that
the result of parsing the valid POM format is exactly the same
as parsing the deprecated POM format. Hence conflict resolution
happens as intended.

More details can be found at sbt/sbt#7096
@adpi2 adpi2 marked this pull request as ready for review May 27, 2024 15:10
@adpi2
Copy link
Member Author

adpi2 commented May 28, 2024

Blocked by eed3si9n/sjson-new#134

@jtjeferreira jtjeferreira mentioned this pull request May 29, 2024
@adpi2 adpi2 marked this pull request as ready for review May 29, 2024 12:28
@adpi2
Copy link
Member Author

adpi2 commented May 29, 2024

I cannot run the tests in sbt/sbt#7573 because of eed3si9n/sbt-coursier#1 (comment). So maybe we should merge it, release it, and 🤞.

@adpi2 adpi2 requested a review from eed3si9n May 29, 2024 12:29
Copy link
Member

@eed3si9n eed3si9n left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@eed3si9n eed3si9n merged commit f802149 into sbt:wip/sbt-2.x May 30, 2024
4 checks passed
@adpi2
Copy link
Member Author

adpi2 commented May 30, 2024

Thanks for merging!

I will need a release of this to pursue the merge in sbt-coursier and sbt. Do you think I should use my own group ID (ch.epfl.scala) for releasing alpha versions?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.