ben-manes/gradle-versions-plugin
Gradle Versions Plugin
This project is a Gradle build plugin that functions as a dependency update tool and version auditor. Its primary purpose is to scan project dependencies and build tool plugins to identify newer available versions of libraries.
The plugin distinguishes itself by analyzing dependency constraints and bills of materials to identify updates for managed transitive versions. It also verifies available updates for the Gradle build tool across release, candidate, and nightly channels.
The tool covers broad capability areas including dependency version analysis, software supply chain auditing, and automated version tracking. It supports multi-project build aggregation and provides customizable version filtering to reject unstable releases. Analysis results can be exported as reports in plain text, JSON, XML, or HTML formats.
Features
- Outdated Dependency Tracking - Identifies which installed dependencies have newer versions available in remote registries through detailed reports.
- Dependency Versioning - Scans project dependencies and compares them against remote repositories to discover newer available versions.
- Dependency Update Reports - Generates reports detailing which dependencies are up-to-date, require upgrades, or failed to resolve.
- Build Plugins - Implemented as a Gradle plugin that extends build functionality to automate dependency and version constraint analysis.
- Constraint Analysis - Analyzes platform constraints and bills of materials to identify updates for managed transitive dependencies.
- Constraint Inspection - Reviews platform constraints and transitive dependencies to identify available updates within the current build environment.
- Remote Repository Querying - Queries remote repository indices and Maven metadata to discover the latest available versions of dependencies.
- Dependency Version Analysis - Scans project dependencies against repository versions to identify outdated, undeclared, or unresolvable libraries.
- Gradle Dependency Update Tools - Provides a specialized tool for checking available updates to project libraries and plugins within the Gradle ecosystem.
- Version Update Checkers - Scans project dependencies and build tool plugins to identify and report newer available versions.
- Dependency Aggregation - Traverses the project hierarchy to collect dependency information across all subprojects for a consolidated report.
- Multi-Project Auditing - Generates consolidated or individual update reports for all subprojects within a multi-project build environment.
- Update Candidate Filtering - Filters dependency updates based on stability criteria, custom resolution rules, or project configurations.
- Build Maintenance Tools - Scans for newer versions of the Gradle build tool across release and nightly channels to ensure stability.
- Automated Version Tracking - Generates programmatic reports in JSON or HTML formats to detect when dependencies need to be upgraded.
- Stability Filtering Rules - Allows defining custom rules to reject unstable versions and select strategies for identifying the latest stable release.
- Version-Based Filtering - Implements filtering based on stability criteria and semantic version levels to determine which updates are eligible.
- Build Tool - Checks for available updates to the Gradle build tool across current, release-candidate, and nightly channels.
- Software Supply Chain Auditors - Provides capabilities to audit multi-project builds for outdated or unresolvable libraries to ensure supply chain health.
- Constraint Auditors - Analyzes dependency constraints and bills of materials to identify updates for managed transitive dependencies.
