ben-manes/gradle-versions-plugin
Gradle Versions Plugin
Dieses Projekt ist ein Gradle-Build-Plugin, das als Tool für Dependency-Updates und Versions-Audits fungiert. Sein Hauptzweck ist das Scannen von Projektabhängigkeiten und Build-Tool-Plugins, um neuere verfügbare Versionen von Bibliotheken zu identifizieren.
Das Plugin zeichnet sich durch die Analyse von Dependency-Constraints und Bills of Materials aus, um Updates für verwaltete transitive Versionen zu identifizieren. Zudem überprüft es verfügbare Updates für das Gradle-Build-Tool über Release-, Candidate- und Nightly-Kanäle hinweg.
Das Tool deckt breite Aufgabenbereiche ab, darunter die Analyse von Dependency-Versionen, Audits der Software-Supply-Chain und automatisiertes Versions-Tracking. Es unterstützt die Aggregation von Multi-Projekt-Builds und bietet anpassbare Versionsfilter, um instabile Releases auszuschließen. Analyseergebnisse können als Berichte in den Formaten Plain Text, JSON, XML oder HTML exportiert werden.
Features
- Outdated Dependency Tracking - Identifies which installed dependencies have newer versions available in remote registries through detailed reports.
- Dependency Versioning - Scans project dependencies and compares them against remote repositories to discover newer available versions.
- Dependency Update Reports - Generates reports detailing which dependencies are up-to-date, require upgrades, or failed to resolve.
- Build Plugins - Implemented as a Gradle plugin that extends build functionality to automate dependency and version constraint analysis.
- Constraint Analysis - Analyzes platform constraints and bills of materials to identify updates for managed transitive dependencies.
- Constraint Inspection - Reviews platform constraints and transitive dependencies to identify available updates within the current build environment.
- Remote Repository Querying - Queries remote repository indices and Maven metadata to discover the latest available versions of dependencies.
- Dependency Version Analysis - Scans project dependencies against repository versions to identify outdated, undeclared, or unresolvable libraries.
- Gradle Dependency Update Tools - Provides a specialized tool for checking available updates to project libraries and plugins within the Gradle ecosystem.
- Version Update Checkers - Scans project dependencies and build tool plugins to identify and report newer available versions.
- Dependency Aggregation - Traverses the project hierarchy to collect dependency information across all subprojects for a consolidated report.
- Multi-Project Auditing - Generates consolidated or individual update reports for all subprojects within a multi-project build environment.
- Update Candidate Filtering - Filters dependency updates based on stability criteria, custom resolution rules, or project configurations.
- Build Maintenance Tools - Scans for newer versions of the Gradle build tool across release and nightly channels to ensure stability.
- Automated Version Tracking - Generates programmatic reports in JSON or HTML formats to detect when dependencies need to be upgraded.
- Stability Filtering Rules - Allows defining custom rules to reject unstable versions and select strategies for identifying the latest stable release.
- Version-Based Filtering - Implements filtering based on stability criteria and semantic version levels to determine which updates are eligible.
- Build Tool - Checks for available updates to the Gradle build tool across current, release-candidate, and nightly channels.
- Software Supply Chain Auditors - Provides capabilities to audit multi-project builds for outdated or unresolvable libraries to ensure supply chain health.
- Constraint Auditors - Analyzes dependency constraints and bills of materials to identify updates for managed transitive dependencies.
