Dependency Management in Gradle 5 and beyond Jendrik Johannes, Gradle 

PRODUCER A Model of Software Reuse 

PRODUCER CONSUMER A Model of Software Reuse 

PRODUCER CONSUMER REPOSITORY push software component component metadata A Model of Software Reuse 

PRODUCER CONSUMER REPOSITORY push software component component metadata pull component metadata software component A Model of Software Reuse 

Chapter 1: Versioning of Software Components Chapter 2: Different Variants of Software Components Chapter 3: Dealing with an imperfect World 

Chapter 1: Versioning of Software Components Chapter 2: Different Variants of Software Components Chapter 3: Dealing with an imperfect World 

PRODUCER CONSUMER REPOSITORY push software component component metadata pull component metadata software component 

PRODUCER CONSUMER REPOSITORY push software component component metadata pull component metadata software component NULL 8 FUFFZEHN // BANK ! 

PRODUCER CONSUMER REPOSITORY push software component component metadata pull component metadata software component NULL 8 FUFFZEHN // BANK SantaSoft " ! 

NULL 8 FUFFZEHN // BANK 

XMasTree by SantaSoft Open-source out-of-the-box Christmas trees for Java! From Christmas tree lovers for Christmas tree lovers! Maven dependencies { // just add your tree... implementation(“com.santasoft.xmastree:tree-swing:1.0”) // ...and decorate it as you like implementation(“com.santasoft.xmastree:lights-swing:1.0”) } Gradle // inject it in your UI code com.santasoft.xmastree.Tree.compose(container) 

No content

No content

No content

No content

NULL 8 FUFFZEHN // BANK 

XMasTree by SantaSoft Open-source out-of-the-box Christmas trees for Java! From Christmas tree lovers for Christmas tree lovers! Maven dependencies { // just add your tree... implementation(“com.santasoft.xmastree:tree-swing:2.0”) // ...and decorate it as you like implementation(“com.santasoft.xmastree:lights-swing:2.0”) } Gradle // inject it in your UI code com.santasoft.xmastree.Tree.compose(container) 2.0 W ITH FLASHY LIGHTS! 

No content

No content

Why did the Christmas tree crash? tree:1.0 lights:1.0 ornaments:1.0 train:1.0 tree:2.0 lights:2.0 ornaments:2.0 train:2.0 component repository 

component repository Why did the Christmas tree crash? tree:1.0 lights:1.0 null8fuffzehn-desktop ornaments:1.0 train:1.0 tree:2.0 lights:2.0 ornaments:2.0 train:2.0 

component repository Why did the Christmas tree crash? tree:1.0 lights:1.0 null8fuffzehn-desktop ornaments:1.0 train:1.0 tree:2.0 lights:2.0 ornaments:2.0 train:2.0 

component repository Why did the Christmas tree crash? tree:1.0 lights:1.0 null8fuffzehn-desktop ornaments:1.0 train:1.0 tree:2.0 lights:2.0 ornaments:2.0 train:2.0 

component repository Why did the Christmas tree crash? tree:1.0 lights:1.0 null8fuffzehn-desktop ornaments:1.0 train:1.0 tree:2.0 lights:2.0 ornaments:2.0 train:2.0 

component repository Why did the Christmas tree crash? tree:1.0 lights:1.0 null8fuffzehn-desktop ornaments:1.0 train:1.0 tree:2.0 lights:2.0 ornaments:2.0 train:2.0 

component repository Why did the Christmas tree crash? tree:1.0 lights:1.0 null8fuffzehn-desktop ornaments:1.0 train:1.0 tree:2.0 lights:2.0 ornaments:2.0 train:2.0 conflict ! 

component repository Dependency Constraints tree:1.0 lights:1.0 ornaments:1.0 train:1.0 tree:2.0 lights:2.0 ornaments:2.0 train:2.0 depends-on 

component repository Dependency Constraints tree:1.0 lights:1.0 ornaments:1.0 train:1.0 tree:2.0 lights:2.0 ornaments:2.0 train:2.0 depends-on (requires + constraints) constraints 

component repository Dependency Constraints save Christmas tree:1.0 lights:1.0 ornaments:1.0 train:1.0 tree:2.0 lights:2.0 ornaments:2.0 train:2.0 depends-on (requires + constraints) constraints null8fuffzehn-desktop 

component repository Dependency Constraints save Christmas tree:1.0 lights:1.0 ornaments:1.0 train:1.0 tree:2.0 lights:2.0 ornaments:2.0 train:2.0 depends-on (requires + constraints) constraints null8fuffzehn-desktop 

com.santasoft.xmastree:tree-swing:2.0 github.com/gradle/gradle/blob/master/subprojects/docs/src/ docs/design/gradle-module-metadata-specification.md { "component": { "group": "com.santasoft.xmastree", "module": "tree-swing", "version": "2.0", }, ... "dependencyConstraints": [ { "group": "com.santasoft.xmastree", "module": "lights-swing", "version": { "requires": "2.0" } }, { "group": "com.santasoft.xmastree", "module": "ornaments-swing", "version": { "requires": "2.0" } }, { "group": "com.santasoft.xmastree", "module": "train-swing", "version": { "requires": "2.0" } } ], ... } component repository — tree-swing-2.0.jar — tree-swing-2.0.pom — tree-swing-2.0.module 

Chapter 1: Versioning of Software Components Chapter 2: Different Variants of Software Components Chapter 3: Dealing with an imperfect World 

NULL 8 FUFFZEHN // BANK 

NULL 8 FUFFZEHN // BANK 

Gradle_Android XMasTree by SantaSoft Open-source out-of-the-box Christmas trees for Java! From Christmas tree lovers for Christmas tree lovers! Maven dependencies { // just add your tree... implementation(“com.santasoft.xmastree:tree-swing:2.0”) // ...and decorate it as you like implementation(“com.santasoft.xmastree:lights-swing:2.0”) } Gradle // inject it in your UI code com.santasoft.xmastree.Tree.compose(container) NOW ALSO FOR ANDROID! 2.0 W ITH FLASHY LIGHTS! 

Gradle XMasTree by SantaSoft Open-source out-of-the-box Christmas trees for Java! From Christmas tree lovers for Christmas tree lovers! Maven dependencies { // just add your tree... implementation(“com.santasoft.xmastree:tree-android:2.0”) // ...and decorate it as you like implementation(“com.santasoft.xmastree:lights-android:2.0”) } // inject it in your UI code com.santasoft.xmastree.Tree.compose(container) Gradle_Android NOW ALSO FOR ANDROID! 2.0 W ITH FLASHY LIGHTS! 

No content

No content

No content

component repository Modeling Platforms as Variants tree-swing lights-swing null8fuffzehn-desktop ornaments-swing train-swing tree-android lights-android null8fuffzehn-android ornaments-android train-android 

component repository Modeling Platforms as Variants tree-swing lights-swing ornaments-swing train-swing tree-android lights-android ornaments-android train-android null8fuffzehn-shared null8fuffzehn-desktop null8fuffzehn-android 

component repository Modeling Platforms as Variants tree-swing lights-swing ornaments-swing train-swing tree-android lights-android ornaments-android train-android null8fuffzehn-shared null8fuffzehn-desktop null8fuffzehn-android tree lights ornaments train variant ui-framework = swing variant ui-framework = android ui-framework = swing ui-framework = android 

component repository Modeling Platforms as Variants tree-swing lights-swing ornaments-swing train-swing tree-android lights-android ornaments-android train-android null8fuffzehn-shared null8fuffzehn-desktop null8fuffzehn-android tree lights ornaments train variant ui-framework = swing variant ui-framework = android ui-framework = swing ui-framework = android 

component repository Modeling Platforms as Variants tree-swing lights-swing ornaments-swing train-swing tree-android lights-android ornaments-android train-android null8fuffzehn-shared null8fuffzehn-desktop null8fuffzehn-android tree lights ornaments train variant ui-framework = swing variant ui-framework = android ui-framework = swing ui-framework = android 

Gradle_Android Gradle XMasTree by SantaSoft Open-source out-of-the-box Christmas trees for Java! From Christmas tree lovers for Christmas tree lovers! Maven // configure your tree dependencies { implementation(“com.santasoft.xmastree:lights”) } // choose your variant configurations.all { attributes { attribute(“ui-framework”, “android”) } } // inject it in your UI code com.santasoft.xmastree.Tree.compose(container) NOW ALSO FOR ANDROID! 2.0 W ITH FLASHY LIGHTS! NOW W ITH VARIANT SUPPORT! Gradle_Variants 

No content

No content

com.santasoft.xmastree:tree:2.0 github.com/gradle/gradle/blob/master/subprojects/docs/src/ docs/design/gradle-module-metadata-specification.md { "component": { "group": "com.santasoft.xmastree", "module": "tree", "version": "2.0", "attributes": { "org.gradle.status": "release" } }, "variants": [ { "name": "swing-api", "attributes": { "org.gradle.usage": "java-api", "ui-framework": "swing" }, "available-at": { "url": "../../tree-swing/2.0/tree-swing-2.0.module", "group": "com.santasoft.xmastree", "module": "tree-swing", "version": "2.0" } }, { "name": "android-api", "attributes": { "org.gradle.usage": "java-api", "ui-framework": "android" }, "available-at": { "url": "../../tree-swing/2.0/tree-android-2.0.module", "group": "com.santasoft.xmastree", "module": "tree-android", "version": "2.0" } } ] ... } component repository — tree-swing-2.0.module 

Chapter 1: Versioning of Software Components Chapter 2: Different Variants of Software Components Chapter 3: Dealing with the imperfect World 

NULL 8 FUFFZEHN // BANK 

What if the consumer has a different opinion than the producer? 

PRODUCER CONSUMER REPOSITORY push software component component metadata pull component metadata software component NULL 8 FUFFZEHN // BANK SantaSoft " ! What if the consumer has a different opinion than the producer? 

component repository tree lights ornaments train What if the consumer has a different opinion than the producer? null8fuffzehn-desktop 

component repository tree lights ornaments train What if the consumer has a different opinion than the producer? null8fuffzehn-desktop Component Metadata Rule 

What if the producer “forgot” an important variant? 

Gradle_Variants Gradle_Android Gradle XMasTree by SantaSoft Open-source out-of-the-box Christmas trees for Java! From Christmas tree lovers for Christmas tree lovers! Maven // configure your tree dependencies { implementation(“com.santasoft.xmastree:lights”) } // choose your variant configurations.all { attributes { attribute(“ui-framework”, “gif”) } } // inject it in your UI code com.santasoft.xmastree.Tree.compose(container) NOW ALSO FOR ANDROID! 2.0 W ITH FLASHY LIGHTS! NOW W ITH VARIANT SUPPORT! NOW ALSO AS FLASHY GIF VARIANT! GIF 

component repository tree-swing lights-swing ornaments-swing train-swing tree-gif lights-gif null8fuffzehn-shared null8fuffzehn-gif tree lights ornaments train variant ui-framework = swing variant ui-framework = gif ui-framework = gif What if the producer “forgot” an important variant? 

component repository tree-swing lights-swing ornaments-swing train-swing tree-gif lights-gif null8fuffzehn-shared null8fuffzehn-gif tree lights ornaments train variant ui-framework = swing variant ui-framework = gif ui-framework = gif X What if the producer “forgot” an important variant? 

What if the producer “forgot” an important variant? 

What if the producer “forgot” an important variant? Artifact Transform 

component repository tree-swing lights-swing ornaments-swing train-swing tree-gif lights-gif null8fuffzehn-shared null8fuffzehn-gif tree lights ornaments train variant ui-framework = swing variant ui-framework = gif ui-framework = gif What if the producer “forgot” an important variant? train-gif transformed into 

Chapter 1: Versioning of Software Components Chapter 2: Different Variants of Software Components Chapter 3: Dealing with the imperfect World …and in the real world? 

https://docs.google.com/document/d/ 1NYGbfz56C0Oh4IGymXjeQUVK4FcRiqDbpc4vGLnDMrY 

https://docs.google.com/document/d/ 1NYGbfz56C0Oh4IGymXjeQUVK4FcRiqDbpc4vGLnDMrY 

https://github.com/gradle/gradle/blob/master/buildSrc/subprojects/configuration/src/main/kotlin/ org/gradle/gradlebuild/dependencies/DependenciesMetadataRulesPlugin.kt 

https://github.com/gradle/gradle/blob/master/buildSrc/subprojects/packaging/src/main/kotlin/ org/gradle/gradlebuild/packaging/MinifyTransform.kt 

Gradle Summit 2017
 Dependencies, distributed code and engineering velocity
 - Mike McGarr, Netflix https://www.youtube.com/watch?v=k_mPS_1JpXM 

Dependency Management in Gradle 5 and beyond Jendrik Johannes, Gradle 

Dependency Constraints dependencies { implementation("org.apache.httpcomponents:httpclient") constraints { implementation("org.apache.httpcomponents:httpclient:4.5.3") { because("previous versions have a bug impacting this application") } implementation("commons-codec:commons-codec:1.11") { because("version 1.9 pulled from httpclient has bugs affecting this application") } } } 

BOM/Platform support dependencies { // import a BOM implementation(platform( “org.springframework.boot:spring-boot-dependencies:1.5.8.RELEASE")) // define dependencies without versions implementation("com.google.code.gson:gson") implementation("dom4j:dom4j") } 

dependencies { // get recommended versions from the platform project api(platform(project(":platform"))) // no version required api("commons-httpclient:commons-httpclient") } Java Platform Plugin consumer plugins { `java-platform` } dependencies { constraints { // Platform declares some versions of libraries used in subprojects api("commons-httpclient:commons-httpclient:3.1") api("org.apache.commons:commons-lang3:3.8.1") } } producer 

(New) Maven Publish Plugin publishing { publications { create("maven") { groupId = "org.gradle.sample" artifactId = "project1-sample" version = "1.1" from(components["java"]) } } } enableFeaturePreview("GRADLE_METADATA") settings.gradle.kts 

Dependency Locking configurations.compileClasspath { resolutionStrategy.activateDependencyLocking() } 

Repository to dependency matching repositories { maven { url "https://repo.mycompany.com" content { includeGroupByRegex "com\\.mycompany.*" } } } 

Christmas Tree by Jordan Irwin – https://opengameart.org/content/christmas-tree-0 Compose your own Christmas trees: https://github.com/jjohannes/xmas-tree-reuse