maven_install does not differentiate compile and runtime scopes, causing circular dependencies about rules_jvm_external HOT 8 OPEN

In addition to runtime there is a case for provided dependencies too.

E.g. org.clojure:spec.alpha and org.clojure:clojure

Though it seems in this case it might just be a specific subset of versions that have the cycle.

from rules_jvm_external.

Is there any workaround for this?

from rules_jvm_external.

Is there any workaround for this?

Sometimes you can workaround using exclusions, like in grpc/grpc-java#10576.

from rules_jvm_external.

To avoid having to wade through that rather long issue the relevant bit is:

maven_install(
    artifacts = [
        "io.grpc:grpc-okhttp:1.58.0",
        maven.artifact(
            artifact = "grpc-core",
            exclusions = [
                "io.grpc:grpc-util",
            ],
            group = "io.grpc",
            version = "1.58.0",
        ),
    ],
    repositories = [
        "https://repo.maven.apache.org/maven2/",
    ],
)

from rules_jvm_external.

It looks like support for deps/runtime_deps/provided_deps is non-trivial.

1. lock file JSON will need to differentiate the dep's scope (likely requiring a v3 lock file format) and have compile_dependencies , runtime_dependencies, and provided_dependencies keys or similar. Note that V2's dependencies is the union of the three new keys' values.
2. pinning will need to generate the new lock file with the new keys
3. consuming the lock file and ultimately generating the java_library rules needs to use new lock file and new keys.

from rules_jvm_external.

Looks like there's also a dependency on coursier's behaviour: coursier/coursier#1231

Rather, the json report from coursier is used: it does not differentiate dependencies' scopes.

from rules_jvm_external.

I am facing similar issue while trying to update the version of google-cloud-storage package.

I have tried the following suggestion as well, still it is failing.

        maven.artifact(
            artifact = "google-cloud-storage",
            exclusions = [
                "io.grpc:grpc-context",
            ],
            group = "com.google.cloud",
            version = "2.30.1",
        ),

from rules_jvm_external.

If you're using 5.3, that's because this commit is not included. I've filed a request to release a new version: #1014

from rules_jvm_external.