Questions tagged [maven-bom]

Maven BOM (bill of materials) is a pattern for collectively managing the versions of multiple dependencies into your project.

For Maven based project which have several artifacts which don't follow single versioning schema vendors may supply recommended dependency via prepared dependency file in dependencyManagement section.

Refer to official docs for example.

Common example of Maven BOM supplied by Spring project:

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-framework-bom</artifactId>
            <version>${spring.version}</version>
            <scope>import</scope>
            <type>pom</type>
        </dependency>
        <dependency>
            <groupId>org.springframework.data</groupId>
            <artifactId>spring-data-releasetrain</artifactId>
            <version>${spring-data.version}</version>
            <scope>import</scope>
            <type>pom</type>
        </dependency>
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-bom</artifactId>
            <version>${spring-security.version}</version>
            <scope>import</scope>
            <type>pom</type>
        </dependency>
    </dependencies>
</dependencyManagement>
95 questions
2
votes
1 answer

How can I resolve my BOM's dependencyManagement dependencies?

I have a Maven BOM (bill of materials) for a rather large project that contains several hundred dependencies within the block. I'd like to verify that all of the dependencies can be successfully resolved before publishing it…
CAustin
  • 4,525
  • 13
  • 25
2
votes
1 answer

What is the correct way to release Maven parent pom/bom (with no java src) to Nexus

I'm making a standard set of libraries for myself, (common data structures, services, and other utilities) I use very regularly and end up redefining. Since I don't need everything every time, I've set up a BOM project and other discrete modules so…
Niko
  • 4,158
  • 9
  • 46
  • 85
2
votes
1 answer

installAtEnd and deployAtEnd are Not Executed at End of Build

I have a multi-module project with a structure like this: build module module.bom rcp.build module.rcp Both build projects where separate before and worked. Now that I put them together installAtEnd and deployAtEnd do not work. I added them…
Stefan S.
  • 3,950
  • 5
  • 25
  • 77
2
votes
3 answers

How to Manage dependencies in Maven Muti Project across Multiple Maven Project

I'm having a situation with maven ── bom-porject ├── pom.xml This is bom proejct is just used to dependency management for external maven dependecy. This project just publishes a pom file to maven repo This bom is imported to different…
edwin
  • 7,985
  • 10
  • 51
  • 82
2
votes
1 answer

Parent pom usage in build.gradle

I have a need to convert the maven project to gradle project. All is going fine, but there is one problem that I faced, in the current project we are using dependency management throw parent pom of maven and in gradle as long as I researched there…
BigGinDaHouse
  • 1,282
  • 9
  • 19
2
votes
0 answers

Maven: How to verify that the BOM is valid?

If I have a BOM (Bill of Materials) for Maven that is stored in its own separate repository, how can I verify that the file is valid? For instance, the dependencies listed should correspond to valid dependencies in Artifactory (or any binaries…
techalicious
  • 443
  • 1
  • 6
  • 14
2
votes
0 answers

How to prevent maven releasing a SNAPSHOT bom file?

A BOM is used as an include for dependencies, however it appears that the check for SNAPSHOT versions only occurs after this BOM has been included. If a BOM has no SNAPSHOT mentioned in it, it can be a SNAPSHOT version it self. The problem is that…
Peter Lawrey
  • 525,659
  • 79
  • 751
  • 1,130
2
votes
1 answer

Where is Wildfly 9.0.2.Final BOM?

This builds: org.wildfly.bom jboss-javaee-7.0-with-tools 8.2.1.Final
guest
  • 1,696
  • 4
  • 20
  • 31
1
vote
1 answer

How do you manage several imported Maven BOMs

Using Maven BOM is a great way to manage dependencies. However, you might have situations where you have to manage imports of several BOMs within the same project. In that situation, it's of course possible that you end up having the same dependency…
hublo
  • 1,010
  • 2
  • 12
  • 33
1
vote
2 answers

CycloneDX v2.1.2 - How to Generate Dependency Graph For .NET Framework Projects using CycloneDX v2.1.2

I downloaded latest CycloneDX Tool for .NET with v2.1.2. In the latest release Dependency Graph feature is added. But, when I run the CycloneDX tool against .NET Framework solution e.g. MVC project solution, the resultant SBOM file does not contain…
VijayB2606
  • 11
  • 2
1
vote
1 answer

BOM override order (with overlapping BOMs)

I have a parent POM and a normal Maven project. Both define BOMs in their dependencyManagement. In some cases, these BOMs may overlap, e.g. both specify a version for log4j. From my tests it seems that: For overlapping BOMs in the parent POM, the…
J Fabian Meier
  • 33,516
  • 10
  • 64
  • 142
1
vote
1 answer

Managing Maven plugin versions with Spring Boot BOM

I have a Maven POM for a Spring Boot project. The POM imports the Spring Boot BOM. Now I want to customize the configuration of a Maven plugin, say, mvn-compiler-plugin. I'd like to use the plugin version maven-compiler-plugin.version dictated by…
Ivan dal Bosco
  • 3,233
  • 4
  • 19
  • 24
1
vote
1 answer

Managing gradle plugin version with BOM

I'm about to add io.freefair.lombok plugin to my gradle projects. plugins { id "io.freefair.lombok" version "5.3.3.3" } Problem is, I have to add this script more than 20+ repositories. If I have to upgrade plugin version within this scenario,…
Hello world
  • 353
  • 3
  • 18
1
vote
1 answer

How to use a bom in both parent and child without replicating it in multiple places

I have a parent child maven project structure. I want to use a few dependencies from com.fasterxml.jackson jackson-bom 2.12.1 in both parent and…
kaushalpranav
  • 1,725
  • 24
  • 39
1
vote
1 answer

How to generate maven pom with maven-publish gradle plugin after migrating to BOM

I was using the following for generating pom with maven-publish plugin in my build.gradle : configurations.implementation.allDependencies.each { if (it.group != null && (it.name != null || "unspecified" == it.name) && it.version != null) { …
avianey
  • 5,545
  • 3
  • 37
  • 60