Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 4, 2025

Bumps nl.littlerobots.version-catalog-update from 0.8.5 to 1.0.0.

Release notes

Sourced from nl.littlerobots.version-catalog-update's releases.

v1.0.0

Version 1.0.0

This version no longer uses the dependency versions plugin for resolving versions, but is using Gradle APIs to resolve the version catalog dependencies. This option has been available behind a flag for a while and is now the default.

This is quite a big change which has a few behavioral changes, but will also result in a more predictable output.

If you do not need the functionality that the dependency versions plugin is providing, you can remove the plugin from your build.gradle, as it is no longer required for this plugin.

Some configuration options have changed, please refer to the README for details.

Resolving dependencies

Previously, only dependencies that where part of a depdencies block would be detected by the plugin. This would lead to situations where sometimes entries in the version catalog where not updated because these entries weren't used. Now all dependencies from the version catalog will be resolved and checked for updates, whether they are used or not in the project.

This also means most of the old options to keep dependencies are now no longer applicable; since the plugin is no longer "checking" what dependencies are used, it can also no longer determine which dependencies are not. See the README for updated configuration.

Because the plugin no longer requires dependencies to be used in your project, it's also very easy now to have "catalog only" projects. For an example see https://github.com/jamesward/kotlin-universe-catalog

Selecting versions

Previously the dependency versions plugin and its configuration would determine acceptable versions. As of this version the versionSelector configuration is used to configure this. The default configuration will prefer stable versions, unless the entry in the version catalog is already using an unstable version (like alpha, beta, etc.).

Creating a version catalog

Because the source of truth is now the version catalog file, there's no way anymore to create a new version catalog based on existing dependencies.

Improvement to version constraints

When a version constraint is applied to an entry in the version catalog, the plugin will now suggest suitable updates if they are available.

Changelog

Sourced from nl.littlerobots.version-catalog-update's changelog.

Version 1.0.0

This version no longer uses the dependency versions plugin for resolving versions, but is using Gradle APIs to resolve the version catalog dependencies. This option has been available behind a flag for a while and is now the default.

This is quite a big change which has a few behavioral changes, but will also result in a more predictable output.

If you do not need the functionality that the dependency versions plugin is providing, you can remove the plugin from your build.gradle, as it is no longer required for this plugin.

Some configuration options have changed, please refer to the README for details.

Resolving dependencies

Previously, only dependencies that where part of a depdencies block would be detected by the plugin. This would lead to situations where sometimes entries in the version catalog where not updated because these entries weren't used. Now all dependencies from the version catalog will be resolved and checked for updates, whether they are used or not in the project.

This also means most of the old options to keep dependencies are now no longer applicable; since the plugin is no longer "checking" what dependencies are used, it can also no longer determine which dependencies are not. See the README for updated configuration.

Because the plugin no longer requires dependencies to be used in your project, it's also very easy now to have "catalog only" projects. For an example see https://github.com/jamesward/kotlin-universe-catalog

Selecting versions

Previously the dependency versions plugin and its configuration would determine acceptable versions. As of this version the versionSelector configuration is used to configure this. The default configuration will prefer stable versions, unless the entry in the version catalog is already using an unstable version (like alpha, beta, etc.).

Creating a version catalog

Because the source of truth is now the version catalog file, there's no way anymore to create a new version catalog based on existing dependencies.

Improvement to version constraints

When a version constraint is applied to an entry in the version catalog, the plugin will now suggest suitable updates if they are available.

Commits
  • f1b05a3 Bump version for release
  • 6cffc5a Merge pull request #159 from littlerobots/feature/default-new-resolver
  • 5753a97 Bump version for snapshot
  • 787b856 Update README and CHANGELOG.md
  • 43e5858 Remove dependency on the versions plugin
  • 9eaeb13 Bump version for development
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [nl.littlerobots.version-catalog-update](https://github.com/littlerobots/version-catalog-update-plugin) from 0.8.5 to 1.0.0.
- [Release notes](https://github.com/littlerobots/version-catalog-update-plugin/releases)
- [Changelog](https://github.com/littlerobots/version-catalog-update-plugin/blob/main/CHANGELOG.md)
- [Commits](littlerobots/version-catalog-update-plugin@v0.8.5...v1.0.0)

---
updated-dependencies:
- dependency-name: nl.littlerobots.version-catalog-update
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
Status: No status
Development

Successfully merging this pull request may close these issues.

0 participants