Plugin Dev & RequireUpperBoundDeps

[Bryan Stopp]

I'm trying to update one of my plugins and something odd is going on with the Jenkins BOMs

I tested this by creating a new plugin using the tutorial (https://www.jenkins.io/doc/developer/tutorial/create/)

Then I added one dependency that my actual plugin needs:

 <dependency>
      <groupId>org.jenkins-ci.plugins</groupId>
      <artifactId>git</artifactId>
  </dependency>

As soon as I added this and try to build the demo plugin, I get numerous RequireUpperBoundDeps errors, which are all transitive dependencies of the Git plugin. (see below)

Is it me, or shouldn't the BOM's versions not create these issues? Or am I doing something wrong?

Versions:

• Parent Artifact: 4.80
• Jenkins 2.426.3
• Jenkins BOM: 3105.v672692894683
• Jenkins BOM Artifact Id: 2.426.x
  

-Stopp

Logs:

+-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm:9.6 (managed) <-- org.ow2.asm:asm:9.7
[ERROR] and
[ERROR] +-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm-commons:9.6 (managed) <-- org.ow2.asm:asm-commons:9.7
[ERROR]           +-org.ow2.asm:asm:9.6 (managed) <-- org.ow2.asm:asm:9.6
[ERROR] and
[ERROR] +-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm-tree:9.6 (managed) <-- org.ow2.asm:asm-tree:9.7
[ERROR]           +-org.ow2.asm:asm:9.6 (managed) <-- org.ow2.asm:asm:9.6
[ERROR] and
[ERROR] +-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm-util:9.6 (managed) <-- org.ow2.asm:asm-util:9.7
[ERROR]           +-org.ow2.asm:asm:9.6 (managed) <-- org.ow2.asm:asm:9.6
[ERROR] ,
[ERROR] Require upper bound dependencies error for org.ow2.asm:asm-tree:9.6 paths to dependency are:
[ERROR] +-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm-tree:9.6 (managed) <-- org.ow2.asm:asm-tree:9.7
[ERROR] and
[ERROR] +-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm-analysis:9.6 (managed) <-- org.ow2.asm:asm-analysis:9.7
[ERROR]           +-org.ow2.asm:asm-tree:9.6 (managed) <-- org.ow2.asm:asm-tree:9.6
[ERROR] and
[ERROR] +-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm-commons:9.6 (managed) <-- org.ow2.asm:asm-commons:9.7
[ERROR]           +-org.ow2.asm:asm-tree:9.6 (managed) <-- org.ow2.asm:asm-tree:9.6
[ERROR] and
[ERROR] +-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm-util:9.6 (managed) <-- org.ow2.asm:asm-util:9.7
[ERROR]           +-org.ow2.asm:asm-tree:9.6 (managed) <-- org.ow2.asm:asm-tree:9.6
[ERROR] ,
[ERROR] Require upper bound dependencies error for org.ow2.asm:asm-util:9.6 paths to dependency are:
[ERROR] +-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm-util:9.6 (managed) <-- org.ow2.asm:asm-util:9.7
[ERROR] ,
[ERROR] Require upper bound dependencies error for org.ow2.asm:asm-analysis:9.6 paths to dependency are:
[ERROR] +-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm-analysis:9.6 (managed) <-- org.ow2.asm:asm-analysis:9.7
[ERROR] and
[ERROR] +-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm-util:9.6 (managed) <-- org.ow2.asm:asm-util:9.7
[ERROR]           +-org.ow2.asm:asm-analysis:9.6 (managed) <-- org.ow2.asm:asm-analysis:9.6
[ERROR] ,
[ERROR] Require upper bound dependencies error for org.ow2.asm:asm-commons:9.6 paths to dependency are:
[ERROR] +-io.jenkins.plugins:demo:1.0-SNAPSHOT
[ERROR]   +-org.jenkins-ci.plugins:git:5.2.2
[ERROR]     +-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023
[ERROR]       +-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
[ERROR]         +-org.ow2.asm:asm-commons:9.6 (managed) <-- org.ow2.asm:asm-commons:9.7
[ERROR] ]

[Basil Crow]

See https://github.com/jenkinsci/bom/issues/3098.

[Bryan Stopp]

TY - I just stumbled on this myself as I kept digging.

- Stopp

On Fri, Jun 7, 2024 at 12:37 PM Basil Crow <m...@basilcrow.com> wrote:

See https://github.com/jenkinsci/bom/issues/3098.

--
You received this message because you are subscribed to a topic in the Google Groups "Jenkins Developers" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/jenkinsci-dev/OrXOBgMpkLE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to jenkinsci-de...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CAFwNDjrrnhLfFHPn3hm48THFka2XSjmTGHhLBUzMB3Hrxdphjg%40mail.gmail.com.