Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: promote use of bill of materials in quickstart documentation #1620

Open
wants to merge 6 commits into
base: main
Choose a base branch
from

Conversation

diegomarquezp
Copy link
Contributor

Fixes #1552

@diegomarquezp diegomarquezp requested review from a team as code owners January 16, 2025 20:24
@product-auto-label product-auto-label bot added the size: m Pull request size is medium. label Jan 16, 2025
@diegomarquezp diegomarquezp requested a review from lqiu96 January 16, 2025 20:25
@@ -50,35 +50,69 @@ credentials as well as utility methods to create them and to get Application Def

## Quickstart

### Using Maven
Copy link
Contributor

@lqiu96 lqiu96 Jan 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

Thoughts on also mentioning libraries-bom here (perhaps a small section)? We can mention that if you use libraries-bom, then auth-bom is imported as well.

Otherwise, you should manually import the auth-bom (like below)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sounds good. I'll add a section.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah, I think it's not as trivial to ensure the snippet with libraries-bom has an up-to-date <version/> since it's not managed in versions.txt.

Other repos such as google-cloud-java use the config yaml.
We also have the case of spring-cloud-gcp which seems to rely on renovate-bot. I think it's better to wait for such PR and otherwise raise an issue to keep it up to date.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah yeah makes sense. Maybe we don't need to have a code reference here. We could just reference this page: https://cloud.google.com/java/docs/bom

README.md Outdated Show resolved Hide resolved
README.md Outdated Show resolved Hide resolved
README.md Show resolved Hide resolved
README.md Show resolved Hide resolved
README.md Show resolved Hide resolved
Copy link
Contributor Author

@diegomarquezp diegomarquezp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@lqiu96 thanks for the comments. Just for clarity, #1616 (review) was pretty much to ensure these versions in our READMEs get updated properly by release-please

@@ -50,35 +50,92 @@ credentials as well as utility methods to create them and to get Application Def

## Quickstart

### Alternative: using `java-libraries-bom`
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Perhaps not as alternative since it's the first option listed. I think we can probably put something like Preferred/ Preference?

```xml
<dependency>
<groupId>com.google.auth</groupId>
<!-- Let the BOM manage the transitive dependencies and module version. -->
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
<!-- Let the BOM manage the transitive dependencies and module version. -->
<!-- Let the BOM manage the module and dependency versions -->

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
size: m Pull request size is medium.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Promote using the Google Auth Bom
3 participants