Skip to content

chore: Group upper bound dependencies file deps#3941

Merged
lqiu96 merged 8 commits intomainfrom
group-dependencies-file-deps
Oct 15, 2025
Merged

chore: Group upper bound dependencies file deps#3941
lqiu96 merged 8 commits intomainfrom
group-dependencies-file-deps

Conversation

@lqiu96
Copy link
Copy Markdown
Member

@lqiu96 lqiu96 commented Oct 15, 2025

Tested in lqiu96#22

These rules need to be added to the end as renovate packageRules configurations are mergeable. This means that it scans the rules top-down and each subsequent matching rules gets its configurations overwritten. This tries to make it so that only the dependencies.txt are in its own file.

@lqiu96 lqiu96 requested a review from blakeli0 October 15, 2025 14:05
@product-auto-label product-auto-label bot added the size: s Pull request size is small. label Oct 15, 2025
@gemini-code-assist
Copy link
Copy Markdown
Contributor

Summary of Changes

Hello @lqiu96, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request refines the Renovate bot's configuration to better manage and group dependencies, specifically those defined in dependencies.txt. The changes update the custom manager definition to use a more current syntax and introduce a dedicated rule to consolidate updates for these dependencies into a single, clearly named group. This ensures that dependency updates from dependencies.txt are processed efficiently and presented cohesively, aligning with Renovate's mergeable rule processing logic.

Highlights

  • Renovate Configuration Update: The custom manager configuration for dependencies.txt in renovate.json was updated, replacing the deprecated managerFilePatterns field with fileMatch for improved syntax compliance.
  • Dependency Grouping for dependencies.txt: A new packageRules entry was added to renovate.json to group all maven dependencies managed by the regex manager from dependencies.txt under a single group named "Upper Bound Dependencies File".
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

The pull request modifies the renovate.json file to group dependencies from the dependencies.txt file. The changes involve updating the customManagers configuration to use fileMatch instead of managerFilePatterns and adding a new packageRule to group dependencies from the dependencies.txt file under the name "Upper Bound Dependencies File".

{
"customType": "regex",
"managerFilePatterns": ["/^dependencies\\.txt$/"],
"fileMatch": ["dependencies.txt"],
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The regex for managerFilePatterns is more specific and prevents unintended matches. Consider whether fileMatch is sufficient, or if the regex provides necessary precision. If fileMatch is sufficient, this change is fine, but if the regex was there for a reason, this should be reverted.

If the intention is to match the exact filename dependencies.txt, then fileMatch is appropriate and more readable.

Comment on lines +221 to +227
"matchManagers": [
"regex"
],
"matchFileNames": ["dependencies.txt"],
"matchDatasources": ["maven"],
"groupName": "Upper Bound Dependencies File",
"description": "Group all dependencies from the Upper Bound Dependencies File"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The description field should provide more context about the purpose of grouping these dependencies. Consider adding information about why these dependencies are grouped and what the implications are for dependency updates. This will help future maintainers understand the intent of this configuration.

For example: "Group all dependencies from the Upper Bound Dependencies File to manage their updates collectively and ensure compatibility."

@sonarqubecloud
Copy link
Copy Markdown

@sonarqubecloud
Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed for 'java_showcase_integration_tests'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Copy link
Copy Markdown
Contributor

@mpeddada1 mpeddada1 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! I'm guessing this would allow renovate-bot to update the dependencies.txt file automatically as opposed to the manual updates we need to do during releases?

@lqiu96
Copy link
Copy Markdown
Member Author

lqiu96 commented Oct 15, 2025

Thanks! I'm guessing this would allow renovate-bot to update the dependencies.txt file automatically as opposed to the manual updates we need to do during releases?

yes, exactly

@lqiu96 lqiu96 merged commit 1962491 into main Oct 15, 2025
77 of 79 checks passed
@lqiu96 lqiu96 deleted the group-dependencies-file-deps branch October 15, 2025 18:43
lqiu96 added a commit that referenced this pull request Feb 12, 2026
Tested in lqiu96#22

These rules need to be added to the end as renovate `packageRules`
configurations are `mergeable`. This means that it scans the rules
top-down and each subsequent matching rules gets its configurations
overwritten. This tries to make it so that only the `dependencies.txt`
are in its own file.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size: s Pull request size is small.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants