Skip to content

Fix Gradle automated dependency updates for multi-module projects#1275

Open
orto17 wants to merge 3 commits intojfrog:devfrom
orto17:gradle-fix
Open

Fix Gradle automated dependency updates for multi-module projects#1275
orto17 wants to merge 3 commits intojfrog:devfrom
orto17:gradle-fix

Conversation

@orto17
Copy link
Copy Markdown
Contributor

@orto17 orto17 commented Apr 15, 2026

  • All tests passed. If this feature is not already covered by the tests, I added new tests.
  • This pull request is on the dev branch.
  • I used gofmt for formatting the code before submitting the pull request.
  • Update documentation about new features / new supported technologies

Frogbot’s Gradle fix path only considered build.gradle / build.gradle.kts files in the repository root. In multi-module Gradle layouts, direct dependencies are often declared only in subproject build files, so fixes failed with errors such as “impacted package … was not found or could not be fixed in all descriptor files” even when those coordinates appeared in a submodule.

This change adds a recursive walk that collects Gradle descriptors across the tree, while skipping common non-source directories (for example .git, .gradle, build, node_modules, IDE folders).

@orto17 orto17 added the safe to test Approve running integration tests on a pull request label Apr 15, 2026
@github-actions github-actions Bot removed the safe to test Approve running integration tests on a pull request label Apr 15, 2026
Comment thread packagehandlers/gradlepackagehandler.go
Comment thread packagehandlers/gradlepackagehandler.go Outdated
Comment thread packagehandlers/gradlepackagehandler.go Outdated
Comment thread packagehandlers/gradlepackagehandler.go Outdated
Copy link
Copy Markdown
Collaborator

@eranturgeman eranturgeman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please see my comments and add explanation about what did you try to fix here

Copy link
Copy Markdown
Contributor

@attiasas attiasas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice, check out my comments.
Don't forget to fix static analysis and tests

Comment thread packagehandlers/gradlepackagehandler.go Outdated
Comment thread packagehandlers/gradlepackagehandler.go Outdated
Comment thread packagehandlers/gradlepackagehandler.go Outdated
Comment thread packagehandlers/gradlepackagehandler.go Outdated
return
}

func getAllGradleDescriptorFilesFullPaths() (descriptorFilesFullPaths []string, err error) {
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 [API / contract design]

Document that Gradle descriptor discovery is now recursive (unlike GetAllDescriptorFilesFullPaths), and confirm this matches Frogbot’s execution model so we don’t double-fix or conflict with per-subproject scans.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

will be done with Talia

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants