Repository navigation
fix: keep Gradle map-style dependencies in vg scan - #682
Open
vibgrate-team wants to merge 1 commit into
Open
vibgrate-team wants to merge 1 commit into
vibgrate-team wants to merge 1 commit into
Conversation
Groovy group/name/version maps and the Kotlin key = "value" form were ignored, so those dependencies never showed up in vg scan or vg sbom export. Read both forms in any key order, with or without parentheses, and pass the coordinate through pushGradleCoord so configuration sections and de-duplication match string notation. Signed-off-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: ABIZ - Agentic Business Record Standard <ops@to.co>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Keeps Gradle map-style dependency declarations in
vg scaninstead of dropping them.What changed
parseGradleBuildnow reads Groovygroup: 'x', name: 'y', version: 'z'and Kotlingroup = "x", name = "y", version = "z"maps, with or without parentheses and in any key order.versionkey is treated like a string coordinate without a version.Tests
pnpm test,pnpm lintandpnpm typecheckpass.Closes #661