News for hackers. Stuff that matters.
Re:We shouldn't have needed lockfiles by cogman10 on Wednesday August 06, 2025 @02:03PM (#44815486)
Maven builds are deterministic (so long as you don't have SNAPSHOT dependencies). The version resolution is insane but deterministic. You'll only break that determinism if you change the dependencies.

That's precisely because maven doesn't support version ranges. Maven artifacts are also immutable.

Maven also supports manual override when the insane resolution strategy fails that's the "dependencymanagement" section.

Re:We shouldn't have needed lockfiles by deepsun on Wednesday August 06, 2025 @03:42PM (#44816740)
I typically just add an <exclusion> for one of my top level dependency, so Maven picks from some other.
Re:We shouldn't have needed lockfiles by aidenn0 on Wednesday August 06, 2025 @03:21PM (#44816456)
Lockfile builds are also deterministic. You only break that determinism if you change the lockfile.
Re:We shouldn't have needed lockfiles by javanonymous on Wednesday August 06, 2025 @04:44PM (#44817599)
You can use version range with a maven plugin

https://maven.apache.org/enforcer/enforcer-rules/versionRang...