{"action":"created","issue":{"url":"https://api.github.com/repos/ben-manes/gradle-versions-plugin/issues/97","repository_url":"https://api.github.com/repos/ben-manes/gradle-versions-plugin","labels_url":"https://api.github.com/repos/ben-manes/gradle-versions-plugin/issues/97/labels{/name}","comments_url":"https://api.github.com/repos/ben-manes/gradle-versions-plugin/issues/97/comments","events_url":"https://api.github.com/repos/ben-manes/gradle-versions-plugin/issues/97/events","html_url":"https://github.com/ben-manes/gradle-versions-plugin/issues/97","id":142478958,"number":97,"title":"Bad resolution for BOM-style dependencies","user":{"login":"the4yeast","id":3530873,"avatar_url":"https://avatars.githubusercontent.com/u/3530873?v=3","gravatar_id":"","url":"https://api.github.com/users/the4yeast","html_url":"https://github.com/the4yeast","followers_url":"https://api.github.com/users/the4yeast/followers","following_url":"https://api.github.com/users/the4yeast/following{/other_user}","gists_url":"https://api.github.com/users/the4yeast/gists{/gist_id}","starred_url":"https://api.github.com/users/the4yeast/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/the4yeast/subscriptions","organizations_url":"https://api.github.com/users/the4yeast/orgs","repos_url":"https://api.github.com/users/the4yeast/repos","events_url":"https://api.github.com/users/the4yeast/events{/privacy}","received_events_url":"https://api.github.com/users/the4yeast/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2016-03-21T21:38:05Z","updated_at":"2016-03-21T23:05:22Z","closed_at":null,"body":"It looks like there's an issue with dependencies declared as `mavenBom`, e.g. \r\n```\r\ndependencyManagement {\r\n    imports {\r\n        mavenBom(\"com.amazonaws:aws-java-sdk-bom:$awsSdkVersion\")\r\n    }\r\n}\r\n```\r\nIn my case, the version is 1.10.56, whereas 1.10.62 is the most recent one at time of writing. I'm almost sure that the plugin stopped reporting newer versions of this dependency when I switched to the BOM style.\r\n\r\nAlso, not explicitly a BOM, but it works in a similar manner - Spring Boot dependency.\r\nThe plugin is imported and appliesjust like any other plugin:\r\n```\r\nbuildscript {\r\n    dependencies {\r\n        classpath(\"org.springframework.boot:spring-boot-gradle-plugin:$springBootVersion\")\r\n    }\r\n}\r\n\r\napply plugin: 'spring-boot'\r\n```\r\nwith my current version being 1.3.3.RELEASE. Dependencies are added without versions, e.g. `compile('org.springframework.boot:spring-boot-starter-web')`. \r\n\r\nThe plugin (when executed with `-Drevision=release`) now reports 1.4.0.M1 as the latest release version of the plugin, but correctly indicates that 1.3.3.RELEASE is the latest release version of each dependency.\r\n\r\nAs much as the Spring Boot issue is not a big problem - the dependencies themselves are reported correctly - the AWS SDK issue is causing some inconvenience."},"comment":{"url":"https://api.github.com/repos/ben-manes/gradle-versions-plugin/issues/comments/199527059","html_url":"https://github.com/ben-manes/gradle-versions-plugin/issues/97#issuecomment-199527059","issue_url":"https://api.github.com/repos/ben-manes/gradle-versions-plugin/issues/97","id":199527059,"user":{"login":"ben-manes","id":378614,"avatar_url":"https://avatars.githubusercontent.com/u/378614?v=3","gravatar_id":"","url":"https://api.github.com/users/ben-manes","html_url":"https://github.com/ben-manes","followers_url":"https://api.github.com/users/ben-manes/followers","following_url":"https://api.github.com/users/ben-manes/following{/other_user}","gists_url":"https://api.github.com/users/ben-manes/gists{/gist_id}","starred_url":"https://api.github.com/users/ben-manes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ben-manes/subscriptions","organizations_url":"https://api.github.com/users/ben-manes/orgs","repos_url":"https://api.github.com/users/ben-manes/repos","events_url":"https://api.github.com/users/ben-manes/events{/privacy}","received_events_url":"https://api.github.com/users/ben-manes/received_events","type":"User","site_admin":false},"created_at":"2016-03-21T23:05:22Z","updated_at":"2016-03-21T23:05:22Z","body":"Probably its from the HTTP header. The dependencyUpdates task should be printing out its own log information of what its getting, so that's what I would be looking at to see why it is obtaining the wrong versions."}}