Use Quarkus BOM for version of dependencies
Closed this issue · 0 comments
dlabordus commented
Dependabot is used to monitor new versions of dependencies, but now we have often issue that a new version can't be used because of the EE8/EE9 incompatible upgrade. So as long Quarkus stays on EE8 we can't upgrade some of these dependencies. Spring will probably have the same issues.
Quarkus defines a lot of version for the dependencies we use in the core repository. So by only importing the BOM from Quarkus we stay in sync with these versions. This way dependabot only monitors the Quarkus version. Quarkus is also updating his dependencies regularly when possible, so we won't stay behind a lot.