Simon Mavi Stewart

I know this is a long reply, but please know that I'm generally supportive of the idea of allowing snapshots to be used, but I'm very wary about how that...

Apologies for the long delay getting back to you. I've been traveling and sick. I want to review the `version_revision` as it's making me uneasy, and I'd like to be...

One pattern that gets used quite often for this kind of thing is an "overlay" There's a good summary of this [in this blogpost](https://fzakaria.com/2024/08/29/bazel-overlay-pattern.html), with a concrete implementation being how...

Thinking some more, if the `BUILD.bazel` file used `exports_files` then you may be able to do the iteration over them elsewhere (though I'm not 100% sure that will work as...

Could you please try with `rules_jvm_external` 6.7? 4.5 is quite an old release at this point, and we've landed plenty of bug fixes along the way.

Looks like the `pkg` thing is leading us in the wrong direction. The actual dep that's at fault is `org.apache.pulsar:bouncy-castle-bc:4.0.1`. Running ` coursier fetch "org.apache.pulsar:bouncy-castle-bc:4.0.1" --artifact-type "jar,json,aar,bundle,eclipse-plugin,exe,orbit,test-jar,hk2-jar,maven-plugin,scala-jar,dylib,so,dll,pom,src,doc" --verbose --no-default --json-output-file...

As long as the GAR can be used by maven, you just need to add the URL to the `repositories` attribute of your `maven_install` or `install` tag

Looking at the source of the [gradle plugin for the Google Artifact Registry](https://github.com/GoogleCloudPlatform/artifact-registry-maven-tools/blob/master/artifactregistry-gradle-plugin/src/main/java/com/google/cloud/artifactregistry/gradle/plugin/ArtifactRegistryGradlePlugin.java#L173-L187), it's enough to replace `artifactregistry:` with `https:` and to ensure your authentication credentials are in your `.netrc`

I don't know enough about the Google Artifact Registry and how it handles authentication. Are there any docs that succinctly describe what you need? And how do other build systems...

This is looking really good. I like the idea of only having conflicts if the transitive deps have changed.