sbt-typelevel icon indicating copy to clipboard operation
sbt-typelevel copied to clipboard

Configurable configs-ignore

Open rossabaker opened this issue 2 years ago • 0 comments

Following up on https://github.com/typelevel/sbt-typelevel/issues/442, I still think we want it to be configurable.

Use case: we do a lot of runtime dependency overrides when upstream lags behind our security requirements. Under this technique, the compile dependency remains the old, transitive, vulnerable version, but it is evicted at runtime. Our tooling filters compile and compile-internal. This gives us full protection of our runtime classpath (i.e., what's in prod), while maintaining a tidy set of explicit compile dependencies.

I also think compile and compile-internal would be reasonable defaults to omit.

rossabaker avatar Dec 01 '23 21:12 rossabaker