Skip to content

Conversation

@andrew
Copy link
Contributor

@andrew andrew commented Jan 25, 2026

Adds two new lockfile parsers for the Java/Scala ecosystem:

  1. ivy-report.xml parser: Parses Ivy/SBT dependency resolution reports generated by sbt dependencyLookup. Files are named with the pattern {org}-{module}-{conf}.xml.

  2. sbt DOT parser: Parses GraphViz DOT files generated by sbt dependencyDot command. Files named dependencies-{conf}.dot contain the full dependency graph.

Both parsers extract dependency name, version, and scope based on the configuration (compile, test, etc.).

Adds two new lockfile parsers for the Java/Scala ecosystem:

1. ivy-report.xml parser: Parses Ivy/SBT dependency resolution reports
   generated by sbt dependencyLookup. Files are named with the pattern
   {org}-{module}-{conf}.xml and contain resolved dependencies.

2. sbt DOT parser: Parses GraphViz DOT files generated by sbt
   dependencyDot command. Files named dependencies-{conf}.dot contain
   the full dependency graph.

Both parsers extract dependency name, version, and scope based on the
configuration (compile, test, etc.).
@andrew andrew force-pushed the feature/java-lockfiles branch from 515e003 to 8bb3322 Compare January 26, 2026 21:16
@andrew andrew merged commit 2cb016a into main Jan 26, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants