Skip to content

fix: pin mparticle deps upper bound in higgs-shop sample#300

Merged
thomson-t merged 1 commit into
mainfrom
chore/pin-mparticle-version-range-rc1
May 27, 2026
Merged

fix: pin mparticle deps upper bound in higgs-shop sample#300
thomson-t merged 1 commit into
mainfrom
chore/pin-mparticle-version-range-rc1

Conversation

@jamesnrokt
Copy link
Copy Markdown
Contributor

Summary

  • Replace 5+ selectors with bounded [5.0,6.0) ranges for com.mparticle:android-core, android-kit-base, and android-rokt-kit in core-sdk-samples/higgs-shop-sample-app/app/build.gradle.kts.

Why

com.mparticle:android-core:6.0.0-rc.1 was published to Maven Central on 2026-05-22. Depending on Gradle's selector parsing, 5+ may resolve to higher than 5.x — including the RC, which removed deprecated symbols. The bounded range removes the ambiguity.

See mParticle/mparticle-android-sdk#710 for the broader incident.

Test plan

  • ./gradlew :core-sdk-samples:higgs-shop-sample-app:app:assembleDebug resolves a 5.x set of mparticle artifacts (not 6.0.0-rc.1).
  • Sample app still launches.

🤖 Generated with Claude Code

The open-ended `5+` selector can resolve to the highest available
version on Maven Central — including `6.0.0-rc.1` (published 2026-05-22)
which removed deprecated symbols.

See mParticle/mparticle-android-sdk#710 for the broader incident.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@jamesnrokt jamesnrokt requested a review from a team as a code owner May 27, 2026 19:50
@cursor
Copy link
Copy Markdown

cursor Bot commented May 27, 2026

PR Summary

Low Risk
Sample-app Gradle dependency range change only; no runtime or security-sensitive code paths.

Overview
Pins the Higgs Shop sample app’s mParticle Gradle dependencies so resolution stays on 5.x instead of open-ended 5+ selectors.

android-core, android-kit-base, and android-rokt-kit in core-sdk-samples/higgs-shop-sample-app/app/build.gradle.kts now use [5.0,6.0) ranges, with a short comment pointing at the Maven Central 6.0.0-rc.1 incident and mparticle-android-sdk#710. No application code changes.

Reviewed by Cursor Bugbot for commit c17a389. Bugbot is set up for automated code reviews on this repo. Configure here.

@thomson-t thomson-t merged commit 8199d1c into main May 27, 2026
20 checks passed
@thomson-t thomson-t deleted the chore/pin-mparticle-version-range-rc1 branch May 27, 2026 20:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants