← 返回首页
Migrate build infrastructure from Gradle to Maven by ramsessanchez · Pull Request #2111 · microsoftgraph/msgraph-sdk-java-core · GitHub
Skip to content

Navigation Menu

Toggle navigation
Sign in
Appearance settings
Search or jump to...

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted
Cancel Submit feedback

Saved searches

Use saved searches to filter your results more quickly

Cancel Create saved search
Appearance settings
Resetting focus

Migrate build infrastructure from Gradle to Maven#2111

Merged
ramsessanchez merged 11 commits into
mainfrom
ramsessanchez/migrate-gradle-to-maven
Jul 8, 2026
Merged

Migrate build infrastructure from Gradle to Maven#2111
ramsessanchez merged 11 commits into
mainfrom
ramsessanchez/migrate-gradle-to-maven

Conversation

ramsessanchez commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

Summary

Migrates the build system from Gradle to Maven while preserving all build behaviors, and moves the CI/CD pipelines off Personal Access Token (PAT) usage. Uses microsoftgraph/msgraph-sdk-java#2613 as the baseline, adapted for core-specific concerns (SpotBugs, JaCoCo, SonarCloud).

New Maven build

  • pom.xml with all dependencies (from gradle/dependencies.gradle), compiler settings (Java 1.8 main / 17 tests, -parameters), jar manifest (Automatic-Module-Name: com.microsoft.graph.core), javadoc/source jars, JaCoCo, SpotBugs (spotBugsExcludeFilter.xml), SonarCloud, and a GPG signing profile
  • Maven wrapper (mvnw/mvnw.cmd/.mvn/, Maven 3.9.9) replacing the Gradle wrapper

CI/CD pipeline updates (PAT-less)

  • gradle-build.yml -> maven-build.yml (JDK-latest verify + JDK-8 compile jobs)
  • codeql-analysis.yml and sonarcloud.yml updated to Maven
  • ADO ci-build.yml: mvnw install/deploy -Psigning, GPG import, settings.xml, and MavenAuthenticate@0 instead of ARTIFACTS_PAT
  • ADO daily-ci-build.yml: Maven@4 + network-isolated feed mirror + MavenAuthenticate@0

Config updates

  • dependabot.yml: maven ecosystem for root, gradle kept for /android
  • .gitignore: Maven wrapper/target entries
  • release-please-config.json: XML xpath updater for pom.xml version (dropped gradle.properties)
  • devx.yml, scripts/getLatestVersion.ps1 -> read from pom.xml
  • scripts/validatePackageContents.ps1 + release assets: dropped Gradle-only .module metadata

Android sub-project

  • Kept as a standalone Gradle project (no Maven equivalent for AGP); dependencies inlined into android/build.gradle (shared gradle/dependencies.gradle removed)

Removed

  • Root Gradle files (build.gradle, settings.gradle, gradle.properties, gradlew, wrapper)
  • java-8/ sub-project (Java 8 compat now verified via Maven source/target 1.8 + JDK 8 CI job)

Notes / deviations from baseline

  • Tests compile at Java 17 (JUnit 6 requires it; Gradle only constrained compileJava to 1.8, not tests)
  • .module checks removed since Maven does not emit Gradle module metadata

Verification

  • ./mvnw verify -> BUILD SUCCESS: 79 tests pass, SpotBugs clean, JaCoCo report generated
  • JAR, javadoc JAR, sources JAR built; manifest contains Automatic-Module-Name: com.microsoft.graph.core

Migrate build infrastructure from Gradle to Maven …
2b35ef9
Replaces the Gradle build with Maven while preserving build behaviors, and moves CI/CD off PAT usage. - New Maven build (pom.xml) with dependencies, compiler (-parameters, Java 1.8 main / 17 tests), jar Automatic-Module-Name, javadoc/source jars, jacoco, spotbugs, sonar, and a GPG signing profile - Maven wrapper (mvnw/mvnw.cmd/.mvn) replacing the Gradle wrapper - gradle-build.yml -> maven-build.yml; codeql-analysis.yml and sonarcloud.yml updated to Maven - ADO ci-build.yml and daily-ci-build.yml use Maven with PAT-less MavenAuthenticate and settings.xml mirror + GPG signing - dependabot.yml (maven root, gradle for /android), .gitignore, release-please-config.json, devx.yml, getLatestVersion.ps1, validatePackageContents.ps1 updated - android/ kept as standalone Gradle project with inlined dependencies - Removed root Gradle files and the java-8 sub-project (Java 8 verified via Maven source/target 1.8 + JDK 8 CI job) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
ramsessanchez requested a review from a team as a code owner July 7, 2026 20:46
ramsessanchez and others added 8 commits July 7, 2026 14:41
Merge remote-tracking branch 'origin/main' into ramsessanchez/migrate… …
cfa6c11
…-gradle-to-maven
fix save
841a5c7
Ignore jakarta.annotation-api major (v3) updates in Dependabot …
6368703
jakarta.annotation-api 3.x is compiled to Java 11 bytecode, incompatible with the library's Java 8 baseline, so pin to the 2.x line. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
bump azure and kiota
4c3bae0
Ignore okhttp major (v5) updates in Dependabot …
44ee63b
okhttp 5.x is a major bump that will be handled manually; pin to the 4.x line in both the Maven and Android ecosystems. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Align android dependencies with pom (azure-core 1.58.1, kiota 1.9.3) …
41bd22a
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Ignore android lint newer-version warnings for okhttp and jakarta …
fd8f286
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Remove dependabot ignore for okhttp major bump …
d9b3fb6
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
ramsessanchez requested a review from Copilot July 7, 2026 23:40
Copilot AI reviewed Jul 7, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality Hide comment

Pull request overview

This PR migrates the repository’s primary build and CI/CD infrastructure from Gradle to Maven (via Maven Wrapper), while also updating GitHub Actions and Azure DevOps pipelines to remove PAT-based authentication and preserve existing quality gates (SpotBugs, JaCoCo, SonarCloud).

Changes:

  • Replaces the root Gradle build with a full Maven pom.xml + Maven Wrapper, including JaCoCo, SpotBugs, SonarCloud, and signing profile support.
  • Updates GitHub Actions and Azure DevOps pipelines to build/test/publish via Maven and use PAT-less feed authentication.
  • Keeps the Android sub-project on Gradle while removing shared Gradle dependency management from the root.

Reviewed changes

Copilot reviewed 28 out of 32 changed files in this pull request and generated 2 comments.

Show a summary per file File Description
spotBugsExcludeFilter.xml Adds a SpotBugs suppression entry used by the Maven SpotBugs configuration.
settings.gradle Removes Gradle settings as part of the root Gradle decommissioning.
scripts/validatePackageContents.ps1 Removes Gradle-only .module artifact expectations from package validation.
scripts/getLatestVersion.ps1 Switches version discovery from gradle.properties to pom.xml.
release-please-config.json Updates release-please to bump pom.xml version via XML xpath instead of Gradle properties.
pom.xml Introduces the full Maven build definition (deps, plugins, reporting/signing configuration).
mvnw.cmd Adds Maven Wrapper for Windows.
mvnw Adds Maven Wrapper for POSIX shells.
java-8/settings.gradle Removes the old Java 8 Gradle subproject settings.
java-8/gradle.properties Removes the old Java 8 Gradle subproject properties.
java-8/build.gradle Removes the old Java 8 Gradle subproject build file.
java-8/.gitignore Removes now-obsolete ignore rules for the deleted Java 8 subproject build.
gradlew.bat Removes the Gradle wrapper for Windows from the root build.
gradlew Removes the Gradle wrapper for POSIX shells from the root build.
gradle/wrapper/gradle-wrapper.properties Removes the Gradle wrapper configuration.
gradle/dependencies.gradle Removes shared Gradle dependency management (now represented in pom.xml).
gradle.properties Removes Gradle property-based versioning and feed credential placeholders.
devx.yml Points dependency discovery at pom.xml instead of Gradle dependency file.
build.gradle Removes the root Gradle build definition.
android/lint.xml Adds lint suppressions related to intentionally deferred Android dependency major bumps.
android/build.gradle Inlines dependency declarations now that shared Gradle deps file is removed.
.mvn/wrapper/maven-wrapper.properties Adds Maven Wrapper distribution + checksum configuration.
.gitignore Updates ignore rules for Maven build output and ensures wrapper jar can be committed.
.github/workflows/sonarcloud.yml Updates SonarCloud workflow to use Maven and Maven caching.
.github/workflows/maven-build.yml Adds a Maven-based GitHub Actions build workflow (JDK latest + JDK 8 compile job).
.github/workflows/gradle-build.yml Removes the Gradle-based GitHub Actions workflow.
.github/workflows/codeql-analysis.yml Updates CodeQL build step to Maven and switches caching to Maven.
.github/dependabot.yml Switches root updates to Maven ecosystem; keeps Android on Gradle and adjusts ignore rules.
.azure-pipelines/daily-ci-build.yml Updates the network-isolated daily build to Maven with feed mirroring + PAT-less auth.
.azure-pipelines/ci-build.yml Updates CI build/release staging steps to Maven (install/deploy/signing) and removes .module handling.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread pom.xml Show resolved Hide resolved
Comment thread pom.xml Show resolved Hide resolved
ramsessanchez and others added 2 commits July 7, 2026 16:53
Potential fix for pull request finding …
f87757b
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Potential fix for pull request finding …
bfb0dbd
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

sonarqubecloud Bot commented Jul 7, 2026

Copy link
Copy Markdown

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Hide details View details ramsessanchez merged commit 1a65bdd into main Jul 8, 2026
12 checks passed
ramsessanchez deleted the ramsessanchez/migrate-gradle-to-maven branch July 8, 2026 19:17
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments
jingjingjia-ms jingjingjia-ms approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

Footer

© 2026 GitHub, Inc.