Is this the right place to ask about the compose p...

# compose

[David Herman]

Is this the right place to ask about the compose plugin? Specifically, I'm wondering if the team ever plans to increase their serialization version. (More details in 🧵 )

[David Herman]

Basically, according to this: https://github.com/JetBrains/compose-multiplatform/blob/44376fdf851f3a6091e565c52c[…]a8d2/gradle-plugins/buildSrc/src/main/kotlin/BuildProperties.kt the Compose plugin depends on kotlinx-serialization 1.2.1

I'm writing my own Gradle plugin for a project built on top of Compose, and I'm using another library which depends on serialization. I'd like to upgrade that library to the most recent version (to fix a reported security issue), but it's using something introduced in a later version of serialization. However, when the Compose plugin is applied first, the older version of serialization is pulled in, which then causes my plugin to crash when it applies and tries parsing something indirectly via that library.

[David Herman]

I'm also not sure how the Compose plugin is pulling in that dependency. I was trying to force things to resolve to a newer version in my Gradle plugin, but it doesn't seem to be aware of the older serialization library in that case.

I'm wondering if that's because of the embedded trick used here? That may be a question for the Gradle channel though.

[shikasd]

You can file an issue on compose-multiplatform GitHub repo