How do I tranform a `project.getKotlinPluginVersion: String` into a `KotlinVersion(Int, Int,Int)` ?

# gradle

[mbonnin]

How do I tranform a project.getKotlinPluginVersion: String into a KotlinVersion(Int, Int,Int) ?

[Big Chungus]

split(".").map(String.toInt)

[mbonnin]

Fair 🙂

[Big Chungus]

Note that it will break with x.y.z-RC and similar

[mbonnin]

exactly

[Big Chungus]

So remove suffix before splitting

[mbonnin]

I was hoping for something that would handle all the weird semver magic without having to worry about it

[tapchicoma]

use Semver library

[mbonnin]

This one? https://github.com/swiftzer/semver

[Big Chungus]

version.removeSubstringAfterLast("-").split(".").map(String.toInt)

[tapchicoma]

yep. There should be another one, but this works ok

[mbonnin]

I'll most likely end up parsing myself to avoid the dependency since I don't really care about edge cases here but having a robust semver lib can be handy

[tapchicoma]

semver dependency is quite small 🙂

[mbonnin]

Yes, it's more about having to audit for security stuff and so on

[mbonnin]

Recent news have proven that these things can happen 😬

[mbonnin]

Even if we're lucky the maven ecosystem is relatively sane so far 😌

[Big Chungus]

Maven central demands you sign your artefacts at least, so hijacking is way less probable as you need to steal 3 passwords as opposed to 1 to do it (api key, gpg key, gpg key password)

[Big Chungus]

Plus you can't run random scripts on installation...

[mbonnin]

Yea, you can run random scripts anytime 🧌

[mbonnin]

I know IntelliJ has a "safe" mode, I wonder how many people pay attention to this

[Big Chungus]

Can you really with maven? How??

[mbonnin]

Plugin code runs on the dev machine unrestricted

[mbonnin]

Or in gradle

[mbonnin]

Anyone using my plugin trusts all the transitive dependencies

[tapchicoma]

run unknown projects in docker )

[Big Chungus]

Ah, yes. True for plugins, but not for libs

[mbonnin]

It's certainly perfectly fine for the semver lib but 🤷

[mbonnin]

run unknown projects in docker )

💯 I'd be curious who does that though 😅

[tapchicoma]

I have following useful alias 🙂

alias docker-one-time='docker run --rm -ti -w "/command" -v `pwd`:/command'

[tapchicoma]

just cleans container after run

[andylamax]

@tapchicoma that is a germstone