Statement reference

Square brackets mark optional parts. <regex> is always written between slashes.

Configuration

Statement	Syntax	Notes
repository	repository <url> [as <name>];	<name> is the grouping and the repository id. It defaults to the default grouping, with the URL as the id. More
import	import <group>:<artifact>:<version>;	Fetches <group>:<artifact>:<version>:bill-of-materials@deps. Duplicates are an error. More
allow unlocked	allow unlocked /<regex>/;	Imported requests with matching keys may be re-resolved. More
allow snapshots	allow snapshots /<regex>/;	Imported requests with matching keys use the snapshot bound. More
withhold	withhold /<regex>/;	Matching keys are never re-resolved through an allow. More
alias	alias <group>:<artifact> as <property>;	Overrides the default <artifactId>.version property name. More

Requests

All Maven requests share this form:

<verb> <bound> <group>:<artifact>:<range> [via <grouping>] [filtering /<regex>/];

Verb	Produces	Notes
resolve	resolved	More
override	resolved	Ignores allow and withhold for imported requests. More
deprecate	deprecated	More
blacklist	blacklisted	More

Bound	Selects	Default filter (excluded versions)
lowest	Oldest matching version.	^.*-SNAPSHOT$
highest	Newest matching version.	^.*-SNAPSHOT$
snapshot	Newest matching version.	None

Docker requests have their own form:

resolve docker [<registry>[:<port>]/]<image>:<tag>;

More

Records

resolved    <group>:<artifact>:<version>;     resolved    <image>@<algo>:<digest>;
locked      <group>:<artifact>:<version>;     locked      <image>@<algo>:<digest>;
deprecated  <group>:<artifact>:<version>;     deprecated  <image>@<algo>:<digest>;
blacklisted <group>:<artifact>:<version>;     blacklisted <image>@<algo>:<digest>;

More

Ranges

Form	Example
Inclusive and exclusive bounds	[1.0,2.0), (1.0,2.0]
Half-open	[1.0,), (,2.0]
Exact	[1.2.3] or 1.2.3

More

Keywords

None of these words is reserved. Each can also appear as a group id, artifact id, version or name.

alias allow as blacklist blacklisted deprecate deprecated docker filtering highest import locked lowest override repository resolve resolved snapshot snapshots unlocked via withhold