Victor Michel <******@****.***> 1598820219 +0000

Robert Suderman <******@****.***> 1653608842 -0700

John Howard <******@****.***> 1709052916 -0800

John Howard <******@****.***> 1709052916 -0800

// package with index 'pkIdx'. As with GetPackageDecoder, if the
// CoverageMetaFileReader was set up with a read-only file view, a
// pointer into that file view will be returned, otherwise the buffer
// 'payloadbuf' will be written to (or if it is not of sufficient
// size, a new buffer will be allocated). Return value is the decoder,
// a byte slice with the encoded meta-data, and an error.

This is possible in the following cases:

- dynamic dependency versions are used (version ranges, `latest.release`, `1.+`, ...)
- or _changing_ versions are used (SNAPSHOTs, fixed version with changing contents, ...)

The recommended way to deal with dynamic versions is to use <<dependency_locking.adoc#dependency-locking,dependency locking>>.
However, it is possible to prevent the use of dynamic versions altogether, which is an alternate strategy:

Class <org.gradle.api.Project> is not annotated with @ServiceScope in (Project.java:0)
Class <org.gradle.api.artifacts.dsl.DependencyFactory> is not annotated with @ServiceScope in (DependencyFactory.java:0)
Class <org.gradle.api.artifacts.dsl.DependencyHandler> is not annotated with @ServiceScope in (DependencyHandler.java:0)
Class <org.gradle.api.artifacts.dsl.DependencyLockingHandler> is not annotated with @ServiceScope in (DependencyLockingHandler.java:0)

                                                     slice[4294967295] runtime error: index out of range [4294967295] with length 3
                                           slice[18446744073709551615] runtime error: index out of range [18446744073709551615] with length 3
                                                              array[0] no panic

Class <org.gradle.api.distribution.internal.DefaultDistributionContainer> is not annotated (directly or via its package) with @org.gradle.api.NonNullApi in (DefaultDistributionContainer.java:0)

# we should get an error because the dependency should have an explicit
# requirement.
go list -m indirect-with-pkg
stdout '^indirect-with-pkg v1.0.0 => ./indirect-with-pkg$'
! go list ./use-indirect
stderr '^package m/use-indirect imports indirect-with-pkg from implicitly required module; to add missing requirements, run:\n\tgo get indirect-with-pkg@v1.0.0$'

# We can promote the implicit requirement by getting the importing package.