download_utils marked as dev_dependency in v0.1.4 but used at module level — breaks transitive dependents

[RSingh1511]

Description

In score_communication@0.1.4, download_utils was changed to dev_dependency = True, but two use_repo_rule calls that reference @download_utils remain at module level (not guarded by dev_dependency). This causes bazel mod deps to fail for any module that depends on score_communication.

eclipse-score/logging#86

Error Occurrence Rate

None

How to reproduce

No response

Supporting Information

No response

Classification

major

Affected Version

0.5

Expected Closure Version

0.5

Category

• Safety Related
• Security Related

[limdor]

@RSingh1511 could you please share what target are you trying to build from the communication module? The fact that it is in the MODULE.bazel is not a problem as long as is not referred by some of the BUILD files that contain some targets that you are trying to build.
We tried to reproduce the issue you mentioned but we could not. That is why having the target and/or error message would be very helpful.

[limdor]

We tried "@score_communication//score/message_passing" and "@score_communication//score/message_passing:mock" that is is referenced from logging but we could not reproduce the issue.

[limdor]

We were just able to reproduce the issue. It will be fixed with https://github.com/eclipse-score/communication/pull/289/changes