From d355ddc9596851c676a0d238596dbd51bdc932fb Mon Sep 17 00:00:00 2001
From: Blake Li <blakeli@google.com>
Date: Thu, 15 Oct 2026 21:49:59 +0000
Subject: [PATCH] ci: remove downstream unmanaged dependency check

The workflow checks out googleapis/java-bigtable, googleapis/java-firestore
and googleapis/java-pubsub and runs the unmanaged dependency check against
their BOMs. All three repositories are archived since the libraries moved
into this repository, so the workflow only validates frozen copies of
their BOMs.

The libraries in this repository are already covered by
`unmanaged_dependency_check.yaml`, which runs the check built from the
pull request against the pull request's java-shared-dependencies and
`gapic-libraries-bom/pom.xml`. That BOM imports google-cloud-bigtable-bom,
google-cloud-firestore-bom and google-cloud-pubsub-bom, and the workflow
triggers on a superset of the paths of the removed workflow.
---
 ...downstream_unmanaged_dependency_check.yaml | 112 ------------------
 1 file changed, 112 deletions(-)
 delete mode 100644 .github/workflows/sdk-platform-java-downstream_unmanaged_dependency_check.yaml

diff --git a/.github/workflows/sdk-platform-java-downstream_unmanaged_dependency_check.yaml b/.github/workflows/sdk-platform-java-downstream_unmanaged_dependency_check.yaml
deleted file mode 100644
index 0ca81e6ca6cb..000000000000
--- a/.github/workflows/sdk-platform-java-downstream_unmanaged_dependency_check.yaml
+++ /dev/null
@@ -1,112 +0,0 @@
-permissions:
-  contents: read
-
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-
-name: sdk-platform-java Downstream Unmanaged Dependency Check
-env:
-  BUILD_SUBDIR: sdk-platform-java
-jobs:
-  filter:
-    runs-on: ubuntu-latest
-    outputs:
-      library: ${{ steps.filter.outputs.library }}
-    steps:
-    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-      with:
-        persist-credentials: false
-    - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
-      id: filter
-      with:
-        filters: |
-          library:
-            - 'sdk-platform-java/java-shared-dependencies/**'
-            - '.github/workflows/sdk-platform-java-downstream_unmanaged_dependency_check.yaml'
-  validate:
-    needs: filter
-    if: ${{ needs.filter.outputs.library == 'true' }}
-    runs-on: ubuntu-22.04
-    strategy:
-      fail-fast: false
-      matrix:
-        repo:
-          - java-bigtable
-          - java-firestore
-          - java-pubsub
-    steps:
-      - name: Checkout sdk-platform-java
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
-        with:
-          path: google-cloud-java
-          persist-credentials: false
-      - name: Checkout the downstream repo
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
-        with:
-          repository: googleapis/${{ matrix.repo }}
-          path: ${{ matrix.repo }}
-          persist-credentials: false
-      - name: Check the environment
-        shell: bash
-        run: |
-          set -euxo pipefail
-          pwd
-          ls -alt
-      - uses: actions/setup-java@17f84c3641ba7b8f6deff6309fc4c864478f5d62 # v3.14.1
-        with:
-          java-version: 11
-          distribution: temurin
-          cache: maven
-      - name: Install the modules of sdk-platform-java
-        shell: bash
-        run: .kokoro/build.sh
-        env:
-          BUILD_SUBDIR: sdk-platform-java
-          JOB_TYPE: install
-        working-directory: google-cloud-java
-      - name: Build unmanaged dependency check
-        shell: bash
-        working-directory: google-cloud-java/sdk-platform-java/java-shared-dependencies/unmanaged-dependency-check
-        run: |
-          set -euo pipefail
-          pwd
-          echo "Install Unmanaged Dependency Check in $(pwd)"
-          mvn clean install -V --batch-mode --no-transfer-progress -DskipTests
-      - name: Install the modules of the downstream repository
-        shell: bash
-        working-directory: ${{ matrix.repo }}
-        run: |
-          # No argument to build.sh installs the modules in local Maven repository
-          .kokoro/build.sh
-      - name: Run unmanaged dependency check
-        shell: bash
-        run: |
-          set -euo pipefail
-          set -x
-          # java-bigtable has "-deps-bom" that declares its dependencies. It's not a good
-          # BOM to list the artifacts generated by that repository.
-          bom_dir=$(find ${{ matrix.repo }} -type d -name 'google-*-bom' ! -name '*-deps-bom')
-          bom_absolute_path=$(realpath "${bom_dir}/pom.xml")
-          cd google-cloud-java/sdk-platform-java/java-shared-dependencies/unmanaged-dependency-check
-          echo "Running Unmanaged Dependency Check against ${bom_absolute_path}"
-          unmanaged_dependencies=$(mvn exec:java -Dexec.args="../pom.xml ${bom_absolute_path}" -q)
-          if [[ "${unmanaged_dependencies}" != "[]" ]]; then
-            echo "With this change, the unmanaged dependencies check installed in ${{ matrix.repo }} will start to"
-            echo "fail due to ${unmanaged_dependencies}, among the artifacts listed in ${bom_absolute_path}."
-            exit 1
-          fi
-          echo "Unmanaged dependency check passed"
-  required:
-    needs: [ validate ]
-    name: conditional-required-check
-    if: ${{ always() }} # Always run even if any "needs" jobs fail
-    runs-on: ubuntu-22.04
-    steps:
-      - name: Fail if any previous failure
-        if: ${{ contains(needs.*.result, 'failure') }}
-        run: exit 1
-      - name: Success otherwise
-        run: echo "Success!"