Skip to main content

Kataloger

Python version Latest version Downloads Tests

Kataloger can help update your project dependencies with ease! All you need is point to libs.versions.toml file and supply it with repositories that you use in project.

Features

  • Better than Android Studio built-in tool :)
  • Gradle-free
  • Can be used on CI
  • Flexible and open-source

How to use?

Kataloger offers handy CLI which you can use locally or on CI.

You can pass path to version catalog using -p parameter and path to configuration with -c parameter:

kataloger -p ~/ProjectDir/libs.versions.toml -c ~/ProjectDir/default.configuration.toml

Repositories, where artifact updates will be searched for, should be specified in configuration file separately for libraries and plugins as shown below:

# ...
[libraries]
library_repository = "https://repository.link/library"

[plugins]
plugin_repository = "https://repository.link/plugin"

Tip: You can use default configuration file as template.

Paths to catalogs also can be specified in configuration file:

# ...
[catalogs]
androix_catalog = "./androidx.versions.toml"
kotlin_catalog = "./kotlin.versions.toml"

Important: Relative paths are resolved to the root directory of configuration.

And then you need specify only path to configuration:

kataloger -c ~/ProjectDir/project.configuration.toml

Or you can omit all parameters, then kataloger employs following logic to run:

  • default.configuration.toml file in current working directory will be used as configuration file.
  • Any file with .versions.toml extension found in the current directory or the gradle subdirectory (if it exists) is considered a catalog.
cd ~/ProjectDir
kataloger

If configuration file not provided and can't be found in current working directory kataloger will use default configuration with next repositories: Maven Central, Google Maven and Gradle Plugin Portal.

kataloger -p ~/ProjectDir/libs.versions.toml

CLI options

-p [path] or --path [path] — specifies path to gradle version catalog file. You can pass more than one version catalog path. If no path provided kataloger try to find version catalogs (files with extension .versions.toml) in current working directory.
-c [path] or --configuration [path] — specifies path to .toml file with repositories credentials where updates will be looked for. If no path provided kataloger try to find default repositories file with name default.configuration.toml in current working directory. If repositories can't be found in current directory kataloger use predefined set of repositories (Maven Central, Google and Gradle Plugin Portal).
-v or --verbose — if specified print more info to console.
-u or --suggest-unstable — if specified suggest artifact update from stable version to unstable.
-f or --fail-on-updates — if specified return non-zero exit code when at least one update found. Can be useful on CI.

Installation

Kataloger is available on the Python Package Index (PyPI) and also as a Docker container.

PyPI

To install kataloger using pip (requires Python 3.10 or later), run the following command:

pip install kataloger

Docker

Alternatively, you can run kataloger as a Docker container. The image is published on GitHub Container Registry (GHCR):

docker run --rm -v "$(pwd)":/project --network=bridge ghcr.io/dzmpr/kataloger:latest

This command mounts the current working directory to the /project directory inside the container, connects the container to the default bridge network, and runs kataloger inside the container.

Use kataloger in python scripts

Kataloger has convenient API (I did my best), so you can write custom logic on top. More info about it can be found here.

License

Copyright 2023 Dzmitry Pryskoka

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

   http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

Metadata

Release files for kataloger 0.5.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for kataloger 0.5.0
File Size Uploaded Provenance Actions
kataloger-0.5.0.tar.gz 24.3 kB Without provenance Details for kataloger-0.5.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for kataloger 0.5.0
File Interpreter ABI Platform Actions
kataloger-0.5.0-py3-none-any.whl Python 3 none any Details for kataloger-0.5.0-py3-none-any.whl

Total release size: 54.7 kB

Release files / kataloger-0.5.0.tar.gz

Download URL kataloger-0.5.0.tar.gz
Size 24.3 kB
Tags Source
SHA-256 checksum
How to use checksums
27e93ed79b462c4c7d9a05bd6f2270af7bc8c68134b7778197cefeb7b2fcab56
BLAKE2b-256 checksum
How to use checksums
7b3fe24827f37280f2c1ab5acf7e7880c19363e769fec089df1bf9f35026c91f
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.14.0

Release files / kataloger-0.5.0-py3-none-any.whl

Download URL kataloger-0.5.0-py3-none-any.whl
Size 30.4 kB
Tags Python 3
SHA-256 checksum
How to use checksums
f041aff5eadff42319d217a5af3c838e637de53eea54b5031e75955adc331d7d
BLAKE2b-256 checksum
How to use checksums
2d66603233f6e63d98a3db717f0706d4500542b882b1cef3af0d4971f81ceda6
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.14.0

Security for kataloger 0.5.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page