Generate dynamic access metadata and provide it to the classpath when passing "--emit build-report" as a build argument by jormundur00 · Pull Request #795 · graalvm/native-build-tools

jormundur00 · 2025-11-10T10:45:39Z

In this PR we add the Maven mojo and Gradle task for generating and providing to the native image build classpath a dynamic-access-metadata.json file, when emitting a Build Report (when the --emit build-report build argument is present) and the used release of the graalvm-reachability-metadata repository contains the library-and-framework-list.json file.

The generated JSON file maps all of the artifacts present on the classpath that exist in the library-and-framework-list.json to the list of their transitive dependencies (as they are marked as "metadata provided-for" by the parent artifact). It is later used by the dynamic access tab of the native image Build Report to mark these "provided-for" dependencies as being covered by native image and not "needing investigation". The JSON file follows the schema at: https://github.com/oracle/graal/blob/master/docs/reference-manual/native-image/assets/dynamic-access-metadata-schema-v1.0.0.json.

Both the Maven mojo and the Gradle task can be ran standalone, but will automatically run when emitting a Build Report and running the native image build mojo/task.

Fixes: #801.

…ugin

…mit build-report"

…mpile-no-fork while emitting a Build Report

…adle plugins add the generated file to the classpath instead of a new option

… the maven and gradle plugins

… is given a path

… the classpath

oracle-contributor-agreement · 2025-11-10T10:45:43Z

Thank you for your pull request and welcome to our community! To contribute, please sign the Oracle Contributor Agreement (OCA).
The following contributors of this PR have not signed the OCA:

PR author: jormundur00

To sign the OCA, please create an Oracle account and sign the OCA in Oracle's Contributor Agreement Application.

When signing the OCA, please provide your GitHub username. After signing the OCA and getting an OCA approval from Oracle, this PR will be automatically updated.

If you are an Oracle employee, please make sure that you are a member of the main Oracle GitHub organization, and your membership in this organization is public.

melix · 2025-11-10T10:50:15Z

...src/main/java/org/graalvm/buildtools/gradle/internal/GraalVMReachabilityMetadataService.java

        });
    }
+
+    public Path getRepositoryDirectory() {


❌ Should probably return Optional<Path> instead, so that we don't have to figure out if null is expected or not.

melix · 2025-11-10T10:52:09Z

...-plugin/src/main/java/org/graalvm/buildtools/gradle/tasks/GenerateDynamicAccessMetadata.java

+    private static final String PROVIDES_FOR = "providesFor";
+
+    @Internal
+    public abstract Property<Configuration> getRuntimeClasspath();


❌ This is not compatible with Gradle's configuration cache. We shouldn't use Configuration as input (probably a Property<ResolvedComponentResult>).

I've since moved to the usage of Property<ResolvedComponentResult> and SetProperty<ResolvedArtifactResult> (trying to follow the pattern you used when setting properties for the CollectReachabilityMetadata task to be safe).

melix · 2025-11-10T10:52:47Z

...-plugin/src/main/java/org/graalvm/buildtools/gradle/tasks/GenerateDynamicAccessMetadata.java

+            Set<File> classpathEntries = runtimeClasspathConfig.getFiles();
+
+            Map<String, Set<String>> exportMap = buildExportMap(
+                    runtimeClasspathConfig.getResolvedConfiguration().getFirstLevelModuleDependencies(),


❌ You should use a dependency graph as input instead. This isn't compatible with the configuration cache.

melix · 2025-11-10T10:53:41Z

...-plugin/src/main/java/org/graalvm/buildtools/gradle/tasks/GenerateDynamicAccessMetadata.java

+     * entry in the {@value #LIBRARY_AND_FRAMEWORK_LIST} file.
+     */
+    private Set<String> readArtifacts(File inputFile) throws IOException {
+        Set<String> artifacts = new HashSet<>();


Should probably use a LinkedHashSet so that the result is consistent across invocations.

melix · 2025-11-10T10:56:03Z

native-gradle-plugin/src/main/java/org/graalvm/buildtools/gradle/NativeImagePlugin.java

+                tasks,
+                deriveTaskName(binaryName, "generate", "DynamicAccessMetadata"));
+            imageBuilder.configure(buildImageTask -> {
+                if (buildImageTask.getOptions().get().getBuildArgs().get().stream()


❌ This is likely to fail, because you are reading the build arguments during configuration of a task, which is non deterministic (depends on when the build args are changed in a script). Either the reasoning has to be deferred to execution time, based on the actual arguments, or it should use a non eager transformation (not use .get() but .map).

melix · 2025-11-10T10:57:03Z

native-gradle-plugin/build.gradle

 }

 dependencies {
+    implementation libs.openjson


❌ The Gradle plugin shouldn't have a direct dependency on openjson. The common utils should have one, but there's no reason the Gradle plugin should directly depend on it.

I've created a separate DynamicAccessMetadataUtils class where I do this serialization and JSON parsing (which I left in the commons.utils package), so now I don't add this direct dependency on openjson here anymore.

FYI: Not sure if the same applies for the native-maven-plugin, but in the build.gradle.kts for it, we already depend on both libs.utils and libs.openjson.

… invocations

… emitted

…tResult> instead of relying on Property<Configuration>

…class, that is used by both the Maven and Gradle plugin

jormundur00 · 2025-11-26T07:40:38Z

Hey @melix, I've refactored the code to align with your requested changes, so please take another look when you have the time.

melix · 2025-11-27T12:53:25Z

...-plugin/src/main/java/org/graalvm/buildtools/gradle/tasks/GenerateDynamicAccessMetadata.java

+    }
+
+    @Internal
+    public abstract Property<ResolvedComponentResult> getRuntimeClasspathGraph();


I don't think these are really internal, right? Internal means used internally but without influencing the inputs. If the graph changes, I assume that this has to be taken into account?

melix · 2025-11-28T07:56:01Z

I was thinking that maybe instead of complicated logic to figure out if --emit-build-report is used, this should be the other way around: add a DSL argument Property<Boolean> emitBuildReport and simply use that. That would be the idiomatic Gradle way I think: a DSL flag determines what behavior to expect and the build tool generates the proper arguments. If the feature is not directly related to emitting a build report, maybe we should have a generateDynamicAccessMetadata which, if enabled, makes sure that --emit-build-report is added. In general in Gradle we want to avoid explicit arguments: buildArgs should be restricted to "unusual" args or things we can't figure out.

…1.3 to 0.11.4 [skip ci] Bumps [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) from 0.11.3 to 0.11.4. Release notes *Sourced from [org.graalvm.buildtools:native-maven-plugin's releases](https://github.com/graalvm/native-build-tools/releases).* > 0.11.4 > ------ > > What's Changed > -------------- > > * Release 0.11.3 by [`@graalvmbot`](https://github.com/graalvmbot) in [graalvm/native-build-tools#797](https://redirect.github.com/graalvm/native-build-tools/pull/797) > * Bump version to 0.11.4-SNAPSHOT by [`@graalvmbot`](https://github.com/graalvmbot) in [graalvm/native-build-tools#799](https://redirect.github.com/graalvm/native-build-tools/pull/799) > * Generate dynamic access metadata and provide it to the classpath when passing "--emit build-report" as a build argument by [`@jormundur00`](https://github.com/jormundur00) in [graalvm/native-build-tools#795](https://redirect.github.com/graalvm/native-build-tools/pull/795) > * Fix relativlization bug by [`@melix`](https://github.com/melix) in [graalvm/native-build-tools#792](https://redirect.github.com/graalvm/native-build-tools/pull/792) > * Fix wrong property name in the maven plugin documentation by [`@jormundur00`](https://github.com/jormundur00) in [graalvm/native-build-tools#808](https://redirect.github.com/graalvm/native-build-tools/pull/808) > * Enhance Project Documentation and Testing by [`@vjovanov`](https://github.com/vjovanov) in [graalvm/native-build-tools#791](https://redirect.github.com/graalvm/native-build-tools/pull/791) > * Support compatibility mode in GraalVM by [`@vjovanov`](https://github.com/vjovanov) in [graalvm/native-build-tools#811](https://redirect.github.com/graalvm/native-build-tools/pull/811) > * Update reachability metadata to 0.3.33 by [`@graalvmbot`](https://github.com/graalvmbot) in [graalvm/native-build-tools#814](https://redirect.github.com/graalvm/native-build-tools/pull/814) > * Release 0.11.4 by [`@graalvmbot`](https://github.com/graalvmbot) in [graalvm/native-build-tools#815](https://redirect.github.com/graalvm/native-build-tools/pull/815) > > New Contributors > ---------------- > > * [`@jormundur00`](https://github.com/jormundur00) made their first contribution in [graalvm/native-build-tools#795](https://redirect.github.com/graalvm/native-build-tools/pull/795) > > **Full Changelog**: <graalvm/native-build-tools@0.11.3...0.11.4> Commits * [`cfa42b8`](graalvm/native-build-tools@cfa42b8) Merge pull request [#815](https://redirect.github.com/graalvm/native-build-tools/issues/815) from graalvm/release/0.11.4 * [`0db3ae0`](graalvm/native-build-tools@0db3ae0) Release 0.11.4 * [`ea4d521`](graalvm/native-build-tools@ea4d521) Merge pull request [#814](https://redirect.github.com/graalvm/native-build-tools/issues/814) from graalvm/update-metadata-to-0.3.33 * [`c773ff7`](graalvm/native-build-tools@c773ff7) Update reachability metadata to 0.3.33 * [`06737b9`](graalvm/native-build-tools@06737b9) Merge pull request [#811](https://redirect.github.com/graalvm/native-build-tools/issues/811) from graalvm/vj/support-compatibility-mode-preserve * [`1ba5ebc`](graalvm/native-build-tools@1ba5ebc) Avoid reaching hosted elements with -H:Preserve=all * [`ffb728f`](graalvm/native-build-tools@ffb728f) Merge pull request [#791](https://redirect.github.com/graalvm/native-build-tools/issues/791) from graalvm/vj/project-documentation-and-testing * [`c6ff0a2`](graalvm/native-build-tools@c6ff0a2) Merge pull request [#808](https://redirect.github.com/graalvm/native-build-tools/issues/808) from jormundur00/jormundur00/[gh-807](https://redirect.github.com/graalvm/native-build-tools/issues/807) * [`aafd2e6`](graalvm/native-build-tools@aafd2e6) Fix wrong property name in the maven plugin documentation * [`ae4b8eb`](graalvm/native-build-tools@ae4b8eb) Fix relativlization bug ([#792](https://redirect.github.com/graalvm/native-build-tools/issues/792)) * Additional commits viewable in [compare view](graalvm/native-build-tools@0.11.3...0.11.4) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=org.graalvm.buildtools:native-maven-plugin&package-manager=maven&previous-version=0.11.3&new-version=0.11.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

jormundur00 added 16 commits October 21, 2025 14:07

Add generateDynamicAccessMetadata gradle task to the native-gradle-pl…

c6d1038

…ugin

Implement dynamic access generator on the native-maven-plugin

17d00f7

Touch-up maven plugin

7b37e44

Relax exception catches and be more specific with exceptions

f17e327

Make GenerateDynamicAccessMetadata contingent on the presence of "--e…

1f4148e

…mit build-report"

Cleanup both plugins and make them more consistent with eachother

ea322e5

Hotfix private method being public

0c73931

Make the generateDynamicAccessMetadata mojo execute when executing co…

f033acf

…mpile-no-fork while emitting a Build Report

Add EOF newlines

fc0acfb

Make the dynamic access metadata generation parts of the maven and gr…

fe588bc

…adle plugins add the generated file to the classpath instead of a new option

Add documentation for the dynamic access metadata generation parts of…

3ba7d33

… the maven and gradle plugins

Make --emit build-report detection cover cases where the build report…

5f0b4c5

… is given a path

Move away from "JAR" usage, as different formats can be also found on…

05a2271

… the classpath

Make the JSON output format more verbose for the native-gradle-plugin

564ef46

Make the JSON output format more verbose for the native-maven-plugin

da047df

Update docs

6b9ccb8

oracle-contributor-agreement bot added the OCA Required At least one contributor does not have an approved Oracle Contributor Agreement. label Nov 10, 2025

melix requested changes Nov 10, 2025

View reviewed changes

Make GraalVMReachabilityMetadataService#getRepositoryDirectory optional

7655aca

jormundur00 changed the title ~~Generate dynamic access metadata and provide it to the classpath when emitting a Build Report~~ Generate dynamic access metadata and provide it to the classpath when emitting a Build Report (passing "--emit build-report" as a build argument)) Nov 10, 2025

oracle-contributor-agreement bot added OCA Verified All contributors have signed the Oracle Contributor Agreement. and removed OCA Required At least one contributor does not have an approved Oracle Contributor Agreement. labels Nov 10, 2025

jormundur00 added 5 commits November 10, 2025 15:28

Migrate to the use of LinkedHashSet to have consistent results across…

1c497ea

… invocations

Use non-eager transformation when checking if a build report is being…

e948593

… emitted

Use Property<ResolvedComponentResult> and PropertySet<ResolvedArtifac…

d001a47

…tResult> instead of relying on Property<Configuration>

Move JSON generation and parsing to a new DynamicAccessMetadataUtils …

f04d7e2

…class, that is used by both the Maven and Gradle plugin

Update and move serialization documentation to the util class

e2d7aeb

jormundur00 requested a review from melix November 13, 2025 11:36

jormundur00 requested a review from vjovanov November 20, 2025 13:24

melix reviewed Nov 27, 2025

View reviewed changes

Refactor @internal properties to @input

7d13364

jormundur00 force-pushed the jvukicev/dynamic-access-metadata branch from d4b8af7 to 7d13364 Compare November 27, 2025 14:12

melix approved these changes Nov 27, 2025

View reviewed changes

vjovanov approved these changes Nov 27, 2025

View reviewed changes

jormundur00 merged commit 54db68c into graalvm:master Nov 28, 2025
190 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Generate dynamic access metadata and provide it to the classpath when passing "--emit build-report" as a build argument#795

Generate dynamic access metadata and provide it to the classpath when passing "--emit build-report" as a build argument#795
jormundur00 merged 23 commits intograalvm:masterfrom
jormundur00:jvukicev/dynamic-access-metadata

jormundur00 commented Nov 10, 2025 •

edited

Loading

Uh oh!

oracle-contributor-agreement bot commented Nov 10, 2025

Uh oh!

melix Nov 10, 2025

Uh oh!

melix Nov 10, 2025

Uh oh!

jormundur00 Nov 12, 2025

Uh oh!

melix Nov 10, 2025

Uh oh!

melix Nov 10, 2025

Uh oh!

melix Nov 10, 2025

Uh oh!

melix Nov 10, 2025

Uh oh!

jormundur00 Nov 12, 2025

Uh oh!

jormundur00 commented Nov 26, 2025

Uh oh!

melix Nov 27, 2025

Uh oh!

Uh oh!

melix commented Nov 28, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

jormundur00 commented Nov 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

oracle-contributor-agreement bot commented Nov 10, 2025

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

jormundur00 commented Nov 26, 2025

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

melix commented Nov 28, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

jormundur00 commented Nov 10, 2025 •

edited

Loading