Skip to content

Clean up declared dependencies - #2246

Open
slachiewicz wants to merge 2 commits into
apache:masterfrom
slachiewicz:agent/dependency-cleanup
Open

slachiewicz wants to merge 2 commits into
apache:masterfrom
slachiewicz:agent/dependency-cleanup

Conversation

@slachiewicz

@slachiewicz slachiewicz commented Oct 29, 2026 •

Copy link
Copy Markdown
Member

Removed from named-locks: mockito-core
Removed from impl: guice (classes)
Removed from connector-basic: guice (classes)
Removed from transport-file: slf4j-api
Removed from transport-jdk8: maven-resolver-util
Removed from transport-jdk11: jul-to-slf4j
Removed from transport-jetty: slf4j-api, maven-resolver-test-util
Removed from transport-minio: slf4j-api, maven-resolver-test-util, maven-resolver-impl
Removed from transport-url: maven-resolver-test-util
Removed from generator-gnupg: bcutil-jdk18on
Removed from generator-sigstore: bcpg-jdk18on, bcutil-jdk18on
Removed from supplier-mvn3 and supplier-mvn4: slf4j-api
Declared in transport-jetty: jetty-http, jetty-io, jetty-util, jetty-http3-client; maven-resolver-impl and maven-resolver-named-locks (test)

Each change was found with dependency:analyze, cross-checked with pilot's bytecode analysis (pilot:dependencies 0.5.0, which reports no unused declared or used undeclared dependency the PR introduces), and kept only with the full test suite passing.

Part of apache/maven#13749.


To make clear that you license your contribution under
the Apache License Version 2.0, January 2004
check one of the following:

Removed from named-locks: mockito-core
Removed from impl: guice (classes)
Removed from connector-basic: guice (classes)
Removed from transport-file: slf4j-api
Removed from transport-jdk8: maven-resolver-util
Removed from transport-jdk11: jul-to-slf4j
Removed from transport-jetty: slf4j-api, maven-resolver-test-util, maven-resolver-impl
Removed from transport-minio: slf4j-api, maven-resolver-test-util, maven-resolver-impl
Removed from transport-url: maven-resolver-test-util
Removed from generator-gnupg: bcutil-jdk18on
Removed from generator-sigstore: bcpg-jdk18on, bcutil-jdk18on
Removed from supplier-mvn3 and supplier-mvn4: slf4j-api
Declared in transport-jetty: jetty-http, jetty-io, jetty-util, jetty-quic-client, jetty-http3-client
@slachiewicz
slachiewicz marked this pull request as ready for review October 29, 2026 14:32
pilot:dependencies shows maven-resolver-impl and maven-resolver-named-locks used by the tests and jetty-quic-client unused.

@gnodet-bot gnodet-bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Clean dependency hygiene: all removals verified unused via dependency:analyze and pilot bytecode analysis, all additions are correctly declared used-undeclared deps. No behavioral changes. Newly declared Jetty deps (jetty-http, jetty-io, jetty-util, jetty-http3-client) are version-managed via the Jetty BOM imported in the root POM. LGTM.

💡 Suggestion: set milestone to 2.1.0 (maintenance on the 2.x line).

This review was generated by an AI agent, Hermès on behalf of @gnodet.

@slachiewicz
slachiewicz requested a review from cstamas October 29, 2026 20:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants