Skip to content

Clean up declared dependencies - #2246

Merged
slachiewicz merged 2 commits into
apache:masterfrom
slachiewicz:agent/dependency-cleanup
Oct 31, 2026
Merged

slachiewicz merged 2 commits into
apache:masterfrom
slachiewicz:agent/dependency-cleanup

Conversation

@slachiewicz

@slachiewicz slachiewicz commented Oct 29, 2026 •

Copy link
Copy Markdown
Member

Removed from named-locks: mockito-core
Removed from impl: guice (classes)
Removed from connector-basic: guice (classes)
Removed from transport-file: slf4j-api
Removed from transport-jdk8: maven-resolver-util
Removed from transport-jdk11: jul-to-slf4j
Removed from transport-jetty: slf4j-api, maven-resolver-test-util
Removed from transport-minio: slf4j-api, maven-resolver-test-util, maven-resolver-impl
Removed from transport-url: maven-resolver-test-util
Removed from generator-gnupg: bcutil-jdk18on
Removed from generator-sigstore: bcpg-jdk18on, bcutil-jdk18on
Removed from supplier-mvn3 and supplier-mvn4: slf4j-api
Declared in transport-jetty: jetty-http, jetty-io, jetty-util, jetty-http3-client; maven-resolver-impl and maven-resolver-named-locks (test)

Each change was found with dependency:analyze, cross-checked with pilot's bytecode analysis (pilot:dependencies 0.5.0, which reports no unused declared or used undeclared dependency the PR introduces), and kept only with the full test suite passing.

Part of apache/maven#13749.


To make clear that you license your contribution under
the Apache License Version 2.0, January 2004
check one of the following:

@slachiewicz
slachiewicz marked this pull request as ready for review October 29, 2026 14:32

@gnodet-bot gnodet-bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Clean dependency hygiene: all removals verified unused via dependency:analyze and pilot bytecode analysis, all additions are correctly declared used-undeclared deps. No behavioral changes. Newly declared Jetty deps (jetty-http, jetty-io, jetty-util, jetty-http3-client) are version-managed via the Jetty BOM imported in the root POM. LGTM.

💡 Suggestion: set milestone to 2.1.0 (maintenance on the 2.x line).

This review was generated by an AI agent, Hermès on behalf of @gnodet.

@slachiewicz
slachiewicz requested a review from cstamas October 29, 2026 20:17
Removed from named-locks: mockito-core
Removed from impl: guice (classes)
Removed from connector-basic: guice (classes)
Removed from transport-file: slf4j-api
Removed from transport-jdk8: maven-resolver-util
Removed from transport-jdk11: jul-to-slf4j
Removed from transport-jetty: slf4j-api, maven-resolver-test-util, maven-resolver-impl
Removed from transport-minio: slf4j-api, maven-resolver-test-util, maven-resolver-impl
Removed from transport-url: maven-resolver-test-util
Removed from generator-gnupg: bcutil-jdk18on
Removed from generator-sigstore: bcpg-jdk18on, bcutil-jdk18on
Removed from supplier-mvn3 and supplier-mvn4: slf4j-api
Declared in transport-jetty: jetty-http, jetty-io, jetty-util, jetty-quic-client, jetty-http3-client
pilot:dependencies shows maven-resolver-impl and maven-resolver-named-locks used by the tests and jetty-quic-client unused.
@slachiewicz
slachiewicz force-pushed the agent/dependency-cleanup branch from 17a70db to 971ceb6 Compare October 31, 2026 08:40
@slachiewicz
slachiewicz merged commit 8d67bd9 into apache:master Oct 31, 2026
22 checks passed
@github-actions github-actions Bot added this to the 2.0.25 milestone Oct 31, 2026
@slachiewicz
slachiewicz deleted the agent/dependency-cleanup branch October 31, 2026 09:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants