Skip to content

[SQL] Remove unneeded http5 dependencies from maven file pom.xml#6708

Queued
mihaibudiu wants to merge 1 commit into
feldera:mainfrom
mihaibudiu:mvn
Queued

[SQL] Remove unneeded http5 dependencies from maven file pom.xml#6708
mihaibudiu wants to merge 1 commit into
feldera:mainfrom
mihaibudiu:mvn

Conversation

@mihaibudiu

Copy link
Copy Markdown
Contributor

Calcite depends on Avatica which pulls in httpclient. This should never be used by the SQL compiler, so I just removed these dependencies.

@mihaibudiu
mihaibudiu requested a review from gz July 23, 2026 03:25
@mihaibudiu
mihaibudiu enabled auto-merge July 23, 2026 03:25
@mihaibudiu
mihaibudiu added this pull request to the merge queue Jul 23, 2026
@mihaibudiu
mihaibudiu removed this pull request from the merge queue due to a manual request Jul 23, 2026
@mihaibudiu
mihaibudiu added this pull request to the merge queue Jul 23, 2026

@mythical-fred mythical-fred left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One inline nit on a typo. Otherwise LGTM — jackson 2.22.1 is the latest patch, exclusions are conservative.

<artifactId>httpclient5</artifactId>
</exclusion>
<exclusion>
<groupId>org.apache.httpclient5</groupId>

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Typo in the groupId: org.apache.httpclient5 isn't a real Maven groupId. Verified against Maven Central — httpcore5-h2 lives under org.apache.httpcomponents.core5 (same groupId as the httpcore5 exclusion right below). Maven silently no-ops exclusions whose group/artifact don't match, so this line has no effect and the transitive httpcore5-h2 from avatica-core would still be pulled in.

Suggested:

<exclusion>
    <groupId>org.apache.httpcomponents.core5</groupId>
    <artifactId>httpcore5-h2</artifactId>
</exclusion>

Since the identical exclusion block appears in the avatica-core dependency further down (same three exclusions, same typo), that one is broken today as well and would be worth fixing at the same time. mvn dependency:tree -Dverbose will show whether httpcore5-h2 is actually present.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and yet, none of the http dependencies is shown by mvn dependency:tree

Signed-off-by: Mihai Budiu <mbudiu@feldera.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants