Skip to content

CPBR-3642: Scope findbugs:annotations as Provided#1023

Draft
Mihir Chandna (mihirchandna) wants to merge 1 commit into
7.5.xfrom
75x-LGPL
Draft

CPBR-3642: Scope findbugs:annotations as Provided#1023
Mihir Chandna (mihirchandna) wants to merge 1 commit into
7.5.xfrom
75x-LGPL

Conversation

@mihirchandna

Copy link
Copy Markdown
Member

Description

This PR adds a dependency management entry in the common parent POM to force com.google.code.findbugs:annotations (the LGPL-2.1 annotations-3.0.1.jar) to provided scope.

This jar is not declared in any CP repo, it is pulled transitively via com.hubspot.jackson:jackson-datatype-protobuf (compile scope, version pinned by com.hubspot:basepom) and was being bundled into shipped packages under across many components (ksqldb, confluent-control-center, confluent-security/*, etc.). It carries only compile-time annotations, so it has zero runtime impact. Scoping it provided here removes it from the runtime classpath in a single change.

To be pint merged upto master.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant