Skip to content

Shrink Dependencies #19002

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
aruraghuwanshi wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Shrink Dependencies #19002

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
063ea40
Shrink Dependencies
aruraghuwanshi Feb 10, 2026
ce02d76
fixes
aruraghuwanshi Feb 10, 2026
5dba70b
Merge branch 'master' into shrink-dependencies
aruraghuwanshi Feb 10, 2026
ab54195
Fix licenses.yaml for bumped dependency versions
aruraghuwanshi Mar 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion embedded-tests/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -546,7 +546,6 @@
<dependency>
<groupId>org.apache.httpcomponents.client5</groupId>
<artifactId>httpclient5</artifactId>
<version>5.5</version>
<scope>test</scope>
</dependency>

Expand Down
1 change: 0 additions & 1 deletion indexing-service/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -260,7 +260,6 @@
<dependency>
<groupId>com.google.api.grpc</groupId>
<artifactId>proto-google-common-protos</artifactId>
<version>2.48.0</version>
<scope>test</scope>
</dependency>
</dependencies>
Expand Down
18 changes: 9 additions & 9 deletions licenses.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -316,7 +316,7 @@ name: Caffeine
license_category: binary
module: java-core
license_name: Apache License version 2.0
version: 2.8.0
version: 2.9.3
libraries:
- com.github.ben-manes.caffeine: caffeine

Expand All @@ -326,7 +326,7 @@ name: Error Prone Annotations
license_category: binary
module: java-core
license_name: Apache License version 2.0
version: 2.35.1
version: 2.36.0
libraries:
- com.google.errorprone: error_prone_annotations

Expand Down Expand Up @@ -498,7 +498,7 @@ name: Apache Commons Codec
license_category: binary
module: java-core
license_name: Apache License version 2.0
version: 1.17.1
version: 1.19.0
libraries:
- commons-codec: commons-codec
notices:
Expand Down Expand Up @@ -537,7 +537,7 @@ name: Apache Commons IO
license_category: binary
module: java-core
license_name: Apache License version 2.0
version: 2.17.0
version: 2.21.0
libraries:
- commons-io: commons-io
notices:
Expand Down Expand Up @@ -623,7 +623,7 @@ name: Apache Commons Compress
license_category: binary
module: java-core
license_name: Apache License version 2.0
version: 1.27.0
version: 1.28.0
libraries:
- org.apache.commons: commons-compress
notices:
Expand Down Expand Up @@ -1119,7 +1119,7 @@ name: org.bouncycastle bcprov-jdk18on
license_category: binary
module: extensions/druid-kubernetes-extensions
license_name: MIT License
version: "1.81"
version: "1.82"
libraries:
- org.bouncycastle: bcprov-jdk18on
- org.bouncycastle: bcprov-ext-jdk18on
Expand Down Expand Up @@ -1312,7 +1312,7 @@ name: Netty
license_category: binary
module: java-core
license_name: Apache License version 2.0
version: 4.2.6.Final
version: 4.2.7.Final
libraries:
- io.netty: netty-buffer
- io.netty: netty-codec
Expand Down Expand Up @@ -1840,7 +1840,7 @@ name: Apache HttpClient
license_category: binary
module: java-core
license_name: Apache License version 2.0
version: 4.5.13
version: 4.5.14
libraries:
- org.apache.httpcomponents: httpclient
notices:
Expand Down Expand Up @@ -3422,7 +3422,7 @@ name: JNI binding for Zstd
license_category: binary
module: java-core
license_name: BSD-2-Clause License
version: 1.5.2-3
version: 1.5.6-6
copyright: Luben Karavelov
license_file_path: licenses/bin/zstd-jni.BSD2
libraries:
Expand Down
86 changes: 49 additions & 37 deletions pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@
<apache.ranger.version>2.7.0</apache.ranger.version>
<antlr4.version>4.5.3</antlr4.version>
<gson.version>2.12.0</gson.version>
<scala.library.version>2.13.14</scala.library.version>
<scala.library.version>2.13.16</scala.library.version>
<avatica.version>1.27.0</avatica.version>
<avro.version>1.11.4</avro.version>
<bytebuddy.version>1.18.3</bytebuddy.version>
Expand All @@ -95,7 +95,7 @@
<datasketches.memory.version>2.2.0</datasketches.memory.version>
<derby.version>10.14.2.0</derby.version>
<dropwizard.metrics.version>4.2.22</dropwizard.metrics.version>
<errorprone.version>2.35.1</errorprone.version>
<errorprone.version>2.36.0</errorprone.version>
<fabric8.version>7.5.2</fabric8.version>
<fastutil.version>8.5.4</fastutil.version>
<guava.version>32.1.3-jre</guava.version>
Expand All @@ -109,7 +109,7 @@
<mysql.version>8.2.0</mysql.version>
<mariadb.version>2.7.3</mariadb.version>
<netty3.version>3.10.6.Final</netty3.version>
<netty4.version>4.2.6.Final</netty4.version>
<netty4.version>4.2.7.Final</netty4.version>
<postgresql.version>42.7.2</postgresql.version>
<protobuf.version>3.25.8</protobuf.version>
<resilience4j.version>1.3.1</resilience4j.version>
Expand All @@ -120,16 +120,16 @@
<graaljs.version>22.3.5</graaljs.version>
<mockito.version>5.14.2</mockito.version>
<aws.sdk.version>1.12.784</aws.sdk.version>
<caffeine.version>2.8.0</caffeine.version>
<jacoco.version>0.8.14</jacoco.version>
<caffeine.version>2.9.3</caffeine.version>
<jacoco.version>0.8.12</jacoco.version>
<testcontainers.version>2.0.3</testcontainers.version>
<hibernate-validator.version>6.2.5.Final</hibernate-validator.version>
<httpclient.version>4.5.13</httpclient.version>
<httpclient.version>4.5.14</httpclient.version>
<!-- When upgrading ZK, edit docs and integration tests as well (integration-tests/docker-base/setup.sh) -->
<zookeeper.version>3.8.4</zookeeper.version>
<checkerframework.version>3.48.1</checkerframework.version>
<com.google.apis.client.version>2.2.0</com.google.apis.client.version>
<com.google.http.client.apis.version>1.42.3</com.google.http.client.apis.version>
<com.google.http.client.apis.version>1.43.3</com.google.http.client.apis.version>
<com.google.apis.compute.version>v1-rev20230606-2.0.0</com.google.apis.compute.version>
<com.google.cloud.storage.version>2.29.1</com.google.cloud.storage.version>
<jdk.strong.encapsulation.argLine>
Expand Down Expand Up @@ -317,12 +317,12 @@
<dependency>
<groupId>commons-codec</groupId>
<artifactId>commons-codec</artifactId>
<version>1.17.1</version>
<version>1.19.0</version>
</dependency>
<dependency>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
<version>2.17.0</version>
<version>2.21.0</version>
</dependency>
<dependency>
<groupId>commons-logging</groupId>
Expand Down Expand Up @@ -414,9 +414,9 @@
<version>1.9.25</version>
</dependency>
<dependency>
<groupId>org.jetbrains</groupId>
<artifactId>annotations</artifactId>
<version>26.0.2</version>
<groupId>org.jetbrains.kotlin</groupId>
<artifactId>kotlin-stdlib-jdk8</artifactId>
<version>1.9.25</version>
</dependency>
<!-- Transitive dependency of kubernetes-client-java in kubernetes-extension,
schema-repo in avro-extensions, and com.google.caliper:caliper in druid-server
Expand All @@ -432,7 +432,24 @@
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcpkix-jdk18on</artifactId>
<version>1.81</version>
<version>1.82</version>
</dependency>
<!-- Transitive dependency of docker-java and jetty -->
<dependency>
<groupId>jakarta.activation</groupId>
<artifactId>jakarta.activation-api</artifactId>
<version>1.2.2</version>
</dependency>
<!-- Transitive dependency of docker-java-transport-httpclient5 -->
<dependency>
<groupId>org.apache.httpcomponents.client5</groupId>
<artifactId>httpclient5</artifactId>
<version>5.5.1</version>
</dependency>
<dependency>
<groupId>org.apache.httpcomponents.core5</groupId>
<artifactId>httpcore5</artifactId>
<version>5.3.6</version>
</dependency>
<!-- Transitive dependency of hive-common in druid-kerberos, druid-ranger-security and
druid-iceberg-extension -->
Expand Down Expand Up @@ -610,7 +627,7 @@
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
<version>1.27.0</version>
<version>1.28.0</version>
</dependency>
<dependency>
<groupId>org.tukaani</groupId>
Expand All @@ -620,7 +637,7 @@
<dependency>
<groupId>com.github.luben</groupId>
<artifactId>zstd-jni</artifactId>
<version>1.5.2-3</version>
<version>1.5.6-6</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson</groupId>
Expand Down Expand Up @@ -930,6 +947,11 @@
<artifactId>protobuf-java</artifactId>
<version>${protobuf.version}</version>
</dependency>
<dependency>
<groupId>com.google.api.grpc</groupId>
<artifactId>proto-google-common-protos</artifactId>
<version>2.48.0</version>
</dependency>
<dependency>
<groupId>io.tesla.aether</groupId>
<artifactId>tesla-aether</artifactId>
Expand Down Expand Up @@ -1060,7 +1082,7 @@
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-collections4</artifactId>
<version>4.2</version>
<version>4.4</version>
</dependency>
<dependency>
<groupId>io.dropwizard.metrics</groupId>
Expand Down Expand Up @@ -1775,45 +1797,35 @@
</bannedDependencies>
<requireUpperBoundDeps>
<excludes>
<!-- upgrading these later -->
<!-- Zookeeper 3.9.x is needed by Curator 5.8.0 but requires careful testing -->
<exclude>org.apache.zookeeper:zookeeper</exclude>
<!-- Guava 33.x is needed by google-cloud libraries; major version bump -->
<exclude>com.google.guava:guava</exclude>
<exclude>org.apache.commons:commons-collections4</exclude>
<exclude>com.github.ben-manes.caffeine:caffeine</exclude>
<!-- Jackson 2.20.x is needed by docker-java 3.7.0 and fabric8; pending upgrade -->
<exclude>com.fasterxml.jackson.core:jackson-annotations</exclude>
<exclude>com.fasterxml.jackson.core:jackson-databind</exclude>
<exclude>com.fasterxml.jackson.core:jackson-core</exclude>
<exclude>com.fasterxml.jackson.datatype:jackson-datatype-jsr310</exclude>
<exclude>com.fasterxml.jackson.dataformat:jackson-dataformat-yaml</exclude>
<exclude>jakarta.activation:jakarta.activation-api</exclude>
<!-- Guice 7.0.0 is needed by fabric8; major version bump -->
<exclude>com.google.inject.extensions:guice-assistedinject</exclude>
<exclude>com.fasterxml.jackson.module:jackson-module-guice</exclude>
<exclude>com.google.inject:guice</exclude>
<!-- jedis-mock 1.1.12 requires jedis 7.0.0; major version bump -->
<exclude>redis.clients:jedis</exclude>
<!-- Calcite test dependency wants reflections 0.10.2; API changes -->
<exclude>org.reflections:reflections</exclude>
<!-- Hadoop pulls RoaringBitmap 1.2.0; major version bump -->
<exclude>org.roaringbitmap:RoaringBitmap</exclude>
<!-- Hadoop/Parquet pulls aircompressor 2.0.2; major version bump -->
<exclude>io.airlift:aircompressor</exclude>
<!-- OkHttp/OkIO 3.x is needed; major version bump from 2.x -->
<exclude>com.squareup.okio:okio</exclude>
<exclude>org.apache.httpcomponents.client5:httpclient5</exclude>
<!-- Jakarta Activation 2.x is Jakarta EE 9; major version bump -->
<exclude>com.sun.activation:jakarta.activation</exclude>
<exclude>org.apache.commons:commons-compress</exclude>
<!-- Confluent uses its own snakeyaml/kafka-clients versions -->
<exclude>org.yaml:snakeyaml</exclude>
<exclude>io.netty:netty-transport-native-kqueue</exclude>
<exclude>io.netty:netty-transport-native-epoll</exclude>
<exclude>io.netty:netty-handler-proxy</exclude>
<exclude>io.netty:netty-handler</exclude>
<exclude>com.google.http-client:google-http-client-jackson2</exclude>
<exclude>com.google.http-client:google-http-client</exclude>
<exclude>com.google.api.grpc:proto-google-common-protos</exclude>
<exclude>commons-io:commons-io</exclude>
<exclude>com.github.luben:zstd-jni</exclude>
<exclude>org.scala-lang:scala-library</exclude>
<exclude>org.bouncycastle:bcpkix-jdk18on</exclude>
<exclude>org.jetbrains.kotlin:kotlin-stdlib-jdk8</exclude>
<exclude>io.netty:netty-codec-http</exclude>
<exclude>io.confluent:kafka-schema-registry-client</exclude>
<exclude>org.apache.kafka:kafka-clients</exclude>
<exclude>com.google.errorprone:error_prone_annotations</exclude>
</excludes>
<excludedScopes>
<excludedScope>provided</excludedScope>
Expand Down
Loading