GoogleCloudPlatform / GoogleCloudPlatform/cloud-opensource-java

Linkage Checker incorrectly picks up provided dependency rather than compile dependency

Offen
#1,185 1 Kommentar 0 Reaktionen 1 zugewiesene Person Beansprucht von @suztomo Auf GitHub ansehen
bug p3
Vorherrschende Sprache
Java
Sterne
163
Forks
80
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

Linkage Checker reported an error that will never manifest in users environment.

```
(gson-2.2.4.jar) com.google.gson.stream.JsonReader's method getPath() is not found;
referenced by 1 class file
io.grpc.internal.JsonParser (grpc-core-1.25.0.jar)
```

In veblush's Linkage Check result https://gist.github.com/veblush/a9470a977ed8dfa2f3e94f4c9f3957c7#file-gistfile1-txt-L83, it shows that Linkage Checker picks up gson:2.2.4 (old) in provided dependency. However, Maven (or Gradle) will never pick up the old version for users' environments, because it's provided dependency.

gson:2.2.4 (provided) was picked up
```
org.apache.beam:beam-runners-google-cloud-dataflow-java:2.20.0-SNAPSHOT (compile)
/ org.apache.beam:beam-sdks-java-extensions-google-cloud-platform-core:2.20.0-SNAPSHOT (compile)
/ com.google.cloud.bigdataoss:gcsio:2.0.0 (compile)
/ com.google.code.gson:gson:2.2.4 (provided)
```

gson:2.8.5 (compile) was not picked up.
```
org.apache.beam:beam-runners-google-cloud-dataflow-java:2.20.0-SNAPSHOT (compile)
/ org.apache.beam:beam-sdks-java-io-google-cloud-platform:2.20.0-SNAPSHOT (compile)
/ io.grpc:grpc-core:1.25.0 (compile)
/ com.google.code.gson:gson:2.8.5 (compile)
```

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.