GoogleCloudPlatform / GoogleCloudPlatform/cloud-opensource-java

Linkage Checker incorrectly picks up provided dependency rather than compile dependency

未關閉
#1,185 1 則留言 0 個 reaction 已指派 1 人 已被 @suztomo 認領 在 GitHub 檢視
bug p3
主要語言
Java
星號
163
分支
80
PR 合併指標
30 天內沒有已合併 PR

描述

Linkage Checker reported an error that will never manifest in users environment.

```
(gson-2.2.4.jar) com.google.gson.stream.JsonReader's method getPath() is not found;
referenced by 1 class file
io.grpc.internal.JsonParser (grpc-core-1.25.0.jar)
```

In veblush's Linkage Check result https://gist.github.com/veblush/a9470a977ed8dfa2f3e94f4c9f3957c7#file-gistfile1-txt-L83, it shows that Linkage Checker picks up gson:2.2.4 (old) in provided dependency. However, Maven (or Gradle) will never pick up the old version for users' environments, because it's provided dependency.

gson:2.2.4 (provided) was picked up
```
org.apache.beam:beam-runners-google-cloud-dataflow-java:2.20.0-SNAPSHOT (compile)
/ org.apache.beam:beam-sdks-java-extensions-google-cloud-platform-core:2.20.0-SNAPSHOT (compile)
/ com.google.cloud.bigdataoss:gcsio:2.0.0 (compile)
/ com.google.code.gson:gson:2.2.4 (provided)
```

gson:2.8.5 (compile) was not picked up.
```
org.apache.beam:beam-runners-google-cloud-dataflow-java:2.20.0-SNAPSHOT (compile)
/ org.apache.beam:beam-sdks-java-io-google-cloud-platform:2.20.0-SNAPSHOT (compile)
/ io.grpc:grpc-core:1.25.0 (compile)
/ com.google.code.gson:gson:2.8.5 (compile)
```

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。