apache / apache/druid

Shrink down the number of dependencies excluded from version enforcement

Open
#18,998 0 comments 0 reactions 0 assignees View on GitHub
Contributions Welcome
Dominant language
Java
Stars
14.1k
Forks
3.8k
Avg merge
2d 58m
Merged PRs (30d)
233

Description

Druid uses quite a few libraries - upgrading a single more important dependency might drag the version of that artifact up - however almost all libraries have transitive dependencies which should also be upgraded.

#18990 have configured the enforcer to enable `requireUpperBoundDeps`; which means that version inconsistencies will result in an error - however it needed a lot of exclusions as its being violated by quite a few dependencies.

Eventually it would be nice to remove all these exclusions.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the dependency-enforcer configuration introduced in #18990 and identify the exclusions needed for requireUpperBoundDeps. Trace each exclusion to its dependency version conflict, then verify that exclusions can be removed without enforcement errors. Done means the exclusion list is smaller and the dependency enforcement remains successful.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.