Shrink down the number of dependencies excluded from version enforcement
- Dominant language
- Java
- Stars
- 14.1k
- Forks
- 3.8k
- Avg merge
- 2d 58m
- Merged PRs (30d)
- 233
Description
Druid uses quite a few libraries - upgrading a single more important dependency might drag the version of that artifact up - however almost all libraries have transitive dependencies which should also be upgraded.
#18990 have configured the enforcer to enable `requireUpperBoundDeps`; which means that version inconsistencies will result in an error - however it needed a lot of exclusions as its being violated by quite a few dependencies.
Eventually it would be nice to remove all these exclusions.
Contributor guide
Research direction
Start by reviewing the dependency-enforcer configuration introduced in #18990 and identify the exclusions needed for requireUpperBoundDeps. Trace each exclusion to its dependency version conflict, then verify that exclusions can be removed without enforcement errors. Done means the exclusion list is smaller and the dependency enforcement remains successful.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100