Enforce Dependency Convergence
- Dominant language
- Java
- Stars
- 2.6k
- Forks
- 1k
- Avg merge
- 2d 9h
- Merged PRs (30d)
- 51
Description
This was opened in #2023. I am simply reporting the same issue. I use the Maven Enforcer Plugin in my project, and adding a dependency on AWS SDK causes enforcer failures.
## Describe the issue
Multiple AWS SDK Maven artifacts have divergent dependencies.
## Steps to Reproduce
Create pom.xml with below text (I used secrets-manager for example, but other SDKs cause similar issues), then run `mvn package`
```
4.0.0
com.example
foo
0.0.0-SNAPSHOT
software.amazon.awssdk
secretsmanager
2.7.15
org.apache.maven.plugins
maven-enforcer-plugin
3.0.0
enforce
enforce
```
## Current Behavior
The following error:
```
[WARNING]
Dependency convergence error for org.reactivestreams:reactive-streams:jar:1.0.2:compile paths to dependency are:
+-com.example:foo:jar:0.0.0-SNAPSHOT
+-software.amazon.awssdk:secretsmanager:jar:2.7.15:compile
+-software.amazon.awssdk:sdk-core:jar:2.7.15:compile
+-org.reactivestreams:reactive-streams:jar:1.0.2:compile
and
+-com.example:foo:jar:0.0.0-SNAPSHOT
+-software.amazon.awssdk:secretsmanager:jar:2.7.15:compile
+-software.amazon.awssdk:http-client-spi:jar:2.7.15:compile
+-org.reactivestreams:reactive-streams:jar:1.0.2:compile
and
+-com.example:foo:jar:0.0.0-SNAPSHOT
+-software.amazon.awssdk:secretsmanager:jar:2.7.15:compile
+-software.amazon.awssdk:utils:jar:2.7.15:compile
+-org.reactivestreams:reactive-streams:jar:1.0.2:compile
and
+-com.example:foo:jar:0.0.0-SNAPSHOT
+-software.amazon.awssdk:secretsmanager:jar:2.7.15:compile
+-software.amazon.awssdk:netty-nio-client:jar:2.7.15:runtime
+-com.typesafe.netty:netty-reactive-streams-http:jar:2.0.0:runtime
+-com.typesafe.netty:netty-reactive-streams:jar:2.0.0:runtime
+-org.reactivestreams:reactive-streams:jar:1.0.0:runtime
and
+-com.example:foo:jar:0.0.0-SNAPSHOT
+-software.amazon.awssdk:secretsmanager:jar:2.7.15:compile
+-software.amazon.awssdk:netty-nio-client:jar:2.7.15:runtime
+-org.reactivestreams:reactive-streams:jar:1.0.2:runtime
[WARNING]
Dependency convergence error for io.netty:netty-codec-http:jar:4.1.33.Final:runtime paths to dependency are:
+-com.example:foo:jar:0.0.0-SNAPSHOT
+-software.amazon.awssdk:secretsmanager:jar:2.7.15:compile
+-software.amazon.awssdk:netty-nio-client:jar:2.7.15:runtime
+-io.netty:netty-codec-http:jar:4.1.33.Final:runtime
and
+-com.example:foo:jar:0.0.0-SNAPSHOT
+-software.amazon.awssdk:secretsmanager:jar:2.7.15:compile
+-software.amazon.awssdk:netty-nio-client:jar:2.7.15:runtime
+-io.netty:netty-codec-http2:jar:4.1.33.Final:runtime
+-io.netty:netty-codec-http:jar:4.1.33.Final:runtime
and
+-com.example:foo:jar:0.0.0-SNAPSHOT
+-software.amazon.awssdk:secretsmanager:jar:2.7.15:compile
+-software.amazon.awssdk:netty-nio-client:jar:2.7.15:runtime
+-com.typesafe.netty:netty-reactive-streams-http:jar:2.0.0:runtime
+-io.netty:netty-codec-http:jar:4.1.13.Final:runtime
[WARNING]
Dependency convergence error for io.netty:netty-handler:jar:4.1.33.Final:runtime paths to dependency are:
+-com.example:foo:jar:0.0.0-SNAPSHOT
+-software.amazon.awssdk:secretsmanager:jar:2.7.15:compile
+-software.amazon.awssdk:netty-nio-client:jar:2.7.15:runtime
+-io.netty:netty-codec-http2:jar:4.1.33.Final:runtime
+-io.netty:netty-handler:jar:4.1.33.Final:runtime
and
+-com.example:foo:jar:0.0.0-SNAPSHOT
+-software.amazon.awssdk:secretsmanager:jar:2.7.15:compile
+-software.amazon.awssdk:netty-nio-client:jar:2.7.15:runtime
+-io.netty:netty-handler:jar:4.1.33.Final:runtime
and
+-com.example:foo:jar:0.0.0-SNAPSHOT
+-software.amazon.awssdk:secretsmanager:jar:2.7.15:compile
+-software.amazon.awssdk:netty-nio-client:jar:2.7.15:runtime
+-com.typesafe.netty:netty-reactive-streams-http:jar:2.0.0:runtime
+-com.typesafe.netty:netty-reactive-streams:jar:2.0.0:runtime
+-io.netty:netty-handler:jar:4.1.13.Final:runtime
[WARNING] Rule 0: org.apache.maven.plugins.enforcer.DependencyConvergence failed with message:
Failed while enforcing releasability. See above detailed error message.
```
## Your Environment
* AWS Java SDK version used: 2.7.15
* JDK version used: 1.8
Contributor guide
Assessment
This issue has not been assessed yet.