This is an automated email from the ASF dual-hosted git repository.
clintropolis pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git
The following commit(s) were added to refs/heads/master by this push:
new 6a8cc4a06b5 fix: update PullDependencies to exclude netty-4 jars
(#20332)
6a8cc4a06b5 is described below
commit 6a8cc4a06b53792ee58e86af2bf9b8eb5376ed72
Author: Clint Wylie <[email protected]>
AuthorDate: Mon Sep 14 13:13:59 2026 -0700
fix: update PullDependencies to exclude netty-4 jars (#20332)
---
.../java/org/apache/druid/cli/PullDependencies.java | 20 ++++++++++++++++++++
1 file changed, 20 insertions(+)
diff --git a/services/src/main/java/org/apache/druid/cli/PullDependencies.java
b/services/src/main/java/org/apache/druid/cli/PullDependencies.java
index f74124c9453..9e617cc16a8 100644
--- a/services/src/main/java/org/apache/druid/cli/PullDependencies.java
+++ b/services/src/main/java/org/apache/druid/cli/PullDependencies.java
@@ -86,6 +86,26 @@ public class PullDependencies implements Runnable
.put("com.fasterxml.jackson.core", "jackson-databind")
.put("com.fasterxml.jackson.core", "jackson-core")
.put("com.fasterxml.jackson.core", "jackson-annotations")
+ // Netty 4 is bundled in lib/ (used by the core Druid HTTP
client). The netty-bom import at the root
+ // pom appears to defeat scope=provided on transitive netty
jars in some extensions, so exclude them
+ // here to keep them from being duplicated.
+ .put("io.netty", "netty-buffer")
+ .put("io.netty", "netty-codec")
+ .put("io.netty", "netty-codec-base")
+ .put("io.netty", "netty-codec-compression")
+ .put("io.netty", "netty-codec-dns")
+ .put("io.netty", "netty-codec-http")
+ .put("io.netty", "netty-codec-marshalling")
+ .put("io.netty", "netty-codec-protobuf")
+ .put("io.netty", "netty-codec-socks")
+ .put("io.netty", "netty-common")
+ .put("io.netty", "netty-handler")
+ .put("io.netty", "netty-handler-proxy")
+ .put("io.netty", "netty-resolver")
+ .put("io.netty", "netty-resolver-dns")
+ .put("io.netty", "netty-transport")
+ .put("io.netty", "netty-transport-classes-epoll")
+ .put("io.netty", "netty-transport-native-unix-common")
.build();
private static final Dependencies SECURITY_VULNERABILITY_EXCLUSIONS =
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
