This is an automated email from the ASF dual-hosted git repository. yihua pushed a commit to branch release-1.2.0 in repository https://gitbox.apache.org/repos/asf/hudi.git
commit 002dd4cbea7475a423b71b7dca6bf54aa8c81743 Author: voonhous <[email protected]> AuthorDate: Wed Apr 29 14:56:06 2026 +0800 chore(deps): Pin AWS v1 SDK BOM to short-circuit transitive version-range walk (#18619) amazon-kinesis-deaggregator (added in #18224) pulls aws-lambda-java-events 1.1.0, whose POM declares aws-java-sdk-* deps with soft ranges like [1.10.5,). Maven resolves these by walking every published patch version, producing hundreds of POM downloads per clean build. Importing aws-java-sdk-bom in dependencyManagement overrides the ranges with a single deterministic version, eliminating the walk. --- pom.xml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/pom.xml b/pom.xml index 740eaedcfb4d..5c6682fc378c 100644 --- a/pom.xml +++ b/pom.xml @@ -229,6 +229,7 @@ <disruptor.version>3.4.2</disruptor.version> <antlr.version>4.8</antlr.version> <aws.sdk.version>2.29.52</aws.sdk.version> + <aws.sdk.v1.version>1.12.797</aws.sdk.v1.version> <proto.version>3.25.5</proto.version> <protoc.version>3.25.5</protoc.version> <dynamodb.lockclient.version>1.2.0</dynamodb.lockclient.version> @@ -779,6 +780,18 @@ <dependencyManagement> <dependencies> + <!-- AWS v1 SDK BOM. Pins all com.amazonaws:aws-java-sdk-* artifacts to a single + version. Without this, transitive deps (notably aws-lambda-java-events 1.1.0 + via amazon-kinesis-deaggregator) declare AWS SDK ranges like [1.10.5,), which + force Maven to walk every published patch version during resolution. --> + <dependency> + <groupId>com.amazonaws</groupId> + <artifactId>aws-java-sdk-bom</artifactId> + <version>${aws.sdk.v1.version}</version> + <type>pom</type> + <scope>import</scope> + </dependency> + <!-- Scala --> <dependency> <groupId>org.scala-lang.modules</groupId>
