qianye1001 opened a new pull request, #10385:
URL: https://github.com/apache/rocketmq/pull/10385

   ## Summary
   
   This PR aligns Bazel `WORKSPACE` dependency versions with Maven `pom.xml` to 
resolve the drift between the two build systems. Closes #10383.
   
   ## Changes
   
   ### WORKSPACE Updates (20 version bumps + 2 additions)
   
   | Artifact | Old (Bazel) | New (Maven) |
   |----------|-------------|-------------|
   | `io.netty:netty-all` | 4.1.65.Final | 4.1.130.Final |
   | `com.alibaba:fastjson` | 1.2.76 | 1.2.83 |
   | `com.google.guava:guava` | 31.0.1-jre | 32.0.1-jre |
   | `org.apache.commons:commons-lang3` | 3.12.0 | 3.20.0 |
   | `commons-io:commons-io` | 2.7 | 2.14.0 |
   | `commons-validator:commons-validator` | 1.7 | 1.10.0 |
   | `org.lz4:lz4-java` | 1.8.0 | 1.10.3 |
   | `org.bouncycastle:bcpkix-*` | jdk15on:1.69 | **jdk18on:1.83** (artifact 
renamed) |
   | `com.google.code.gson:gson` | 2.8.9 | 2.9.0 |
   | `io.grpc:grpc-services` | 1.47.0 | 1.53.0 |
   | `io.grpc:grpc-netty-shaded` | 1.47.0 | 1.53.0 |
   | `io.grpc:grpc-netty` | *(missing)* | **1.53.0** (added) |
   | `io.grpc:grpc-context` | 1.47.0 | 1.53.0 |
   | `io.grpc:grpc-stub` | 1.47.0 | 1.53.0 |
   | `io.grpc:grpc-api` | 1.47.0 | 1.53.0 |
   | `io.grpc:grpc-testing` | 1.47.0 | 1.53.0 |
   | `org.springframework:spring-core` | 5.3.26 | 5.3.27 |
   | `io.netty:netty-tcnative-boringssl-static` | 2.0.48.Final | 2.0.53.Final |
   | `com.squareup.okio:okio-jvm` | 3.0.0 | 3.4.0 |
   | `io.opentelemetry:opentelemetry-context` | *(missing)* | **1.47.0** 
(added) |
   
   ## Why
   
   Maven `pom.xml` is the source of truth for dependency versions. The Bazel 
build system had accumulated significant drift — 18 version mismatches and 2 
missing artifacts — leading to inconsistent classpaths and potential runtime 
behavior differences between the two toolchains.
   
   ## Scope
   
   This is **PR1** of the fix plan described in #10383:
   - ✅ **This PR:** WORKSPACE version alignment
   - 🔜 **Follow-up PR:** Per-module BUILD.bazel deps reconciliation + CI drift 
guard
   
   ## Verification
   
   - [ ] `bazel build //...` passes
   - [ ] `bazel test //...` passes
   - [ ] Lock file regenerated (requires local Bazel environment)
   
   ## Checklist
   
   - [x] I have read the [Contributing 
Guide](https://github.com/apache/rocketmq/blob/develop/CONTRIBUTING.md)
   - [x] I have written the necessary doc or comments
   - [x] I have added the necessary unit tests and all tests have passed


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to