opensearch-project/OpenSearch

elasticsearch-rest-client is using an old non-maintained version of httpasyncclient-4.1.4.jar

オープン

#1,308 opened on 2021/09/28

 (6 件のコメント) (0 件のリアクション) (0 人の担当者)Java (1,505 件のフォーク)batch import
Clientsenhancementgood first issuehelp wanted

Repository metrics

Stars
 (8,123 個のスター)
PR merge metrics
 (平均マージ 5d 9h) (30d で 266 merged PRs)

説明

When I use latest rest client, it brings with it a dependency of an old async http client (httpasyncclient-4.1.4.jar). This client is no longer maintained. See its github page: https://github.com/apache/httpasyncclient

Not only this is a security risk, I also believe that using this old client causes multiple issues, and also related to : https://github.com/spring-projects/spring-data-elasticsearch/issues/1387 https://github.com/spring-projects/spring-data-elasticsearch/issues/1948

The expected solution: elasticsearch-rest-client should use the latest modern http client 5.x, which has the same functionality. https://github.com/apache/httpcomponents-client

コントリビューターガイド