opensearch-project/OpenSearch

elasticsearch-rest-client is using an old non-maintained version of httpasyncclient-4.1.4.jar

Open

#1,308 opened on 2021年9月28日

GitHub で見る
 (6 comments) (0 reactions) (0 assignees)Java (1,505 forks)batch import
Clientsenhancementgood first issuehelp wanted

Repository metrics

Stars
 (8,123 stars)
PR merge metrics
 (平均マージ 5d 9h) (30d で 266 merged PRs)

説明

When I use latest rest client, it brings with it a dependency of an old async http client (httpasyncclient-4.1.4.jar). This client is no longer maintained. See its github page: https://github.com/apache/httpasyncclient

Not only this is a security risk, I also believe that using this old client causes multiple issues, and also related to : https://github.com/spring-projects/spring-data-elasticsearch/issues/1387 https://github.com/spring-projects/spring-data-elasticsearch/issues/1948

The expected solution: elasticsearch-rest-client should use the latest modern http client 5.x, which has the same functionality. https://github.com/apache/httpcomponents-client

コントリビューターガイド