Manage Dependencies of Netty and gRPC with their respective BOMs

Open
#106 0 comments 2 reactions 1 assignee View on GitHub

@maxlambrecht is already working on this.

Since Jan 11, 2023.

Assessment

This issue has not been assessed yet.

Description

Both gRPC and netty come with a lot of modules that need to have the same version. Furthermore gRPC has netty shaded so any netty runtime dependencies on native bits need to also be aligned with whatever is shaded within gRPC.

In order to make sure all gRPC and netty dependencies (direct or transitive) are in the same version, the usual approach is to make use of BOMs.

The goal here would be to manage both the gRPC dependencies as well as the netty dependencies with BOMs.

Since java-spiffe itself also comes with multiple modules, it might be worthwhile to also publish a BOM so those versions are aligned.

See also:

Dominant language
Java
Stars
46
Forks
28
No merged PRs in 30d

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from spiffe/java-spiffe

All issues in spiffe/java-spiffe

Similar issues

More Java issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.