This is an automated email from the ASF dual-hosted git repository.
ayegorov pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/bookkeeper.git
The following commit(s) were added to refs/heads/master by this push:
new 317080d Forcing the same version of netty across the projects
317080d is described below
commit 317080d44334b1751d70de61f27e60505ae834cb
Author: Andrey Yegorov <[email protected]>
AuthorDate: Wed Feb 2 09:12:38 2022 -0800
Forcing the same version of netty across the projects
### Motivation
While experimenting with OWASP dependency checker I noticed that we have 3
versions of netty mixed in: 4.1.72 (current one, expected) plus 4.1.63 and
4.1.50 (brought with ZK and some other dependencies).
### Changes
Made gradle enforce the same version of netty in subprojects.
Reviewers: Nicolò Boschi <[email protected]>, Enrico Olivelli
<[email protected]>
This closes #3008 from dlg99/gradle-netty
---
build.gradle | 3 +++
dependencies.gradle | 1 +
2 files changed, 4 insertions(+)
diff --git a/build.gradle b/build.gradle
index 86495b4..03df876 100644
--- a/build.gradle
+++ b/build.gradle
@@ -280,6 +280,9 @@ allprojects {
showStandardStreams = true
}
}
+ dependencies {
+ implementation(enforcedPlatform(depLibs.nettyBom))
+ }
tasks.register('writeClasspath') {
doLast {
buildDir.mkdirs()
diff --git a/dependencies.gradle b/dependencies.gradle
index 3b955a9..ff76032 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -176,6 +176,7 @@ depLibs = [
metricsJvm: "io.dropwizard.metrics:metrics-jvm:${depVersions.dropwizard}",
metricsGraphite:
"io.dropwizard.metrics:metrics-graphite:${depVersions.dropwizard}",
mockito: "org.mockito:mockito-core:${depVersions.mockito}",
+ nettyBom: "io.netty:netty-bom:${depVersions.netty}",
nettyBuffer: "io.netty:netty-buffer:${depVersions.netty}",
nettyCommon: "io.netty:netty-common:${depVersions.netty}",
nettyHandler: "io.netty:netty-handler:${depVersions.netty}",