tony-- commented on pull request #251: URL: https://github.com/apache/httpcomponents-core/pull/251#issuecomment-769933711
@ok2c I'm sorry, I just don't understand your position here. All of the other dependencies in this file have the scope marked as test, so your argument that we should not define scope in the dependency management section is really confusing for me. The reason I opened the PR is because org.conscrypt is going to be pulled in for anyone consuming httpcomponents-core 4.4.x for no reason that I can see. Would it be better to just remove the dependency from the root pomfile? If you prefer that, I can open a new PR to do that instead... ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@hc.apache.org For additional commands, e-mail: dev-h...@hc.apache.org