Skip to content

build(deps): remove unused j2objc-annotations and curator-test dependencies - #20329

Open
ashwintumma23 wants to merge 1 commit into
apache:masterfrom
ashwintumma23:remove-unused-j2objc-curator-test-deps
Open

build(deps): remove unused j2objc-annotations and curator-test dependencies#20329
ashwintumma23 wants to merge 1 commit into
apache:masterfrom
ashwintumma23:remove-unused-j2objc-curator-test-deps

Conversation

@ashwintumma23

Copy link
Copy Markdown
Contributor

Summary

Removes two unused third-party dependencies (com.google.j2objc:j2objc-annotations
and org.apache.curator:curator-test) from modules where static analysis confirmed
zero source usage, reducing attack surface and license exposure.

Release note

Removed unused com.google.j2objc:j2objc-annotations from root dependencyManagement
and org.apache.curator:curator-test from 4 modules (embedded-tests,
rabbit-stream-indexing-service, druid-catalog, lookups-cached-global) where
no source usage was found.


Key changed/added classes in this PR

  • pom.xml
  • embedded-tests/pom.xml
  • extensions-contrib/rabbit-stream-indexing-service/pom.xml
  • extensions-core/druid-catalog/pom.xml
  • extensions-core/lookups-cached-global/pom.xml
  • licenses.yaml

Reason for change

Keeping unused third-party dependencies increases attack surface and license exposure
without benefit. Static analysis flagged both artifacts as unused, and manual
investigation confirmed zero source imports in the affected modules.

curator-test remains declared in the 4 modules that actively use it (server,
indexing-service, kafka-indexing-service, kafka-extraction-namespace) and in
root dependencyManagement for version pinning.

j2objc-annotations is already managed by the Guava BOM (already imported), so the
explicit dependencyManagement pin was a redundant no-op.

Changes

1. pom.xml (1 entry removed)

  • Removed com.google.j2objc:j2objc-annotations version 3.1 from
    dependencyManagement — redundant, as the Guava BOM already pins this artifact
    at the same version.

2. embedded-tests/pom.xml (1 entry removed)

  • Removed unused org.apache.curator:curator-test test-scope dependency — zero
    curator.test / TestingServer / TestingCluster imports in source.

3. extensions-contrib/rabbit-stream-indexing-service/pom.xml (1 entry removed)

  • Removed unused org.apache.curator:curator-test test-scope dependency — zero
    curator.test imports in source.

4. extensions-core/druid-catalog/pom.xml (1 entry removed)

  • Removed unused org.apache.curator:curator-test test-scope dependency — zero
    curator.test imports in source.

5. extensions-core/lookups-cached-global/pom.xml (1 entry removed)

  • Removed unused org.apache.curator:curator-test test-scope dependency (including
    its stale javassist exclusion) — zero curator.test imports in source.

6. licenses.yaml (2 sections removed)

  • Removed j2objc entry for core module.
  • Removed j2objc entry for extensions/protobuf-extensions module.

Tests

  • Verified zero com.google.j2objc and curator.test imports in all affected
    module source trees
  • curator-test remains declared and available in the modules that actively use it
  • No compile-time or runtime references to removed artifacts exist in the
    affected modules

@ashwintumma23
ashwintumma23 force-pushed the remove-unused-j2objc-curator-test-deps branch 2 times, most recently from abea43b to 2b7860a Compare September 11, 2026 21:38
…encies

- Remove com.google.j2objc:j2objc-annotations from root dependencyManagement
  (redundant; already pinned by the Guava BOM)
- Remove org.apache.curator:curator-test from embedded-tests,
  rabbit-stream-indexing-service, druid-catalog, and lookups-cached-global
  (zero source usage in all four modules)
- Remove j2objc-annotations entries from licenses.yaml
@ashwintumma23
ashwintumma23 force-pushed the remove-unused-j2objc-curator-test-deps branch from 2b7860a to a1169bd Compare September 11, 2026 21:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant