Skip to content

[BOM] Use confluent-common-bom 0.1.0 to manage deps (8.0.x)#999

Open
Na Lou (nlou9) wants to merge 1 commit into
8.0.xfrom
nlou_use_confluent_common_bom_0_1_0
Open

[BOM] Use confluent-common-bom 0.1.0 to manage deps (8.0.x)#999
Na Lou (nlou9) wants to merge 1 commit into
8.0.xfrom
nlou_use_confluent_common_bom_0_1_0

Conversation

@nlou9
Copy link
Copy Markdown
Member

Summary

Imports `confluent-common-bom 0.1.0` in `` and removes the explicit dependency entries for the deps it now manages.

Changes

Added

  • `<confluent-common-bom.version>0.1.0</confluent-common-bom.version>` property.
  • `io.confluent:confluent-common-bom` import (`pomimport`) at the top of ``.

Removed from ``

The following dependency entries — versions are now centrally managed by the BOM:

  • `io.github.classgraph:classgraph`
  • `commons-codec:commons-codec`
  • `org.apache.commons:commons-compress`
  • `commons-validator:commons-validator`
  • `io.grpc:grpc-bom` (BOM re-exports grpc-bom at the same 1.75.0 version)
  • `com.squareup.okio:okio-jvm`
  • `org.yaml:snakeyaml`
  • `org.bitbucket.b_c:jose4j`
  • `com.google.code.gson:gson`

Intentionally preserved

All `<*.version>` properties (`classgraph.version`, `commons-codec.version`, `commons-compress.version`, `commons-validator.version`, `gson.version`, `jose4j.version`, `okio.version`, `snakeyaml.version`, `grpc.version`) remain in the `` block. Many downstream CP repos that inherit from `common-parent` reference these properties directly (e.g. `${gson.version}`), and removing them would break those projects.

Version impact

confluent-common-bom 0.1.0 pins the same versions as the entries it replaces:

Dep Removed entry version BOM version
classgraph 4.8.179 4.8.179
commons-codec 1.16.1 1.16.1
commons-compress 1.28.0 1.28.0
commons-validator 1.10.1 1.10.1
grpc-bom 1.75.0 1.75.0 (re-export)
gson 2.9.0 2.9.0
jose4j 0.9.6 0.9.6
okio-jvm 3.7.0 3.7.0
snakeyaml 2.0 2.0

No version drift across CP repos that consume `common-parent`.

Diff size

+12 / -62 — a single-file change in `pom.xml`.

🤖 Generated with Claude Code

Imports confluent-common-bom 0.1.0 in dependencyManagement and removes
explicit dependency entries for the deps it now manages:

  classgraph, commons-codec, commons-compress, commons-validator,
  grpc-bom (re-exported), gson, jose4j, okio-jvm, snakeyaml

The corresponding <*.version> properties are intentionally kept in the
<properties> section. Many downstream CP repos that inherit from
common-parent reference these properties directly (e.g.
<version>${gson.version}</version>) and removing them would break
those projects.

confluent-common-bom 0.1.0 pins the same versions as the entries it
replaces, so resolved versions across CP are unchanged. The
io.grpc:grpc-bom standalone import is dropped because
confluent-common-bom re-exports it at the same 1.75.0 version.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@nlou9 Na Lou (nlou9) changed the title [BOM] Use confluent-common-bom 0.1.0 for 9 deps (8.0.x) [BOM] Use confluent-common-bom 0.1.0 to manage deps (8.0.x) May 21, 2026
@nlou9 Na Lou (nlou9) marked this pull request as ready for review May 21, 2026 18:48
@nlou9 Na Lou (nlou9) requested review from a team as code owners May 21, 2026 18:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant