Bug 1966769
| Summary: | Drop unnecessary findbugs dependency from libidn | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Richard Fearn <richardfearn> |
| Component: | libidn | Assignee: | Miroslav Lichvar <mlichvar> |
| Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | rawhide | CC: | jorton, mlichvar, puntogil |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-06-02 08:12:40 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1964634 | ||
For reference the findbugs annotation dependency was added to the libidn POM in this commit: https://git.savannah.gnu.org/gitweb/?p=libidn.git;a=commitdiff;h=2dfa483b59a8fe890553861ea0b04f594720bccc Applied, thanks! Thanks for the super-quick response! |
FindBugs upstream has been dead since 2016 and I would like to retire it from Fedora [1]. libidn currently has this dependency: BuildRequires: mvn(com.google.code.findbugs:annotations) This seems to be because the libidn POM in java/pom.xml.in has this dependency: <dependency> <groupId>com.google.code.findbugs</groupId> <artifactId>annotations</artifactId> <version>2.0.1</version> <scope>provided</scope> </dependency> That dependency can be downloaded here: https://search.maven.org/artifact/com.google.code.findbugs/annotations/2.0.1/jar It provides classes in these packages: * edu.umd.cs.findbugs.annotations * javax.annotation (and subpackages) * net.jcip.annotations All these packages contain the word "annotation". I can't see any reference to these packages in the libidn Java code: $ fedpkg sources $ tar -xf libidn-1.37.tar.gz $ cd libidn-1.37 $ fgrep annotation $(find -name "*.java") | wc -l 0 I think it's safe to remove the findbugs annotations dependency from libidn. [1] https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/YI723NBFFXAOQSRMYIEFAD6CYGX7S6MM/