-
Notifications
You must be signed in to change notification settings - Fork 224
Remove shaded deps #1543
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Remove shaded deps #1543
Conversation
Signed-off-by: Matheus Cruz <[email protected]>
3dffdf6
to
7477f84
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #1543 +/- ##
============================================
+ Coverage 76.91% 78.89% +1.98%
- Complexity 1592 1937 +345
============================================
Files 145 237 +92
Lines 4843 5956 +1113
Branches 562 611 +49
============================================
+ Hits 3725 4699 +974
- Misses 821 938 +117
- Partials 297 319 +22 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
import io.grpc.netty.shaded.io.netty.handler.ssl.util.InsecureTrustManagerFactory; | ||
import io.grpc.netty.GrpcSslContexts; | ||
import io.grpc.netty.NettyChannelBuilder; | ||
import io.netty.handler.ssl.util.InsecureTrustManagerFactory; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
As per this thread, shaded is still recommended
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, but for native compilation it is a disaster.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is there a link for the description in the PR ? Would like to read more about it
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I do not have, I got those comments on the Quarkus Zulip.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Description
I am not sure if this one is the best way to solve some issues related to native compilation. For Spring Native and Quarkus the
grpc-netty-shaded
is not recommended due to recents CVEs and a lot of GraalVM configurations and substitutions.I am not an expertise in the netty subject, I appreciate any suggestions and comments about this change.
Issue reference
We strive to have all PR being opened based on an issue, where the problem or feature have been discussed prior to implementation.
Please reference the issue this PR will close: #[issue number]
Checklist
Please make sure you've completed the relevant tasks for this PR, out of the following list: