From eb4e87f30070f5c17adc625bf492897d9c1ab41a Mon Sep 17 00:00:00 2001 From: Mikhail Lopatkin Date: Mon, 17 Aug 2026 14:50:40 +0200 Subject: [PATCH] Remove unused httpclient5 dependency from buildSrc The dependency was added in 87d45189 for BintrayTask, which talked to the Bintray REST API. Bintray publishing was removed in 2db714eb, but the dependency declaration was left behind. Nothing in buildSrc has referenced org.apache.hc since then, so this only added weight to the build classpath and produced recurring dependabot bumps. Dependency verification is pruned accordingly: the trusted keys for org.apache.httpcomponents, org.slf4j:slf4j-api and commons-codec covered httpclient5 and its transitives only, and are dropped along with their keyring entries. Note that VersioningPlugin imports org.slf4j.Logger, which used to be resolved transitively via httpclient5. It now comes from gradleApi(), so buildSrc still compiles from a clean state. --- buildSrc/build.gradle | 1 - gradle/verification-keyring.keys | 84 -------------------------------- gradle/verification-metadata.xml | 6 --- 3 files changed, 91 deletions(-) diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle index 7c9b8451..dc57edcf 100644 --- a/buildSrc/build.gradle +++ b/buildSrc/build.gradle @@ -9,7 +9,6 @@ repositories { dependencies { implementation gradleApi() - implementation 'org.apache.httpcomponents.client5:httpclient5:5.0.1' implementation 'com.google.guava:guava:32.0.0-jre' } diff --git a/gradle/verification-keyring.keys b/gradle/verification-keyring.keys index 7669b2af..ccf7763e 100644 --- a/gradle/verification-keyring.keys +++ b/gradle/verification-keyring.keys @@ -42,35 +42,6 @@ PXCe8La72ukmaxEGbpJ8mdzS2PJko7mm =Xe8l -----END PGP PUBLIC KEY BLOCK----- -pub 86FDC7E2A11262CB -uid Gary David Gregory (Code signing key) - -sub 59BA7BFEAD3D7F94 ------BEGIN PGP PUBLIC KEY BLOCK----- - -mQENBE2kzuwBCACYV+G9yxNkSjAKSji0B5ipMGM74JAL1Ogtcu+993pLHHYsdXri -WWXi37x9PLjeHxw63mN26SFyrbMJ4A8erLB03PDjw0DEzAwiu9P2vSvL/RFxGBbk -cM0BTNXNR1rk8DpIzvXtejp8IHtD1qcDLTlJ8D0W3USebShDPo6NmMxTNuH0u99B -WHCMAdSa34wsg0ZpffwQmRxeA+ebrf2ydKupGkeZsKjkLlaXNkTVp1ghn5ts/lvg -KeHv1SJivWKCRmFlbPhBK4+mxSUSOPdoBNAfxA51QzZoPizSk0VbRz3YufYRVLFy -9vqPSorDmYJhCvn3f6+A38FS/j8VE+8obQ2rABEBAAG0O0dhcnkgRGF2aWQgR3Jl -Z29yeSAoQ29kZSBzaWduaW5nIGtleSkgPGdncmVnb3J5QGFwYWNoZS5vcmc+uQEN -BE2kzuwBCACzeGpkd6X/xTfKDBWvXgHOOKIJ2pht9XmtZZKiIj7LIiSwvSds/Zko -ZKxAm7AY+KPh8Xjf968FtoUBQJvHAG4rbowEqT7OOrJae2JcenH5qzaod7TpIPQV -v+Ysz8I1wLlC6LzKRj1X99Hng6X+obsEasnPbmEEkuiZ/Sgi4vVC8SHkDmYt1Dx8 -jDgm53oUeWkEJO9LSI2zcrZhSgvg1xa4Q4gY5UUK7gE4LbmGCjFlATuuW/0sryxu -8zxph15gkn4Nqgk0CPMSjesMYEGOsdDzfQXl2tXbt+Pe6mBoWh67MZ1v5zOq3EDt -oSqDpWPxponAeaCuNDDFX44vGjfxGE0tABEBAAGJATYEGAECAAkFAk2kzuwCGwwA -IQkQhv3H4qESYssWIQQttPHvD6dh7MTqk1yG/cfioRJiy8QwB/9UbKogRzDhPYPe -BlnchOR6gF69B3EFP/bvE2+hY5nIZLMZiVFtFCuWj65myN8xz0w29pKbHLLiAtVt -x29Cvc8X/8bGmEn3xbymT2X4znuN/IeecK6afsw7ij1535a6KA3mh640noEird9/ -ajUOysS8MKFg4kQ54W5bG/67sjYAEkl6ns1sHIzaf08Ty+UZTfNQGBZQGyTqNP6S -UqcTIcTvpbN6A8vPeO0SVO7IHuNGGPJAm7XKIkQxuzbMfxokY5uLl/wm6bi0gtm4 -QB2gjQzdzdVGrXZzP+8vL71Vdr+z//wiwafzySPLJio7LxYkSOg5cWH752laIzud -mSBBw2Lk -=pmYw ------END PGP PUBLIC KEY BLOCK----- - pub 893A028475557671 uid Gradle Inc. @@ -452,31 +423,6 @@ Vzl+Akf1a018gD1zIeMBANgFRMZuQItctGttsU1mYJgYySklomnV+zPISmpkY0Ta =4a/G -----END PGP PUBLIC KEY BLOCK----- -pub 2C7B12F2A511E325 -sub 10DA72CD7FBFA159 ------BEGIN PGP PUBLIC KEY BLOCK----- - -xsBNBE+ZO+EBCAC3fZOOuYKthr0GcUge0PH2bh18sbM9XUmPKQz/W15l1NA/2ARS -2gUXM0R+SunMlun9KsqjnojJ2ObVPvbm1Hg/66JSRgR3JWfIpSlJxLicpfu8rCfN -bOjh4v9ZipD+px8w3o/RNrnZH/KRsoJg9yER6pf+pUZqTJfdg5lXezc1WF+/1qVo -ypldMGfrkfLsPrUZTT689ubbig978e7eYmJEqldtaIwaAzHQnB70wIJyg/rEwFUM -ldsvs6t6czSuJ4zPMvmh8TMpTg9e6+DMktPl1CWRONl8RPpgYMIC96gb4OnfDDjk -Ex6clSCwgbDwdeAyOjjR6pVq+pCNTo1Pcj5jABEBAAHOwE0ET5k74QEIALaxogmJ -1t7arw82krV7ILlcOu6aLuuXTuy03K1/jU73oyWfUqwvPSbH4igcLb8kt1/6ogfk -u0T9tTx+0mDsvqK8A8NZ2nDTXok3T58UAg0FTXlqUqZmy5QPtG+it2j3/xGgip3V -5p0Ml1TqEl2SfW6gHtLptDUWzuzPi9SgK1ZFlueprPg7xwHmWhp0gwx0KSSOYWlK -oEllj/1aDxFNcdKogWcGN5aJEsETCEguBP7olL75u6732wc3zola4zTy5bFT4kEY -Dk30Du3VGQJrdsqlibdQpZYm8uH4AVXDmFMdEAjIs/DGRrUgde/oUqwtgm9U+p9M -qcbmMoeLFdi7ajEAEQEAAcLAdgQYAQIACQUCT5k74QIbDAAhCRAsexLypRHjJRYh -BEdfO45Z5uY6p4BnSCx7EvKlEeMlX0UIAKS+4ZAKrGG9jbWfzTTDbu9zzkXgV13s -uMD+XcGz10DkdluTUBXj8wWlp289fXNm4E49ipsNK+dcZ+gOATjUvb1Llh6D6bHz -1QM7olxBCeU2feTmYYKBH8GYY9JZzfAXNMQhcNiiPj+ntZqePy/EFA4uZHM7We7v -l2c7CBcDAq1NNeEczo0KvG7AWt6QoaMVmbvA14EKadNzrmEy9apkag1BKvwzXInY -CvIHMa9ZqicOSUcI5QCYu5TufvIE7Eq3Khh2Ex1FiOaEA+57LMrt6NsSKXrB8JNY -bI5pqE1rxJXZnYtx3ZpPAAEfLjPdi1AOkWhvhsoPmiGFC6ebYQ5eVbI= -=gaSa ------END PGP PUBLIC KEY BLOCK----- - pub 59A252FB1199D873 uid Tagir Valeev @@ -627,33 +573,3 @@ vET3ai3kjzYBkE96JZUn7rAQJ4r8agEhdnmMRSqtCabMhuhYDkbk8wnx6DMsk1Em NNYeMJatROfA1ypoPj+pnEiVbgu3S68aXHqko4lDTm771f8HOhVavA== =f2bL -----END PGP PUBLIC KEY BLOCK----- - -pub 7C25280EAE63EBE5 -uid Oleg Kalnichevski - -sub 926DFB2EDB329089 ------BEGIN PGP PUBLIC KEY BLOCK----- - -mQGiBEPonucRBACtbhYckAoyz1tuSXYX4XiqGa5390gIMcxe2hJ+Ncx9o3zX09Im -f8PW27BnMrz7EIydgB2wphhjfK4vkNNtm5ZDWH/zJStsk1Fe7lNuuxs8XorX1+8D -bhhFEuc2B85vNf2o9Y4V5GFwbD+tFNy4u24n7zg6/VgE2WDvYJ8JRqCEkwCggyLj -ba0lsZ2XtSINh/W8ok+9f0sD/A8WhqBfDTEBuG9gnuCYXM0j7XBBPdPS+FXmmfea -zyP+URKRprLCdt0ThZAMllIxZJrkbv7aeXVpM6KSZ/XvvaFQ/gha4o4iJFvpoKt1 -Er2j4Tz/STKztHGsMt6pqfrMNPWovu4tLuLZQmojtbIk+IwmcYxMy99owH8oV1WC -U4HeA/9MlUxzmlmrQF7VLqFTGEEqQaEJqz95wNPj/t1DmI97hshPzXLD4zwKwa9m -qZJPStRHM0a6xW2dztF12aXhrmYg1gIGNnsHtq+t8ZhfINZUurSWn0m65WT5notA -15s6hwyDACHWWOgFQ9jmWuGDh0ZpiaBe7BxeTV+MsswY81sOn7QgT2xlZyBLYWxu -aWNoZXZza2kgPG9sZWdAdXJhbC5ydT65Ag0EQ+ifBxAIALIr1cwH89+EBPkuFk1w -rpJ5mIkhBJ8k8JPWsG+dr62JYaENrdhIUQpXP7UekG4TTIWjMT7dTmHrrTr2TeKt -teiBNksGcyAw03IWAKT/26wXSA3+C/1xlhSKn7Qkp/r529CwM2DVbjV7TcEZ4tqv -32d4NcJ4lTGydjKyTbdlYS6z/Sv4qRc+yQiYrbTJ4Jpgxe5hCoZ66gUTi7mxbFHz -Zs9akQuj4hMMsggnRvuJvHyIksqp2twjJGa/1GlX8bhmR1jPB2BpokI2n6ni6qPG -km1nq8w2LRdvr+IQALfXg8HYGMvKDcVxL8O0PhuZYsfuklDGFejSizVGwWH35vcI -1bsAAwUH/A2wO0ac4mVi7+wx40d9QAOZ5xhHrndHQkTvK8H0DZ2kL7iavLIkZlN7 -jwC9jcA4DGmtHE9cbe6eP/P0VNDfaLVap85CzFE7qqv8LUK0LdDlrBCUcsXplhcI -i/WaVOHk4OPXHzkF44Nqt328fQ9V6+gbvz5+1A1PK/Rmw0rRie0d2dJJIbQhK1px -jV27qpVXfLhLMnjNh2KTO+gZh//LzION5TicsoeiHdtGU59x4Fs0SOUGgydSWAYT -LlQoW0z1AnDKMfqoIh+CrUSAI7fpt8NAMY7KqNxBT8HlhqUX6jMolHBEreF/2fVd -jX+NTR/p0O+L90b6T+xFin/RXxLRaa8= -=t151 ------END PGP PUBLIC KEY BLOCK----- diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml index 6ff9d0bf..3d521fee 100644 --- a/gradle/verification-metadata.xml +++ b/gradle/verification-metadata.xml @@ -12,17 +12,11 @@ - - - - - -