You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hudi.apache.org by vh...@apache.org on 2026/04/29 06:56:12 UTC
(hudi) branch master updated: chore(deps): Pin AWS v1 SDK BOM to short-circuit transitive version-range walk (#18619)
This is an automated email from the ASF dual-hosted git repository.
voonhous pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hudi.git
The following commit(s) were added to refs/heads/master by this push:
new 426cbb8c232e chore(deps): Pin AWS v1 SDK BOM to short-circuit transitive version-range walk (#18619)
426cbb8c232e is described below
commit 426cbb8c232e11eb744edc713754ee5cd946c16e
Author: voonhous <vo...@gmail.com>
AuthorDate: Wed Apr 29 14:56:06 2026 +0800
chore(deps): Pin AWS v1 SDK BOM to short-circuit transitive version-range walk (#18619)
amazon-kinesis-deaggregator (added in #18224) pulls aws-lambda-java-events
1.1.0, whose POM declares aws-java-sdk-* deps with soft ranges like
[1.10.5,). Maven resolves these by walking every published patch version,
producing hundreds of POM downloads per clean build. Importing aws-java-sdk-bom
in dependencyManagement overrides the ranges with a single deterministic
version, eliminating the walk.
---
pom.xml | 13 +++++++++++++
1 file changed, 13 insertions(+)
diff --git a/pom.xml b/pom.xml
index 4afc759e0e37..15d770ede08c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -229,6 +229,7 @@
<disruptor.version>3.4.2</disruptor.version>
<antlr.version>4.8</antlr.version>
<aws.sdk.version>2.29.52</aws.sdk.version>
+ <aws.sdk.v1.version>1.12.797</aws.sdk.v1.version>
<proto.version>3.25.5</proto.version>
<protoc.version>3.25.5</protoc.version>
<dynamodb.lockclient.version>1.2.0</dynamodb.lockclient.version>
@@ -779,6 +780,18 @@
<dependencyManagement>
<dependencies>
+ <!-- AWS v1 SDK BOM. Pins all com.amazonaws:aws-java-sdk-* artifacts to a single
+ version. Without this, transitive deps (notably aws-lambda-java-events 1.1.0
+ via amazon-kinesis-deaggregator) declare AWS SDK ranges like [1.10.5,), which
+ force Maven to walk every published patch version during resolution. -->
+ <dependency>
+ <groupId>com.amazonaws</groupId>
+ <artifactId>aws-java-sdk-bom</artifactId>
+ <version>${aws.sdk.v1.version}</version>
+ <type>pom</type>
+ <scope>import</scope>
+ </dependency>
+
<!-- Scala -->
<dependency>
<groupId>org.scala-lang.modules</groupId>