8000 Additional Quarkus devtools dependencies in distribution by mabartos · Pull Request #40458 · keycloak/keycloak · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Additional Quarkus devtools dependencies in distribution #40458

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 19, 2025

Conversation

mabartos
Copy link
Contributor

Closes #39227

@shawkins @vmuzikar Could you please check it? Thanks!

Closes keycloak#39227

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
@mabartos mabartos requested review from shawkins and vmuzikar June 12, 2025 15:34
@mabartos mabartos requested review from a team as code owners June 12, 2025 15:34
@mabartos mabartos self-assigned this Jun 12, 2025
@mabartos
Copy link
Contributor Author

Based on the info in #39227

Before:

> ll lib/lib/deployment| grep -E '(agroal-dev|base-codestarts|devtools-common|message-writer|registry-client|smallrye-common-version|smallrye-open-api-model|commons-compress|java-properties)'

-rw-r--r--. 1 mabartos mabartos  20K May 13 11:59 io.quarkus.quarkus-agroal-dev-3.20.1.jar
-rw-r--r--. 1 mabartos mabartos 395K May 13 11:51 io.quarkus.quarkus-devtools-base-codestarts-3.20.1.jar
-rw-r--r--. 1 mabartos mabartos 412K May 13 12:08 io.quarkus.quarkus-devtools-common-3.20.1.jar
-rw-r--r--. 1 mabartos mabartos  13K May 13 11:42 io.quarkus.quarkus-devtools-message-writer-3.20.1.jar
-rw-r--r--. 1 mabartos mabartos 223K May 13 11:46 io.quarkus.quarkus-devtools-registry-client-3.20.1.jar
-rw-r--r--. 1 mabartos mabartos  34K Apr 11 16:04 io.smallrye.common.smallrye-common-version-2.12.0.jar
-rw-r--r--. 1 mabartos mabartos  33K Apr 17 16:55 io.smallrye.smallrye-open-api-model-4.0.10.jar
-rw-r--r--. 1 mabartos mabartos 1.1M Aug 17  2024 org.apache.commons.commons-compress-1.27.1.jar
-rw-r--r--. 1 mabartos mabartos  27K Jul 22  2024 org.codejive.java-properties-0.0.7.jar

After:

> ll lib/lib/deployment| grep -E '(agroal-dev|base-codestarts|devtools-common|message-writer|registry-client|smallrye-common-version|smallrye-open-api-model|commons-compress|java-properties)'

-rw-r--r--. 1 mabartos mabartos 412K May 13 12:08 io.quarkus.quarkus-devtools-common-3.20.1.jar
-rw-r--r--. 1 mabartos mabartos  33K Apr 17 16:55 io.smallrye.smallrye-open-api-model-4.0.10.jar

@shawkins
Copy link
Contributor

Could you please check it? Thanks!

This all makes sense. Just wondering about the warning - who will be looking at that, and / or should it be an error instead?

@mabartos
Copy link
Contributor Author

@shawkins Thanks for the review!

who will be looking at that?

At least we in our team who quite often build the Quarkus distribution as we might clearly see if the list is wider than before (IMHO better than not checking it at all).

and / or should it be an error instead?

As we cannot remove all these dev dependencies for now, I would not vote for hard error and build failure. It's even better to only warn about the usage of dev dependencies for the project https://github.com/mabartos/keycloak-quarkus-extensions, where people can add some additional dev dependencies intentionally.

But if we decide to not add any checker, I'm ok with that, but we'd need some other approach to check it to prevent these issues again.

@mabartos
Copy link
Contributor Author

@shawkins @vmuzikar WDYT related to the script? Is it ok to keep it, or you don't see the value here? We would have at least something.

Are you ok to exclude these dependencies? We mitigate the issue at least.

Copy link
Contributor
@shawkins shawkins left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, seems fine to just keep it as is - especially if it looks like we'll be able to get a proper fix from quarkus later.

@ahus1 ahus1 merged commit 8a5d1a1 into keycloak:main Jun 19, 2025
79 checks passed
@vmuzikar
Copy link
Contributor

WDYT related to the script? Is it ok to keep it, or you don't see the value here? We would have at least something.

As discussed offline, the main problem with the dev dependencies is prod related. And that problem is not specific to the dev dependencies only – there are others which this script won't catch. So it somewhat helps but it's not the ultimate solution for that. We'll still need to consult our internal prod reports.

That said, it was not a blocker for me and it's ok from my perspective to keep the script, albeit it adds some time when building. No need to revert that as it's merged now. :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Quarkus devtools dependencies in 26.2.x
4 participants
0