jamesnetherton opened a new issue, #9297: URL: https://github.com/apache/camel-quarkus/issues/9297
`io.milvus:milvus-sdk-java` bundles a shaded copy of `io.grpc:grpc-netty-shaded` 1.59.1, relocated under `io.milvus.shaded`. That includes about 2,500 netty classes, about 900 grpc classes, netty-tcnative / epoll native libraries and native-image configuration for the shaded netty. Today the milvus extension works around this with a `BytecodeTransformerBuildItem` that remaps the shaded references to `io.grpc` / `io.netty` at build time. The shaded classes still end up on the application classpath, though. Vulnerability scanners report the old grpc & netty copies, and the transformation runs over the whole SDK on every build. Similar to what is done for the kudu extension, we could add a `camel-quarkus-milvus-client` module that: - Reverts the package relocations and strips the shaded classes, native libraries, native-image configs and service files. - Lets `camel-quarkus-milvus` use the grpc & netty dependencies provided by `quarkus-grpc-common`. - Removes the bytecode transformation from `MilvusProcessor`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
