Skip to content

Commit

Permalink
Remove shaded deps META-INF/maven files
Browse files Browse the repository at this point in the history
These should not be in our produced JAR file. They get picked up by security scanners, and it is not the intended purpose of them to be included when shading.

Closes gh-5953
  • Loading branch information
shakuzen committed Feb 27, 2025
1 parent 51af1cd commit ca4afda
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions implementations/micrometer-registry-statsd/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,8 @@ shadowJar {
include(dependency('io.projectreactor.netty:'))
include(dependency('org.reactivestreams:reactive-streams'))
include(dependency('io.netty:'))
// see gh-5953
exclude("META-INF/maven/**")
}
relocate 'reactor', 'io.micrometer.shaded.reactor'
relocate 'org.reactivestreams', 'io.micrometer.shaded.org.reactorstreams'
Expand Down

0 comments on commit ca4afda

Please sign in to comment.