Skip to content

chore: remove commons-codec dependency from sigstore-java#1098

Open
vlsi wants to merge 1 commit intosigstore:mainfrom
vlsi:commons-codec
Open

chore: remove commons-codec dependency from sigstore-java#1098
vlsi wants to merge 1 commit intosigstore:mainfrom
vlsi:commons-codec

Conversation

@vlsi
Copy link
Collaborator

@vlsi vlsi commented Nov 10, 2025

commons-codec might still be used as a transitive, however, the base code should not rely on commons.

Modern Java is good enough so we do not need commons-* in the runtime classpath.

HexFormat requries Java 17, so let's go with Guava's BaseEncoding for now.

commons-codec might still be used as a transitive, however, the base
code should not rely on commons.

Signed-off-by: Vladimir Sitnikov <sitnikov.vladimir@gmail.com>
@vlsi
Copy link
Collaborator Author

vlsi commented Nov 10, 2025

@loosebazooka , WDYT?

@loosebazooka
Copy link
Member

yeah sgtm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants