Skip to content

Remove deps unused by this BOM users - #113

Merged
jdcasey merged 1 commit into
Commonjava:masterfrom
patrikk0123:removeUnused
Sep 10, 2026
Merged

jdcasey merged 1 commit into
Commonjava:masterfrom
patrikk0123:removeUnused

Conversation

@patrikk0123

Copy link
Copy Markdown
Contributor

No description provided.

@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown

Mend Scan Results

Status: ✅ No findings detected

SCA scan output



Identified 0 dependencies

Detected 0 vulnerabilities (0 Critical, 0 High, 0 Medium, 0 Low)





No Policy violations were detected

Project 'web-commons-bom' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=80b5ca47-c842-447d-ae27-a6980c06988c
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=bd55ee6727ff4cef9aaeb5ad1eff2cabec73edcf73004161bcbe032cb099070a

Mend AI scan succeeded.

Support Token: 2068ed5230cbf4b9491993486dea5606a1788960844711

Full logs and artifacts

@rnc

rnc commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

This is a lot of removals ; can you add some explanations please

@patrikk0123

Copy link
Copy Markdown
Contributor Author

@rnc first, only relevant users of this BOM are:
atlas, http-testserver, partyline, jhttpc, path-mapped-storage, weft, galley, RWX
(therefore that excludes indy*, propulsor,..)

deps I removed (by looking at their usage in <dependencies>, like this:
https://github.com/search?q=org%3ACommonjava+NOT+is%3Afork+NOT+is%3Aarchived+NOT+repo%3ACommonJava%2Findy+NOT+repo%3ACommonJava%2Fpropulsor+%3CartifactId%3Eslf4j-ext%3C%2FartifactId%3E&type=code

slf4j-ext - not used anywhere
slf4j-jdk14 - not used anywhere
slf4j-simple - not used anywhere
jul-to-slf4j - not used anywhere
args4j - not used anywhere
jaxrs-api - not used anywhere
jaxrs-cdi - not used anywhere
resteasy-cdi - not used anywhere
resteasy-jaxrs - not used anywhere
async-http-servlet-3.0 - not used anywhere
jboss-servlet-api_3.0_spec - galley declares its own version
javax.inject - not used anywhere
weld-se-shaded - galley and weld declare their own version
weld-se-core - not used anywhere
jboss-as-arquillian-container-managed - not used anywhere
jboss-javaee-6.0 - not used anywhere

@jdcasey
jdcasey merged commit bfa91e8 into Commonjava:master Sep 10, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants