google / cel-java

Fast, portable, non-Turing complete expression evaluation with gradual typing (Java)
https://cel.dev
Apache License 2.0
81 stars 15 forks source link

[BUG] Compile only Auto value processor library is included as a dependency #313

Closed josalmi-sc closed 4 weeks ago

josalmi-sc commented 4 weeks ago

Describe the bug

Cel includes Auto value processor as a dependency in the pom.xml:

<dependency>
  <groupId>com.google.auto.value</groupId>
  <artifactId>auto-value</artifactId>
  <version>1.10.4</version>
</dependency>

This would be some big of a problem but Auto Value Processor itself is a shaded JAR and includes Kotlin Runtime among other things.

To Reproduce Check which components this affects:

Expected behavior Compile time only dependencies should not be part of the pom.xml.

Additional context

It will take some time to figure out CLAs etc with my company but I found out that removing this line: https://github.com/google/cel-java/blob/1cd3ab1c2cce72182ebd1b41e96c0c947fe3e1ef/BUILD.bazel#L62 solves the issue at least for locally built pom.xml using the publish.sh script