build(deps): 防止 Netty 传输层与 HTTP/3 模块携带 BouncyCastle 导致打包异常
Some checks failed
Build and Deploy / deploy (push) Has been cancelled

由于 Netty 4.2.x 默认将 `bcprov-jdk18on` 作为传递依赖引入,在 Spring Boot 可执行 JAR 的嵌套类加载环境下会触发 JCE 签名验证失败。为 `netty-handler` 和 `netty-codec-http3` 统一声明排除规则,确保依赖树洁净。
This commit is contained in:
2026-05-26 02:22:25 +08:00
parent b6ab8f2b9d
commit 8fb11fa6ca

View File

@@ -88,6 +88,29 @@
<type>pom</type> <type>pom</type>
<scope>import</scope> <scope>import</scope>
</dependency> </dependency>
<!-- 排除 Netty 4.2.x 引入的 BouncyCastle避免 Spring Boot 嵌套 JAR 导致 JCE 签名校验失败 -->
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-handler</artifactId>
<version>${netty.version}</version>
<exclusions>
<exclusion>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk18on</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-http3</artifactId>
<version>${netty.version}</version>
<exclusions>
<exclusion>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk18on</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency> <dependency>
<groupId>org.springframework.boot</groupId> <groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-dependencies</artifactId> <artifactId>spring-boot-dependencies</artifactId>