[KYUUBI #6294] Simplify Netty and gRPC dependency management

[PorterZhang2021]

🔍 Description

Issue References 🔗

This pull request fixes #6294

Describe Your Solution 🔧

The netty jars come from grpc-netty, arrow-memory-netty, use netty-bom and grpc-bom to simplify the dependency management.

Run ./build/dependency.sh --replace

Types of changes 🔖

• Bugfix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)

Test Plan 🧪

Behavior Without This Pull Request ⚰️

Behavior With This Pull Request 🎉

Related Unit Tests

---

Checklist 📝

• This patch was not authored or co-authored using Generative Tooling

Be nice. Be informative.

[PorterZhang2021]

Hello @pan3793, Mr.Pan, I have attempted to remove the content of io.nettyand have also tried packaging and testing again, but I have not actually conducted startup testing.
For other unused jars, after using mvn dependency: analyze, other pom.xml showed unused declared dependencies found, as mentioned below:

Because I am not sure about the impact of deletion and do not know how to test the impact, I did not delete it
If you have more detailed guidance, I may give it a try, thank you.

[pan3793]

actually, my vision is to extend this exclusion list instead of declaring everything explicitly. for example, netty-codec-socks does not used by Kyuubi, and we should add it into exclusion list

[PorterZhang2021]

emmm, I know, I will try it again. Thanks

[pan3793]

I just noticed I was wrong on this assumption, apologize for this comment.

The netty jars come from grpc-netty, arrow-memory-netty, use netty-bom and grpc-bom to simplify the dependency management.

[PorterZhang2021]

ok, thanks.

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 58.45%. Comparing base (9086cfe) to head (3270301).
Report is 5 commits behind head on master.

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #6310      +/-   ##
============================================
- Coverage     58.47%   58.45%   -0.02%     
  Complexity       24       24              
============================================
  Files           652      653       +1     
  Lines         39645    39775     +130     
  Branches       5454     5473      +19     
============================================
+ Hits          23181    23252      +71     
- Misses        13984    14034      +50     
- Partials       2480     2489       +9     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[PorterZhang2021]

Hello, Mr.Pan @pan3793 , I try it again, and exclusion everyone, I removed all dependencies and tried to start it without any issues.
But for other related dependencies, I don't quite understand how to remove them. I did the following:

1. Use mvn dependency: analyze (using kyuubi_ha as an example)
   
2. Use mvn dependency: tree
   
3. open kyuubi_ha -> pom.xml, then delete io.netty:netty-transport-native-epoll:jar:linux-aarch_64, io.netty:netty-transport-native-epoll:jar:linux-x86_64
4. then repackages
   I'm not sure if my example is accurate or not. If it's not, can you provide me with some relevant reference materials? I've searched a lot online but I still don't quite understand this aspect.

[pan3793]

seems a little bit more complex than I originally thought, I will take a look.

[pan3793]

Merged to master/1.9.1