EOL of okhttp 3.14.1

[octopus88888]

Any plan to upgrade okhttp to the latest version as EOL of okhttp was 2021-12-31?

[testforstephen]

Java extension doesn't use the okhttp library, can you pls provide more information about this issue?

[octopus88888]

We got the transitive dependency from BlackDuck as below:
resources/app/plugins/redhat.java/extension/server/plugins/org.eclipse.m2e.maven.runtime_3.9.100.20230329-2139.jar/jars/okhttp-3.14.1.jar/okhttp3/

[fbricon]

The upstream m2e plugin depends on the archived aether-connector-okhttp, which brings in that old okhttp dependency.

We first need to make m2e drop aether-connector-okhttp, then jdt.ls and vscode-java will simply stop bringing okhttp in.

[fbricon]

m2e no longer embed OKHttp