Break: remove retrofit support, remove dependency on okhttp
Retrofit does not load on jre14+ Retrofit has known security vulnerabilities Retrofit cannot be upgraded without breaking conjure
Before this PR
retrofit and okhttp on the runtime classpath despite not being used in the majority of cases.
After this PR
==COMMIT_MSG== Break: remove retrofit support, remove dependency on okhttp ==COMMIT_MSG==
Possible downsides?
Big break, but we built dialogue to replace okhttp, retrofit, and feign. Consumers may need to add a dependency on the conjure okhttp-clients project and migrate retrofit clients to dialogue.
I'm not sure I like the dependency inversion from jaxrs depends on okhttp to okhttp depends on jaxrs. Might be better to add a new legacy-clients jar with the classes that are migrated out of okhttp-clients.
This PR has been automatically marked as stale because it has not been touched in the last 14 days. If you'd like to keep it open, please leave a comment or add the 'long-lived' label, otherwise it'll be closed in 7 days.
I've split out the okhttp decoupling component here: #1955
This PR has been automatically marked as stale because it has not been touched in the last 14 days. If you'd like to keep it open, please leave a comment or add the 'long-lived' label, otherwise it'll be closed in 7 days.
👍
Failed to load project - please reach out to #help-devtools or check Aries (stack: 'devtools - prod', service: 'prod - autorelease-bot') to debug