Quarkus 3.7.4 java.lang.ClassNotFoundException when running devsevices with gradle about quarkus

[geoand]

According to https://mvnrepository.com/artifact/org.testcontainers/testcontainers/1.19.6 testcotnainers still depends on 1.24 of commons-compress.

[aloubyansky]

Ok, I see it's an optional dependency commons-compress 1.26, so yes, if we want 1.26 we should add commons-codec as a dependency.

[quarkus-bot]

/cc @glefloch, @quarkusio/devtools

[gsmet]

Not sure what's going on but it seems related to us upgrading Commons Compress (because of a CVE so we don't want to go back) and testcontainers/testcontainers-java#8169 .

Could you prepare a small project reproducing the issue? We probably need to experiment to try to find a workaround.

Thanks!

[Malandril]

Simply creating a project with the quarkus cli is enough to reproduce

quarkus create app --gradle-kotlin-dsl -x 'jdbc-mariadb,hibernate-orm-panache' -P 3.7.4 project-name

I created a project as such here https://github.com/Malandril/quarkus-class-not-found

Then running ./gradlew quarkusDev or quarkus dev by using the quarkus cli produces the error

[geoand]

The odd thing is that the error does not occur in a Maven project...

[geoand]

The current workaround is to include

implementation("commons-codec:commons-codec")

@aloubyansky any idea why we have this difference between Gradle and Maven?

[gsmet]

I was wondering if maybe the Testcontainers update would fix it but didn't have the time to check yet.

[geoand]

I'll give it a shot

[geoand]

Bad news: testcontainers/testcontainers-java#8338 (comment)

[gsmet]

I wonder if we should add commons-codec to the deployment classpath for the time being?

[geoand]

Unless @aloubyansky has another idea, I think we should

[aloubyansky]

I'm not sure what has commons-codec as a dependency so far.

[gsmet]

I created a PR to fix it. It should be part of tomorrow's release.

Thanks a lot for the very detailed report!