Please upgrade "org.apache.httpcomponents" % "httpclient" % "4.5.14" is a version from 2022

[melvin-devalk]

Dear maintainers,

In the build.sbt file I see that an almost 3 year old version of Apache HttpClient is used (released Nov 2022).
"org.apache.httpcomponents" % "httpclient" % "4.5.14",

Please upgrade to the regularly maintained Apache Httpclient5 (Last released March 2025).
"org.apache.httpcomponents.client5" % "httpclient5" % "5.5"

Currently all projects that implement the delta-sharing library are forced to rely on a very legacy dependency of Apache HttpClient.

[ywehrli]

It's not only that. I just ran a trivy scan:

Java (jar)
Total: 192 (UNKNOWN: 0, LOW: 16, MEDIUM: 68, HIGH: 89, CRITICAL: 19)