[Task] Establish dependency governance rules for shenyu-client-java

[Aias00]

Description

Background

The client repository must preserve JDK 8 compatibility while still being verified on newer JDKs. Dependency upgrades can accidentally break JDK 8 users or re-couple the client repo to the main repo upgrade path.

We need dependency governance rules for shenyu-client-java.

Tasks

• Inventory runtime dependencies and their minimum JDK requirements.
• Inventory test/tooling dependencies and their minimum JDK requirements.
• Identify dependencies that are risky for JDK 8 compatibility.
• Define rules for runtime dependency upgrades.
• Define rules for test/tooling dependency upgrades.
• Define required verification before dependency upgrade PRs can merge.
• Document known exceptions such as JaCoCo and Byte Buddy.
• Add dependency upgrade checklist to contributor docs.

Expected Output

A dependency governance document.

Acceptance Criteria

• Runtime dependencies and test/tooling dependencies are treated separately.
• The document explicitly protects JDK 8 runtime compatibility.
• The document defines required CI/local verification for dependency upgrade PRs.

Task List

No response

[github-actions]

👋 Hello @Aias00

A new issue has been opened by @Aias00:

• Title: [Task] Establish dependency governance rules for shenyu-client-java
• Link: [Task] Establish dependency governance rules for shenyu-client-java #6372

Please review when you have time. Thank you! 🙏