httpclient5 / httpcore5 version mismatch in Dropwizard 5.0.1 causes NoClassDefFoundError

Hello,

we are using Dropwizard 5.0.1 and are encountering a NoClassDefFoundError when executing a client request:

java.lang.NoClassDefFoundError: org/apache/hc/core5/io/SocketSupport
    at org.apache.hc.client5.http.impl.io.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:203)
    at org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:497)

The exception occurs when invoking a JAX-RS client request:

WebTarget adminTarget = EXT.createAdminTarget();
Response response =
    adminTarget.path("/path").request().buildGet().invoke();

The failure is triggered during the invoke() call.

After investigating, we noticed a version mismatch between httpclient5 and httpcore5:

• httpclient5: 5.5.2 (depends on httpcore5: 5.3.6)
• httpcore5 provided via dropwizard-dependencies in Dropwizard 5.0.1: 5.4

Since SocketSupport is not present in the expected location at runtime, this appears to be caused by the version misalignment.

It looks like this may be addressed by the following Renovate PR: https://github.com/dropwizard/dropwizard/pull/11057

I wanted to raise awareness in case others encounter the same issue and to help ensure it can be addressed promptly.

Thanks!