You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by Kevin Risden <kr...@apache.org> on 2018/09/25 13:16:06 UTC

Apache Knox and dependency handling in pom.xml

Apache Knox has a lot of modules with different dependencies. Over time it
looks like multiple versions of the same dependency has been introduced
(ie: surefire 2.4.2, 2.16, 2.6). Some of the dependencies are listed
explicitly in the module pom.xml where as others are listed at the top
level pom.xml.

Any concern if I were to open a JIRA to consolidate all dependency and
plugin dependencies in the top level pom? We can use properties to list all
the versions of dependencies in one place.

Kevin Risden

Re: Apache Knox and dependency handling in pom.xml

Posted by Kevin Risden <kr...@apache.org>.

Thanks Sandeep.

Created https://issues.apache.org/jira/browse/KNOX-1448

Kevin Risden


On Tue, Sep 25, 2018 at 9:23 AM Sandeep Moré <mo...@gmail.com> wrote:

> Hello Kevin,
>
> Good idea, I would say using properties to list all the versions would be a
> good start, there are some dependencies that were included in the
> sub-modules for the unit tests to play well (I think kerby is an example)
> so, consolidating versions might have some unintended consequences, and the
> resulting errors might be difficult to track. Using properties would be
> good so we know in one place all the versions we require.
>
> Thanks !
>
> On Tue, Sep 25, 2018 at 9:16 AM
> Kevin Risden
> <kr...@apache.org> wrote:
>
> > Apache Knox has a lot of modules with different dependencies. Over time
> it
> > looks like multiple versions of the same dependency has been introduced
> > (ie: surefire 2.4.2, 2.16, 2.6). Some of the dependencies are listed
> > explicitly in the module pom.xml where as others are listed at the top
> > level pom.xml.
> >
> > Any concern if I were to open a JIRA to consolidate all dependency and
> > plugin dependencies in the top level pom? We can use properties to list
> all
> > the versions of dependencies in one place.
> >
> > Kevin Risden
> >
>

Re: Apache Knox and dependency handling in pom.xml

Posted by Sandeep Moré <mo...@gmail.com>.

Hello Kevin,

Good idea, I would say using properties to list all the versions would be a
good start, there are some dependencies that were included in the
sub-modules for the unit tests to play well (I think kerby is an example)
so, consolidating versions might have some unintended consequences, and the
resulting errors might be difficult to track. Using properties would be
good so we know in one place all the versions we require.

Thanks !

On Tue, Sep 25, 2018 at 9:16 AM Kevin Risden <kr...@apache.org> wrote:

> Apache Knox has a lot of modules with different dependencies. Over time it
> looks like multiple versions of the same dependency has been introduced
> (ie: surefire 2.4.2, 2.16, 2.6). Some of the dependencies are listed
> explicitly in the module pom.xml where as others are listed at the top
> level pom.xml.
>
> Any concern if I were to open a JIRA to consolidate all dependency and
> plugin dependencies in the top level pom? We can use properties to list all
> the versions of dependencies in one place.
>
> Kevin Risden
>