You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-issues@jackrabbit.apache.org by "Julian Reschke (Jira)" <ji...@apache.org> on 2023/01/04 19:26:00 UTC

[jira] [Comment Edited] (OAK-9994) avoid leaking out transitive dependencies to Guava

    [ https://issues.apache.org/jira/browse/OAK-9994?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17653940#comment-17653940 ] 

Julian Reschke edited comment on OAK-9994 at 1/4/23 7:25 PM:
-------------------------------------------------------------

trunk: (1.46.0) [6c0fab7946|https://github.com/apache/jackrabbit-oak/commit/6c0fab7946d4b3668db51e31e084c25256359e03]
1.22: [a826d2addb|https://github.com/apache/jackrabbit-oak/commit/a826d2addb1ebef09c98fbc8b7c41daef9cdc8a5]



was (Author: reschke):
trunk: (1.46.0) [6c0fab7946|https://github.com/apache/jackrabbit-oak/commit/6c0fab7946d4b3668db51e31e084c25256359e03]

> avoid leaking out transitive dependencies to Guava
> --------------------------------------------------
>
>                 Key: OAK-9994
>                 URL: https://issues.apache.org/jira/browse/OAK-9994
>             Project: Jackrabbit Oak
>          Issue Type: Technical task
>            Reporter: Julian Reschke
>            Assignee: Julian Reschke
>            Priority: Major
>             Fix For: 1.46.0, 1.22.14
>
>
> With Guava being a compile-scope dependency, we currently leak out a dependency to Guava 15 to any user of Oak. In particular, downstream projects might use Guava without having explicitly declared a dependency, and will get a narrow version scope (that is, for now 15).
> If we change the scope to "provided", downstream users who do use Guava will have to declare their dependency explicitly.
> Like that:
> {noformat}
>    <build>
>     <plugins>
>       <plugin>
>         <groupId>org.apache.felix</groupId>
>         <artifactId>maven-bundle-plugin</artifactId>
>         <configuration>
>           <instructions>
>             <Import-Package>
>               com.google.common.*;version="[15.0,21)",
>               *
>             </Import-Package>
>           </instructions>
>         </configuration>
>       </plugin>
>     </plugins>
>   </build>
> {noformat}
> The current recommended version range can be found in oak/oak-parent.xml as "guava.osgi.import".



--
This message was sent by Atlassian Jira
(v8.20.10#820010)