[jira] [Commented] (MNG-7068) Active dependency management for Google Guice/Guava

["Hudson (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/MNG-7068?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17279053#comment-17279053 ] 

Hudson commented on MNG-7068:
-----------------------------

Build succeeded in Jenkins: Maven » Maven TLP » maven » master #98

See https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven/job/master/98/

> Active dependency management for Google Guice/Guava
> ---------------------------------------------------
>
>                 Key: MNG-7068
>                 URL: https://issues.apache.org/jira/browse/MNG-7068
>             Project: Maven
>          Issue Type: Improvement
>          Components: Dependencies
>    Affects Versions: 3.6.3
>            Reporter: Boris Unckel
>            Assignee: Michael Osipov
>            Priority: Major
>             Fix For: 4.0.0, 4.0.0-alpha-1
>
>
> The current pom includes com.google.inject:guice with the default transitive dependency of com.google.guava:guava. Guava has declared several dependencies, which are not needed at runtime. Only com.google.guava:failureaccess is needed.
> The proposal is first to add com.google.guava:guava to the excludes of guice. Second guava and failureaccess shall be added as direct dependencies.
> This has two advantages: Downstream projects only get the needed dependencies and the version of guava can be independently set.
> The runtime dependencies for Guava are explained in the last section of the  [README|https://github.com/google/guava/tree/v30.1] "Important Warnings" #3



--
This message was sent by Atlassian Jira
(v8.3.4#803005)