You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@cxf.apache.org by Francesco Chicchiriccò <il...@apache.org> on 2022/09/06 12:53:20 UTC

Do we really need to depend on Xalan?

Hi all,
I am receiving weekly notifications from GitHub [1] about Xalan.

Question: would it be enough to remove [2] from parent/pom.xml? Do we need that at all, being compatibility set for JDK 11?

Regards.

[1] https://github.com/apache/cxf/security/dependabot/11
[2] https://github.com/apache/cxf/blob/main/parent/pom.xml#L1259-L1269

-- 
Francesco Chicchiriccò

Tirasa - Open Source Excellence
http://www.tirasa.net/

Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/

Re: Do we really need to depend on Xalan?

Posted by Francesco Chicchiriccò <il...@apache.org>.

Thanks Colm!

Regards.

On 07/09/22 15:27, Colm O hEigeartaigh wrote:
> Hi Francesco,
>
> I removed Xalan. It causes one system test to fail, but I just ignored it.
>
> Colm.
>
> On Tue, Sep 6, 2022 at 1:53 PM Francesco Chicchiriccò
> <il...@apache.org> wrote:
>> Hi all,
>> I am receiving weekly notifications from GitHub [1] about Xalan.
>>
>> Question: would it be enough to remove [2] from parent/pom.xml? Do we need that at all, being compatibility set for JDK 11?
>>
>> Regards.
>>
>> [1] https://github.com/apache/cxf/security/dependabot/11
>> [2] https://github.com/apache/cxf/blob/main/parent/pom.xml#L1259-L1269

-- 
Francesco Chicchiriccò

Tirasa - Open Source Excellence
http://www.tirasa.net/

Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/

Re: Do we really need to depend on Xalan?

Posted by Colm O hEigeartaigh <co...@apache.org>.

Hi Francesco,

I removed Xalan. It causes one system test to fail, but I just ignored it.

Colm.

On Tue, Sep 6, 2022 at 1:53 PM Francesco Chicchiriccò
<il...@apache.org> wrote:
>
> Hi all,
> I am receiving weekly notifications from GitHub [1] about Xalan.
>
> Question: would it be enough to remove [2] from parent/pom.xml? Do we need that at all, being compatibility set for JDK 11?
>
> Regards.
>
> [1] https://github.com/apache/cxf/security/dependabot/11
> [2] https://github.com/apache/cxf/blob/main/parent/pom.xml#L1259-L1269
>
> --
> Francesco Chicchiriccò
>
> Tirasa - Open Source Excellence
> http://www.tirasa.net/
>
> Member at The Apache Software Foundation
> Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
> http://home.apache.org/~ilgrosso/
>