You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-issues@jackrabbit.apache.org by "Julian Reschke (Jira)" <ji...@apache.org> on 2023/06/19 17:44:00 UTC
[jira] [Comment Edited] (OAK-10307) oak-shaded-guava leaks original guava as transitive dependency
[ https://issues.apache.org/jira/browse/OAK-10307?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17733315#comment-17733315 ]
Julian Reschke edited comment on OAK-10307 at 6/19/23 5:43 PM:
---------------------------------------------------------------
trunk: [7a0b459dc4|https://github.com/apache/jackrabbit-oak/commit/7a0b459dc46ef649d45bad003c120df67e337e5a] [91d10c9f71|https://github.com/apache/jackrabbit-oak/commit/91d10c9f7133d3fee5b9a8738c651d4620a2a361] [8dc7950337|https://github.com/apache/jackrabbit-oak/commit/8dc79503376890a0d9ed5e7a602a6e380e2a0113] [a02cbb9d0b|https://github.com/apache/jackrabbit-oak/commit/a02cbb9d0b221260d240f2f81571b1d10db60502] [1d6581bb10|https://github.com/apache/jackrabbit-oak/commit/1d6581bb10b5d23f639b52da57eb41013b000d2f]
was (Author: reschke):
trunk: [91d10c9f71|https://github.com/apache/jackrabbit-oak/commit/91d10c9f7133d3fee5b9a8738c651d4620a2a361] [8dc7950337|https://github.com/apache/jackrabbit-oak/commit/8dc79503376890a0d9ed5e7a602a6e380e2a0113] [a02cbb9d0b|https://github.com/apache/jackrabbit-oak/commit/a02cbb9d0b221260d240f2f81571b1d10db60502] [1d6581bb10|https://github.com/apache/jackrabbit-oak/commit/1d6581bb10b5d23f639b52da57eb41013b000d2f]
> oak-shaded-guava leaks original guava as transitive dependency
> --------------------------------------------------------------
>
> Key: OAK-10307
> URL: https://issues.apache.org/jira/browse/OAK-10307
> Project: Jackrabbit Oak
> Issue Type: Technical task
> Components: shaded-guava
> Reporter: Marcel Reutegger
> Assignee: Julian Reschke
> Priority: Major
> Fix For: 1.54.0
>
>
> oak-shaded-guava currently declares a compile dependency on original guava. This means modules using oak-shaded-guava will transitively get original guava and mistakingly use classes from there.
> {noformat}
> $ mvn dependency:tree -pl :oak-shaded-guava
> [INFO] Scanning for projects...
> [INFO]
> [INFO] ---------------< org.apache.jackrabbit:oak-shaded-guava >---------------
> [INFO] Building Jackrabbit Guava Wrapper 1.53-SNAPSHOT
> [INFO] from pom.xml
> [INFO] -------------------------------[ bundle ]-------------------------------
> [INFO]
> [INFO] --- dependency:3.4.0:tree (default-cli) @ oak-shaded-guava ---
> [INFO] org.apache.jackrabbit:oak-shaded-guava:bundle:1.53-SNAPSHOT
> [INFO] +- com.google.guava:guava:jar:32.0.1-jre:compile
> [INFO] | +- com.google.guava:failureaccess:jar:1.0.1:compile
> [INFO] | +- com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava:compile
> [INFO] | +- com.google.code.findbugs:jsr305:jar:3.0.2:compile
> [INFO] | +- org.checkerframework:checker-qual:jar:3.33.0:compile
> [INFO] | +- com.google.errorprone:error_prone_annotations:jar:2.18.0:compile
> [INFO] | \- com.google.j2objc:j2objc-annotations:jar:2.8:compile
> [INFO] +- org.osgi:org.osgi.annotation:jar:6.0.0:provided
> [INFO] \- org.jetbrains:annotations:jar:18.0.0:provided
> {noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)