-
Task
-
Resolution: Fixed
-
Neutral
-
None
-
-
Empty show more show less
-
Empty show more show less
-
2
-
Yes
https://github.com/apache/jackrabbit-ocm/blob/jackrabbit-ocm-2.0.0/pom.xml#L51
Discovery notes
- We cannot update to beanutils2 in tasks-management as jackrabbit-ocm doesn't work with that version (beanutils2 moves all classes to a new package space...)
- this leaves us with the options of fixing jackrabbit-ocm itself or getting rid of it entirely
- The 2nd option would be preferable IMO but it will break existing code: jackrabbit-ocm exposes mapping annotations which our customers potentially use. We definitely use them ourselves in the workflow module. Also it would mean re-implementing a lot of functionality from jackrabbit-ocm ourselves.
- The 1st option is a bit awkward as we either try to revive or fork a project which the community lost interest in since years committing ourselves to maintaining it going forward.
Acceptance criteria
- is cloned by
-
TASKMGMT-67 (Port to Master) jackrabbit-ocm dragging in commons-beanutils/commons-collections
- Closed
- is related to
-
BUILD-1039 Dismiss CVE mismatch about info.magnolia.ocm:jackrabbit-ocm:2.0.1-magnolia
- Closed