[MAGNOLIA-2912] Dependency/library updates Created: 29/Oct/09  Updated: 23/Jan/13  Resolved: 15/Mar/10

Status: Closed
Project: Magnolia
Component/s: build, core
Affects Version/s: 4.2
Fix Version/s: 4.3

Type: Improvement Priority: Major
Reporter: Danilo Ghirardelli Assignee: Magnolia International
Resolution: Fixed Votes: 0
Labels: dependecies, maven
Σ Remaining Estimate: Not Specified Remaining Estimate: Not Specified
Σ Time Spent: Not Specified Time Spent: Not Specified
Σ Original Estimate: Not Specified Original Estimate: Not Specified

Issue Links:
dependency
depends upon MAGNOLIA-2628 Update dependency commons-beanutils t... Closed
Sub-Tasks:
Key
Summary
Type
Status
Assignee
MAGNOLIA-3127 Update freemarker to 2.3.16 Sub-task Closed Magnolia International  
MAGNOLIA-3129 Update slf4j to 1.5.11 Sub-task Closed Magnolia International  
MAGNOLIA-3131 Update javax.mail to 1.4.1 Sub-task Closed Magnolia International  
MAGNOLIA-3133 Update commons-codec to 1.4 Sub-task Closed Magnolia International  
Template:
Acceptance criteria:
Empty
Task DoD:
[ ]* Doc/release notes changes? Comment present?
[ ]* Downstream builds green?
[ ]* Solution information and context easily available?
[ ]* Tests
[ ]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Date of First Response:

 Description   

There are a few libraries used by Magnolia that were updated, so I'd like to see them imported. I'm talking about:

  • javax.mail mail 1.4 -> 1.4.2
  • org.slf4j 1.5.6 -> 1.5.8
  • net.sourceforge.openutils openutils-log4j 2.0.4 -> 2.0.5
    Those update just fixed a few bugs should be totally compatible (I'm using them already in my Magnolia project). There are some more libraries that have been update but I don't know if they are totally compatible. I'll list them in a comment to this issue.


 Comments   
Comment by Danilo Ghirardelli [ 29/Oct/09 ]

There are other libraries that have been updated. I have tested a simple Magnolia installation with also these updates and everything seems fine, but it was not an intensive test (and I consider the following updates as optional, I just wanted to list them if you are interested):

  • commons-beanutils 1.7.0 -> 1.8.0
  • commons-codec 1.3 -> 1.4
  • commons-pool 1.4 -> 1.5.3
  • javax.servlet jstl 1.1.2 -> 1.2
  • javax.jcr jcr (there are a version 1.0.1 and a version 2, I haven't tested them)
  • commons-digester 1.8.1 -> 2.0
  • org.devlib.schmidt imageinfo 1.7 -> 1.9
  • net.sf.ehcache ehcache 1.5.0 -> 1.6.2 (but I know this may not be a free upgrade like the others, I haven't tested it).
Comment by Jan Haderka [ 29/Oct/09 ]

Just before we jump into updating all libs, there are other things to consider like MAGNOLIA-2628

Comment by Magnolia International [ 29/Oct/09 ]

Thanks Danilo; some of them are worth updating and (probably) safe. Not all of them though. If you have any particular need for any of these, feel free to insist - and explain what's needed, so we can take calculated risks.

Re: JCR-2.0, we'll go there with Magnolia 5.

Comment by Danilo Ghirardelli [ 29/Oct/09 ]

I split the list in two, the first part (three libs) is the "wanted" one, the other is just a reminder that some library changed (and if they are working well it would be just nice to update).
Althought I have no particular need, the javax mail update solved me a problem in a non-Magnolia project (code seemed to hang in certain cases just after launching the mail send thread), so I wanted to share here. But honestly I didn't find which was the bug in the list that fixed the problem:
http://java.sun.com/products/javamail/CHANGES.txt
If you had an unexplicable mail-related hang maybe you could try the update.

Comment by Magnolia International [ 13/Nov/09 ]

Danilo, so sorry we completely forgot to update this before the RC; I'm looking into it now, but realize that javax.mail 1.4.2 doesn't seem to be on the central maven repo, so maybe we'll wait until it is ?

Comment by Danilo Ghirardelli [ 17/Nov/09 ]

I don't know if it could be posted in the central repo, seems that some of Sun libraries are under a different license:
http://maven.apache.org/guides/mini/guide-coping-with-sun-jars.html

Comment by Magnolia International [ 17/Nov/09 ]

Given that 1.4 and 1.4.1 are there, I suppose they could

Comment by Magnolia International [ 15/Mar/10 ]

Did not update the following:

  • commons-beanutils 1.7.0 -> 1.8.0 (see MAGNOLIA-2628)
  • commons-pool 1.4 -> 1.5.3 (I don't feel safe there)
  • commons-digester 1.8.1 -> 2.0 (I don't feel safe there)
  • javax.servlet jstl 1.1.2 -> 1.2 (can't, we still depend on jsp2.0, jstl 1.2 is jsp 2.1)
  • jcr 2.0
  • org.devlib.schmidt imageinfo 1.7 -> 1.9 (can't find any info on the net)
  • net.sf.ehcache ehcache 1.5.0 -> 1.6.2 (too risky at this moment)

Feel free to open specific requests if there's a compelling reason to update any of these!

Generated at Mon Feb 12 03:41:21 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.