[MSHOP-72] Conflicting libraries in the bundle Created: 19/Apr/13  Updated: 15/Jan/14  Resolved: 15/Jan/14

Status: Closed
Project: Magnolia Shop (closed)
Component/s: None
Affects Version/s: 1.1.1
Fix Version/s: 1.1.5, 2.0

Type: Bug Priority: Major
Reporter: Jan Haderka Assignee: Jaroslav Simak
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Template:
Acceptance criteria:
Empty
Task DoD:
[ ]* Doc/release notes changes? Comment present?
[ ]* Downstream builds green?
[ ]* Solution information and context easily available?
[ ]* Tests
[ ]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Bug DoR:
[ ]* Steps to reproduce, expected, and actual results filled
[ ]* Affected version filled
Date of First Response:

 Description   

Bundle brings number of resources that exist in different version in Magnolia itself. They should be either of the same version or excluded.

  • commons-beanutils-1.7.0 (instead of 1.8.3)
  • commons-collections-3.1 (instead of 3.2.1)
  • commons-lang-2.1 (instad of 2.4)
  • magnolia-module-migration-1.2.2-beta1
  • magnolia-module-groovy-1.2.3
  • httpclient-4.1.2 (instead of 4.2.1)
  • httpcore-4.1.2 (instead of 4.2.1)


 Comments   
Comment by Jan Haderka [ 29/Apr/13 ]

also see another list of conflicting libs at http://forum.magnolia-cms.com/forum/thread.html?threadId=78a6eb53-10f4-4592-a1f3-efc62f9e4fb8&page=1

Comment by Jaroslav Simak [ 04/Oct/13 ]

Fixed on master.

Need port to 1.1.x branch.

Comment by Mikaël Geljić [ 07/Nov/13 ]

I have doubts also on the following:

  • asm: shop expects 3.3 provided, but jackrabbit-ocm (dep is in shop too) brings 1.5.3
  • cglib: shop expects 2.2 provided, but jackrabbit-ocm brings 2.1_3

I would think either we need to exclude the oldies from jackrabbit-ocm dep, either we need to fix the provided versions.

Comment by Jaroslav Simak [ 29/Nov/13 ]

from mvn dependency:tree -Dverbose=true

[INFO] |  \- (cglib:cglib:jar:2.1_3:compile - omitted for conflict with 2.2)

Seems fine.

Other than that, if you extract bundle, there should be only libraries needed by shop (jackrabbit ocm, ocm module, shop).

Comment by Christoph Meier [ 13/Jan/14 ]

QA-Note: The pom contains a dependency for magnolia-module-data 2.2-SNAPSHOT , which doesn't exist anymore. Please set the appropriate version.

Generated at Mon Feb 12 07:09:01 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.