[TASKMGMT-66] jackrabbit-ocm dragging in commons-beanutils/commons-collections Created: 30/Jan/23  Updated: 18/Apr/23  Resolved: 04/Apr/23

Status: Closed
Project: Task Management
Component/s: None
Affects Version/s: None
Fix Version/s: 2.0.0, 1.2.11

Type: Task Priority: Neutral
Reporter: Rishab Dhar Assignee: Miguel Martinez
Resolution: Fixed Votes: 0
Labels: devx
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Cloners
is cloned by TASKMGMT-67 (Port to Master) jackrabbit-ocm dragg... Closed
relation
is related to BUILD-1039 Dismiss CVE mismatch about info.magno... Closed
Template:
Acceptance criteria:
Empty
Task DoR:
Empty
Epic Link: get rid of commons-beanutils1
Story Points: 2
Team: AuthorX
Work Started:
Approved:
Yes

 Description   

https://github.com/apache/jackrabbit-ocm/blob/jackrabbit-ocm-2.0.0/pom.xml#L51

Discovery notes

  • We cannot update to beanutils2 in tasks-management as jackrabbit-ocm doesn't work with that version (beanutils2 moves all classes to a new package space...)
  • this leaves us with the options of fixing jackrabbit-ocm itself or getting rid of it entirely
  • The 2nd option would be preferable IMO but it will break existing code: jackrabbit-ocm exposes mapping annotations which our customers potentially use. We definitely use them ourselves in the workflow module. Also it would mean re-implementing a lot of functionality from jackrabbit-ocm ourselves.
  • The 1st option is a bit awkward as we either try to revive or fork a project which the community lost interest in since years committing ourselves to maintaining it going forward.

Generated at Mon Feb 12 11:02:45 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.