ptuomola commented on pull request #977: URL: https://github.com/apache/fineract/pull/977#issuecomment-638606885
And there is also the [Spring Boot BOM](https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-dependencies/2.3.0.RELEASE) which is even bigger - but also contains a lot of stuff we don't need / want (e.g. Hibernate). Not sure what is the best way to go here. Naming our own versions of course allows us to use the latest versions (with any fixes / security patches) and control when we upgrade them, as well as being strict about what dependencies are introduced. But at the same time it of course results in a lot of "avoidable" work to keep upgrading specific dependencies. Depending on your perspective, this additional effort to manage the dependencies could be seen as a good thing (providing easy issues for people to start working on) or bad thing (take focus away from improving Fineract itself)... ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
