Martin Grigorov created WICKET-6625:
---------------------------------------
Summary: Use Maven range version for dependencies
Key: WICKET-6625
URL: https://issues.apache.org/jira/browse/WICKET-6625
Project: Wicket
Issue Type: Task
Components: wicket, wicket-cdi, wicket-extensions, wicket-guice,
wicket-http2, wicket-spring
Affects Versions: 8.2.0, 7.11.0
Reporter: Martin Grigorov
Assignee: Martin Grigorov
We should use Maven range version for 3rd party dependencies, e.g.
[2.0.0,3.0.0).
This way Wicket will automatically use the latest released version of the
dependency (without major upgrades).
This will help to avoid using vulnerable dependencies in Wicket releases.
The applications can always use a specific version of any dependency, i.e.
upgrade or downgrade it, if needed.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
