[
https://issues.apache.org/jira/browse/WICKET-6625?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16730726#comment-16730726
]
Martin Grigorov commented on WICKET-6625:
-----------------------------------------
This approach has big downside - the build is too slow now, because Maven tries
to resolve the latest dependency for each module build.
E.g. with Jetty version specified as ` <jetty.version>[9.4.0,
10.0.0)</jetty.version>` I can see many of those in the build of each
sub-module :
{code:java}
ups/all-repos/org/eclipse/jetty/jetty-xml/9.4.9-SNAPSHOT/jetty-xml-9.4.9-20180321.160302-40.pom
[INFO] Downloading from cxp-external-repos:
https://nexus.commerce-experts.com/content/groups/external-repos/org/eclipse/jetty/jetty-xml/9.4.9-SNAPSHOT/jetty-xml-9.4.9-20180321.160302-40.pom
[INFO] Downloading from apache.snapshots:
https://repository.apache.org/snapshots/org/eclipse/jetty/jetty-xml/9.4.9-SNAPSHOT/jetty-xml-9.4.9-20180321.160302-40.pom
[INFO] Downloading from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-xml/9.4.9-SNAPSHOT/jetty-xml-9.4.9-20180321.160302-40.pom
[INFO] Downloaded from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-xml/9.4.9-SNAPSHOT/jetty-xml-9.4.9-20180321.160302-40.pom
(1.9 kB at 3.4 kB/s)
[INFO] Downloading from cxp-all-repos:
https://nexus.commerce-experts.com/content/groups/all-repos/org/eclipse/jetty/jetty-servlet/9.4.9-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-servlet/9.4.9-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from apache.snapshots:
https://repository.apache.org/snapshots/org/eclipse/jetty/jetty-servlet/9.4.9-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from cxp-external-repos:
https://nexus.commerce-experts.com/content/groups/external-repos/org/eclipse/jetty/jetty-servlet/9.4.9-SNAPSHOT/maven-metadata.xml
[INFO] Downloaded from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-servlet/9.4.9-SNAPSHOT/maven-metadata.xml
(1.4 kB at 2.4 kB/s)
[INFO] Downloading from cxp-all-repos:
https://nexus.commerce-experts.com/content/groups/all-repos/org/eclipse/jetty/jetty-servlet/9.4.9-SNAPSHOT/jetty-servlet-9.4.9-20180321.160336-40.pom
[INFO] Downloading from cxp-external-repos:
https://nexus.commerce-experts.com/content/groups/external-repos/org/eclipse/jetty/jetty-servlet/9.4.9-SNAPSHOT/jetty-servlet-9.4.9-20180321.160336-40.pom
[INFO] Downloading from apache.snapshots:
https://repository.apache.org/snapshots/org/eclipse/jetty/jetty-servlet/9.4.9-SNAPSHOT/jetty-servlet-9.4.9-20180321.160336-40.pom
[INFO] Downloading from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-servlet/9.4.9-SNAPSHOT/jetty-servlet-9.4.9-20180321.160336-40.pom
[INFO] Downloaded from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-servlet/9.4.9-SNAPSHOT/jetty-servlet-9.4.9-20180321.160336-40.pom
(2.1 kB at 3.7 kB/s)
[INFO] Downloading from cxp-all-repos:
https://nexus.commerce-experts.com/content/groups/all-repos/org/eclipse/jetty/jetty-security/9.4.9-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from cxp-external-repos:
https://nexus.commerce-experts.com/content/groups/external-repos/org/eclipse/jetty/jetty-security/9.4.9-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-security/9.4.9-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from apache.snapshots:
https://repository.apache.org/snapshots/org/eclipse/jetty/jetty-security/9.4.9-SNAPSHOT/maven-metadata.xml
[INFO] Downloaded from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-security/9.4.9-SNAPSHOT/maven-metadata.xml
(1.2 kB at 2.1 kB/s)
[INFO] Downloading from cxp-all-repos:
https://nexus.commerce-experts.com/content/groups/all-repos/org/eclipse/jetty/jetty-security/9.4.9-SNAPSHOT/jetty-security-9.4.9-20180321.160330-40.pom
[INFO] Downloading from cxp-external-repos:
https://nexus.commerce-experts.com/content/groups/external-repos/org/eclipse/jetty/jetty-security/9.4.9-SNAPSHOT/jetty-security-9.4.9-20180321.160330-40.pom
[INFO] Downloading from apache.snapshots:
https://repository.apache.org/snapshots/org/eclipse/jetty/jetty-security/9.4.9-SNAPSHOT/jetty-security-9.4.9-20180321.160330-40.pom
[INFO] Downloading from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-security/9.4.9-SNAPSHOT/jetty-security-9.4.9-20180321.160330-40.pom
[INFO] Downloaded from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-security/9.4.9-SNAPSHOT/jetty-security-9.4.9-20180321.160330-40.pom
(2.0 kB at 3.5 kB/s)
[INFO] Downloading from cxp-all-repos:
https://nexus.commerce-experts.com/content/groups/all-repos/org/eclipse/jetty/jetty-webapp/9.4.10-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-webapp/9.4.10-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from cxp-external-repos:
https://nexus.commerce-experts.com/content/groups/external-repos/org/eclipse/jetty/jetty-webapp/9.4.10-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from apache.snapshots:
https://repository.apache.org/snapshots/org/eclipse/jetty/jetty-webapp/9.4.10-SNAPSHOT/maven-metadata.xml
[INFO] Downloaded from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-webapp/9.4.10-SNAPSHOT/maven-metadata.xml
(1.2 kB at 2.1 kB/s)
[INFO] Downloading from cxp-all-repos:
https://nexus.commerce-experts.com/content/groups/all-repos/org/eclipse/jetty/jetty-webapp/9.4.10-SNAPSHOT/jetty-webapp-9.4.10-20180503.160432-28.pom
[INFO] Downloading from cxp-external-repos:
https://nexus.commerce-experts.com/content/groups/external-repos/org/eclipse/jetty/jetty-webapp/9.4.10-SNAPSHOT/jetty-webapp-9.4.10-20180503.160432-28.pom
[INFO] Downloading from apache.snapshots:
https://repository.apache.org/snapshots/org/eclipse/jetty/jetty-webapp/9.4.10-SNAPSHOT/jetty-webapp-9.4.10-20180503.160432-28.pom
[INFO] Downloading from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-webapp/9.4.10-SNAPSHOT/jetty-webapp-9.4.10-20180503.160432-28.pom
[INFO] Downloaded from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-webapp/9.4.10-SNAPSHOT/jetty-webapp-9.4.10-20180503.160432-28.pom
(3.0 kB at 5.3 kB/s)
[INFO] Downloading from cxp-all-repos:
https://nexus.commerce-experts.com/content/groups/all-repos/org/eclipse/jetty/jetty-xml/9.4.10-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-xml/9.4.10-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from apache.snapshots:
https://repository.apache.org/snapshots/org/eclipse/jetty/jetty-xml/9.4.10-SNAPSHOT/maven-metadata.xml
[INFO] Downloading from cxp-external-repos:
https://nexus.commerce-experts.com/content/groups/external-repos/org/eclipse/jetty/jetty-xml/9.4.10-SNAPSHOT/maven-metadata.xml
[INFO] Downloaded from jetty-snapshots:
http://oss.sonatype.org/content/repositories/jetty-snapshots/org/eclipse/jetty/jetty-xml/9.4.10-SNAPSHOT/maven-metadata.xml
(998 B at 1.8 kB/s)
[INFO] Downloading from cxp-all-repos:
https://nexus.commerce-experts.com/content/groups/all-repos/org/eclipse/jetty/jetty-xml/9.4.10-SNAPSHOT/jetty-xml-9.4.10-20180503.160327-28.pom
[INFO] Downloading from cxp-external-repos:
https://nexus.commerce-experts.com/content/groups/external-repos/org/eclipse/jetty/jetty-xml/9.4.10-SNAPSHOT/jetty-xml-9.4.10-20180503.160327-28.pom
[INFO] Downloading from apache.snapshots:
https://repository.apache.org/snapshots/org/eclipse/jetty/jetty-xml/9.4.10-SNAPSHOT/jetty-xml-9.4.10-20180503.160327-28.pom
{code}
i.e. Maven downloads all available pom.xml files ... And it does the same for
all dependencies which use range versions.
Once done it does what we want but the cost is too high!
> Use Maven range version for dependencies
> ----------------------------------------
>
> Key: WICKET-6625
> URL: https://issues.apache.org/jira/browse/WICKET-6625
> Project: Wicket
> Issue Type: Task
> Components: wicket, wicket-cdi, wicket-extensions, wicket-guice,
> wicket-http2, wicket-spring
> Affects Versions: 7.11.0, 8.2.0
> Reporter: Martin Grigorov
> Assignee: Martin Grigorov
> Priority: Major
>
> We should use Maven range version for 3rd party dependencies, e.g.
> [2.0.0,3.0.0).
> This way Wicket will automatically use the latest released version of the
> dependency (without major upgrades).
> This will help to avoid using vulnerable dependencies in Wicket releases.
> The applications can always use a specific version of any dependency, i.e.
> upgrade or downgrade it, if needed.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
