[
https://issues.apache.org/jira/browse/WICKET-6625?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Martin Grigorov resolved WICKET-6625.
-------------------------------------
Resolution: Won't Do
> Use Maven range version for dependencies
> ----------------------------------------
>
> Key: WICKET-6625
> URL: https://issues.apache.org/jira/browse/WICKET-6625
> Project: Wicket
> Issue Type: Task
> Components: wicket, wicket-cdi, wicket-extensions, wicket-guice,
> wicket-http2, wicket-spring
> Affects Versions: 7.11.0, 8.2.0
> Reporter: Martin Grigorov
> Assignee: Martin Grigorov
> Priority: Major
>
> We should use Maven range version for 3rd party dependencies, e.g.
> [2.0.0,3.0.0).
> This way Wicket will automatically use the latest released version of the
> dependency (without major upgrades).
> This will help to avoid using vulnerable dependencies in Wicket releases.
> The applications can always use a specific version of any dependency, i.e.
> upgrade or downgrade it, if needed.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
