jdom 1.0 has invalid dependency: xerces-2.6.0
---------------------------------------------
Key: MNG-1813
URL: http://jira.codehaus.org/browse/MNG-1813
Project: Maven 2
Type: Bug
Components: Artifacts and Repositories
Reporter: Steve Loughran
I know dependency logic is nominally the responsibility of the providers, but
the sheer unreliability of so many providers destroys the entire value of
transitive dependencies.
Here we have jdom1.0, who have a particularly bad set, with 'not sure of the
version' comments on one, and a dependency on a version of Xerces that doesnt
exist. After 2.4.0, you need to depend on xerces-impl, not xerces. This pom was
never tested.
<dependencies>
<dependency>
<groupId>xerces</groupId>
<artifactId>xerces</artifactId>
<version>2.6.0</version>
<optional>true</optional>
</dependency>
<dependency>
<groupId>xml-apis</groupId>
<artifactId>xml-apis</artifactId>
<version>2.0.0</version> <!-- not sure of the version -->
<optional>true</optional>
</dependency>
<!-- should be replaced jaxen-jdom provided with jdom -->
<dependency>
<groupId>jaxen</groupId>
<artifactId>jaxen</artifactId>
<version>1.0-FCS</version>
<optional>true</optional>
</dependency>
<dependency>
<groupId>saxpath</groupId>
<artifactId>saxpath</artifactId>
<version>1.0-FCS</version>
<optional>true</optional>
</dependency>
<!-- should be replaced by xalan.jar from jdom, their version was 2.5.D1 -->
<dependency>
<groupId>xalan</groupId>
<artifactId>xalan</artifactId>
<version>2.5.0</version>
<optional>true</optional>
</dependency>
</dependencies>
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
