Hi, I recently tried a PR to the servicemix project to update a specific wrapped bundle, but I was told that servicemix is not maintaining these bundles anymore (https://github.com/apache/servicemix-bundles/pull/307#issuecomment-3921797507).
In Sling we have a series of servicemix dependencies, for example: org.apache.servicemix.bundles : org.apache.servicemix.bundles.hamcrest org.apache.servicemix.bundles : org.apache.servicemix.bundles.rhino org.apache.servicemix.bundles : org.apache.servicemix.bundles.kafka-clients org.apache.servicemix.bundles : org.apache.servicemix.bundles.thymeleaf org.apache.servicemix.bundles : org.apache.servicemix.bundles.ognl org.apache.servicemix.bundles : org.apache.servicemix.bundles.jasypt org.apache.servicemix.bundles : org.apache.servicemix.bundles.okio org.apache.servicemix.bundles : org.apache.servicemix.bundles.okhttp org.apache.servicemix.specs : org.apache.servicemix.specs.jaxp-api-1.4 org.apache.servicemix.specs : org.apache.servicemix.specs.activation-api-2.0.1 we potentially can avoid a few of those bundles (e.g. replace okhttp with the apache http client), but at least for the specs this is not possible. The only option I see is to maintain these bundles on our own (we can probably use the exact same approach servicemix used). WDYT? Jörg -- https://cqdump.joerghoh.de
