[ https://issues.apache.org/jira/browse/GEODE-2506?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15876957#comment-15876957 ]
ASF GitHub Bot commented on GEODE-2506: --------------------------------------- Github user metatype commented on the issue: https://github.com/apache/geode/pull/403 In this case geode-pulse uses commons-beanutils v1.9.3 while geode-core is pulling in commons-beanutils v1.8.3 via shiro-core. The version is different between `lib/*` and `geode-pulse-*.war`. The override resolution strategy gives us another way to control transitive dependencies. In some (rare) instances, we may want to ship a different version than specified in the pom file. Let me know if you think this is getting overly complicated. > Update spring dependencies > -------------------------- > > Key: GEODE-2506 > URL: https://issues.apache.org/jira/browse/GEODE-2506 > Project: Geode > Issue Type: Improvement > Components: build > Reporter: Anthony Baker > > Update Spring dependencies from 4.3.2 to 4.3.6 to pick up latest maintenance > and security fixes. -- This message was sent by Atlassian JIRA (v6.3.15#6346)