[
https://issues.apache.org/jira/browse/JCRVLT-168?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15933540#comment-15933540
]
Tobias Bocanegra commented on JCRVLT-168:
-----------------------------------------
- commons-cli-2.0-mahout.jar (cli2 is no longer developed. this version is ok)
- commons-codec-1.10.jar (current)
commons-collections-3.2.1.jar (updated to 3.2.2)
commons-io-2.4.jar (updated to 2.5)
commons-jci-fam-1.0.jar (could be updated to 1.1, but we don't have enough
tests to see if it still works)
commons-logging-1.0.3.jar (via jci)
commons-logging-api-1.1.jar (via jci)
diffutils-1.2.1.jar (ok)
guava-15.0.jar (ok, dependency of jackrabbit 2.14)
httpclient-4.5.2.jar (updated to 4.5.3)
httpcore-4.4.4.jar (indirectly updated to 4.4.6)
httpmime-4.5.2.jar (updated to 4.5.3)
httpclient and -mime are 4.5.3 in jackrabbit right now.
j
> Update dependencies to stable versions
> --------------------------------------
>
> Key: JCRVLT-168
> URL: https://issues.apache.org/jira/browse/JCRVLT-168
> Project: Jackrabbit FileVault
> Issue Type: Bug
> Components: Misc
> Affects Versions: 3.1.30
> Reporter: Tobias Bocanegra
> Assignee: Tobias Bocanegra
> Fix For: 3.1.38
>
>
> here's the list of bundled libraries in vault-cli:
> commons-cli-2.0-mahout.jar
> commons-codec-1.10.jar
> commons-collections-3.2.1.jar
> commons-io-2.4.jar
> commons-jci-fam-1.0.jar
> commons-logging-1.0.3.jar
> commons-logging-api-1.1.jar
> Unless I'm missing something obvious, we should use the latest library
> version that works for the Java version we need to support.
> diffutils-1.2.1.jar
> guava-15.0.jar
> httpclient-4.5.2.jar
> httpcore-4.4.4.jar
> httpmime-4.5.2.jar
> httpclient and -mime are 4.5.3 in jackrabbit right now.
> jackrabbit-api-2.13.7.jar
> jackrabbit-jcr-client-2.13.7.jar
> jackrabbit-jcr-commons-2.13.7.jar
> jackrabbit-jcr2spi-2.13.7.jar
> jackrabbit-spi-2.13.7.jar
> jackrabbit-spi-commons-2.13.7.jar
> jackrabbit-spi2dav-2.13.7.jar
> jackrabbit-webdav-2.13.7.jar
> These should use a stable release. We can't tell people not to use these if
> we do so ourselves without a good reason.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
