[
https://issues.apache.org/jira/browse/PDFBOX-1836?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13865333#comment-13865333
]
Thomas Chojecki commented on PDFBOX-1836:
-----------------------------------------
Thanks for that list.
It's a shame what the bouncy castle guys doing each version, so that the lib
can not be updated without code changes. Did you know how maven solve such
dependency problems?
As we (at the company) use pdfbox for signing we are depending on a specific
version and updating bc will break the client and all libs that are build on a
specific bc version.
> Use the latest dependencies
> ---------------------------
>
> Key: PDFBOX-1836
> URL: https://issues.apache.org/jira/browse/PDFBOX-1836
> Project: PDFBox
> Issue Type: Improvement
> Affects Versions: 2.0.0
> Reporter: Tilman Hausherr
> Priority: Minor
> Labels: maven
>
> I suggest to use the latest dependencies for the 2.0 version. Here's the
> output that I get by running the maven versions plugin:
> ------------------------------------------------------------------------
> Building Apache FontBox 2.0.0-SNAPSHOT
> ------------------------------------------------------------------------
> [versions:display-dependency-updates]
> The following dependencies in Dependencies have newer versions:
> commons-logging:commons-logging ....................... 1.1.1 -> 1.1.3
> junit:junit ............................................ 4.8.1 -> 4.11
> ------------------------------------------------------------------------
> Building Apache JempBox 2.0.0-SNAPSHOT
> ------------------------------------------------------------------------
> [versions:display-dependency-updates]
> The following dependencies in Dependencies have newer versions:
> junit:junit ............................................ 4.8.1 -> 4.11
> ------------------------------------------------------------------------
> Building Apache XmpBox 2.0.0-SNAPSHOT
> ------------------------------------------------------------------------
> [versions:display-dependency-updates]
> artifact commons-io:commons-io: checking for updates from central
> The following dependencies in Dependencies have newer versions:
> commons-io:commons-io ..................................... 1.4 -> 2.4
> junit:junit ............................................ 4.8.1 -> 4.11
> ------------------------------------------------------------------------
> Building Apache PDFBox 2.0.0-SNAPSHOT
> ------------------------------------------------------------------------
> [versions:display-dependency-updates]
> artifact com.ibm.icu:icu4j: checking for updates from central
> artifact org.apache.pdfbox:fontbox: checking for updates from apache.snapshots
> artifact org.apache.pdfbox:jempbox: checking for updates from apache.snapshots
> artifact org.bouncycastle:bcmail-jdk15on: checking for updates from central
> artifact org.bouncycastle:bcprov-jdk15on: checking for updates from central
> The following dependencies in Dependencies have newer versions:
> com.ibm.icu:icu4j ........................................ 3.8 -> 52.1
> commons-logging:commons-logging ....................... 1.1.1 -> 1.1.3
> junit:junit ............................................ 4.8.1 -> 4.11
> org.bouncycastle:bcmail-jdk15on ......................... 1.48 -> 1.49
> org.bouncycastle:bcprov-jdk15on ......................... 1.48 -> 1.49
> ------------------------------------------------------------------------
> Building Apache Preflight 2.0.0-SNAPSHOT
> ------------------------------------------------------------------------
> [versions:display-dependency-updates]
> artifact org.apache.pdfbox:pdfbox: checking for updates from apache.snapshots
> artifact org.apache.pdfbox:xmpbox: checking for updates from apache.snapshots
> The following dependencies in Dependencies have newer versions:
> commons-io:commons-io ..................................... 1.4 -> 2.4
> junit:junit ............................................ 4.8.1 -> 4.11
> log4j:log4j ......................................... 1.2.12 -> 1.2.17
> org.bouncycastle:bcmail-jdk15on ......................... 1.48 -> 1.49
> org.bouncycastle:bcprov-jdk15on ......................... 1.48 -> 1.49
> ------------------------------------------------------------------------
> Building Apache Preflight application 2.0.0-SNAPSHOT
> ------------------------------------------------------------------------
> [versions:display-dependency-updates]
> artifact org.apache.pdfbox:preflight: checking for updates from
> apache.snapshots
> The following dependencies in Dependencies have newer versions:
> commons-io:commons-io ..................................... 1.4 -> 2.4
> log4j:log4j ......................................... 1.2.12 -> 1.2.17
> org.bouncycastle:bcmail-jdk15on ......................... 1.48 -> 1.49
> org.bouncycastle:bcprov-jdk15on ......................... 1.48 -> 1.49
> ------------------------------------------------------------------------
> Building Apache PDFBox for Lucene 2.0.0-SNAPSHOT
> ------------------------------------------------------------------------
> [versions:display-dependency-updates]
> artifact org.apache.lucene:lucene-core: checking for updates from central
> artifact org.apache.lucene:lucene-demos: checking for updates from central
> The following dependencies in Dependencies have newer versions:
> org.apache.lucene:lucene-core ......................... 2.4.1 -> 4.4.0
> org.apache.lucene:lucene-demos ........................ 2.4.1 -> 3.0.3
> [versions:display-property-updates]
> The following version property updates are available:
> ${lucene.version} .................................... 2.4.1 -> 3.0.3
>
> ------------------------------------------------------------------------
> Building Apache PDFBox for Ant 2.0.0-SNAPSHOT
> ------------------------------------------------------------------------
> [versions:display-dependency-updates]
> artifact org.apache.ant:ant: checking for updates from central
> The following dependencies in Dependencies have newer versions:
> org.apache.ant:ant .................................... 1.8.1 -> 1.9.2
> I changed all the pom.xml files on my system according to the infos above
> (with the exception of lucene.version, which I set to 3.0.3), and the build
> runs successfully.
> (I already wrote this some time ago and forgot to submit it. bouncycastle is
> now at 1.50. Both 1.49 and 1.50 require a code change in pdfbox)
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
