[ https://issues.apache.org/jira/browse/SLING-10143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17284991#comment-17284991 ]
Eric Norman edited comment on SLING-10143 at 2/16/21, 1:14 AM: --------------------------------------------------------------- FYI: If I recall correctly, the apache jackrabbit project uses the even-odd policy for numbering their release versions. The even numbered releases are the stable releases that are ready for production, while the odd numbered releases are considered unstable and only suitable for testing. So while 2.21.5 is the largest version number of jackrabbit, that is an unstable release and you would probably want to use the the latest (stable) even numbered release 2.20.2 instead. Also, is there any chance you can submit the changes as a github pull request instead of attaching patch files? I find those a bit easier to review. I use a custom maven-version-rules.xml locally to filter out some of the known bad versions that exist in central from consideration in the versions:display-dependency-updates report. I could share that somewhere if anyone is interested. was (Author: enorman): FYI: If I recall correctly, the apache jackrabbit project uses the even-odd policy for numbering their release versions. The even numbered releases are the stable releases that are ready for production, while the odd numbered releases are considered unstable and only suitable for testing. So while 2.21.5 is the largest version number of jackrabbit, that is an unstable release and you would probably want to use the the latest (stable) even numbered release 2.20.2 instead. Also, is there any chance you can submit the changes as a github pull request instead of attaching patch files? I find those a bit easier to review. > bundles referenced in sling starter are out of date > --------------------------------------------------- > > Key: SLING-10143 > URL: https://issues.apache.org/jira/browse/SLING-10143 > Project: Sling > Issue Type: Improvement > Components: Starter > Reporter: Ruben Reusser > Priority: Major > Fix For: Starter 12 > > Attachments: > 0001-updated-3rd-party-dependencies-of-sling-starter.patch, > 0002-javax.activation-dependency-needed-to-be-increased.patch, > 0003-updated-to-latest-sling-bundles-added-missing-felix-.patch > > > Would be nice to make sure the sling starter uses the latest bundles - > according to > {code:java} > mvn versions:display-dependency-updates{code} > the sling starter is a bit out of date with the dependencies > {code:java} > [INFO] The following dependencies in Dependencies have newer versions: > [INFO] com.composum.nodes:composum-nodes-commons ............. 2.1.1 -> > 2.3.0 > [INFO] com.composum.nodes:composum-nodes-console ............. 2.1.1 -> > 2.3.0 > [INFO] com.composum.nodes:composum-nodes-jslibs .............. 2.1.1 -> > 2.3.0 > [INFO] com.composum.nodes:composum-nodes-pckgmgr ............. 2.1.1 -> > 2.3.0 > [INFO] com.composum.nodes:composum-nodes-usermgr ............. 2.1.1 -> > 2.3.0 > [INFO] com.fasterxml.jackson.core:jackson-annotations ...... 2.11.1 -> > 2.12.1 > [INFO] com.fasterxml.jackson.core:jackson-core ............. 2.11.1 -> > 2.12.1 > [INFO] com.fasterxml.jackson.core:jackson-databind ......... 2.11.1 -> > 2.12.1 > [INFO] com.google.guava:guava .............................. 15.0 -> > 30.1-jre > [INFO] com.h2database:h2-mvstore ......................... 1.4.194 -> > 1.4.200 > [INFO] commons-codec:commons-codec ............................. 1.14 -> > 1.15 > [INFO] commons-collections:commons-collections ............ 3.2.2 -> > 20040616 > [INFO] commons-io:commons-io ................................... 2.6 -> > 2.8.0 > [INFO] io.dropwizard.metrics:metrics-core ............. 3.2.6 -> > 4.2.0-beta.1 > [INFO] org.antlr:antlr4-runtime .............................. 4.7.2 -> > 4.9.1 > [INFO] org.apache.commons:commons-lang3 ......................... 3.9 -> > 3.11 > [INFO] org.apache.felix:org.apache.felix.configadmin ....... 1.9.16 -> > 1.9.20 > [INFO] org.apache.felix:org.apache.felix.eventadmin .......... 1.5.0 -> > 1.6.2 > [INFO] org.apache.felix:org.apache.felix.http.jetty ......... 4.0.18 -> > 4.1.4 > [INFO] org.apache.felix:org.apache.felix.metatype ............ 1.2.2 -> > 1.2.4 > [INFO] org.apache.felix:org.apache.felix.scr ............... 2.1.20 -> > 2.1.24 > [INFO] org.apache.felix:org.apache.felix.utils ............. 1.11.2 -> > 1.11.6 > [INFO] org.apache.felix:org.apache.felix.webconsole .......... 4.5.0 -> > 4.6.0 > [INFO] org.apache.geronimo.specs:geronimo-annotation_1.3_spec .... 1.1 -> > 1.3 > [INFO] org.apache.geronimo.specs:geronimo-atinject_1.0_spec ...... 1.1 -> > 1.2 > [INFO] org.apache.httpcomponents:httpclient ................ 4.5.10 -> > 4.5.13 > [INFO] org.apache.httpcomponents:httpclient-osgi ........... 4.5.10 -> > 4.5.13 > [INFO] org.apache.httpcomponents:httpcore-osgi ............. 4.4.12 -> > 4.4.14 > [INFO] org.apache.jackrabbit:jackrabbit-data ............... 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:jackrabbit-jcr-commons ........ 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:jackrabbit-jcr-rmi ............ 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:jackrabbit-spi ................ 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:jackrabbit-spi-commons ........ 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:jackrabbit-webdav ............. 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:oak-api ....................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-authorization-principalbased ... > [INFO] 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-blob ...................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-blob-plugins .............. 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-commons ................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-core ...................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-core-spi .................. 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-jackrabbit-api ............ 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-jcr ....................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-lucene .................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-query-spi ................. 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-security-spi .............. 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-segment-tar ............... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-store-composite ........... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-store-document ............ 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-store-spi ................. 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit.vault:org.apache.jackrabbit.vault ... > [INFO] 3.4.6 -> > 3.4.8 > [INFO] org.apache.pdfbox:fontbox ........................... 2.0.17 -> > 2.0.22 > [INFO] org.apache.pdfbox:pdfbox ............................ 2.0.17 -> > 2.0.22 > [INFO] org.apache.servicemix.bundles:org.apache.servicemix.bundles.ognl ... > [INFO] 3.2.1_1 -> > 3.2.18_1 > [INFO] org.apache.servicemix.bundles:org.apache.servicemix.bundles.rhino ... > [INFO] 1.7.10_1 -> > 1.7.13_1 > [INFO] > org.apache.servicemix.bundles:org.apache.servicemix.bundles.saaj-impl ... > [INFO] 1.3.23_2 -> > 1.5.1_1 > [INFO] > org.apache.servicemix.bundles:org.apache.servicemix.bundles.thymeleaf ... > [INFO] 3.0.11.RELEASE_1 -> > 3.0.12.RELEASE_1 > [INFO] org.apache.servicemix.specs:org.apache.servicemix.specs.saaj-api-1.3 > ... > [INFO] 2.8.0 -> > 2.9.0 > [INFO] org.apache.sling:org.apache.sling.commons.johnzon ..... 1.2.4 -> > 1.2.6 > [INFO] org.apache.sling:org.apache.sling.commons.osgi ........ 2.4.0 -> > 2.4.2 > [INFO] org.apache.sling:org.apache.sling.commons.scheduler ... > [INFO] 2.7.6 -> > 2.7.12 > [INFO] org.apache.sling:org.apache.sling.discovery.oak ..... 1.2.28 -> > 1.2.30 > [INFO] org.apache.sling:org.apache.sling.discovery.support ... 1.0.4 -> > 1.0.6 > [INFO] org.apache.sling:org.apache.sling.installer.core .... 3.11.2 -> > 3.11.4 > [INFO] org.apache.sling:org.apache.sling.javax.activation .... 0.1.0 -> > 0.2.0 > [INFO] org.apache.sling:org.apache.sling.jcr.repoinit ...... 1.1.26 -> > 1.1.30 > [INFO] org.apache.sling:org.apache.sling.models.impl ....... 1.4.12 -> > 1.4.16 > [INFO] org.apache.sling:org.apache.sling.repoinit.parser ..... 1.6.2 -> > 1.6.4 > [INFO] org.apache.sling:org.apache.sling.scripting.el-api .... 1.0.2 -> > 1.0.4 > [INFO] org.apache.sling:org.apache.sling.scripting.sightly ... > [INFO] 1.4.4-1.4.0 -> > 1.4.6-1.4.0 > [INFO] org.apache.sling:org.apache.sling.scripting.sightly.compiler ... > [INFO] 1.2.8-1.4.0 -> > 1.2.12-1.4.0 > [INFO] org.apache.sling:org.apache.sling.serviceusermapper ... 1.4.4 -> > 1.5.2 > [INFO] org.apache.sling:org.apache.sling.servlets.resolver ... > [INFO] 2.7.10 -> > 2.7.12 > [INFO] org.apache.tika:tika-core ........................ 1.24 -> > 2.0.0-ALPHA > [INFO] org.apache.tika:tika-parsers ..................... 1.24 -> > 2.0.0-ALPHA > [INFO] org.codehaus.groovy:groovy ............................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-ant ........................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-astbuilder ................. 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-cli-picocli ................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-console .................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-datetime ................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-docgenerator ............... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-groovydoc .................. 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-groovysh ................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-jmx ........................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-json ....................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-jsr223 ..................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-macro ...................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-nio ........................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-servlet .................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-sql ........................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-swing ...................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-templates .................. 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-test ....................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-test-junit5 ................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-testng ..................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-xml ........................ 3.0.6 -> > 3.0.7 > [INFO] org.jvnet.staxex:stax-ex .............................. 1.7.6 -> > 2.0.0 > [INFO] org.mongodb:mongo-java-driver ........................ 3.8.2 -> > 3.12.7 > [INFO] org.osgi:org.osgi.service.log ......................... 1.4.0 -> > 1.5.0 > [INFO] org.ow2.asm:asm ........................................... 9.0 -> > 9.1 > [INFO] org.ow2.asm:asm-analysis .................................. 9.0 -> > 9.1 > [INFO] org.ow2.asm:asm-commons ................................... 9.0 -> > 9.1 > [INFO] org.ow2.asm:asm-tree ...................................... 9.0 -> > 9.1 > [INFO] org.ow2.asm:asm-util ...................................... 9.0 -> > 9.1 > [INFO] org.slf4j:jcl-over-slf4j ...................... 1.7.25 -> > 2.0.0-alpha1 > [INFO] org.slf4j:log4j-over-slf4j .................... 1.7.25 -> > 2.0.0-alpha1 > {code} -- This message was sent by Atlassian Jira (v8.3.4#803005)