boris-petrov commented on issue #1014: URL: https://github.com/apache/shiro/issues/1014#issuecomment-1645103227
@lprimak thanks for all the time you spent on this! I'm really not sure what you mean though. As far as I understand, [BOM files](https://docs.gradle.org/current/userguide/platforms.html#sub:bom_import) are just a list of dependency-versions. And that's what I used them for. I added the BOM and then in the couple of places I used Shiro, I simply didn't add a version. In addition to that, BOMs define versions for transitive dependencies that are known/needed to work with the library. I definitely could use Shiro without a BOM (that's what I did for 1.12.0) - it's just simpler with it. And DRY-er because I'm not repeating versions. You're right that maybe the BOM in version 1.11.0 was "wrong" in some way, not sure about that. What I request is pretty much the same BOM as in [1.12.0](https://github.com/apache/shiro/blob/shiro-root-1.12.0/bom/pom.xml) to be available to the non-Jakarta version of Shiro - i.e. (I think) just without the `<classifier>jakarta</classifier>` lines. Does that make sense or am I mistaking some concepts? :smile: -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
