boris-petrov commented on issue #1015: URL: https://github.com/apache/shiro/issues/1015#issuecomment-1645109941
@lprimak I answered in the issue a bit more but here I wanted to ask about this specific thing you said: > The only reason there is a BOM for Jakarta is that every Shiro artifact has to have exclusions and needs to be individually included by application developer. ... However, for non-Jakarta (javax), all Shiro artifacts have their dependencies included already as transitive, so there is no need to include all of them, just the most high-level one you use. I'm not sure I understand. Do you mean that when I'm using the Jakarta version of Shiro I have to add *both* `shiro-web` and `shiro-core` explicitly (even though the former depends on the latter)? But that's not the case for the javax version? And that's the reason you've added the BOM? If so... why? I don't understand what does Jakarta vs javax have to do with the way dependencies are managed? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
