Another reason to use Maven ;-) (As opposed to Ivy which I am not a fan of)
Gary On Wed, Apr 12, 2023, 10:58 Eric J. Schwarzenbach < eric.schwarzenb...@wrycan.com> wrote: > Even setting the maven question aside for a moment, where does this > xml-apis.jar even come from? As I noted, the manifest of the > xml-apis.jar that comes with the xalan 2.7.3 download indicates a > version of 1.4.02 (Implementation-Version). It also gives > "Implementation-URL: http://xml.apache.org/commons/" But following that > link to the xml commons project, I can find no download for 1.4.02, only > 1.4.01. Xalan does not provide the source that that jar in it's source > download as far as I can tell. > > > On 4/11/23 01:29, Mukul Gandhi wrote: > > Hi Eric, > > > > On Mon, Apr 10, 2023 at 10:40 PM Eric J. Schwarzenbach > > <eric.schwarzenb...@wrycan.com> wrote: > > > >> This isn't about what is used to build Xalan, but about what Xalan's > >> users use to build their projects and ensure they use Xalan with correct > >> dependencies. Maven is what a large chunk of Java users use for > >> dependency management, and they typically expect to be able to pull the > >> dependency definitions from Maven central. Of course they can each > >> individually set this up locally instead, but it is more ideal to have > >> central source of correct information. Maven central serves that role > >> and contains such definitions for previous versions of Xalan. > >> > >> Of course the Xalan devs do not necessarily have to be the ones > >> submitting this to maven central, some Xalan user more familiar with > >> maven, like Richard or myself, could probably step up and do this. > >> However it would be helpful for a Xalan dev to chime in regarding the > >> correct / necessary versions of dependencies. I posted a query for > >> clarification about one such dependency version recently (xml-apis.jar) > >> to this list but have not as yet seen a reply. Perhaps it will help to > >> give more context, if you are not a maven user yourself. > >> > >> Typically when a Maven user sets up the maven dependency definitions for > >> a new version of something, they will start with the previous versions > >> definitions as a starting point. The definitions in maven central for > >> Xalan 2.7.2, declares two (compile) dependencies: xercesImpl 2.9.1 and > >> serializer 2.7.2. Note that such dependency declarations will cause a > >> user's project build to pull in these dependencies automatically, so a > >> projecting declaring xalan 2.7.2 will get xercesImpl 2.9.1 > >> automatically. Some users like myself, have project that also depend on > >> xerces directly and realize that newer versions of xerces have come out > >> and define their project to reference a newer version of xerces like > >> 2.12.2. > >> > >> xercesImpl in turn has a maven definition that declares a dependency on > >> xml-apis. xercesImpl 2.12.2 specifies xml-apis 1.4.01. The is the latest > >> version of xml-apis appearing in Maven central (ignoring the versions > >> 2.0.0 and 2.0.2 which are actually older than 1.4.01...I forget the > >> story there.) > >> > >> To reiterate my earlier query, I notice that the jars included with the > >> xalan 2.7.3 download include an xml-apis that seems to be version > >> 1.4.02. Is it necessary or in some way desirable to use xalan 2.7.3 with > >> that version of xml-apis rather than to let the xercesImpl dependency > >> pull in xms-apis 1.4.01? If so, maybe we need to declare that as direct > >> dependency of the xalan maven definition, and load that artifact to > >> maven central also. But where does it come from? What project manages > >> and produces this jar? > >> > >> Any advice here would be much appreciated by maven users, either for > >> setting up their own local maven dependency definitions, or (preferably) > >> for someone to submit a canonical definition to maven central. > > XalanJ is a special Java library, within the Java language ecosystem. > > XalanJ is part of JDK itself (as an implementation of, JAXP XSLT and > > XPath APIs. Ref, > > https://www.oracle.com/java/technologies/jaxp-introduction.html). I > > think, its better if, XalanJ project distributes its jars as > > standalone downloadables (as has been done, with XalanJ 2.7.3 with its > > Ant build), and let XalanJ users configure these jars within for e.g > > Maven build environment however XalanJ users wish. > > > > >