bhabegger commented on PR #2729:
URL: https://github.com/apache/jackrabbit-oak/pull/2729#issuecomment-4649535774

   As per request in JIRA, here is an analysis of the version of the emebedded 
artifactrs in each module that has embedded artifacts before and after and 
where the version is coming from:
   
   # Embedded dependencies: before vs. after `rationalize-dependencies`
   
   Branch: `rationalize-dependencies` vs. `apache/trunk`
   
   Embedded JAR lists are **build-verified** (`jar tf` on produced bundles). 
Effective versions are identical before and after — the branch only changes 
where the version is declared.
   
   ## Version source notation
   
   | Term | Meaning |
   |---|---|
   | `explicit` | Hardcoded literal `<version>1.2.3</version>` in the module 
POM |
   | `local var (${x})` | `<version>${x}</version>` in the module, property 
defined in the same module's `<properties>` |
   | `parent var (${x})` | `<version>${x}</version>` in the module, property 
defined in oak-parent's `<properties>` |
   | `managed` | No `<version>` tag in the module; version comes from 
oak-parent's `<dependencyManagement>` |
   
   ---
   
   ## oak-segment-azure
   
   | Embedded JAR | Effective version | Source (trunk) | Source (branch) |
   |---|---|---|---|
   | azure-storage | 8.6.6 | managed | managed |
   | azure-keyvault-core | 1.2.6 | managed | managed |
   | azure-core | 1.57.0 | managed | managed |
   | azure-identity | 1.11.3 | managed | managed |
   | azure-json | 1.1.0 | managed | managed |
   | azure-xml | 1.0.0 | explicit | managed |
   | azure-storage-blob | 12.25.3 | explicit | managed |
   | azure-storage-common | 12.24.3 | explicit | managed |
   | azure-storage-internal-avro | 12.10.3 | explicit | managed |
   | jackson-dataformat-xml | 2.19.4 | managed | managed |
   | guava | 33.1.0-jre | explicit | explicit |
   | jsr305 | 3.0.2 | explicit | managed |
   | reactive-streams | 1.0.4 | managed | managed |
   | msal4j | 1.14.0 | managed | managed |
   | reactor-core | 3.4.34 | managed | managed |
   | oauth2-oidc-sdk | 10.7.1 | managed | managed |
   | azure-core-http-netty | 1.14.1 | managed | managed |
   | netty-buffer | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-codec | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-codec-http | 4.1.135.Final | parent var (${netty.version}) | managed 
|
   | netty-codec-http2 | 4.1.135.Final | parent var (${netty.version}) | 
managed |
   | netty-common | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-handler | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-handler-proxy | 4.1.135.Final | parent var (${netty.version}) | 
managed |
   | netty-resolver | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-resolver-dns | 4.1.135.Final | parent var (${netty.version}) | 
managed |
   | netty-transport | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-transport-native-unix-common | 4.1.135.Final | parent var 
(${netty.version}) | managed |
   | reactor-netty-http | 1.0.40 | managed | managed |
   | reactor-netty-core | 1.0.40 | managed | managed |
   | json-smart | 2.4.10 | managed | managed |
   | content-type | 2.2 | managed | managed |
   | accessors-smart | 2.4.9 | managed | managed |
   | nimbus-jose-jwt | 9.40 | managed | managed |
   | stax2-api | 4.2.2 | explicit | managed |
   
   ---
   
   ## oak-blob-cloud-azure
   
   | Embedded JAR | Effective version | Source (trunk) | Source (branch) |
   |---|---|---|---|
   | azure-storage | 8.6.6 | managed | managed |
   | azure-keyvault-core | 1.2.6 | managed | managed |
   | azure-core | 1.57.0 | managed | managed |
   | azure-identity | 1.11.3 | managed | managed |
   | azure-json | 1.1.0 | managed | managed |
   | guava | 33.1.0-jre | explicit | explicit |
   | jsr305 | 3.0.2 | explicit | managed |
   | reactive-streams | 1.0.4 | managed | managed |
   | msal4j | 1.14.0 | managed | managed |
   | reactor-core | 3.4.34 | managed | managed |
   | oauth2-oidc-sdk | 10.7.1 | managed | managed |
   | azure-core-http-netty | 1.14.1 | managed | managed |
   | netty-buffer | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-codec | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-codec-http | 4.1.135.Final | parent var (${netty.version}) | managed 
|
   | netty-codec-http2 | 4.1.135.Final | parent var (${netty.version}) | 
managed |
   | netty-common | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-handler | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-handler-proxy | 4.1.135.Final | parent var (${netty.version}) | 
managed |
   | netty-resolver | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-resolver-dns | 4.1.135.Final | parent var (${netty.version}) | 
managed |
   | netty-transport | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-transport-native-unix-common | 4.1.135.Final | parent var 
(${netty.version}) | managed |
   | reactor-netty-http | 1.0.40 | managed | managed |
   | reactor-netty-core | 1.0.40 | managed | managed |
   | json-smart | 2.4.10 | managed | managed |
   | content-type | 2.2 | managed | managed |
   | accessors-smart | 2.4.9 | managed | managed |
   | nimbus-jose-jwt | 9.40 | managed | managed |
   
   ---
   
   ## oak-blob-cloud
   
   Module not modified by this branch — source is the same before and after.
   
   | Embedded JAR | Effective version | Source (trunk = branch) |
   |---|---|---|
   | s3 | 2.34.9 | parent var (${aws.sdk.version}) |
   | apache-client | 2.34.9 | parent var (${aws.sdk.version}) |
   | s3-transfer-manager | 2.34.9 | parent var (${aws.sdk.version}) |
   | netty-nio-client | 2.34.9 | parent var (${aws.sdk.version}) |
   | aws-xml-protocol, aws-query-protocol, protocol-core, arns, profiles, 
crt-core, http-auth, identity-spi, http-auth-spi, http-auth-aws, checksums, 
checksums-spi, retries-spi, sdk-core, retries, auth, http-auth-aws-eventstream, 
http-client-spi, regions, annotations, utils, aws-core, utils-lite, 
metrics-spi, json-utils, third-party-jackson-core, endpoints-spi | 2.34.9 | 
parent var (${aws.sdk.version}) |
   | eventstream | 1.0.1 | explicit |
   | reactive-streams | 1.0.4 | explicit |
   | netty-buffer | 4.1.135.Final | parent var (${netty.version}) |
   | netty-codec | 4.1.135.Final | parent var (${netty.version}) |
   | netty-codec-dns | 4.1.135.Final | parent var (${netty.version}) |
   | netty-codec-http | 4.1.135.Final | parent var (${netty.version}) |
   | netty-codec-http2 | 4.1.135.Final | parent var (${netty.version}) |
   | netty-common | 4.1.135.Final | parent var (${netty.version}) |
   | netty-handler | 4.1.135.Final | parent var (${netty.version}) |
   | netty-resolver | 4.1.135.Final | parent var (${netty.version}) |
   | netty-resolver-dns | 4.1.135.Final | parent var (${netty.version}) |
   | netty-transport | 4.1.135.Final | parent var (${netty.version}) |
   | netty-transport-classes-epoll | 4.1.135.Final | parent var 
(${netty.version}) |
   | netty-transport-native-unix-common | 4.1.135.Final | parent var 
(${netty.version}) |
   
   ---
   
   ## oak-segment-tar
   
   `Embed-Dependency: netty-*` without a `scope=` qualifier embeds all scopes, 
including `provided`. `concurrentlinkedhashmap-lru` is in the 
`Embed-Dependency` instruction but has no `<dependency>` entry — nothing is 
embedded for it.
   
   | Embedded JAR | Effective version | Source (trunk) | Source (branch) |
   |---|---|---|---|
   | netty-buffer | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-codec | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-common | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-handler | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-resolver | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-transport | 4.1.135.Final | parent var (${netty.version}) | managed |
   | netty-transport-native-unix-common | 4.1.135.Final | parent var 
(${netty.version}) | managed |
   
   ---
   
   ## oak-lucene
   
   Uses `inline=true` — lucene classes and selected oak-search/oak-core-spi 
classes are unpacked directly into the bundle. No embedded JARs. Module not 
modified by this branch.
   
   | Inlined classes | Effective version | Source (trunk = branch) |
   |---|---|---|
   | lucene-* (all modules) | 4.7.2 | parent var (${lucene.version}) |
   | oak-search | ${project.version} | parent var (${project.version}) |
   | oak-core-spi (specific classes) | ${project.version} | parent var 
(${project.version}) |
   
   ---
   
   ## oak-auth-ldap
   
   Module not modified by this branch — source is the same before and after.
   
   | Embedded JAR | Effective version | Source (trunk = branch) |
   |---|---|---|
   | api-all | 2.0.1 | explicit |
   | commons-pool2 | 2.12.0 | explicit |
   | mina-core | 2.1.12 | explicit |
   | org.apache.servicemix.bundles.antlr | 2.7.7_5 | explicit |
   
   ---
   
   ## oak-segment-remote
   
   Module not modified by this branch. The `org.apache.servicemix.bundles.*` 
wildcard resolves to jedis and cglib specifically.
   
   | Embedded JAR | Effective version | Source (trunk = branch) |
   |---|---|---|
   | org.apache.servicemix.bundles.jedis | 3.3.0_1 | explicit |
   | org.apache.servicemix.bundles.cglib | 3.1_1 | explicit |
   | commons-pool2 | 2.12.0 | explicit |
   
   ---
   
   ## oak-segment-aws
   
   Module not modified by this branch. `${aws.version}` is a property defined 
in the module's own `<properties>`.
   
   | Embedded JAR | Effective version | Source (trunk = branch) |
   |---|---|---|
   | aws-java-sdk-s3 | 1.12.791 | local var (${aws.version}) |
   | aws-java-sdk-dynamodb | 1.12.791 | local var (${aws.version}) |
   | dynamodb-lock-client | 1.1.0 | explicit |
   
   ---
   
   ## oak-store-document
   
   Uses `inline=org/quartz/CronExpression*|org/quartz/ValueSet*` — only two 
classes are unpacked from quartz into the bundle. No embedded JAR.
   
   | Inlined classes | Effective version | Source (trunk) | Source (branch) |
   |---|---|---|---|
   | quartz (CronExpression + ValueSet) | 2.3.2 | explicit | managed |
   
   ---
   
   ## oak-search-elastic
   
   `Embed-Transitive=true` with `*;scope=compile|runtime` — embeds all 
compile/runtime transitive deps. Not built here (large dependency set); no 
version changes introduced by this branch.
   
   ---
   
   ## oak-shaded-guava
   
   Shades guava into `org.apache.jackrabbit.guava.*`. Module not modified by 
this branch. `${shaded.guava.version}` is a property defined in the module's 
own `<properties>`.
   
   | Shaded artifact | Effective version | Source (trunk = branch) |
   |---|---|---|
   | guava + failureaccess | 33.5.0-jre | local var (${shaded.guava.version}) |
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to