[
https://issues.apache.org/jira/browse/OAK-12093?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18086285#comment-18086285
]
Julian Reschke commented on OAK-12093:
--------------------------------------
Way forward.
- update ticket title and description to reflect what this is about
- attach reporting script; attach output for current state of trunk
- find cases where we can indeed improve things. For those that can not be
changed right now, add this somwhere as explanation (yes, I'll assist) and link
to existing ticket should it exist).
- eliminate or document false positives (transient dependencies we do not
control and do not need to control)
- eliminate cases which just result from other items (such as Tika).
Iterate.
> Improve build by rationalizing dependencies
> -------------------------------------------
>
> Key: OAK-12093
> URL: https://issues.apache.org/jira/browse/OAK-12093
> Project: Jackrabbit Oak
> Issue Type: Improvement
> Reporter: Benjamin Habegger
> Priority: Minor
>
> Currently many dependencies are declared explicitly in several modules and
> leads to pulling duplicate dependencies:
> Some examples are:
> Jackson: 2.13.5, 2.17.3
> Zstd: versions 1.5.5-5, 1.5.6-3, 1.5.7-4, 1.5.7-6
> Gson: 2.10.1, 2.11.0, 2.5, 2.9.0, 2.9.1
> Error_prone_annotations: 2.11.0, 2.18.0, 2.26.1, 2.27.0, 2.3.4, 2.41.0
> j2objc-annotations: 1.3, 2.8, 3.0.0
> The goal of this ticket is to rationalize and centralize as much as possible
> dependencyManagement to avoid these multiple versions.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
