Recently, I filed a bug(OFBIZ-401), to update bsf.jar to something more modern. This was backed out, as ofbiz makes use of an ancient jpublish that also uses the older bsf.
Just recently, I had another case occur, with an old library. commons-fileupload is also very old, and the current version has an api change. I find it very annoying that such old stuff is still in use in ofbiz, especially if a release is pending. Any application integrator that is going to use ofbiz is going to want to use more modern libraries, but will not be able to, as all the interdependent code in ofbiz is using older stuff. Can we make it a release goal to update the libraries to something much more modern? I'm willing to help produce a list, giving each library, the version in use, the upstream location, and the most recent version.
