rity issue if the dependency is transitive over
>> artemis.
>> For direct depencencies our projects have to investigate.
>>
>> Jan
>>
>> -Ursprüngliche Nachricht-----
>> Von: Robbie Gemmell
>> Gesendet: Mittwoch, 21. August 2024 18:09
>&g
epencencies our projects have to investigate.
>
> Jan
>
> -Ursprüngliche Nachricht-
> Von: Robbie Gemmell
> Gesendet: Mittwoch, 21. August 2024 18:09
> An: dev@activemq.apache.org
> Betreff: Re: Issue with transitive dependency on commons-collections
>
>
Oops, I got distracted while typing originally, and didnt spot Justin
already said the same thing by the time I actually hit send. Oh well
:)
On Wed, 21 Aug 2024 at 17:07, Robbie Gemmell wrote:
>
> Most of the uses in the codebase are transitive, from others commons
> dependencies, so you would n
Most of the uses in the codebase are transitive, from others commons
dependencies, so you would need to check that we don't use the bits of
those dependencies that require it and then specifically exclude it,
otherwise you won't actually be able to get rid of it.
On Wed, 21 Aug 2024 at 16:18, Just
While working on this issue I realized that commons-beanutils depends on
commons-collections (i.e. 3.x) and that there is no new version of
commons-beanutils that depends on commons-collections4. According to
BEANUTILS-532 [1] it looks like we'll have to wait for commons-beanutils2
which is a compl
The ActiveMQ Artemis code-base doesn't use
org.apache.commons.collections.list.SetUniqueList so this problem doesn't
apply.
That said, moving to commons-collections4 is a good idea. I've opened
ARTEMIS-5006 [1] for this.
Justin
[1] https://issues.apache.org/jira/browse/ARTEMIS-5006
On Wed, Aug