[
https://issues.apache.org/jira/browse/SLING-10143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17284991#comment-17284991
]
Eric Norman edited comment on SLING-10143 at 2/16/21, 1:14 AM:
---------------------------------------------------------------
FYI: If I recall correctly, the apache jackrabbit project uses the even-odd
policy for numbering their release versions. The even numbered releases are
the stable releases that are ready for production, while the odd numbered
releases are considered unstable and only suitable for testing. So while
2.21.5 is the largest version number of jackrabbit, that is an unstable release
and you would probably want to use the the latest (stable) even numbered
release 2.20.2 instead.
Also, is there any chance you can submit the changes as a github pull request
instead of attaching patch files? I find those a bit easier to review.
I use a custom maven-version-rules.xml locally to filter out some of the known
bad versions that exist in central from consideration in the
versions:display-dependency-updates report. I could share that somewhere if
anyone is interested.
was (Author: enorman):
FYI: If I recall correctly, the apache jackrabbit project uses the even-odd
policy for numbering their release versions. The even numbered releases are
the stable releases that are ready for production, while the odd numbered
releases are considered unstable and only suitable for testing. So while
2.21.5 is the largest version number of jackrabbit, that is an unstable release
and you would probably want to use the the latest (stable) even numbered
release 2.20.2 instead.
Also, is there any chance you can submit the changes as a github pull request
instead of attaching patch files? I find those a bit easier to review.
> bundles referenced in sling starter are out of date
> ---------------------------------------------------
>
> Key: SLING-10143
> URL: https://issues.apache.org/jira/browse/SLING-10143
> Project: Sling
> Issue Type: Improvement
> Components: Starter
> Reporter: Ruben Reusser
> Priority: Major
> Fix For: Starter 12
>
> Attachments:
> 0001-updated-3rd-party-dependencies-of-sling-starter.patch,
> 0002-javax.activation-dependency-needed-to-be-increased.patch,
> 0003-updated-to-latest-sling-bundles-added-missing-felix-.patch
>
>
> Would be nice to make sure the sling starter uses the latest bundles -
> according to
> {code:java}
> mvn versions:display-dependency-updates{code}
> the sling starter is a bit out of date with the dependencies
> {code:java}
> [INFO] The following dependencies in Dependencies have newer versions:
> [INFO] com.composum.nodes:composum-nodes-commons ............. 2.1.1 ->
> 2.3.0
> [INFO] com.composum.nodes:composum-nodes-console ............. 2.1.1 ->
> 2.3.0
> [INFO] com.composum.nodes:composum-nodes-jslibs .............. 2.1.1 ->
> 2.3.0
> [INFO] com.composum.nodes:composum-nodes-pckgmgr ............. 2.1.1 ->
> 2.3.0
> [INFO] com.composum.nodes:composum-nodes-usermgr ............. 2.1.1 ->
> 2.3.0
> [INFO] com.fasterxml.jackson.core:jackson-annotations ...... 2.11.1 ->
> 2.12.1
> [INFO] com.fasterxml.jackson.core:jackson-core ............. 2.11.1 ->
> 2.12.1
> [INFO] com.fasterxml.jackson.core:jackson-databind ......... 2.11.1 ->
> 2.12.1
> [INFO] com.google.guava:guava .............................. 15.0 ->
> 30.1-jre
> [INFO] com.h2database:h2-mvstore ......................... 1.4.194 ->
> 1.4.200
> [INFO] commons-codec:commons-codec ............................. 1.14 ->
> 1.15
> [INFO] commons-collections:commons-collections ............ 3.2.2 ->
> 20040616
> [INFO] commons-io:commons-io ................................... 2.6 ->
> 2.8.0
> [INFO] io.dropwizard.metrics:metrics-core ............. 3.2.6 ->
> 4.2.0-beta.1
> [INFO] org.antlr:antlr4-runtime .............................. 4.7.2 ->
> 4.9.1
> [INFO] org.apache.commons:commons-lang3 ......................... 3.9 ->
> 3.11
> [INFO] org.apache.felix:org.apache.felix.configadmin ....... 1.9.16 ->
> 1.9.20
> [INFO] org.apache.felix:org.apache.felix.eventadmin .......... 1.5.0 ->
> 1.6.2
> [INFO] org.apache.felix:org.apache.felix.http.jetty ......... 4.0.18 ->
> 4.1.4
> [INFO] org.apache.felix:org.apache.felix.metatype ............ 1.2.2 ->
> 1.2.4
> [INFO] org.apache.felix:org.apache.felix.scr ............... 2.1.20 ->
> 2.1.24
> [INFO] org.apache.felix:org.apache.felix.utils ............. 1.11.2 ->
> 1.11.6
> [INFO] org.apache.felix:org.apache.felix.webconsole .......... 4.5.0 ->
> 4.6.0
> [INFO] org.apache.geronimo.specs:geronimo-annotation_1.3_spec .... 1.1 ->
> 1.3
> [INFO] org.apache.geronimo.specs:geronimo-atinject_1.0_spec ...... 1.1 ->
> 1.2
> [INFO] org.apache.httpcomponents:httpclient ................ 4.5.10 ->
> 4.5.13
> [INFO] org.apache.httpcomponents:httpclient-osgi ........... 4.5.10 ->
> 4.5.13
> [INFO] org.apache.httpcomponents:httpcore-osgi ............. 4.4.12 ->
> 4.4.14
> [INFO] org.apache.jackrabbit:jackrabbit-data ............... 2.20.0 ->
> 2.21.5
> [INFO] org.apache.jackrabbit:jackrabbit-jcr-commons ........ 2.20.0 ->
> 2.21.5
> [INFO] org.apache.jackrabbit:jackrabbit-jcr-rmi ............ 2.20.0 ->
> 2.21.5
> [INFO] org.apache.jackrabbit:jackrabbit-spi ................ 2.20.0 ->
> 2.21.5
> [INFO] org.apache.jackrabbit:jackrabbit-spi-commons ........ 2.20.0 ->
> 2.21.5
> [INFO] org.apache.jackrabbit:jackrabbit-webdav ............. 2.20.0 ->
> 2.21.5
> [INFO] org.apache.jackrabbit:oak-api ....................... 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-authorization-principalbased ...
> [INFO] 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-blob ...................... 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-blob-plugins .............. 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-commons ................... 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-core ...................... 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-core-spi .................. 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-jackrabbit-api ............ 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-jcr ....................... 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-lucene .................... 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-query-spi ................. 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-security-spi .............. 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-segment-tar ............... 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-store-composite ........... 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-store-document ............ 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit:oak-store-spi ................. 1.32.0 ->
> 1.38.0
> [INFO] org.apache.jackrabbit.vault:org.apache.jackrabbit.vault ...
> [INFO] 3.4.6 ->
> 3.4.8
> [INFO] org.apache.pdfbox:fontbox ........................... 2.0.17 ->
> 2.0.22
> [INFO] org.apache.pdfbox:pdfbox ............................ 2.0.17 ->
> 2.0.22
> [INFO] org.apache.servicemix.bundles:org.apache.servicemix.bundles.ognl ...
> [INFO] 3.2.1_1 ->
> 3.2.18_1
> [INFO] org.apache.servicemix.bundles:org.apache.servicemix.bundles.rhino ...
> [INFO] 1.7.10_1 ->
> 1.7.13_1
> [INFO]
> org.apache.servicemix.bundles:org.apache.servicemix.bundles.saaj-impl ...
> [INFO] 1.3.23_2 ->
> 1.5.1_1
> [INFO]
> org.apache.servicemix.bundles:org.apache.servicemix.bundles.thymeleaf ...
> [INFO] 3.0.11.RELEASE_1 ->
> 3.0.12.RELEASE_1
> [INFO] org.apache.servicemix.specs:org.apache.servicemix.specs.saaj-api-1.3
> ...
> [INFO] 2.8.0 ->
> 2.9.0
> [INFO] org.apache.sling:org.apache.sling.commons.johnzon ..... 1.2.4 ->
> 1.2.6
> [INFO] org.apache.sling:org.apache.sling.commons.osgi ........ 2.4.0 ->
> 2.4.2
> [INFO] org.apache.sling:org.apache.sling.commons.scheduler ...
> [INFO] 2.7.6 ->
> 2.7.12
> [INFO] org.apache.sling:org.apache.sling.discovery.oak ..... 1.2.28 ->
> 1.2.30
> [INFO] org.apache.sling:org.apache.sling.discovery.support ... 1.0.4 ->
> 1.0.6
> [INFO] org.apache.sling:org.apache.sling.installer.core .... 3.11.2 ->
> 3.11.4
> [INFO] org.apache.sling:org.apache.sling.javax.activation .... 0.1.0 ->
> 0.2.0
> [INFO] org.apache.sling:org.apache.sling.jcr.repoinit ...... 1.1.26 ->
> 1.1.30
> [INFO] org.apache.sling:org.apache.sling.models.impl ....... 1.4.12 ->
> 1.4.16
> [INFO] org.apache.sling:org.apache.sling.repoinit.parser ..... 1.6.2 ->
> 1.6.4
> [INFO] org.apache.sling:org.apache.sling.scripting.el-api .... 1.0.2 ->
> 1.0.4
> [INFO] org.apache.sling:org.apache.sling.scripting.sightly ...
> [INFO] 1.4.4-1.4.0 ->
> 1.4.6-1.4.0
> [INFO] org.apache.sling:org.apache.sling.scripting.sightly.compiler ...
> [INFO] 1.2.8-1.4.0 ->
> 1.2.12-1.4.0
> [INFO] org.apache.sling:org.apache.sling.serviceusermapper ... 1.4.4 ->
> 1.5.2
> [INFO] org.apache.sling:org.apache.sling.servlets.resolver ...
> [INFO] 2.7.10 ->
> 2.7.12
> [INFO] org.apache.tika:tika-core ........................ 1.24 ->
> 2.0.0-ALPHA
> [INFO] org.apache.tika:tika-parsers ..................... 1.24 ->
> 2.0.0-ALPHA
> [INFO] org.codehaus.groovy:groovy ............................ 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-ant ........................ 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-astbuilder ................. 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-cli-picocli ................ 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-console .................... 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-datetime ................... 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-docgenerator ............... 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-groovydoc .................. 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-groovysh ................... 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-jmx ........................ 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-json ....................... 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-jsr223 ..................... 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-macro ...................... 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-nio ........................ 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-servlet .................... 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-sql ........................ 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-swing ...................... 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-templates .................. 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-test ....................... 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-test-junit5 ................ 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-testng ..................... 3.0.6 ->
> 3.0.7
> [INFO] org.codehaus.groovy:groovy-xml ........................ 3.0.6 ->
> 3.0.7
> [INFO] org.jvnet.staxex:stax-ex .............................. 1.7.6 ->
> 2.0.0
> [INFO] org.mongodb:mongo-java-driver ........................ 3.8.2 ->
> 3.12.7
> [INFO] org.osgi:org.osgi.service.log ......................... 1.4.0 ->
> 1.5.0
> [INFO] org.ow2.asm:asm ........................................... 9.0 ->
> 9.1
> [INFO] org.ow2.asm:asm-analysis .................................. 9.0 ->
> 9.1
> [INFO] org.ow2.asm:asm-commons ................................... 9.0 ->
> 9.1
> [INFO] org.ow2.asm:asm-tree ...................................... 9.0 ->
> 9.1
> [INFO] org.ow2.asm:asm-util ...................................... 9.0 ->
> 9.1
> [INFO] org.slf4j:jcl-over-slf4j ...................... 1.7.25 ->
> 2.0.0-alpha1
> [INFO] org.slf4j:log4j-over-slf4j .................... 1.7.25 ->
> 2.0.0-alpha1
> {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
