jaedonP opened a new issue, #7168: URL: https://github.com/apache/incubator-kie/issues/7168
## Summary Following the Quarkus 3.33.4 upgrade (#7153), four dependency version adjustments in `kie-parent/pom.xml` were not included upstream but are present in the BAMOE 9.6.x maintenance branch. This issue tracks raising those remaining changes. ## Changes needed in `kie-parent/pom.xml` ### 1. Bump `version.tomcat.embed.core`: `11.0.25` → `11.0.26` Quarkus 3.33.4's BOM ships `tomcat-embed-core` 11.0.26. The current upstream pin (`11.0.25`) is one patch behind; bumping keeps the Spring Boot modules aligned with what the Quarkus modules already resolve via the platform BOM. ### 2. Bump `version.org.apache.opennlp`: `2.5.11` → `2.5.12` `opennlp-tools` 2.5.12 was released after 2.5.11. This is a routine patch-level bump to stay current on the maintained line. ### 3. Add `version.com.github.luben.zstd-jni` at `1.5.7-16` + `<dependencyManagement>` entry `kafka-clients:4.1.2` bundles `zstd-jni:1.5.6-10` as a direct dependency. Quarkus modules receive `1.5.7-16` via `quarkus-bom:3.33.4`, but Spring Boot modules (no Quarkus BOM import), the Maven Plugin, and jBPM Tools Maven resolve the older bundled version instead. Adding a `<dependencyManagement>` pin in `kie-parent` enforces a consistent `1.5.7-16` across all module types until `kafka-clients` bundles `zstd-jni >= 1.5.7-16` natively. ### 4. Add `version.org.wildfly.elytron` at `2.8.5.Final` + two `<dependencyManagement>` entries `infinispan-client-hotrod` 16.0.x and 16.1.x transitively pull `wildfly-elytron-asn1` and `wildfly-elytron-password-impl` at `2.7.0.Final` / `2.7.1.Final`. Quarkus modules resolve `2.8.5.Final` via `quarkus-bom`, but non-Quarkus modules (Spring Boot Infinispan persistence, Drools Reliability Infinispan, KIE Add-Ons Persistence Infinispan) get the older version with no override. Pinning both artifacts in `kie-parent` corrects this for all module types. These pins can be removed once Infinispan is upgraded to `>= 16.2.0` (the first line to bundle Elytron `>= 2.9.1.Final`). ## Affected file - `kie-parent/pom.xml` only ## Related - #7153 — Quarkus 3.33.4 upgrade (already merged upstream) - BAMOE internal PR: dba/kie#206 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
