I took a look at the HttpClient version upgrade and ran into several issues.
If we move to 4.2.6 it conflicts with the version used by Solr and Lucene which requires upgrading versions of those for jena-text. We're using 4.3.1 for those and they are now at 4.6.1 so we're well behind on those. If we can make those upgrades then we can make the HttpClient upgrades. I also added some comments to JENA-576 talking about the issues, even if we go to 4.6.1 for Solr and Lucene this will still block any attempt to upgrade HttpClient to 4.3 (which is what JENA-576 is about) since Solr/Lucene are still using the HttpClient 4.2.x release line Rob On 08/02/2014 19:00, "Andy Seaborne" <[email protected]> wrote: >Given this is potentially public facing server stuff, the security >updates flowing into Java7 also suggest moving to that version for Fuseki. > >I've just updated Fuseki2 to Jetty9 and hence Java7. > > Andy > >On 07/02/14 14:46, Stephen Allen wrote: >> I would say make the leap to Java 7. I'd have to think most people are >> using it now (or they can start using it). >> >> -Stephen >> >> >> On Fri, Feb 7, 2014 at 9:10 AM, Andy Seaborne <[email protected]> wrote: >> >>> Jetty 9 and Tomcat 8 require Java7. >>> >>> I'm wondering if for Fuseki(2) might we well go for Java7. >>> >>> Fuseki1 is only delivered as a self-contained server but Fuseki2 has >>> WAR-style deployment. Tomcat 6 & 7 still running on Java6 (which is >>>not a >>> good idea from a security point of view) might be the issue. >>> >>> http://tomcat.apache.org/whichversion.html >>> http://wiki.eclipse.org/Jetty/Starting/Jetty_Version_Comparison_Table >>> >>> Thoughts? >>> >>> Andy >>> >>> On 07/02/14 10:17, Andy Seaborne wrote: >>> >>>> Should we upgrade the versions of common dependences? >>>> >>>> A check shows these are behind: >>>> >>>> httpcomponents: 4.2.3 -> 4.2.6 (see JENA-576 about 4.3.*) >>>> slf4j: 1.6.4 -> 1.7.6 >>>> log4j: 1.2.16 -> 1.2.17 >>>> jetty: 8.1.11 -> 8.1.14 >>>> lucene: 4.3.1 -> 4.6.1 >>>> solr 4.3.1 -> 4.6.1 >>>> spatial4j: 0.3 -> 0.4 >>>> commons-fileupload: 1.2.2 -> 1.3 >>>> >>>> For Jetty, Fuseki2 would be the time to move to the 9.1.* series. >>>> >>>> anything else? >>>> >>>> xerces and Junit are up-to-date. >>>> >>>> Andy >>>> >>> >>> >> >
