[ 
https://issues.apache.org/jira/browse/SLING-10143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17285802#comment-17285802
 ] 

Robert Munteanu commented on SLING-10143:
-----------------------------------------

[~enorman] [~reusr1] 

- +1 on submitting as a PR, it would make it simpler to review
- +1 on adding the custom rules.xml to the starter project, even if not enabled 
by default if you prefer

Exceptions are welcome, as:

- for Guava we need to be in lockstep with Oak
- the commons-collection upgrade is bogus
- we have not checked whether newer DropWizard releases work with our metrics 
bundle

> bundles referenced in sling starter are out of date
> ---------------------------------------------------
>
>                 Key: SLING-10143
>                 URL: https://issues.apache.org/jira/browse/SLING-10143
>             Project: Sling
>          Issue Type: Improvement
>          Components: Starter
>            Reporter: Ruben Reusser
>            Priority: Major
>             Fix For: Starter 12
>
>         Attachments: 
> 0001-updated-3rd-party-dependencies-of-sling-starter.patch, 
> 0002-javax.activation-dependency-needed-to-be-increased.patch, 
> 0003-updated-to-latest-sling-bundles-added-missing-felix-.patch
>
>
> Would be nice to make sure the sling starter uses the latest bundles - 
> according to 
> {code:java}
> mvn versions:display-dependency-updates{code}
> the sling starter is a bit out of date with the dependencies
> {code:java}
> [INFO] The following dependencies in Dependencies have newer versions:
> [INFO]   com.composum.nodes:composum-nodes-commons ............. 2.1.1 -> 
> 2.3.0
> [INFO]   com.composum.nodes:composum-nodes-console ............. 2.1.1 -> 
> 2.3.0
> [INFO]   com.composum.nodes:composum-nodes-jslibs .............. 2.1.1 -> 
> 2.3.0
> [INFO]   com.composum.nodes:composum-nodes-pckgmgr ............. 2.1.1 -> 
> 2.3.0
> [INFO]   com.composum.nodes:composum-nodes-usermgr ............. 2.1.1 -> 
> 2.3.0
> [INFO]   com.fasterxml.jackson.core:jackson-annotations ...... 2.11.1 -> 
> 2.12.1
> [INFO]   com.fasterxml.jackson.core:jackson-core ............. 2.11.1 -> 
> 2.12.1
> [INFO]   com.fasterxml.jackson.core:jackson-databind ......... 2.11.1 -> 
> 2.12.1
> [INFO]   com.google.guava:guava .............................. 15.0 -> 
> 30.1-jre
> [INFO]   com.h2database:h2-mvstore ......................... 1.4.194 -> 
> 1.4.200
> [INFO]   commons-codec:commons-codec ............................. 1.14 -> 
> 1.15
> [INFO]   commons-collections:commons-collections ............ 3.2.2 -> 
> 20040616
> [INFO]   commons-io:commons-io ................................... 2.6 -> 
> 2.8.0
> [INFO]   io.dropwizard.metrics:metrics-core ............. 3.2.6 -> 
> 4.2.0-beta.1
> [INFO]   org.antlr:antlr4-runtime .............................. 4.7.2 -> 
> 4.9.1
> [INFO]   org.apache.commons:commons-lang3 ......................... 3.9 -> 
> 3.11
> [INFO]   org.apache.felix:org.apache.felix.configadmin ....... 1.9.16 -> 
> 1.9.20
> [INFO]   org.apache.felix:org.apache.felix.eventadmin .......... 1.5.0 -> 
> 1.6.2
> [INFO]   org.apache.felix:org.apache.felix.http.jetty ......... 4.0.18 -> 
> 4.1.4
> [INFO]   org.apache.felix:org.apache.felix.metatype ............ 1.2.2 -> 
> 1.2.4
> [INFO]   org.apache.felix:org.apache.felix.scr ............... 2.1.20 -> 
> 2.1.24
> [INFO]   org.apache.felix:org.apache.felix.utils ............. 1.11.2 -> 
> 1.11.6
> [INFO]   org.apache.felix:org.apache.felix.webconsole .......... 4.5.0 -> 
> 4.6.0
> [INFO]   org.apache.geronimo.specs:geronimo-annotation_1.3_spec .... 1.1 -> 
> 1.3
> [INFO]   org.apache.geronimo.specs:geronimo-atinject_1.0_spec ...... 1.1 -> 
> 1.2
> [INFO]   org.apache.httpcomponents:httpclient ................ 4.5.10 -> 
> 4.5.13
> [INFO]   org.apache.httpcomponents:httpclient-osgi ........... 4.5.10 -> 
> 4.5.13
> [INFO]   org.apache.httpcomponents:httpcore-osgi ............. 4.4.12 -> 
> 4.4.14
> [INFO]   org.apache.jackrabbit:jackrabbit-data ............... 2.20.0 -> 
> 2.21.5
> [INFO]   org.apache.jackrabbit:jackrabbit-jcr-commons ........ 2.20.0 -> 
> 2.21.5
> [INFO]   org.apache.jackrabbit:jackrabbit-jcr-rmi ............ 2.20.0 -> 
> 2.21.5
> [INFO]   org.apache.jackrabbit:jackrabbit-spi ................ 2.20.0 -> 
> 2.21.5
> [INFO]   org.apache.jackrabbit:jackrabbit-spi-commons ........ 2.20.0 -> 
> 2.21.5
> [INFO]   org.apache.jackrabbit:jackrabbit-webdav ............. 2.20.0 -> 
> 2.21.5
> [INFO]   org.apache.jackrabbit:oak-api ....................... 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-authorization-principalbased ...
> [INFO]                                                         1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-blob ...................... 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-blob-plugins .............. 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-commons ................... 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-core ...................... 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-core-spi .................. 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-jackrabbit-api ............ 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-jcr ....................... 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-lucene .................... 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-query-spi ................. 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-security-spi .............. 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-segment-tar ............... 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-store-composite ........... 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-store-document ............ 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit:oak-store-spi ................. 1.32.0 -> 
> 1.38.0
> [INFO]   org.apache.jackrabbit.vault:org.apache.jackrabbit.vault ...
> [INFO]                                                           3.4.6 -> 
> 3.4.8
> [INFO]   org.apache.pdfbox:fontbox ........................... 2.0.17 -> 
> 2.0.22
> [INFO]   org.apache.pdfbox:pdfbox ............................ 2.0.17 -> 
> 2.0.22
> [INFO]   org.apache.servicemix.bundles:org.apache.servicemix.bundles.ognl ...
> [INFO]                                                      3.2.1_1 -> 
> 3.2.18_1
> [INFO]   org.apache.servicemix.bundles:org.apache.servicemix.bundles.rhino ...
> [INFO]                                                     1.7.10_1 -> 
> 1.7.13_1
> [INFO]   
> org.apache.servicemix.bundles:org.apache.servicemix.bundles.saaj-impl ...
> [INFO]                                                      1.3.23_2 -> 
> 1.5.1_1
> [INFO]   
> org.apache.servicemix.bundles:org.apache.servicemix.bundles.thymeleaf ...
> [INFO]                                     3.0.11.RELEASE_1 -> 
> 3.0.12.RELEASE_1
> [INFO]   org.apache.servicemix.specs:org.apache.servicemix.specs.saaj-api-1.3 
> ...
> [INFO]                                                           2.8.0 -> 
> 2.9.0
> [INFO]   org.apache.sling:org.apache.sling.commons.johnzon ..... 1.2.4 -> 
> 1.2.6
> [INFO]   org.apache.sling:org.apache.sling.commons.osgi ........ 2.4.0 -> 
> 2.4.2
> [INFO]   org.apache.sling:org.apache.sling.commons.scheduler ...
> [INFO]                                                          2.7.6 -> 
> 2.7.12
> [INFO]   org.apache.sling:org.apache.sling.discovery.oak ..... 1.2.28 -> 
> 1.2.30
> [INFO]   org.apache.sling:org.apache.sling.discovery.support ... 1.0.4 -> 
> 1.0.6
> [INFO]   org.apache.sling:org.apache.sling.installer.core .... 3.11.2 -> 
> 3.11.4
> [INFO]   org.apache.sling:org.apache.sling.javax.activation .... 0.1.0 -> 
> 0.2.0
> [INFO]   org.apache.sling:org.apache.sling.jcr.repoinit ...... 1.1.26 -> 
> 1.1.30
> [INFO]   org.apache.sling:org.apache.sling.models.impl ....... 1.4.12 -> 
> 1.4.16
> [INFO]   org.apache.sling:org.apache.sling.repoinit.parser ..... 1.6.2 -> 
> 1.6.4
> [INFO]   org.apache.sling:org.apache.sling.scripting.el-api .... 1.0.2 -> 
> 1.0.4
> [INFO]   org.apache.sling:org.apache.sling.scripting.sightly ...
> [INFO]                                               1.4.4-1.4.0 -> 
> 1.4.6-1.4.0
> [INFO]   org.apache.sling:org.apache.sling.scripting.sightly.compiler ...
> [INFO]                                              1.2.8-1.4.0 -> 
> 1.2.12-1.4.0
> [INFO]   org.apache.sling:org.apache.sling.serviceusermapper ... 1.4.4 -> 
> 1.5.2
> [INFO]   org.apache.sling:org.apache.sling.servlets.resolver ...
> [INFO]                                                         2.7.10 -> 
> 2.7.12
> [INFO]   org.apache.tika:tika-core ........................ 1.24 -> 
> 2.0.0-ALPHA
> [INFO]   org.apache.tika:tika-parsers ..................... 1.24 -> 
> 2.0.0-ALPHA
> [INFO]   org.codehaus.groovy:groovy ............................ 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-ant ........................ 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-astbuilder ................. 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-cli-picocli ................ 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-console .................... 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-datetime ................... 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-docgenerator ............... 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-groovydoc .................. 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-groovysh ................... 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-jmx ........................ 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-json ....................... 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-jsr223 ..................... 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-macro ...................... 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-nio ........................ 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-servlet .................... 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-sql ........................ 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-swing ...................... 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-templates .................. 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-test ....................... 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-test-junit5 ................ 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-testng ..................... 3.0.6 -> 
> 3.0.7
> [INFO]   org.codehaus.groovy:groovy-xml ........................ 3.0.6 -> 
> 3.0.7
> [INFO]   org.jvnet.staxex:stax-ex .............................. 1.7.6 -> 
> 2.0.0
> [INFO]   org.mongodb:mongo-java-driver ........................ 3.8.2 -> 
> 3.12.7
> [INFO]   org.osgi:org.osgi.service.log ......................... 1.4.0 -> 
> 1.5.0
> [INFO]   org.ow2.asm:asm ........................................... 9.0 -> 
> 9.1
> [INFO]   org.ow2.asm:asm-analysis .................................. 9.0 -> 
> 9.1
> [INFO]   org.ow2.asm:asm-commons ................................... 9.0 -> 
> 9.1
> [INFO]   org.ow2.asm:asm-tree ...................................... 9.0 -> 
> 9.1
> [INFO]   org.ow2.asm:asm-util ...................................... 9.0 -> 
> 9.1
> [INFO]   org.slf4j:jcl-over-slf4j ...................... 1.7.25 -> 
> 2.0.0-alpha1
> [INFO]   org.slf4j:log4j-over-slf4j .................... 1.7.25 -> 
> 2.0.0-alpha1
> {code}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to