[ https://issues.apache.org/jira/browse/SLING-10143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17285802#comment-17285802 ]
Robert Munteanu commented on SLING-10143: ----------------------------------------- [~enorman] [~reusr1] - +1 on submitting as a PR, it would make it simpler to review - +1 on adding the custom rules.xml to the starter project, even if not enabled by default if you prefer Exceptions are welcome, as: - for Guava we need to be in lockstep with Oak - the commons-collection upgrade is bogus - we have not checked whether newer DropWizard releases work with our metrics bundle > bundles referenced in sling starter are out of date > --------------------------------------------------- > > Key: SLING-10143 > URL: https://issues.apache.org/jira/browse/SLING-10143 > Project: Sling > Issue Type: Improvement > Components: Starter > Reporter: Ruben Reusser > Priority: Major > Fix For: Starter 12 > > Attachments: > 0001-updated-3rd-party-dependencies-of-sling-starter.patch, > 0002-javax.activation-dependency-needed-to-be-increased.patch, > 0003-updated-to-latest-sling-bundles-added-missing-felix-.patch > > > Would be nice to make sure the sling starter uses the latest bundles - > according to > {code:java} > mvn versions:display-dependency-updates{code} > the sling starter is a bit out of date with the dependencies > {code:java} > [INFO] The following dependencies in Dependencies have newer versions: > [INFO] com.composum.nodes:composum-nodes-commons ............. 2.1.1 -> > 2.3.0 > [INFO] com.composum.nodes:composum-nodes-console ............. 2.1.1 -> > 2.3.0 > [INFO] com.composum.nodes:composum-nodes-jslibs .............. 2.1.1 -> > 2.3.0 > [INFO] com.composum.nodes:composum-nodes-pckgmgr ............. 2.1.1 -> > 2.3.0 > [INFO] com.composum.nodes:composum-nodes-usermgr ............. 2.1.1 -> > 2.3.0 > [INFO] com.fasterxml.jackson.core:jackson-annotations ...... 2.11.1 -> > 2.12.1 > [INFO] com.fasterxml.jackson.core:jackson-core ............. 2.11.1 -> > 2.12.1 > [INFO] com.fasterxml.jackson.core:jackson-databind ......... 2.11.1 -> > 2.12.1 > [INFO] com.google.guava:guava .............................. 15.0 -> > 30.1-jre > [INFO] com.h2database:h2-mvstore ......................... 1.4.194 -> > 1.4.200 > [INFO] commons-codec:commons-codec ............................. 1.14 -> > 1.15 > [INFO] commons-collections:commons-collections ............ 3.2.2 -> > 20040616 > [INFO] commons-io:commons-io ................................... 2.6 -> > 2.8.0 > [INFO] io.dropwizard.metrics:metrics-core ............. 3.2.6 -> > 4.2.0-beta.1 > [INFO] org.antlr:antlr4-runtime .............................. 4.7.2 -> > 4.9.1 > [INFO] org.apache.commons:commons-lang3 ......................... 3.9 -> > 3.11 > [INFO] org.apache.felix:org.apache.felix.configadmin ....... 1.9.16 -> > 1.9.20 > [INFO] org.apache.felix:org.apache.felix.eventadmin .......... 1.5.0 -> > 1.6.2 > [INFO] org.apache.felix:org.apache.felix.http.jetty ......... 4.0.18 -> > 4.1.4 > [INFO] org.apache.felix:org.apache.felix.metatype ............ 1.2.2 -> > 1.2.4 > [INFO] org.apache.felix:org.apache.felix.scr ............... 2.1.20 -> > 2.1.24 > [INFO] org.apache.felix:org.apache.felix.utils ............. 1.11.2 -> > 1.11.6 > [INFO] org.apache.felix:org.apache.felix.webconsole .......... 4.5.0 -> > 4.6.0 > [INFO] org.apache.geronimo.specs:geronimo-annotation_1.3_spec .... 1.1 -> > 1.3 > [INFO] org.apache.geronimo.specs:geronimo-atinject_1.0_spec ...... 1.1 -> > 1.2 > [INFO] org.apache.httpcomponents:httpclient ................ 4.5.10 -> > 4.5.13 > [INFO] org.apache.httpcomponents:httpclient-osgi ........... 4.5.10 -> > 4.5.13 > [INFO] org.apache.httpcomponents:httpcore-osgi ............. 4.4.12 -> > 4.4.14 > [INFO] org.apache.jackrabbit:jackrabbit-data ............... 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:jackrabbit-jcr-commons ........ 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:jackrabbit-jcr-rmi ............ 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:jackrabbit-spi ................ 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:jackrabbit-spi-commons ........ 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:jackrabbit-webdav ............. 2.20.0 -> > 2.21.5 > [INFO] org.apache.jackrabbit:oak-api ....................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-authorization-principalbased ... > [INFO] 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-blob ...................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-blob-plugins .............. 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-commons ................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-core ...................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-core-spi .................. 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-jackrabbit-api ............ 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-jcr ....................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-lucene .................... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-query-spi ................. 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-security-spi .............. 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-segment-tar ............... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-store-composite ........... 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-store-document ............ 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit:oak-store-spi ................. 1.32.0 -> > 1.38.0 > [INFO] org.apache.jackrabbit.vault:org.apache.jackrabbit.vault ... > [INFO] 3.4.6 -> > 3.4.8 > [INFO] org.apache.pdfbox:fontbox ........................... 2.0.17 -> > 2.0.22 > [INFO] org.apache.pdfbox:pdfbox ............................ 2.0.17 -> > 2.0.22 > [INFO] org.apache.servicemix.bundles:org.apache.servicemix.bundles.ognl ... > [INFO] 3.2.1_1 -> > 3.2.18_1 > [INFO] org.apache.servicemix.bundles:org.apache.servicemix.bundles.rhino ... > [INFO] 1.7.10_1 -> > 1.7.13_1 > [INFO] > org.apache.servicemix.bundles:org.apache.servicemix.bundles.saaj-impl ... > [INFO] 1.3.23_2 -> > 1.5.1_1 > [INFO] > org.apache.servicemix.bundles:org.apache.servicemix.bundles.thymeleaf ... > [INFO] 3.0.11.RELEASE_1 -> > 3.0.12.RELEASE_1 > [INFO] org.apache.servicemix.specs:org.apache.servicemix.specs.saaj-api-1.3 > ... > [INFO] 2.8.0 -> > 2.9.0 > [INFO] org.apache.sling:org.apache.sling.commons.johnzon ..... 1.2.4 -> > 1.2.6 > [INFO] org.apache.sling:org.apache.sling.commons.osgi ........ 2.4.0 -> > 2.4.2 > [INFO] org.apache.sling:org.apache.sling.commons.scheduler ... > [INFO] 2.7.6 -> > 2.7.12 > [INFO] org.apache.sling:org.apache.sling.discovery.oak ..... 1.2.28 -> > 1.2.30 > [INFO] org.apache.sling:org.apache.sling.discovery.support ... 1.0.4 -> > 1.0.6 > [INFO] org.apache.sling:org.apache.sling.installer.core .... 3.11.2 -> > 3.11.4 > [INFO] org.apache.sling:org.apache.sling.javax.activation .... 0.1.0 -> > 0.2.0 > [INFO] org.apache.sling:org.apache.sling.jcr.repoinit ...... 1.1.26 -> > 1.1.30 > [INFO] org.apache.sling:org.apache.sling.models.impl ....... 1.4.12 -> > 1.4.16 > [INFO] org.apache.sling:org.apache.sling.repoinit.parser ..... 1.6.2 -> > 1.6.4 > [INFO] org.apache.sling:org.apache.sling.scripting.el-api .... 1.0.2 -> > 1.0.4 > [INFO] org.apache.sling:org.apache.sling.scripting.sightly ... > [INFO] 1.4.4-1.4.0 -> > 1.4.6-1.4.0 > [INFO] org.apache.sling:org.apache.sling.scripting.sightly.compiler ... > [INFO] 1.2.8-1.4.0 -> > 1.2.12-1.4.0 > [INFO] org.apache.sling:org.apache.sling.serviceusermapper ... 1.4.4 -> > 1.5.2 > [INFO] org.apache.sling:org.apache.sling.servlets.resolver ... > [INFO] 2.7.10 -> > 2.7.12 > [INFO] org.apache.tika:tika-core ........................ 1.24 -> > 2.0.0-ALPHA > [INFO] org.apache.tika:tika-parsers ..................... 1.24 -> > 2.0.0-ALPHA > [INFO] org.codehaus.groovy:groovy ............................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-ant ........................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-astbuilder ................. 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-cli-picocli ................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-console .................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-datetime ................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-docgenerator ............... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-groovydoc .................. 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-groovysh ................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-jmx ........................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-json ....................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-jsr223 ..................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-macro ...................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-nio ........................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-servlet .................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-sql ........................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-swing ...................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-templates .................. 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-test ....................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-test-junit5 ................ 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-testng ..................... 3.0.6 -> > 3.0.7 > [INFO] org.codehaus.groovy:groovy-xml ........................ 3.0.6 -> > 3.0.7 > [INFO] org.jvnet.staxex:stax-ex .............................. 1.7.6 -> > 2.0.0 > [INFO] org.mongodb:mongo-java-driver ........................ 3.8.2 -> > 3.12.7 > [INFO] org.osgi:org.osgi.service.log ......................... 1.4.0 -> > 1.5.0 > [INFO] org.ow2.asm:asm ........................................... 9.0 -> > 9.1 > [INFO] org.ow2.asm:asm-analysis .................................. 9.0 -> > 9.1 > [INFO] org.ow2.asm:asm-commons ................................... 9.0 -> > 9.1 > [INFO] org.ow2.asm:asm-tree ...................................... 9.0 -> > 9.1 > [INFO] org.ow2.asm:asm-util ...................................... 9.0 -> > 9.1 > [INFO] org.slf4j:jcl-over-slf4j ...................... 1.7.25 -> > 2.0.0-alpha1 > [INFO] org.slf4j:log4j-over-slf4j .................... 1.7.25 -> > 2.0.0-alpha1 > {code} -- This message was sent by Atlassian Jira (v8.3.4#803005)