I am going to guess that the other versions were downloaded as a part of a
plugin.

You could use mvn dependency:resolve-plugins to check?

--
Jody Garnett

On 4 February 2015 at 17:05, Torben Barsballe <tbarsba...@boundlessgeo.com>
wrote:

> I have dug into this deeper, and it appears that the top level geotools
> pom is downloading a number of different versions of commons-lang, but is
> only using the declared version. I have no idea why these extra versions
> are being downloaded but not used.
> Specifically, the following artifacts are downloaded (for "mvn install"
> with an empty local repository):
>
> commons-lang-2.1.jar
> commons-lang-2.3.jar
> commons-lang-2.4.jar
> commons-lang3-3.1.jar
>
> However, running mvn dependency:tree on each of the submodules only shows
> the following dependencies on commons-lang:
> ...
> [INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ gt-app-schema
> ---
> [INFO] org.geotools:gt-app-schema:jar:13-SNAPSHOT
> [INFO] \- commons-lang:commons-lang:jar:2.3:compile
> ...
> [INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ gt-webservice
> ---
> [INFO] org.geotools:gt-webservice:jar:13-SNAPSHOT
> [INFO] +- org.geotools:gt-app-schema:jar:13-SNAPSHOT:compile
> [INFO] |  \- commons-lang:commons-lang:jar:2.3:compile
> [INFO] \- org.geotools:gt-app-schema:jar:tests:13-SNAPSHOT:test
> [INFO]    \- (commons-lang:commons-lang:jar:2.3:test - omitted for
> duplicate)
> ...
> [INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ gt-solr ---
> [INFO] org.geotools:gt-solr:jar:13-SNAPSHOT
> [INFO] \- commons-lang:commons-lang:jar:2.3:compile
> ...
>
> All of which match the current geotools commons-lang version of 2.3
>
> One other point of interest is that commons-lang-2.4.jar and
> commons-lang3-3.1.jar are only downloaded on a "mvn install", not anything
> else (eg "mvn test", "mvn clean", etc), whereas commons-lang-2.1.jar and
> commons-lang-2.3.jar are downloaded when running any maven goal (assuming
> an empty local repository).
>
> If anyone with a better understanding of maven or the GeoTools dependancy
> strucure has any ideas, I am open to suggestions.
>
> Torben
>
> On Wed, Feb 4, 2015 at 11:17 AM, Andrea Aime <andrea.a...@geo-solutions.it
> > wrote:
>
>> On Wed, Feb 4, 2015 at 8:02 PM, Torben Barsballe <
>> tbarsba...@boundlessgeo.com> wrote:
>>
>>> I am working on uppdating the commons-lang dependancy in geoserver (for
>>> https://jira.codehaus.org/browse/GEOS-6868), and am starting with the
>>> geotools commons-lang dependancies.
>>>
>>> It looks like GeoTools currently pulls in several versions of
>>> commons-lang (2.1, 2.3, 2.4) via transitive dependancies.
>>> 2.3 comes from the top level poms, but the other versions are not
>>> declared in any poms.
>>>
>>> Since running mvn dependancy:tree on the top-level pom fails to produce
>>> any results, I am currently cobbling together a script that runs it against
>>> each pom and catches the usefull output.
>>>
>>> In the meantime, does anyone know where these dependancies might be
>>> coming from
>>>
>>
>> I don't, but GeoTools/GeoServer and indeed depending on a number of old
>> libraries, which in turn depend on older libraries, and so on :-)
>> Someone made a table here:
>> http://jira.codehaus.org/browse/GEOS-6724
>>
>> Cheers
>> Andrea
>>
>>
>> --
>> ==
>> GeoServer Professional Services from the experts! Visit
>> http://goo.gl/NWWaa2 for more information.
>> ==
>>
>> Ing. Andrea Aime
>> @geowolf
>> Technical Lead
>>
>> GeoSolutions S.A.S.
>> Via Poggio alle Viti 1187
>> 55054  Massarosa (LU)
>> Italy
>> phone: +39 0584 962313
>> fax: +39 0584 1660272
>> mob: +39  339 8844549
>>
>> http://www.geo-solutions.it
>> http://twitter.com/geosolutions_it
>>
>> *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*
>>
>> Le informazioni contenute in questo messaggio di posta elettronica e/o
>> nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
>> loro utilizzo è consentito esclusivamente al destinatario del messaggio,
>> per le finalità indicate nel messaggio stesso. Qualora riceviate questo
>> messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
>> darcene notizia via e-mail e di procedere alla distruzione del messaggio
>> stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
>> divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
>> utilizzarlo per finalità diverse, costituisce comportamento contrario ai
>> principi dettati dal D.Lgs. 196/2003.
>>
>>
>>
>> The information in this message and/or attachments, is intended solely
>> for the attention and use of the named addressee(s) and may be confidential
>> or proprietary in nature or covered by the provisions of privacy act
>> (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
>> Code).Any use not in accord with its purpose, any disclosure, reproduction,
>> copying, distribution, or either dissemination, either whole or partial, is
>> strictly forbidden except previous formal approval of the named
>> addressee(s). If you are not the intended recipient, please contact
>> immediately the sender by telephone, fax or e-mail and delete the
>> information in this message that has been received in error. The sender
>> does not give any warranty or accept liability as the content, accuracy or
>> completeness of sent messages and accepts no responsibility  for changes
>> made after they were sent or for other risks which arise as a result of
>> e-mail transmission, viruses, etc.
>>
>> -------------------------------------------------------
>>
>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming. The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is
> your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net/
> _______________________________________________
> GeoTools-Devel mailing list
> GeoTools-Devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geotools-devel
>
>
------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
GeoTools-Devel mailing list
GeoTools-Devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geotools-devel

Reply via email to