[ https://issues.apache.org/jira/browse/OAK-7182?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17558430#comment-17558430 ]
Julian Reschke commented on OAK-7182: ------------------------------------- The issue is that there are *users* of Oak who currently assume Guava 15 is present; we need to decouple our own use from everybody else's use to make progress, I understand the update issue. If there is a new Guava issue, that means we'll have to update and release Guava; but that's not that different from any other security issue. > Make it possible to update Guava > -------------------------------- > > Key: OAK-7182 > URL: https://issues.apache.org/jira/browse/OAK-7182 > Project: Jackrabbit Oak > Issue Type: Wish > Reporter: Julian Reschke > Priority: Minor > Attachments: GuavaTests.java, OAK-7182-guava-21-3.diff, > OAK-7182-guava-21-4.diff, OAK-7182-guava-21.diff, OAK-7182-guava-23.6.1.diff, > guava.diff > > > We currently rely on Guava 15, and this affects all users of Oak because they > essentially need to use the same version. > This is an overall issue to investigate what would need to be done in Oak in > order to make updates possible. -- This message was sent by Atlassian Jira (v8.20.7#820007)