[jira] [Commented] (TIKA-1675) please avoid xmlbeans dependency
[ https://issues.apache.org/jira/browse/TIKA-1675?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17477943#comment-17477943 ] Tim Allison commented on TIKA-1675: --- [~pj.fanning] , I updated the fix version for when we upgraded to POI 4.x which would have brought in XMLBeans 3.x. Please let me know if this is not the right fix version. Thank you, again. > please avoid xmlbeans dependency > > > Key: TIKA-1675 > URL: https://issues.apache.org/jira/browse/TIKA-1675 > Project: Tika > Issue Type: Bug >Reporter: Robert Muir >Priority: Major > Fix For: 1.19 > > > This dependency (e.g jar file) is fundamentally broken... XMLBEANS-499 > Is there an alternative that could be used? -- This message was sent by Atlassian Jira (v8.20.1#820001)
[jira] [Commented] (TIKA-1675) please avoid xmlbeans dependency
[ https://issues.apache.org/jira/browse/TIKA-1675?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17476876#comment-17476876 ] PJ Fanning commented on TIKA-1675: -- [~tallison] this can be closed - the xmlbeans issue is fixed > please avoid xmlbeans dependency > > > Key: TIKA-1675 > URL: https://issues.apache.org/jira/browse/TIKA-1675 > Project: Tika > Issue Type: Bug >Reporter: Robert Muir >Priority: Major > > This dependency (e.g jar file) is fundamentally broken... XMLBEANS-499 > Is there an alternative that could be used? -- This message was sent by Atlassian Jira (v8.20.1#820001)
[jira] [Commented] (TIKA-1675) please avoid xmlbeans dependency
[ https://issues.apache.org/jira/browse/TIKA-1675?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14619365#comment-14619365 ] Ken Krugler commented on TIKA-1675: --- Not sure why the above discussion is being classified as "political". As Uwe points out, this would best be solved by POI, since it's their dependency that's causing the problem. If they can't or won't fix it fast enough, then the fallback solution would be for us (Tika) to fix up the xmlbeans jar (e.g. as per https://issues.apache.org/jira/browse/XMLBEANS-499?focusedCommentId=14258877&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-14258877), push it with a new version to Maven central, and then edit our pom to override the version used by POI. Or is there another, better way in Tika to work around the problem? > please avoid xmlbeans dependency > > > Key: TIKA-1675 > URL: https://issues.apache.org/jira/browse/TIKA-1675 > Project: Tika > Issue Type: Bug >Reporter: Robert Muir > > This dependency (e.g jar file) is fundamentally broken... XMLBEANS-499 > Is there an alternative that could be used? -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (TIKA-1675) please avoid xmlbeans dependency
[ https://issues.apache.org/jira/browse/TIKA-1675?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14619032#comment-14619032 ] Robert Muir commented on TIKA-1675: --- Again its a broken jar file. Why does it have to be a rewrite to fix this? Can we please move past the politics and consider a technical solution? Thanks. > please avoid xmlbeans dependency > > > Key: TIKA-1675 > URL: https://issues.apache.org/jira/browse/TIKA-1675 > Project: Tika > Issue Type: Bug >Reporter: Robert Muir > > This dependency (e.g jar file) is fundamentally broken... XMLBEANS-499 > Is there an alternative that could be used? -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (TIKA-1675) please avoid xmlbeans dependency
[ https://issues.apache.org/jira/browse/TIKA-1675?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14617588#comment-14617588 ] Uwe Schindler commented on TIKA-1675: - kiwiwings already proposed this for POI: [http://apache-poi.1045710.n5.nabble.com/Re-svn-commit-r1682117-poi-site-src-documentation-content-xdocs-document-index-xml-td5718914.html#a5718928] But this is really an issue for Apache POI! > please avoid xmlbeans dependency > > > Key: TIKA-1675 > URL: https://issues.apache.org/jira/browse/TIKA-1675 > Project: Tika > Issue Type: Bug >Reporter: Robert Muir > > This dependency (e.g jar file) is fundamentally broken... XMLBEANS-499 > Is there an alternative that could be used? -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (TIKA-1675) please avoid xmlbeans dependency
[ https://issues.apache.org/jira/browse/TIKA-1675?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14617578#comment-14617578 ] Uwe Schindler commented on TIKA-1675: - There was already an issue/discussion open on POI mailing lists and issue tracker to no longer use xmlbeans & Co, because since Java 6 the JAXB interface is a public API that allows to map XML documents to Java Beans - which is exactly the same as xmlbeans is dooing. Unfortunately this is a larger approach to change the API to do use the standards Java API (and might also bring more performance). This would remove a lot of unneeded XML-based stuff from POI for Microsoft Office 2007+ file formats. -1 to absorb the buggy xmlbeans (this lib was also the problem of the major Solr/Lucene security issue last year) +1 to adopt JAXB instead of xmlbeans > please avoid xmlbeans dependency > > > Key: TIKA-1675 > URL: https://issues.apache.org/jira/browse/TIKA-1675 > Project: Tika > Issue Type: Bug >Reporter: Robert Muir > > This dependency (e.g jar file) is fundamentally broken... XMLBEANS-499 > Is there an alternative that could be used? -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (TIKA-1675) please avoid xmlbeans dependency
[ https://issues.apache.org/jira/browse/TIKA-1675?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14617457#comment-14617457 ] Michael McCandless commented on TIKA-1675: -- bq. If the project is dead and not fixing packaging bugs like this, i think its irresponsible to depend on it. +1 Maybe POI could/should absorb the parts of xmlbeans it depends on? > please avoid xmlbeans dependency > > > Key: TIKA-1675 > URL: https://issues.apache.org/jira/browse/TIKA-1675 > Project: Tika > Issue Type: Bug >Reporter: Robert Muir > > This dependency (e.g jar file) is fundamentally broken... XMLBEANS-499 > Is there an alternative that could be used? -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (TIKA-1675) please avoid xmlbeans dependency
[ https://issues.apache.org/jira/browse/TIKA-1675?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14617417#comment-14617417 ] Robert Muir commented on TIKA-1675: --- If the project is dead and not fixing packaging bugs like this, i think its irresponsible to depend on it. > please avoid xmlbeans dependency > > > Key: TIKA-1675 > URL: https://issues.apache.org/jira/browse/TIKA-1675 > Project: Tika > Issue Type: Bug >Reporter: Robert Muir > > This dependency (e.g jar file) is fundamentally broken... XMLBEANS-499 > Is there an alternative that could be used? -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (TIKA-1675) please avoid xmlbeans dependency
[ https://issues.apache.org/jira/browse/TIKA-1675?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14617412#comment-14617412 ] Nick Burch commented on TIKA-1675: -- It's a key dependency of POI, so not able to be removed, sorry If this is a big enough annoyance, we can ask the Apache Attic PMC if they'd mind us getting XMLBeans out of the attic for a bug-fix release, but it'd probably be polite to fix a few other open issues at the same time (especially ones with patches), so wouldn't be a 2 minute job... > please avoid xmlbeans dependency > > > Key: TIKA-1675 > URL: https://issues.apache.org/jira/browse/TIKA-1675 > Project: Tika > Issue Type: Bug >Reporter: Robert Muir > > This dependency (e.g jar file) is fundamentally broken... XMLBEANS-499 > Is there an alternative that could be used? -- This message was sent by Atlassian JIRA (v6.3.4#6332)