True, it's not that these artifacts are actually used at Karaf runtime. It's when starting a Karaf (using Maven in this case), there is an attempt to resolve the 2.5.6.SEC01 versions. An excerpt from starting a Karaf tooling (pax) exam test shows:
... Downloading: http://repo/artifactory/repo/org/apache/karaf/webconsole/org.apache.karaf.webconsole.features/2.3.1/org.apache.karaf.webconsole.features-2.3.1.pom Downloaded: http://repo/artifactory/repo/org/apache/karaf/webconsole/org.apache.karaf.webconsole.features/2.3.1/org.apache.karaf.webconsole.features-2.3.1.pom (5 KB at 258.5 KB/sec) Downloading: http://repo/artifactory/repo/org/apache/karaf/webconsole/org.apache.karaf.webconsole.gogo/2.3.1/org.apache.karaf.webconsole.gogo-2.3.1.pom Downloaded: http://repo/artifactory/repo/org/apache/karaf/webconsole/org.apache.karaf.webconsole.gogo/2.3.1/org.apache.karaf.webconsole.gogo-2.3.1.pom (5 KB at 258.3 KB/sec) Downloading: http://repo/artifactory/repo/org/springframework/osgi/spring-osgi-extender/1.2.1/spring-osgi-extender-1.2.1.pom Downloaded: http://repo/artifactory/repo/org/springframework/osgi/spring-osgi-extender/1.2.1/spring-osgi-extender-1.2.1.pom (3 KB at 82.4 KB/sec) Downloading: http://repo/artifactory/repo/org/springframework/osgi/spring-osgi/1.2.1/spring-osgi-1.2.1.pom Downloaded: http://repo/artifactory/repo/org/springframework/osgi/spring-osgi/1.2.1/spring-osgi-1.2.1.pom (39 KB at 2135.7 KB/sec) Downloading: http://repo/artifactory/repo/org/springframework/osgi/spring-osgi-core/1.2.1/spring-osgi-core-1.2.1.pom Downloaded: http://repo/artifactory/repo/org/springframework/osgi/spring-osgi-core/1.2.1/spring-osgi-core-1.2.1.pom (4 KB at 211.5 KB/sec) Downloading: http://repo/artifactory/repo/org/springframework/osgi/spring-osgi-io/1.2.1/spring-osgi-io-1.2.1.pom Downloaded: http://repo/artifactory/repo/org/springframework/osgi/spring-osgi-io/1.2.1/spring-osgi-io-1.2.1.pom (2 KB at 78.1 KB/sec) Downloading: http://repo/artifactory/repo/org/springframework/org.springframework.aop/2.5.6.SEC01/org.springframework.aop-2.5.6.SEC01.pom [WARNING] The POM for org.springframework:org.springframework.aop:jar:2.5.6.SEC01 is missing, no dependency information available Downloading: http://repo/artifactory/repo/org/springframework/org.springframework.beans/2.5.6.SEC01/org.springframework.beans-2.5.6.SEC01.pom [WARNING] The POM for org.springframework:org.springframework.beans:jar:2.5.6.SEC01 is missing, no dependency information available Downloading: http://repo/artifactory/repo/org/springframework/org.springframework.context/2.5.6.SEC01/org.springframework.context-2.5.6.SEC01.pom [WARNING] The POM for org.springframework:org.springframework.context:jar:2.5.6.SEC01 is missing, no dependency information available Downloading: http://repo/artifactory/repo/org/springframework/org.springframework.core/2.5.6.SEC01/org.springframework.core-2.5.6.SEC01.pom [WARNING] The POM for org.springframework:org.springframework.core:jar:2.5.6.SEC01 is missing, no dependency information available Downloading: http://repo/artifactory/repo/org/springframework/osgi/spring-osgi-annotation/1.2.1/spring-osgi-annotation-1.2.1.pom Downloaded: http://repo/artifactory/repo/org/springframework/osgi/spring-osgi-annotation/1.2.1/spring-osgi-annotation-1.2.1.pom (2 KB at 75.6 KB/sec) ... >________________________________ > From: Achim Nierbeck <bcanh...@googlemail.com> >To: "user@karaf.apache.org" <user@karaf.apache.org>; Martin Lichtin ><lich...@yahoo.com> >Sent: Monday, May 13, 2013 11:16 AM >Subject: Re: Karaf has transitive dependencies on old Spring artifacts > > > >Hi, > > >doing a features:info on spring-dm gives me the following: > > >karaf@root()> feature:info spring-dm >Feature spring-dm 1.2.1 >Description: > Spring DM support >Feature has no configuration >Feature has no configuration files >Feature depends on: > spring [2.5.6,4) >Feature contains followed bundles: > >mvn:org.apache.servicemix.bundles/org.apache.servicemix.bundles.cglib/2.2.2_1 >start-level=30 > mvn:org.springframework.osgi/spring-osgi-io/1.2.1 start-level=30 > mvn:org.springframework.osgi/spring-osgi-core/1.2.1 start-level=30 > mvn:org.springframework.osgi/spring-osgi-extender/1.2.1 start-level=30 > mvn:org.springframework.osgi/spring-osgi-annotation/1.2.1 start-level=30 > >mvn:org.apache.karaf.deployer/org.apache.karaf.deployer.spring/3.0.0-SNAPSHOT >start-level=30 > >mvn:org.apache.karaf.bundle/org.apache.karaf.bundle.springstate/3.0.0-SNAPSHOT >start-level=30 >Feature has no conditionals. > > >Therefore it'll install the "latest" available spring feature. >So again doing a feature:info on spring: >karaf@root()> feature:info spring >Feature spring 3.2.1.RELEASE >Description: > Spring 3.2.x support >Details: > Spring Support >Feature has no configuration >Feature has no configuration files >Feature has no dependencies. >Feature contains followed bundles: > >mvn:org.apache.servicemix.bundles/org.apache.servicemix.bundles.aopalliance/1.0_6 > start-level=30 > mvn:org.springframework/org.springframework.core/3.2.1.RELEASE start-level=30 > mvn:org.springframework/org.springframework.expression/3.2.1.RELEASE >start-level=30 > mvn:org.springframework/org.springframework.beans/3.2.1.RELEASE >start-level=30 > mvn:org.springframework/org.springframework.aop/3.2.1.RELEASE start-level=30 > mvn:org.springframework/org.springframework.context/3.2.1.RELEASE >start-level=30 > mvn:org.springframework/org.springframework.context.support/3.2.1.RELEASE >start-level=30 > >mvn:org.apache.karaf.deployer/org.apache.karaf.deployer.spring/3.0.0-SNAPSHOT >start-level=30 >Feature has no conditionals. > > > > >Please note I did this on the latest Karaf (3.0.0-SNAPSHOT) version available >right now. > > >If you do the same investigation on your system you probably do get a better >picture of the dependencies. > > >regards, Achim > > > >2013/5/10 Martin Lichtin <lich...@yahoo.com> > >Hi >> >>I've seen this issue with NMR recently >>https://issues.apache.org/jira/browse/SMX4NMR-313 and also see it with Karaf. >>Does anyone understand why Karaf depends spring-osgi-* and therefore on >>oldish versions of spring artifacts? >>The dependency goes like >> >>apache-karaf [2.3.1] >> spring-osgi-extender [1.2.1] >> spring-osgi-core [1.2.1] >> org.springframework.aop [2.5.6.SEC01] >> org.springframework.beans [2.5.6.SEC01] >> org.springframework.context [2.5.6.SEC01] >> org.springframework.core [2.5.6.SEC01] >> spring-osgi-core[1.2.1] >> ... >> >> > > > >-- > >Apache Karaf <http://karaf.apache.org/> Committer & PMC >OPS4J Pax Web <http://wiki.ops4j.org/display/paxweb/Pax+Web/> Committer & >Project Lead >OPS4J Pax for Vaadin <http://team.ops4j.org/wiki/display/PAXVAADIN/Home> >Commiter & Project Lead >blog <http://notizblog.nierbeck.de/> > >
