cxf-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Freeman Fang <freeman.f...@gmail.com>
Subject Re: [VOTE] CXF 2.7.13/3.0.2
Date Thu, 09 Oct 2014 09:06:30 GMT
This can cause problem in downstream project like servicemix where use maven-notices-plugin
to merge all notices from dependencies in features-repo folder, though not a showstopper for
CXF itself.
-------------
Freeman(Yue) Fang

Red Hat, Inc. 
FuseSource is now part of Red Hat



On 2014-10-9, at 下午4:48, Daniel Kulp wrote:

> 
> The features file would only pull in the opensaml jar/bundle, not the wrong xerces. 
We don’t use “cxf.opensaml.osgi.version” as a version for any sort of <dependency”.
  Therefore, I’m failing to see how this is a problem.
> 
> Dan
> 
> 
> 
> On Oct 9, 2014, at 1:43 AM, Freeman Fang <freeman.fang@gmail.com> wrote:
> 
>> I'm sorry to say I have to -1 for both.
>> 
>> As both CXF 2.7.13 and 3.0.2 use 
>> <cxf.opensaml.osgi.version>2.6.1_1</cxf.opensaml.osgi.version>
>> however servicemix wrapped opensaml 2.6.1_1 pull in wrong xerces dependency like(because
build against the Shibboleth repo but not the maven central repo)[1]
>> 
>> <dependency>
>>   <groupId>org.apache.xerces</groupId>
>>   <artifactId>xercesImpl</artifactId>
>>   <version>2.10.0</version>
>>   <scope>runtime</scope>
>> </dependency>
>> 
>> This wrong groupId can cause lots of problems as Dan explained in CXF-5565[3].
>> servicemix wrapped opensaml 2.6.1_2[2] already fixed this
>> 
>> So we need use 
>> <cxf.opensaml.osgi.version>2.6.1_2</cxf.opensaml.osgi.version>
>> instead.
>> 
>> I will commit fix soon.
>> 
>> [1]http://repo2.maven.org/maven2/org/apache/servicemix/bundles/org.apache.servicemix.bundles.opensaml/2.6.1_1/org.apache.servicemix.bundles.opensaml-2.6.1_1.pom
>> [2]http://repo2.maven.org/maven2/org/apache/servicemix/bundles/org.apache.servicemix.bundles.opensaml/2.6.1_2/org.apache.servicemix.bundles.opensaml-2.6.1_2.pom
>> [3]https://issues.apache.org/jira/browse/CXF-5565
>> -------------
>> Freeman(Yue) Fang
>> 
>> Red Hat, Inc. 
>> FuseSource is now part of Red Hat
>> 
>> 
>> 
>> On 2014-10-9, at 上午1:30, Daniel Kulp wrote:
>> 
>>> 
>>> This is a vote to release CXF 2.7.13 and 3.0.2.    There are over 90 JIRA issues
resolved for 3.0.2 which is a lot.
>>> 
>>> Tags:
>>> https://git-wip-us.apache.org/repos/asf?p=cxf.git;a=tag;h=3ec631c97e9eccf62490b176aab61044b3b9ab9f
>>> https://git-wip-us.apache.org/repos/asf?p=cxf.git;a=tag;h=44fff0be11438e91e236bc204e5975bd744613c1
>>> 
>>> Staging areas:
>>> https://repository.apache.org/content/repositories/orgapachecxf-1029/
>>> https://repository.apache.org/content/repositories/orgapachecxf-1030/
>>> 
>>> 
>>> Here is my +1
>>> 
>>> -- 
>>> Daniel Kulp
>>> dkulp@apache.org - http://dankulp.com/blog
>>> Talend Community Coder - http://coders.talend.com
>>> 
>> 
> 
> -- 
> Daniel Kulp
> dkulp@apache.org - http://dankulp.com/blog
> Talend Community Coder - http://coders.talend.com
> 


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message