Uploaded image for project: 'JBoss BRMS Platform'
  1. JBoss BRMS Platform
  2. RHBRMS-2658

org.reflections 0.9.10.redhat-3 (used by OptaPlanner and (soon) Drools) requires Javassist version 3.19 but ip-bom downgrades it to 3.18

    XMLWordPrintable

Details

    • ER3

    Description

      org.reflections 0.9.10.redhat-3 depends on javassist 3.19.0.GA-redhat-1.
      http://mvnrepository.com/artifact/org.reflections/reflections/0.9.10.redhat-3
      but the productized ip-bom downgrades javassist to 3.18.2...

      Note: org.reflections 0.9.10. depends on javassist 3.18.2-GA
      http://mvnrepository.com/artifact/org.reflections/reflections/0.9.10
      So the redhat productized version deliberately upgraded javassist. This could be for any reason, such as a security fix.

      On community, it's probably a good idea that we upgrade javassist to 3.19, especially on master to avoid future trouble.
      https://github.com/jboss-integration/jboss-integration-platform-bom/blob/master/pom.xml#L257

        <version.org.javassist>3.18.2-GA</version.org.javassist>
      

      becomes

        <version.org.javassist>3.19.0-GA</version.org.javassist>
      

      or even 3.21.0-GA directly

      Attachments

        Issue Links

          Activity

            People

              rzhang+1@redhat.com Cheng Zhang (Inactive)
              gdesmet@redhat.com Geoffrey De Smet
              Radovan Synek Radovan Synek
              Radovan Synek Radovan Synek
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: