On Sat, 2008-07-05 at 17:04 +0200, Jörg Schaible wrote: > Hi Matt, > > Matt Benson wrote: > > > > > --- Jörg Schaible <[EMAIL PROTECTED]> wrote: > > > >> Forgot to add the path for the POM, just in case you > >> will do another RC. > >> > > > > So... can you explain again what is the effect of > > moving [logging] to the separate dependencyManagement > > section of the POM? > > jxpath does not use logging, it's a dep of beanutils. Therefore it should > not even be declared as (optional) runtime dep, because if somebody uses > (optional) beanutils, it's part of the dependency list anyway. However, > beanutils uses still 1.0.3 and with the dependencyManagement you can > overwrite the version of the transitive dependency: > > [EMAIL PROTECTED] ~/src/Commons/proper/jxpath $ mvn dependency:tree > [INFO] Scanning for projects... > [INFO] Searching repository for plugin with prefix: 'dependency'. > [INFO] > ------------------------------------------------------------------------ > [INFO] Building Commons JXPath > [INFO] task-segment: [dependency:tree] > [INFO] > ------------------------------------------------------------------------ > [INFO] [dependency:tree] > [INFO] commons-jxpath:commons-jxpath:jar:1.3-SNAPSHOT > [INFO] +- xerces:xercesImpl:jar:2.4.0:provided > [INFO] +- javax.servlet:servlet-api:jar:2.4:provided > [INFO] +- javax.servlet:jsp-api:jar:2.0:provided > [INFO] +- junit:junit:jar:3.8.1:test > [INFO] +- xml-apis:xml-apis:jar:1.3.04:provided > [INFO] +- jdom:jdom:jar:1.0:compile > [INFO] +- commons-beanutils:commons-beanutils:jar:1.7.0:compile > [INFO] | \- commons-logging:commons-logging:jar:1.1.1:compile (version > managed from 1.0.3) > [INFO] \- com.mockrunner:mockrunner-jdk1.3-j2ee1.3:jar:0.4:test > [INFO] \- org.mockejb:mockejb:jar:0.6-beta2:test > [INFO] \- cglib:cglib-full:jar:2.0.2:test > [INFO] > ------------------------------------------------------------------------ > [INFO] BUILD SUCCESSFUL > [INFO] > ------------------------------------------------------------------------ > [INFO] Total time: 21 seconds > [INFO] Finished at: Sat Jul 05 17:01:51 CEST 2008 > [INFO] Final Memory: 10M/20M > [INFO] > ------------------------------------------------------------------------ >
+1. If jxpath doesn't use logging directly, but does via another optional dependency then using dependencyManagement looks to be the right option to set. This isn't release critical IMO, because users can always override the logging version themselves, but bumping the version to 1.1.1 by default seems like a nice helpful thing to do. Cheers, Simon --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
