This can cause problem in downstream project like servicemix where use maven-notices-plugin to merge all notices from dependencies in features-repo folder, though not a showstopper for CXF itself. －－－－－－－－－－－－－ Freeman(Yue) Fang
Red Hat, Inc. FuseSource is now part of Red Hat On 2014-10-9, at 下午4:48, Daniel Kulp wrote: > > The features file would only pull in the opensaml jar/bundle, not the wrong > xerces. We don’t use “cxf.opensaml.osgi.version” as a version for any sort > of <dependency”. Therefore, I’m failing to see how this is a problem. > > Dan > > > > On Oct 9, 2014, at 1:43 AM, Freeman Fang <[email protected]> wrote: > >> I'm sorry to say I have to -1 for both. >> >> As both CXF 2.7.13 and 3.0.2 use >> <cxf.opensaml.osgi.version>2.6.1_1</cxf.opensaml.osgi.version> >> however servicemix wrapped opensaml 2.6.1_1 pull in wrong xerces dependency >> like(because build against the Shibboleth repo but not the maven central >> repo)[1] >> >> <dependency> >> <groupId>org.apache.xerces</groupId> >> <artifactId>xercesImpl</artifactId> >> <version>2.10.0</version> >> <scope>runtime</scope> >> </dependency> >> >> This wrong groupId can cause lots of problems as Dan explained in >> CXF-5565[3]. >> servicemix wrapped opensaml 2.6.1_2[2] already fixed this >> >> So we need use >> <cxf.opensaml.osgi.version>2.6.1_2</cxf.opensaml.osgi.version> >> instead. >> >> I will commit fix soon. >> >> [1]http://repo2.maven.org/maven2/org/apache/servicemix/bundles/org.apache.servicemix.bundles.opensaml/2.6.1_1/org.apache.servicemix.bundles.opensaml-2.6.1_1.pom >> [2]http://repo2.maven.org/maven2/org/apache/servicemix/bundles/org.apache.servicemix.bundles.opensaml/2.6.1_2/org.apache.servicemix.bundles.opensaml-2.6.1_2.pom >> [3]https://issues.apache.org/jira/browse/CXF-5565 >> －－－－－－－－－－－－－ >> Freeman(Yue) Fang >> >> Red Hat, Inc. >> FuseSource is now part of Red Hat >> >> >> >> On 2014-10-9, at 上午1:30, Daniel Kulp wrote: >> >>> >>> This is a vote to release CXF 2.7.13 and 3.0.2. There are over 90 JIRA >>> issues resolved for 3.0.2 which is a lot. >>> >>> Tags: >>> https://git-wip-us.apache.org/repos/asf?p=cxf.git;a=tag;h=3ec631c97e9eccf62490b176aab61044b3b9ab9f >>> https://git-wip-us.apache.org/repos/asf?p=cxf.git;a=tag;h=44fff0be11438e91e236bc204e5975bd744613c1 >>> >>> Staging areas: >>> https://repository.apache.org/content/repositories/orgapachecxf-1029/ >>> https://repository.apache.org/content/repositories/orgapachecxf-1030/ >>> >>> >>> Here is my +1 >>> >>> -- >>> Daniel Kulp >>> [email protected] - http://dankulp.com/blog >>> Talend Community Coder - http://coders.talend.com >>> >> > > -- > Daniel Kulp > [email protected] - http://dankulp.com/blog > Talend Community Coder - http://coders.talend.com >
