Hi, do I read this right that "maven-core" introduces this "convergence problem", i.e. it depends on "plexus-classworlds" in two ways, once directly on 2.8.0, and second transitively to a different version 2.6.0 via "org.eclipse.sisu.plexus".
That would mean not something we should try to fix in POI, maybe something that can be addressed in XMLBeans, but in the end an issue in dependency "maven-core"? How do you handle such cases in Tika? Add an exclusion for the check? Or add an "override" dependency to define the version directly? Or exclude the wrong version-dependency? In an ideal world, XMLBeans would provide the maven plugin as a separate dependency, not as part of the core functionality. Thanks... Dominik. On Tue, Jan 7, 2025 at 8:39 PM Tim Allison <talli...@apache.org> wrote: > Sorry. I'm looking at these more closely, and the problem is with the maven > dependencies brought in my xmlbeans...not something that we should fix on > POI or xmlbeans. > > WDYT? > > > P.S. I did notice some convergence issues. I don't think these are a > > showstopper...not clear if we should fix these in XMLBeans or let > > downstream users fix them in the next release. > > > > [ERROR] Dependency convergence error for > > org.codehaus.plexus:plexus-utils:jar:3.5.1 paths to dependency are: > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-core:jar:3.9.9:runtime > > [ERROR] +-org.apache.maven:maven-settings:jar:3.9.9:runtime > > [ERROR] +-org.codehaus.plexus:plexus-utils:jar:3.5.1:runtime > > [ERROR] and > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-core:jar:3.9.9:runtime > > [ERROR] > +-org.apache.maven:maven-settings-builder:jar:3.9.9:runtime > > [ERROR] +-org.codehaus.plexus:plexus-utils:jar:3.5.1:runtime > > [ERROR] and > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-core:jar:3.9.9:runtime > > [ERROR] > +-org.apache.maven:maven-settings-builder:jar:3.9.9:runtime > > [ERROR] > > +-org.codehaus.plexus:plexus-sec-dispatcher:jar:2.0:runtime > > [ERROR] +-org.codehaus.plexus:plexus-utils:jar:3.4.1:runtime > > [ERROR] and > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-core:jar:3.9.9:runtime > > [ERROR] > > +-org.apache.maven:maven-repository-metadata:jar:3.9.9:runtime > > [ERROR] +-org.codehaus.plexus:plexus-utils:jar:3.5.1:runtime > > [ERROR] and > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-core:jar:3.9.9:runtime > > [ERROR] +-org.apache.maven:maven-artifact:jar:3.9.9:runtime > > [ERROR] +-org.codehaus.plexus:plexus-utils:jar:3.5.1:runtime > > [ERROR] and > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-core:jar:3.9.9:runtime > > [ERROR] > > +-org.apache.maven:maven-resolver-provider:jar:3.9.9:runtime > > [ERROR] +-org.codehaus.plexus:plexus-utils:jar:3.5.1:runtime > > [ERROR] and > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-core:jar:3.9.9:runtime > > [ERROR] > > +-org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.9.0.M3:runtime > > [ERROR] +-org.codehaus.plexus:plexus-utils:jar:3.5.1:runtime > > [ERROR] and > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-core:jar:3.9.9:runtime > > [ERROR] +-org.codehaus.plexus:plexus-utils:jar:3.5.1:runtime > > [ERROR] and > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-model:jar:3.9.9:runtime > > [ERROR] +-org.codehaus.plexus:plexus-utils:jar:3.5.1:runtime > > [ERROR] and > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-plugin-api:jar:3.9.9:runtime > > [ERROR] +-org.codehaus.plexus:plexus-utils:jar:3.5.1:runtime > > [ERROR] > > [ERROR] > > [ERROR] Dependency convergence error for > > org.codehaus.plexus:plexus-classworlds:jar:2.6.0 paths to dependency are: > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-core:jar:3.9.9:runtime > > [ERROR] > > +-org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.9.0.M3:runtime > > [ERROR] > > +-org.codehaus.plexus:plexus-classworlds:jar:2.6.0:runtime > > [ERROR] and > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-core:jar:3.9.9:runtime > > [ERROR] > +-org.codehaus.plexus:plexus-classworlds:jar:2.8.0:runtime > > [ERROR] and > > [ERROR] +-org.apache.tika:tika-parser-microsoft-module:jar:4.0.0-SNAPSHOT > > [ERROR] +-org.apache.poi:poi-ooxml:jar:5.4.0:compile > > [ERROR] +-org.apache.xmlbeans:xmlbeans:jar:5.3.0:compile > > [ERROR] +-org.apache.maven:maven-plugin-api:jar:3.9.9:runtime > > [ERROR] > +-org.codehaus.plexus:plexus-classworlds:jar:2.8.0:runtime > > > > > > On Mon, Jan 6, 2025 at 4:56 PM PJ Fanning <fannin...@apache.org> wrote: > > > >> We need at least 1 more review from a POI PMC member before we can > >> proceed. If anyone has time, it would be much appreciated. > >> > >> > >> On 2025/01/02 13:29:43 Dominik Stadler wrote: > >> > Hi, > >> > > >> > I tested the staged binaries with various projects and reviewed > >> contents of > >> > the source-distribution. Also compilation from source did work. So > >> > everything fine as far as I see. > >> > > >> > I vote +1 for release! > >> > > >> > Thanks PJ for preparing the release! Dominik. > >> > > >> > On Sun, Dec 29, 2024 at 8:19 PM PJ Fanning > <fannin...@yahoo.com.invalid > >> > > >> > wrote: > >> > > >> > > Hello POI Community, > >> > > > >> > > This is a call for a vote to release Apache POI version 5.4.0 (RC2). > >> > > > >> > > The discussion thread: > >> > > https://lists.apache.org/thread/4sd7p5z2cxp0l9wb2orw4n0gc9w348gw > >> > > > >> > > The release candidate: > >> > > https://dist.apache.org/repos/dist/dev/poi/5.4.0-RC2/ > >> > > > >> > > > >> > > This release has been signed with a PGP key available here: > >> > > https://downloads.apache.org/poi/KEYS > >> > > > >> > > Release Notes: > >> > > https://dist.apache.org/repos/dist/dev/poi/RELEASE-NOTES-5.4.0.txt > >> > > > >> > > I will add the svn tag REL_5_4_0 if the vote passes. > >> > > > >> > > Svn commit ID: https://svn.apache.org/repos/asf/poi/trunk@1922754 > >> > > > >> > > Please download, verify, and test. > >> > > > >> > > > >> > > We have also staged jars in the Apache Nexus Repository. > >> > > These were built with the same code as appears in this Source > Release > >> > > Candidate. > >> > > We would appreciate if users could test with these too. > >> > > > >> > > If anyone finds any serious problems with these jars, please also > >> notify > >> > > us on this thread. > >> > > > >> > > > https://repository.apache.org/content/groups/staging/org/apache/poi/ > >> > > > >> > > In gradle, you can add this repository. > >> > > > >> > > maven { > >> > > url "https://repository.apache.org/content/groups/staging/"; > >> > > } > >> > > > >> > > > >> > > The VOTE will pass if we have more positive votes than negative > votes > >> > > and there must be a minimum of 3 approvals from POI PMC members. > >> > > > >> > > I will leave the vote open for at least a week. > >> > > > >> > > [ ] +1 approve > >> > > [ ] +0 no opinion > >> > > [ ] -1 disapprove with the reason > >> > > > >> > > To learn more about Apache POI, please see https://poi.apache.org/ > >> > > > >> > > > >> > > Checklist for reference: > >> > > [ ] Download links are valid. > >> > > [ ] Checksums and signatures. > >> > > [ ] LICENSE/NOTICE files exist > >> > > [ ] No unexpected binary files > >> > > [ ] Source files have ASF headers > >> > > [ ] Can compile from source > >> > > > >> > > To compile from the source, please refer to: > >> > > https://poi.apache.org/devel/index.html > >> > > > >> > > Some notes about verifying downloads can be found at: > >> > > https://poi.apache.org/download.html > >> > > > >> > > Here is my +1 (binding). > >> > > > >> > > Thanks, > >> > > PJ Fanning (Apache POI PMC member) > >> > > > >> > > > --------------------------------------------------------------------- > >> > > To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org > >> > > For additional commands, e-mail: dev-h...@poi.apache.org > >> > > > >> > > > >> > > >> > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org > >> For additional commands, e-mail: dev-h...@poi.apache.org > >> > >> >
