[ 
https://issues.apache.org/jira/browse/CXF-5611?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13935160#comment-13935160
 ] 

Aki Yoshida commented on CXF-5611:
----------------------------------

Hi Freeman,
Shouldn't Alexey's project itself add the corresponding imports to override 
what is derived from the compile time dependency?
e.g. adding
  <Import-Package>
     org.joda.time;version="[1.6,3)"
  </Import-Package>

cxf-rt-security itself has the correct import dependency to accept a lower 
version of joda than 2.2.
Or are you suggesting to change the compile time dependency of 2.7.11's 
cxf-rt-security?

regards, aki

> [joda-time] different versions in maven and feature descriptor
> --------------------------------------------------------------
>
>                 Key: CXF-5611
>                 URL: https://issues.apache.org/jira/browse/CXF-5611
>             Project: CXF
>          Issue Type: Bug
>          Components: Build system
>    Affects Versions: 2.7.11
>            Reporter: Alexey Markevich
>            Assignee: Freeman Fang
>         Attachments: CXF-5611.zip
>
>
> I have a project which depends on cxf-rt-security [1]. After the build there 
> is 
> Import-Package: org.joda.time;version="[2.2,3)"
> But after deploy to karaf got
> Reason: Missing Constraint: Import-Package: org.joda.time; 
> version="[2.2.0,3.0.0)"
> because wss4j feature contains [2]
> 1.
> [INFO] \- org.apache.cxf:cxf-rt-security:jar:2.7.11-SNAPSHOT:compile
> [INFO]    +- org.opensaml:opensaml:jar:2.6.1:compile
> [INFO]    |  +- joda-time:joda-time:jar:2.2:compile
> 2.
> <bundle start-level='25' 
> dependency="true">mvn:joda-time/joda-time/2.1</bundle>



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to