Different versions in BOM vs WAR

[Jérôme LELEU]

Hi,

I notice that the versions in the BOM are sometimes different from the versions in the WAR.

For example, in version 6.4.0-RC5, there is:

- guava 30.0-jre in the BOM

- guava 30.1.1-jre in the WAR.

Shouldn't both versions be the same?

Thanks.

Best regards,

Jérôme

[Misagh]

They should.

> --
> You received this message because you are subscribed to the Google Groups "CAS Developer" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to cas-dev+u...@apereo.org.
> To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-dev/CAP279Lyit7KSxekntCjbmHv3pTMNyjgawQky6C9z0%3DyC_zzMLg%40mail.gmail.com.

[Jérôme LELEU]

Hi,

OK. I agree.

So what's the fix? Changing the BOM generation process or changing the dependency versions in the gradle.properties?

Thanks.

Best regards,

Jérôme

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-dev/CAGSBKkd7xjeGs9GeEVB40MFm0JcUWhTcCXbokk6hQJZTZWqurA%40mail.gmail.com.

[Misagh]

The latter. You'd have to see where the conflict comes from first.

[Jérôme LELEU]

Hi,

Thanks for the feedback.

So this is something we must do manually when needed.

Best regards,

Jérôme

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-dev/CAGSBKkfhAfiWqj4yWArbDqfXDo4SY8CnD57tG4ki%2BLPN0X0U%3Dg%40mail.gmail.com.

[Misagh]

Only when you introduce your own dependencies. Otherwise, it needs to
be fixed at the source where you have to look for the source of
conflict.

[Jérôme LELEU]

Sorry but I'm not sure to follow you.

Let's take my guava example on master.

In the gradle.properties, I see: guavaVersion=30.0-jre

In the WEB-INF/lib directory of the cas-server-webapp WAR, I see:

guava-2.9.0.jar
guava-30.0-jre.jar
guava-30.1.1-jre.jar
jackson-datatype-guava-2.12.3.jar
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

What should I do? Update the gradle.properties file to version 30.1.1-jre for guava or search from which CAS dependency this version 30.1.1-jre comes from and exclude it in the dependencies.gradle file?

Thanks.

Best regards,

Jérôme

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-dev/CAGSBKkdfkx0f_vZ8cS3gY9drj1cfGF7%3DW8ki4MRW3h2Fqjrs%3DA%40mail.gmail.com.

[Misagh]

Sorry, I should have been more clear. You should first:

- search from which CAS dependency this version 30.1.1-jre comes from
and exclude it in the dependencies.gradle file.
- Then, optionally, upgrade guava to the latest.

[Jérôme LELEU]

OK. Thank you for the explanations