Error: 'dependencies.dependency.version' for org.kie.kogito:kogito-legacy-api:jar is missing.

[SANTOSH SHETTY]

Hi Team,

Due to the vulnerabilities within the quarkus version of 2.7.5.Final we tried to upgrade to the version 2.16.10.Final but we are facing the issue as below error:

 build error: 'dependencies.dependency.version' for org.kie.kogito:kogito-legacy-api:jar is missing.

 

However it was working fine for 2.7.5.Final quarkus version, can you please suggest for which quarkus version to be used to fix vulnerabilities against using Kogito legacy api? 

[Guillaume Smet]

Hi,

So first, if you are not using the features outlined in the announcement as problematic, you are safe.

If you do though, yes, you have to upgrade.

I'm not entirely sure about your question, it's probably something that would be better asked to the Kogito team.

--

Guillaume

--
You received this message because you are subscribed to the Google Groups "Quarkus Development mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to quarkus-dev...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/quarkus-dev/42b144aa-0b21-4092-b088-6e6641640bbcn%40googlegroups.com.

[Max Rydahl Andersen]

to michael: what's the migration path for kogito-legacy-api users? (see below)

I was curious:

$ gh repo clone quarkusio/quarkus-platform
$ cd quarkus-platform
$ git co 2.16
$ git log -S"kogito-legacy"

commit 6ff00cd7e2e8b118bf4393bafacf8cf059d12e48
Author: Michael Biarnes Kiefer <mbia...@redhat.com>
Date:   Mon May 9 18:10:28 2022 +0200

    Kogito 1.21.0.Final + OptaPlanner 8.21.0.Final
...
$ git show 6ff00cd7e2e8b118bf4393bafacf8cf059d12e48 | grep legacy
-        <artifactId>kogito-legacy-api</artifactId>
-        <artifactId>kogito-legacy-api</artifactId>
-        <artifactId>kogito-legacy-api</artifactId>
         <artifactId>drools-legacy-test-util</artifactId>
         <artifactId>drools-legacy-test-util</artifactId>
-        <artifactId>kogito-legacy-api</artifactId>
-        <artifactId>kogito-legacy-api</artifactId>
-        <artifactId>kogito-legacy-api</artifactId>

so it was removed in this commit: https://github.com/quarkusio/quarkus-platform/commit/6ff00cd7e2e8b118bf4393bafacf8cf059d12e48

in this PR: https://github.com/quarkusio/quarkus-platform/pull/542

related to Kogito 1.12.0 announced at https://blog.kie.org/2022/05/kogito-1-21-0-released.html with details at https://docs.kogito.kie.org/latest/html_single/#chap-kogito-release-notes

but I don't spot notice about cogito-legacy - thus cc'ing mbia...@redhat.com :)

/max

To view this discussion on the web visit https://groups.google.com/d/msgid/quarkus-dev/CALt0%2Bo-CrtUOuAAvgjGqheOzm3u_uX%2B3JEvhbjWVP5JZRXz-MQ%40mail.gmail.com.