Question regarding jakarta dependency version

[clement escoffier]

Hello,

Which versions of Jakarta JSON Bind-API and JSON API should we use in SmallRye?

If I update Yasson to the latest version (2.0.1), it requires Jakarta classes that are not available in the currently imported versions of the Jakarta dependency (defined in SmallRye parent). What are the recommended versions?

Clement

[Roberto Cortez]

I think we are going to need to stick with versions pre Jakarta for now. Until MP as a platform moves to Jakarta, we need to support javax. 

Do you need anything from Yasson 2.x? Bug fixes? New features? 

--
You received this message because you are subscribed to the Google Groups "SmallRye" group.
To unsubscribe from this group and stop receiving emails from it, send an email to smallrye+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/smallrye/CAKW6ficWHvdWoLiumQA8TaEzy-2AE79G0sJNGckuyOzQGpRG2g%40mail.gmail.com.

[clement escoffier]

On Mon 2 Nov 2020 at 12:40, 'Roberto Cortez' via SmallRye <smal...@googlegroups.com> wrote:

I think we are going to need to stick with versions pre Jakarta for now. Until MP as a platform moves to Jakarta, we need to support javax. 

Do you need anything from Yasson 2.x? Bug fixes? New features? 

I’m more worried by CVEs. So far so good (except if they are under embargo), but that kind of component is often an attack surface. 

Clement

On 2 Nov 2020, at 07:24, clement escoffier <clement....@gmail.com> wrote:

Hello,

Which versions of Jakarta JSON Bind-API and JSON API should we use in SmallRye?

If I update Yasson to the latest version (2.0.1), it requires Jakarta classes that are not available in the currently imported versions of the Jakarta dependency (defined in SmallRye parent). What are the recommended versions?

Clement

--
You received this message because you are subscribed to the Google Groups "SmallRye" group.
To unsubscribe from this group and stop receiving emails from it, send an email to smallrye+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/smallrye/CAKW6ficWHvdWoLiumQA8TaEzy-2AE79G0sJNGckuyOzQGpRG2g%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "SmallRye" group.
To unsubscribe from this group and stop receiving emails from it, send an email to smallrye+u...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/smallrye/7B48A4A4-E24B-4AE4-BDAE-707643745B2D%40yahoo.com.

[Roberto Cortez]

Might be interesting to find out what are the support plans for older versions. I hope that CVE and bug fixes are ported to 1.x, especially considering that moving to javax -> jakarta is going to be a long road.

If that is not the case, we may need to fork and roll out our own version (which I would like to avoid).

To view this discussion on the web visit https://groups.google.com/d/msgid/smallrye/CAKW6fifUeznQFns9ZrdPHKYeicS8tdOjzYnzMPv-gjX%3D8YuzUg%40mail.gmail.com.