Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies #31

Merged
merged 5 commits into from
Mar 15, 2024
Merged

Update dependencies #31

merged 5 commits into from
Mar 15, 2024

Conversation

bertrand-lorentz
Copy link
Contributor

Update the versions of various dependencies (ph-genericode, JAXB, Antlr4), and cleanup some unused dependencies. See individual commits for details.

I will create a similar PR for efx-toolkit-java, as we should avoid mixing up various versions of the same dependency, as this can create problems.

This avoids depending on a "milestone" version.
This requires us to add an explicit dependency on the JAXB
implementation.

Also replace the dependency on ph-commons with a dependency on ph-jaxb,
as we only use a method defined in the IJAXBReader interface, which is
part of ph-jaxb, and nothing from ph-commons.
We don't need to depend on those packages.
ph-genericode 7.x uses JAXB 4.0, so we need to update our explicit
dependency.

JAXB 4.0 brings the namespace change from javax.xml.bind to
jakarta.xml.bind. This does not impact us directly, as we don't have any
reference to it, but it might impact users who rely on the indirect
dependency on a JAXB implementation.
Copy link
Contributor

@rouschr rouschr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I suppose this is security related for some, updating to more recent versions is generally good for this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants