Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Address some of the dependency analysis work against repo to reduce defined dependencies not directly used #941

Merged
merged 4 commits into from
Nov 29, 2024

Conversation

hazendaz
Copy link
Member

No description provided.

maven is using wrong one, the legacy oracle one.  It was long changed to jakarta under javax namespace, The original is missing meta data and not suggested to be used.  I did raise a ticket with maven on this some time ago but it got no where, so since called out as not defined, I'll define the right one and exclude the other.  In the end its the same but at least supported variation even though javax namespace is obsolete.
…ill just use bom now

Spotbugs itself went dormant for a long time and now there are only 3 active members that includes myself.  So while controlling asm is less important, it is still very important as groovy overrides asm and so does a number of other items in general and at any given time we may not release spotbugs in timely fashion as the plugins are released far faster.  This will get it off the issue with analyzer though.
We do not use log4j2 as used by spotbugs, instead we use slf4j which aligns also with maven usage of the same.  Further we do not use commons logging, we use jcl-over-slf4j which is a better solution until commons-logging team can convince slf4j to give up jcl over slf4j as they have already gotten spring-jcl on board.  When that eventually occurs, jcl-over-slf4j can be removed, otherwise it must stay.  Simple is also therefore needed so it actually logs from those tools or it simply will not.
@hazendaz hazendaz self-assigned this Nov 29, 2024
@hazendaz hazendaz merged commit efc0854 into spotbugs:master Nov 29, 2024
16 of 19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant