CDV ❯ unnessary dependencies leaked (tim-jetty-6.1 and tim-annotations at least, maybe others)
-
Bug
-
Status: Closed
-
2 Major
-
Resolution: Fixed
-
Integration Modules
-
-
amiller
-
Reporter: teck
-
February 12, 2009
-
0
-
Watchers: 0
-
April 10, 2009
-
March 10, 2009
Description
source: http://forums.terracotta.org/forums/posts/list/1794.page
Using the attached pom.xml you can see that tim-jetty-6.1 and tim-annotations leak transitive dependencies to people who declare dependencies on them.
piggy2:/cygdrive/c/downloads/tcweb>mvn dependency:tree [INFO] Scanning for projects… [INFO] Searching repository for plugin with prefix: ‘dependency’. [INFO] ———————————————————————— [INFO] Building Unnamed - testy:test:jar:1.0.0 [INFO] task-segment: [dependency:tree] [INFO] ———————————————————————— [INFO] [dependency:tree] [INFO] testy:test:jar:1.0.0 [INFO] +- org.terracotta.modules:tim-jetty-6.1:jar:1.1.3:compile [INFO] | +- org.terracotta:terracotta-api:jar:2.7.3:compile [INFO] | | +- org.terracotta:tcconfig1:jar:1.0:compile [INFO] | | +- org.terracotta:tcconfig2:jar:2.0:compile [INFO] | | +- org.terracotta:tc-l1-reconnect-properties:jar:2.7.3:compile [INFO] | | +- org.terracotta:tcstats:jar:2.7.3:compile [INFO] | | +- org.terracotta:linked-child-process:jar:1.0.1:compile [INFO] | | +- commons-logging:commons-logging:jar:1.0.3:compile [INFO] | | +- commons-collections:commons-collections:jar:3.1:compile [INFO] | | +- commons-lang:commons-lang:jar:2.0:compile [INFO] | | +- commons-cli:commons-cli:jar:1.0:compile [INFO] | | +- commons-io:commons-io:jar:1.2:compile [INFO] | | +- commons-httpclient:commons-httpclient:jar:3.0.1:compile [INFO] | | | - commons-codec:commons-codec:jar:1.2:compile [INFO] | | +- javax.management:jmxri:jar:1.2.1:compile [INFO] | | +- javax.management:jmxremote:jar:1.0.1_04:compile [INFO] | | +- javax.management:jmxremote_optional:jar:1.0.1_04:compile [INFO] | | +- org.beanshell:bsh:jar:2.0b4:compile [INFO] | | +- xmlbeans:xbean:jar:2.1.0:compile [INFO] | | +- xmlbeans:xbean_xpath:jar:2.1.0:compile [INFO] | | +- xmlbeans:xmlpublic:jar:2.1.0:compile [INFO] | | +- knopflerfish-tc:knopflerfish-tc:jar:2.0.1:compile [INFO] | | +- javax.servlet:servlet-api:jar:2.4:compile [INFO] | | +- org.mortbay.jetty:jetty-util:jar:6.1.8:compile [INFO] | | +- org.mortbay.jetty:jetty:jar:6.1.8:compile [INFO] | | | - org.mortbay.jetty:servlet-api-2.5:jar:6.1.8:compile [INFO] | | +- concurrent:concurrent:jar:1.3.4:compile [INFO] | | +- trove:trove:jar:1.1-beta-5:compile [INFO] | | +- berkeleydb:je:jar:3.3.74:compile [INFO] | | +- jline:jline:jar:0.9.9:compile [INFO] | | +- jfree:jfreechart:jar:1.0.11:compile [INFO] | | | - jfree:jcommon:jar:1.0.14:compile [INFO] | | +- org.dijon:appframe:jar:1.0:compile [INFO] | | +- treemap:treemap:jar:2.5.1:compile [INFO] | | +- tomcat:catalina:jar:5.0.28:compile [INFO] | | +- org.apache.tomcat:tribes:jar:6.0.11-20071126:compile [INFO] | | +- org.apache.tomcat:juli:jar:6.0.9:compile [INFO] | | +- stax:stax:jar:1.2.0:compile [INFO] | | | - stax:stax-api:jar:1.0.1:compile [INFO] | | +- com.h2database:h2:jar:1.0.67:compile [INFO] | | - dom4j:dom4j:jar:1.6.1:compile [INFO] | | - xml-apis:xml-apis:jar:1.0.b2:compile [INFO] | +- org.terracotta:terracotta:jar:2.7.3:compile [INFO] | | +- com.google.code.guice:guice:jar:1.0:compile [INFO] | | +- org.hyperic:sigar:jar:1.6.0:compile [INFO] | | +- org.hyperic:libsigar-amd64-linux:so:1.6.0:compile [INFO] | | +- org.hyperic:libsigar-sparc-solaris:so:1.6.0:compile [INFO] | | +- org.hyperic:libsigar-x86-linux:so:1.6.0:compile [INFO] | | +- org.hyperic:sigar-x86-winnt:dll:1.6.0:compile [INFO] | | +- org.hyperic:sigar-x86-winnt:lib:1.6.0:compile [INFO] | | +- org.hyperic:sigar-amd64-winnt:dll:1.6.0:compile [INFO] | | - org.hyperic:libsigar-universal-macosx:dylib:1.6.0:compile [INFO] | +- org.terracotta:tcconfig:jar:2.7.3:compile [INFO] | - org.terracotta.modules:modules-common:jar:2.7.3:compile [INFO] +- org.terracotta.modules:tim-annotations:jar:1.2.1:compile [INFO] +- junit:junit:jar:3.8.2:test (scope not updated to compile) [INFO] - log4j:log4j:jar:1.2.9:compile [INFO] ————————————————————————
Comments
Alex Miller 2009-03-10
nadeem ghani 2009-03-30
edit the pom from the forum issue, update jetty version to 1.2.0-SNAPSHOT, tc-maven-plugin version to 1.3.0-SNAPSHOT
mvn dependency:tree … [INFO] [dependency:tree] [INFO] net.ddaniels.web:tcweb:war:1.0.0 [INFO] +- org.terracotta.modules:tim-jetty-6.1:jar:1.2.0-SNAPSHOT:compile [INFO] | +- org.terracotta.modules:tim-session-common:jar:1.0.0-SNAPSHOT:compile [INFO] | - org.terracotta.modules:modules-base:jar:1.0.0-SNAPSHOT:compile [INFO] +- org.terracotta.modules:tim-annotations:jar:1.2.1:compile [INFO] | - org.terracotta.modules:modules-common:jar:2.7.1:compile [INFO] +- junit:junit:jar:3.8.2:test [INFO] - log4j:log4j:jar:1.2.9:compile [INFO] ———————————————————————— [INFO] BUILD SUCCESSFUL [INFO] ———————————————————————— [INFO] Total time: 5 seconds [INFO] Finished at: Mon Mar 30 17:08:17 PDT 2009 [INFO] Final Memory: 10M/254M [INFO] ————————————————————————
As part of all the tweaks in tim-parent and tim-system-tests-parent, we’re now including the api jars as provided scope where possible and that causes all of this stuff to not leak into users. I’m also embarking on reducing this set of 3rd party deps but that’s not what this jira is covering.