• Bug
  • Status: Closed
  • 2 Major
  • Resolution: Fixed
  • Integration Modules
  • amiller
  • Reporter: teck
  • February 12, 2009
  • 0
  • Watchers: 0
  • April 10, 2009
  • March 10, 2009

Description

source: http://forums.terracotta.org/forums/posts/list/1794.page

Using the attached pom.xml you can see that tim-jetty-6.1 and tim-annotations leak transitive dependencies to people who declare dependencies on them.

piggy2:/cygdrive/c/downloads/tcweb>mvn dependency:tree [INFO] Scanning for projects… [INFO] Searching repository for plugin with prefix: ‘dependency’. [INFO] ———————————————————————— [INFO] Building Unnamed - testy:test:jar:1.0.0 [INFO] task-segment: [dependency:tree] [INFO] ———————————————————————— [INFO] [dependency:tree] [INFO] testy:test:jar:1.0.0 [INFO] +- org.terracotta.modules:tim-jetty-6.1:jar:1.1.3:compile [INFO] | +- org.terracotta:terracotta-api:jar:2.7.3:compile [INFO] | | +- org.terracotta:tcconfig1:jar:1.0:compile [INFO] | | +- org.terracotta:tcconfig2:jar:2.0:compile [INFO] | | +- org.terracotta:tc-l1-reconnect-properties:jar:2.7.3:compile [INFO] | | +- org.terracotta:tcstats:jar:2.7.3:compile [INFO] | | +- org.terracotta:linked-child-process:jar:1.0.1:compile [INFO] | | +- commons-logging:commons-logging:jar:1.0.3:compile [INFO] | | +- commons-collections:commons-collections:jar:3.1:compile [INFO] | | +- commons-lang:commons-lang:jar:2.0:compile [INFO] | | +- commons-cli:commons-cli:jar:1.0:compile [INFO] | | +- commons-io:commons-io:jar:1.2:compile [INFO] | | +- commons-httpclient:commons-httpclient:jar:3.0.1:compile [INFO] | | | - commons-codec:commons-codec:jar:1.2:compile [INFO] | | +- javax.management:jmxri:jar:1.2.1:compile [INFO] | | +- javax.management:jmxremote:jar:1.0.1_04:compile [INFO] | | +- javax.management:jmxremote_optional:jar:1.0.1_04:compile [INFO] | | +- org.beanshell:bsh:jar:2.0b4:compile [INFO] | | +- xmlbeans:xbean:jar:2.1.0:compile [INFO] | | +- xmlbeans:xbean_xpath:jar:2.1.0:compile [INFO] | | +- xmlbeans:xmlpublic:jar:2.1.0:compile [INFO] | | +- knopflerfish-tc:knopflerfish-tc:jar:2.0.1:compile [INFO] | | +- javax.servlet:servlet-api:jar:2.4:compile [INFO] | | +- org.mortbay.jetty:jetty-util:jar:6.1.8:compile [INFO] | | +- org.mortbay.jetty:jetty:jar:6.1.8:compile [INFO] | | | - org.mortbay.jetty:servlet-api-2.5:jar:6.1.8:compile [INFO] | | +- concurrent:concurrent:jar:1.3.4:compile [INFO] | | +- trove:trove:jar:1.1-beta-5:compile [INFO] | | +- berkeleydb:je:jar:3.3.74:compile [INFO] | | +- jline:jline:jar:0.9.9:compile [INFO] | | +- jfree:jfreechart:jar:1.0.11:compile [INFO] | | | - jfree:jcommon:jar:1.0.14:compile [INFO] | | +- org.dijon:appframe:jar:1.0:compile [INFO] | | +- treemap:treemap:jar:2.5.1:compile [INFO] | | +- tomcat:catalina:jar:5.0.28:compile [INFO] | | +- org.apache.tomcat:tribes:jar:6.0.11-20071126:compile [INFO] | | +- org.apache.tomcat:juli:jar:6.0.9:compile [INFO] | | +- stax:stax:jar:1.2.0:compile [INFO] | | | - stax:stax-api:jar:1.0.1:compile [INFO] | | +- com.h2database:h2:jar:1.0.67:compile [INFO] | | - dom4j:dom4j:jar:1.6.1:compile [INFO] | | - xml-apis:xml-apis:jar:1.0.b2:compile [INFO] | +- org.terracotta:terracotta:jar:2.7.3:compile [INFO] | | +- com.google.code.guice:guice:jar:1.0:compile [INFO] | | +- org.hyperic:sigar:jar:1.6.0:compile [INFO] | | +- org.hyperic:libsigar-amd64-linux:so:1.6.0:compile [INFO] | | +- org.hyperic:libsigar-sparc-solaris:so:1.6.0:compile [INFO] | | +- org.hyperic:libsigar-x86-linux:so:1.6.0:compile [INFO] | | +- org.hyperic:sigar-x86-winnt:dll:1.6.0:compile [INFO] | | +- org.hyperic:sigar-x86-winnt:lib:1.6.0:compile [INFO] | | +- org.hyperic:sigar-amd64-winnt:dll:1.6.0:compile [INFO] | | - org.hyperic:libsigar-universal-macosx:dylib:1.6.0:compile [INFO] | +- org.terracotta:tcconfig:jar:2.7.3:compile [INFO] | - org.terracotta.modules:modules-common:jar:2.7.3:compile [INFO] +- org.terracotta.modules:tim-annotations:jar:1.2.1:compile [INFO] +- junit:junit:jar:3.8.2:test (scope not updated to compile) [INFO] - log4j:log4j:jar:1.2.9:compile [INFO] ————————————————————————

Comments

Alex Miller 2009-03-10

As part of all the tweaks in tim-parent and tim-system-tests-parent, we’re now including the api jars as provided scope where possible and that causes all of this stuff to not leak into users. I’m also embarking on reducing this set of 3rd party deps but that’s not what this jira is covering.

nadeem ghani 2009-03-30

edit the pom from the forum issue, update jetty version to 1.2.0-SNAPSHOT, tc-maven-plugin version to 1.3.0-SNAPSHOT

mvn dependency:tree … [INFO] [dependency:tree] [INFO] net.ddaniels.web:tcweb:war:1.0.0 [INFO] +- org.terracotta.modules:tim-jetty-6.1:jar:1.2.0-SNAPSHOT:compile [INFO] | +- org.terracotta.modules:tim-session-common:jar:1.0.0-SNAPSHOT:compile [INFO] | - org.terracotta.modules:modules-base:jar:1.0.0-SNAPSHOT:compile [INFO] +- org.terracotta.modules:tim-annotations:jar:1.2.1:compile [INFO] | - org.terracotta.modules:modules-common:jar:2.7.1:compile [INFO] +- junit:junit:jar:3.8.2:test [INFO] - log4j:log4j:jar:1.2.9:compile [INFO] ———————————————————————— [INFO] BUILD SUCCESSFUL [INFO] ———————————————————————— [INFO] Total time: 5 seconds [INFO] Finished at: Mon Mar 30 17:08:17 PDT 2009 [INFO] Final Memory: 10M/254M [INFO] ————————————————————————