[DS-3016] Dependency upgrades

[dspace-bot]

Imported from JIRA [DS-3016] created by helix84

Some of DSpace dependencies have had new releases. It would be beneficial to upgrade to latest versions due to 1) bug fixes and 2) using a supported version. IMHO, upgrading them before 6.0-rc1 is the right time and any breakage could be discovered during the upcoming testathon.

pdfbox 1.8.7 -> 1.8.11 | (2.0.0-RC3)
http://www.apache.org/dist/pdfbox/2.0.0-RC3/RELEASE-NOTES.txt
http://www.apache.org/dist/pdfbox/1.8.11/RELEASE-NOTES.txt
https://pdfbox.apache.org/2.0/migration.html
hibernate 4.2.19.Final -> 4.2.21.Final | (5.0.7.Final)
http://in.relation.to/2015/08/07/hibernate-orm-4220-final-and-4311-final-released/
spring 3.2.14.RELEASE -> 3.2.16.RELEASE | (4.2.4.RELEASE)
https://spring.io/blog/2015/12/17/spring-framework-3-2-16-available-now
https://spring.io/blog/2015/10/15/spring-framework-4-2-2-4-1-8-and-3-2-15-available-now
slf4j 1.6.1 -> 1.7.14
http://www.slf4j.org/news.html
jena 2.12.0 -> 2.13.0 | (3.0.1)
http://mail-archives.apache.org/mod_mbox/www-announce/201503.mbox/%3C5509A6E8.90608@apache.org%3E
http://mail-archives.apache.org/mod_mbox/www-announce/201507.mbox/%3C55BBA8FB.30107@apache.org%3E
http://mail-archives.apache.org/mod_mbox/jena-users/201512.mbox/%3C566D3BDE.4030202@apache.org%3E
solr 4.10.2 -> 4.10.4
http://lucene.apache.org/solr/4_10_3/changes/Changes.html
http://lucene.apache.org/solr/4_10_4/changes/Changes.html
commons-cli 1.2 -> 1.3.1
https://commons.apache.org/proper/commons-cli/changes-report.html
commons-codec 1.9 -> 1.10
https://commons.apache.org/proper/commons-codec/changes-report.html
commons-collections 3.2 -> 3.2.2
https://commons.apache.org/proper/commons-collections/changes-report.html
commons-discovery 0.2 -> 0.5
https://commons.apache.org/proper/commons-discovery/changes-report.html
commons-fileupload 1.2.1 -> 1.3.1
https://commons.apache.org/proper/commons-fileupload/changes-report.html
commons-io 2.3 -> 2.4
https://commons.apache.org/proper/commons-io/changes-report.html
commons-logging 1.1.1 -> 1.2
https://commons.apache.org/proper/commons-logging/changes-report.html
commons-validator 1.4.0 -> 1.5.0
https://commons.apache.org/proper/commons-validator/changes-report.html
mail 1.4 -> 1.4.7
jaxen 1.1 -> 1.1.6
jdom 1.0 -> 1.1
bcprov-jdk15 1.44 -> 1.46
bcmail-jdk15 1.44 -> 1.46
poi 3.6 -> 3.13
poi-scratchpad 3.6 -> 3.13
poi-ooxml 3.6 -> 3.13
https://poi.apache.org/changes.html
xalan 2.7.0 -> 2.7.2
https://xml.apache.org/xalan-j/readme.html
xercesImpl 2.8.1 -> 2.11.0
https://xerces.apache.org/xerces2-j/releases.html
activation 1.1 -> 1.1.1
wsdl4j 1.5.1 -> 1.6.3
jaxrpc-api 1.1 -> 1.3
axis 1.3 -> 1.4
axis-ant 1.3 -> 1.4
axis-saaj 1.3 -> 1.4
icu4j 51.1 -> 56.1
postgresql 9.4-1203-jdbc41 -> 9.4-1206-jdbc41
https://jdbc.postgresql.org/documentation/changelog.html
jai_imageio 1.0_01 -> 1.1
jai_core 1.1.2_01 -> 1.1.3
httpcore 4.3.2 -> 4.4.4
https://archive.apache.org/dist/httpcomponents/httpcore/RELEASE_NOTES-4.4.x.txt
httpclient 4.3.5 -> 4.5.1
https://archive.apache.org/dist/httpcomponents/httpclient/RELEASE_NOTES-4.5.x.txt
jmockit 1.10 -> 1.21
junit 4.11 -> 4.12
h2 1.4.187 -> 1.4.191
http://www.h2database.com/html/changelog.html
contiperf 2.2.0 -> 2.3.4
gson 2.2.1 -> 2.5
https://github.com/google/gson/blob/master/CHANGELOG.md
google-api-services-analytics v3-rev103-1.19.0 -> v3-rev123-1.19.1 | v2.4-rev100-1.20.0 | v3-rev123-1.21.0
google-api-client 1.19.1 -> 1.21.0
google-http-client 1.19.1 -> 1.21.0
google-oauth-client 1.19.1 -> 1.21.0
jsr305 3.0.0 -> 3.0.1
annotations 3.0.0 -> 3.0.1u2

dspace-api/pom.xml
geoip-api 1.2.11 -> 1.3.0
dnsjava 2.1.1 -> 2.1.7
http://www.dnsjava.org/dnsjava-current/Changelog
(elasticsearch 1.4.0 -> 1.4.5 | (2.0.2))
https://www.elastic.co/downloads/past-releases/elasticsearch-1-4-5
https://www.elastic.co/guide/en/elasticsearch/reference/2.0/release-notes-2.0.0.html
(com.coverity.security.coverity-escapers 1.1.1 -> (com.includesecurity.coverity-escapers 1.3.1))
guava 18.0 -> 19.0
https://github.com/google/guava/wiki/Release19
joda-time 2.3 -> 2.9.2
http://www.joda.org/joda-time/installation.html
axiom-impl 1.2.14 -> 1.2.17
axiom-api 1.2.14 -> 1.2.17
https://ws.apache.org/axiom/release-notes/index.html
jersey-client 2.9.1 -> 2.22.1
https://jersey.java.net/release-notes/2.22.1.html
aws-java-sdk-s3 1.10.26 -> 1.10.50
jackson-core 2.5.3 -> 2.7.0
jackson-databind 2.5.3 -> 2.7.0
jackson-annotations 2.5.3 -> 2.7.0
https://github.com/FasterXML/jackson/wiki/Jackson-Releases#jackson-2x-releases

dspace-jspui/pom.xml
jstl 1.1.2 -> 1.2

dspace-oai/pom.xml
guava 13 -> 19.0
mockito-all 1.9.5 -> 1.10.19 | (2.0.2-beta)
test-support 1.0.3 -> 1.1.0
jackson-annotations 2.3.0 -> 2.7.0
jackson-core 2.3.3 -> 2.7.0
jackson-databind 2.3.3 -> 2.7.0
https://github.com/FasterXML/jackson/wiki/Jackson-Releases#jackson-2x-releases

dspace-rdf/pom.xml
—

dspace-rest/pom.xml
jersey-server 1.17.1 -> 2.22.1
jersey-servlet 1.17.1 -> 1.19
jersey-spring 1.8 -> 1.19
https://jersey.java.net/release-notes/2.22.1.html
evo-inflector 1.0.1 -> 1.2.1

dspace-services/pom.xml
ehcache-core 2.4.3 -> 2.6.11
jetty 6.1.14 -> 6.1.26

dspace-solr/pom.xml
jul-to-slf4j 1.6.1 -> 1.7.14
http://www.slf4j.org/news.html

dspace-sword/pom.xml
xom 1.1 -> 1.2.5
http://www.xom.nu/history.html

dspace-swordv2/pom.xml
abdera-client 1.1.1 -> 1.1.3

dspace-xmlui/pom.xml
yuicompressor 2.3.6 -> 2.4.8
jackson-core 2.5.0 -> 2.7.0
https://github.com/FasterXML/jackson/wiki/Jackson-Releases#jackson-2x-releases
opencsv 2.0 -> 2.3
gson 2.2.1 -> 2.5
https://github.com/google/gson/blob/master/CHANGELOG.md

[dspace-bot]

helix84 said:

Pull request:
https://github.com/DSpace/DSpace/pull/1260

[dspace-bot]

tdonohue said:

Wow! Thanks for this Ivan! It is much needed.

I added one comment to the PR, as Travis seems to be complaining about the EhCache upgrade (but others seems to pass unit tests, so far).

[dspace-bot]

helix84 said:

I separated the individual upgrades that fail to build (to be resolved individually) from those that build successfully (so that they can be merged immediately), all as sub-tasks of this task.

[dspace-bot]

helix84 said:

In doing so, I also came a bit closer to understanding the "codehause" repo message in failing builds - it seems to appear in all builds failing this way (dependency upgrade), but has nothing to do with the root cause. It's merely an additional error - when maven fails to build org.dspace:dspace-whatever:6.0-SNAPSHOT locally, it checks whether it can fetch it from other repos - codehaus, sonatype, apache. And the nexus.codehaus.org domain no longer resolves. I can't fix it yet because I don't know where these fallback repos are defined. (This codehaus issue is a separate issue from this task.)

[INFO] Downloading: https://nexus.codehaus.org/snapshots/org/dspace/dspace-api/6.0-SNAPSHOT/maven-metadata.xml
[INFO] Downloading: https://oss.sonatype.org/content/repositories/snapshots/org/dspace/dspace-api/6.0-SNAPSHOT/maven-metadata.xml
[INFO] Downloading: https://repository.apache.org/snapshots/org/dspace/dspace-api/6.0-SNAPSHOT/maven-metadata.xml
[INFO] Downloading: https://oss.sonatype.org/content/repositories/snapshots/org/dspace/dspace-api/6.0-SNAPSHOT/maven-metadata.xml
[WARNING] Could not transfer metadata org.dspace:dspace-api:6.0-SNAPSHOT/maven-metadata.xml from/to codehaus-snapshots (https://nexus.codehaus.org/snapshots/): nexus.codehaus.org: Name or service not known
[WARNING] Failure to transfer org.dspace:dspace-api:6.0-SNAPSHOT/maven-metadata.xml from https://nexus.codehaus.org/snapshots/ was cached in the local repository, resolution will not be reattempted until the update interval of codehaus-snapshots has elapsed or updates are forced. Original error: Could not transfer metadata org.dspace:dspace-api:6.0-SNAPSHOT/maven-metadata.xml from/to codehaus-snapshots (https://nexus.codehaus.org/snapshots/): nexus.codehaus.org: Name or service not known

[dspace-bot]

tdonohue said:

The odd codehaus issue seems to actually be from Travis CI. They have it listed in their default settings.xml:
https://github.com/travis-ci/travis-ci/issues/4629

So, it's not an issue on our end, and we can just ignore it whenever it comes up (as it always seems to be a secondary issue anyways, and only appears when another error is thrown as you noted)

[dspace-bot]

mwood said:

Just a note: Commons considers lang 2 to be "legacy" and lang 3 "current stable". Lang 3 has a new artifactId so that they can be used together, which probably means significant changes in signatures. At this date, that probably means not enough time to upgrade lang, but I note it here so as not to lose the thought.

[dspace-bot]

bram said:

needs volunteer to finish this, also renaming the JIRA ticket

[dspace-bot]

Is related to: DS-3076

[dspace-bot]

Is related to: DS-3352

[dspace-bot]

Addressed by / Fixed by: DS-444