vaadin / appsec-kit

Other
1 stars 0 forks source link

Vaadin 8 Charts 4.3.1 has dependency conflict with Jackson #98

Open TatuLund opened 1 year ago

TatuLund commented 1 year ago

AppSecKit uses newer version of Jackson than Charts does. Application having both dependencies wont start unless there is exclusion made.

        <dependency>
            <groupId>com.vaadin</groupId>
            <artifactId>vaadin-charts</artifactId>
            <version>4.3.1</version>
            <exclusions>
                <exclusion>
                    <groupId>com.fasterxml.jackson.core</groupId>
                    <artifactId>jackson-databind</artifactId>   
                </exclusion>
            </exclusions>
        </dependency>
TatuLund commented 8 months ago

Jackson dependency has been updated in Vaadin Charts v4.3.3 to 2.16.1, which is newer than in AppSecKit, so it is now more appropriate to do the exclusion in appsec-kit

        <dependency>
            <groupId>com.vaadin</groupId>
            <artifactId>appsec-kit-v8</artifactId>
            <version>1.0.5</version>
            <exclusions>
                <exclusion>
                    <groupId>com.fasterxml.jackson.core</groupId>
                    <artifactId>jackson-databind</artifactId>
                </exclusion>
            </exclusions>
        </dependency>

But this is not working. So one is forced to use 2.14.3 instead due it is the dependency in appsec-kit.