[GRP-1673] Update supplied library jars so they match official Maven versions (where possible) Created: 31/Jan/18  Updated: 14/Nov/18  Resolved: 14/Nov/18

Status: Resolved
Project: Grouper
Component/s: API, grouperClient, subject API, UI, WS
Affects Version/s: 2.3.0
Fix Version/s: 2.4.0

Type: Task Priority: Minor
Reporter: Chad Redman (unc.edu) Assignee: Chad Redman (unc.edu)
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified


 Description   

The current implementation of Grouper uses Ant tasks to build its artifacts, relying on third-party dependencies being supplied along with each submodule. The versions of these jar files are not always clear, as the version is often missing from the filename, and the MANIFEST.MF file is sometimes missing an Implementation-Version property or it is inaccurate. When comparing these files versus official sources (e.g. Maven repositories), some of them are identical to published versions, some are close matches, and some can't be matched to any known version.



 Comments   
Comment by cer28 [ 31/Jan/18 ]

commit (master) 3f632c3a39430ac706430756c6452dd28e4d82fe
Date:   Sat Jan 20 21:17:37 2018 -0500

    Massive library updates in grouper api supplied jars; pom.xml's to match; updated GrouperCheckConfig.checkGrouperJars() ...

    Upgraded
    --------
    activation 1.1.1? -> 1.1.1 (supplied jar a few classes differed)
    ant 1.7.1? -> 1.10.1
    backport-util-concurrent 3.0 -> 3.1
    bash 2.0b4 -> -2.0b5
    c3p0-oracle-thin-extras 0.9.5.2 -> 0.9.5 (latest version available in Maven)
    commons-beanutils 1.7.0? -> 1.9.3
    commons-codec 1.3 -> 1.11
    commons-collections 3.2.1 -> 3.2.2
    commons-digester (1.? + 3.?) -> commons-digester-2.1 / commons-digester3-3.2
    commons-discovery 0.4 -> 0.5
    commons-httpclient 3.0 -> 3.1
    jexl 2.0.1? -> 2.1.1
    commons-lang 2.6? -> 2.6 (supplied included source and javadoc)
    commons-lang3 3.5 -> 3.7
    commons-logging 1.1.1 -> 1.2
    commons-math 1.1 -> 1.2
    cron-parser-core 2.9 -> 3.4
    ddlutils 1.0? -> 1.0 (supplied included source and javadoc)
    dom4j 1.6.1 -> 2.1.0
    ehcache-core 2.4.3 -> 2.4.8
    ezmorph 1.0.6? -> 1.0.6 (nearly identical, Maven version missing impl-version 1.0.6)
    hibernate-c3p0 5.0.4.Final -> 5.0.12.Final
    hibernate-commons-annotations 5.0.0.Final -> 5.0.1.Final
    hibernate-core 5.0.4.Final -> 5.0.12.Final
    hibernate-ehcache 5.0.4.Final -> 5.0.12.Final
    jandex 2.0.0.CR1 -> 2.0.4.Final
    javassist 3.18.1-GA -> 3.22.0-GA
    jboss-logging 3.3.0.Final -> 3.3.1.Final
    json-lib 2.3-jdk15 -> 2.4-jdk15
    joda-time 2.9.7 -> 2.9.9
    jta 1.1? -> 1.1 (some classes differed)
    log4j 1.2.17? -> 1.2.17 (just build date in manifest)
    mailapi 1.4.2? -> 1.4.3
    mchange-commons-java 0.2.11 -> 0.2.14
    p6spy 1.1? -> 3.6.0
    quartz 2.2.2 -> 2.3.0
    slf4j-api 1.6.1 -> 1.7.25
    slf4j-log4j12 1.6.1 -> 1.7.25
    smack 3.1.0? -> 3.1.0 (Maven repo missing META-INF/smack.providers)
    xstream 1.3 -> 1.4.10
    hsqldb 2.3.3? -> 2.3.5
    mysql-connector-java 5.1.38? -> 5.1.45
    postgresql 9.3-1101-jdbc3? -> 42.1.4
    jetty 6.1.24 -> 6.1.26
    jetty-util 6.1.24 -> 6.1.26
    servlet-api 2.5-20081211 -> 2.5.20110712
    junit 4.5? -> junit 4.12 (note, no longer includes hamcrest matchers so some issues may result)

    Replaced
    --------
    xpp3_min-1.1.4c -> xmlpull-1.1.3.1 (for XmlPullParserFactory needed by smack)

    Moved
    -----
    jamon 2.75? -> lib/test/jamon 2.81
    jug 1.1.2? -> lib/test/jug 1.1.2 (classes identical, Maven version Manifest missing Implementation-Version)

    Deleted, possibly not in use but will need to test
    -------
    asm-3.3.1
    asm-util-3.3.1
    jsr107cache-1.0
    odmg
    smtp

Comment by cer28 [ 31/Jan/18 ]

commit (master) 10611746ef82653bd550849524162d8b0fc3d99b
Date: Wed Jan 31 10:57:28 2018 -0500

UI:

ant-contrib.jar -> ant-contrib-1.0b3.jar
commons-fileupload.jar -> commons-fileupload-1.2.1.jar
jstl.jar -> jstl-1.1.2.jar
opencsv.jar -> opencsv-1.8.jar
standard.jar -> standard-1.1.2.jar
struts.jar -> struts-1.2.4.jar
struts-el.jar -> struts-el-1.2.4.jar
xercesImpl.jar -> xercesImpl-2.7.1.jar
xml-apis.jar -> xml-apis-1.3.02.jar
servlet.jar -> jsp-api-2.0.jar (also uses servlet-api from Grouper jetty folder)
jakarta-oro.jar -> removed
serializer.jar -> removed
taglibs-datetime.jar -> removed
taglibs-request.jar -> removed
xalan.jar -> removed

WS:
commons-lang.jar -> commons-lang-2.1.jar
junit.jar -> junit-3.8.1.jar OR junit-4.1.jar depending on submodule
ant-contrib.jar -> ant-contrib-1.0b3.jar
servlet.jar -> servlet-api-2.5.jar
commons-net.jar -> commons-net-1.3.0.jar
stax-1.2.0.jar -> refreshed from Maven

API:
commons-io-1.4.jar -> refresh from Maven (was missed on earlier commit)

Comment by cer28 [ 22/Oct/18 ]

Still in progress. Will continue for 2.5 with WS libraries, as well as hibernate and other libraries that require code changes.

Comment by cer28 [ 14/Nov/18 ]

I'll mark this as resolved, since the jar files do all match Maven. Upgrading them isn't in the original description of this issue, so that will go into a new issue.

Generated at Fri Apr 26 06:15:35 UTC 2024 using Jira 9.4.18#940018-sha1:32a59db0b032756f9bbd6a22c656d21edb3fb41f.