Skip to content

Aligning Jackson version to 2.22.3 and other dependency fixes - #13046

Merged
offtherailz merged 6 commits into
masterfrom
tdipisa-patch-2
Oct 26, 2026
Merged

offtherailz merged 6 commits into
masterfrom
tdipisa-patch-2

Conversation

@tdipisa

@tdipisa tdipisa commented Oct 23, 2026 •

Copy link
Copy Markdown
Member

Description

Other points from connected issue still need to be checked @afabiani

Please check if the PR fulfills these requirements

What kind of change does this PR introduce? (check one with "x", remove the others)

  • Bugfix
  • Feature
  • Code style update (formatting, local variables)
  • Refactoring (no functional changes, no api changes)
  • Build related changes
  • CI related changes
  • Other... Please describe:

Breaking change

Does this PR introduce a breaking change? (check one with "x", remove the other)

  • Yes, and I documented them in migration notes
  • No

Other useful information

@tdipisa
tdipisa requested a review from offtherailz October 23, 2026 13:08
@cla-bot cla-bot Bot added the CLA Ready label Oct 23, 2026
@tdipisa tdipisa added this to the 2026.03.00 milestone Oct 23, 2026
@tdipisa tdipisa changed the title Aligning Jackson version to 2.22.3 in project standard template Aligning Jackson version to 2.22.3 Oct 23, 2026
@tdipisa tdipisa changed the title Aligning Jackson version to 2.22.3 Aligning Jackson version to 2.22.3 and other dependency fixes Oct 23, 2026
@tdipisa tdipisa linked an issue Oct 23, 2026 that may be closed by this pull request
1 of 3 tasks
The packagingExcludes left from the Spring 5.3 era matched nothing anymore,
while the GeoStore and http_proxy overlays still copied their own versions
of libraries MapStore already ships, so the WAR held two or three versions
of the same jar and the one loaded depended on the environment.

- drop the stale packagingExcludes (root, java/web, product, bin-war and
  project template) and the no-op exclusions on the geostore-webapp WAR
  dependency
- exclude from the GeoStore and http_proxy overlays their copies of
  commons-io, Jackson, Log4j, SLF4J, micrometer, legacy asm 2, the proxy
  SLF4J 2 binding and its embedded Jetty, keeping the managed versions
- align commons-io (2.22.0), guava (32.0.0-jre, as GeoStore) and jsr305
  (3.0.2); take HTTP Client 5 from http_proxy instead of print-lib
- make jakarta.servlet-api provided
- build the printing bundle from print-lib dependencies minus what the WAR
  already ships, so it no longer misses the ImageN, Jackson 3, xalan and
  BouncyCastle jars
Adds utility/build/check_duplicate_jars.py and runs it in the back-end CI
job on the product WAR together with the printing bundle, which is unpacked
over it. Jars with the same name and at least one class in common are
reported, so Jackson 2 and Jackson 3 (same artifactId, different packages)
are not mistaken for duplicates.
@afabiani
afabiani marked this pull request as ready for review October 23, 2026 15:03
@offtherailz offtherailz self-assigned this Oct 26, 2026
@offtherailz
offtherailz merged commit e87a047 into master Oct 26, 2026
29 of 30 checks passed
@offtherailz
offtherailz deleted the tdipisa-patch-2 branch October 26, 2026 14:46
@offtherailz

Copy link
Copy Markdown
Member

Successfully created backport PR for 2026.03.xx:

offtherailz added a commit that referenced this pull request Oct 26, 2026
#13061)

(cherry picked from commit e87a047)

Co-authored-by: Tobia Di Pisa <tobia.dipisa@geosolutionsgroup.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Dependency management review

3 participants