removed shaded org.apache.commons.text #1012
Conversation
aschwarte10
left a comment
There was a problem hiding this comment.
Even better from my side to remove any shaded copies and leave the option to other applications for maintaining versions. Especially for apache commons the versions are very much stable nowadays so that shading brings more disadvantages than advantages.
|
In the past them caused version conflicts with other libraries. That was the reason of why I shaded it. |
|
Maybe those can be resolved with some maven dependency tree magic then. I also used shading once back in the days but the price is high. Although a cleaned and well maintained dependency tree is not easy to achieve as well. Maybe a |
|
As mentioned here, this is definitely something for the next major version |
|
@jknack it's good if we remove shaded commons text in 4.3.1 because I wonder commons text lib still got security issue in near future, then we need take time for hot fix again. |
Follow up on #1010.
Removing the shaded
org.apache.commons.commons-textthat might trigger scanners related toCVE-2022-42889.Discussion: #1009