[JAMES-3497] Dependency upgrade

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.6.0
• Assignee: Unassigned
• Reporter: Benoit Tellier
• Created: 29/Jan/21 05:29
• Updated: 08/Mar/21 06:36
• Resolved: 08/Mar/21 06:36

Description

Last dependency upgrade dates from June 2019.

We would likely benefit from doing a dependency upgrade round...

Here are the maven dependency audit output:

james-project/server/container/guice/cassandra-rabbitmq-ldap-guice$ mvn versions:display-dependency-updates
[...]
[INFO]   ch.qos.logback:logback-classic ................. 1.2.3 -> 1.3.0-alpha5
[INFO]   com.fasterxml.jackson.core:jackson-annotations ....... 2.9.9 -> 2.12.1
[INFO]   com.fasterxml.jackson.core:jackson-core .............. 2.9.9 -> 2.12.1
[INFO]   com.fasterxml.jackson.core:jackson-databind .......... 2.9.9 -> 2.12.1
[INFO]   com.fasterxml.jackson.datatype:jackson-datatype-guava ...
[INFO]                                                          2.9.9 -> 2.12.1
[INFO]   com.fasterxml.jackson.datatype:jackson-datatype-jdk8 ...
[INFO]                                                          2.9.9 -> 2.12.1
[INFO]   com.fasterxml.jackson.datatype:jackson-datatype-jsr310 ...
[INFO]                                                          2.9.9 -> 2.12.1
[INFO]   com.github.spullara.mustache.java:compiler ............ 0.9.6 -> 0.9.7
[INFO]   com.google.guava:guava .......................... 25.1-jre -> 30.1-jre
[INFO]   com.google.inject:guice ........................ 4.2.2 -> 5.0.0-BETA-1
[INFO]   com.google.inject.extensions:guice-assistedinject ...
[INFO]                                                    4.2.2 -> 5.0.0-BETA-1
[INFO]   com.ibm.icu:icu4j ....................................... 64.2 -> 68.2
[INFO]   com.jayway.jsonpath:json-path ......................... 2.4.0 -> 2.5.0
[INFO]   com.rabbitmq:amqp-client ............................. 5.7.3 -> 5.10.0
[INFO]   com.sparkjava:spark-core .............................. 2.9.1 -> 2.9.3
[INFO]   com.sun.xml.bind:jaxb-core .......................... 2.3.0.1 -> 3.0.0
[INFO]   com.sun.xml.bind:jaxb-impl ............................ 2.3.1 -> 3.0.0
[INFO]   com.thoughtworks.qdox:qdox .......................... 2.0-M10 -> 2.0.0
[INFO]   com.typesafe.play:play-json_2.13 ...................... 2.8.1 -> 2.9.2
[INFO]   commons-daemon:commons-daemon ......................... 1.2.0 -> 1.2.4
[INFO]   commons-io:commons-io ................................... 2.6 -> 2.8.0
[INFO]   commons-net:commons-net ................................. 3.6 -> 3.7.2
[INFO]   io.cucumber:cucumber-guice ............................ 2.4.0 -> 6.9.1
[INFO]   io.cucumber:cucumber-java ............................. 2.4.0 -> 6.9.1
[INFO]   io.cucumber:cucumber-junit ............................ 2.4.0 -> 6.9.1
[INFO]   io.cucumber:cucumber-picocontainer .................... 2.4.0 -> 6.9.1
[INFO]   io.dropwizard.metrics:metrics-core ............. 4.1.0 -> 4.2.0-beta.1
[INFO]   io.dropwizard.metrics:metrics-jmx .............. 4.1.0 -> 4.2.0-beta.1
[INFO]   io.dropwizard.metrics:metrics-jvm .............. 4.1.0 -> 4.2.0-beta.1
[INFO]   io.github.openfeign:feign-core ........................ 10.3.0 -> 11.0
[INFO]   io.github.openfeign:feign-jackson ..................... 10.3.0 -> 11.0
[INFO]   io.github.openfeign:feign-slf4j ....................... 10.3.0 -> 11.0
[INFO]   io.netty:netty .......................... 3.10.6.Final -> 4.0.0.Alpha8
[INFO]   io.rest-assured:rest-assured .......................... 4.0.0 -> 4.3.3
[INFO]   io.vavr:vavr ................................. 0.10.3 -> 1.0.0-alpha-3
[INFO]   javax.xml.bind:jaxb-api .................. 2.3.1 -> 2.4.0-b180830.0359
[INFO]   net.javacrumbs.json-unit:json-unit-assertj ........... 2.8.0 -> 2.23.0
[INFO]   nl.jqno.equalsverifier:equalsverifier ................. 3.1.9 -> 3.5.2
[INFO]   org.apache.ant:ant .................................. 1.10.8 -> 1.10.9
[INFO]   org.apache.camel:camel-core .......................... 2.24.1 -> 3.7.1
[INFO]   org.apache.camel:camel-spring ........................ 2.24.1 -> 3.7.1
[INFO]   org.apache.commons:commons-compress ..................... 1.19 -> 1.20
[INFO]   org.apache.commons:commons-lang3 ......................... 3.9 -> 3.11
[INFO]   org.apache.commons:commons-pool2 ...................... 2.7.0 -> 2.9.0
[INFO]   org.apache.commons:commons-text ........................... 1.8 -> 1.9
[INFO]   org.apache.derby:derby ........................ 10.14.2.0 -> 10.15.2.0
[INFO]   org.apache.directory.api:api-ldap-model ............... 1.0.3 -> 2.0.1
[INFO]   org.apache.httpcomponents:httpclient ................ 4.5.10 -> 4.5.13
[INFO]   org.apache.logging.log4j:log4j ...................... 2.13.1 -> 2.14.0
[INFO]   org.apache.logging.log4j:log4j-slf4j-impl ........... 2.13.1 -> 2.14.0
[INFO]   org.apache.maven:maven-plugin-api ..................... 3.6.1 -> 3.6.3
[INFO]   org.apache.pdfbox:pdfbox ............................ 2.0.16 -> 2.0.22
[INFO]   org.apache.xbean:xbean-spring ............................ 4.9 -> 4.18
[INFO]   org.assertj:assertj-core ............................ 3.12.2 -> 3.19.0
[INFO]   org.awaitility:awaitility ............................. 3.1.6 -> 4.0.3
[INFO]   org.junit.jupiter:junit-jupiter-engine ................ 5.5.1 -> 5.7.0
[INFO]   org.junit.jupiter:junit-jupiter-migrationsupport ...... 5.5.1 -> 5.7.0
[INFO]   org.junit.jupiter:junit-jupiter-params ................ 5.5.1 -> 5.7.0
[INFO]   org.junit.platform:junit-platform-engine .............. 1.5.1 -> 1.7.0
[INFO]   org.junit.platform:junit-platform-launcher ............ 1.5.1 -> 1.7.0
[INFO]   org.junit.vintage:junit-vintage-engine ................ 5.5.1 -> 5.7.0
[INFO]   org.mockito:mockito-core .............................. 3.0.0 -> 3.7.7
[INFO]   org.scala-lang.modules:scala-java8-compat_2.13 ........ 0.9.0 -> 0.9.1
[INFO]   org.scalacheck:scalacheck_2.13 ...................... 1.14.3 -> 1.15.2
[INFO]   org.scalatest:scalatest_2.13 .................... 3.1.1 -> 3.3.0-SNAP3
[INFO]   org.slf4j:jcl-over-slf4j ...................... 1.7.27 -> 2.0.0-alpha1
[INFO]   org.slf4j:log4j-over-slf4j .................... 1.7.27 -> 2.0.0-alpha1
[INFO]   org.slf4j:slf4j-api ........................... 1.7.27 -> 2.0.0-alpha1
[INFO]   org.springframework:spring-aop ............... 4.3.25.RELEASE -> 5.3.3
[INFO]   org.springframework:spring-beans ............. 4.3.25.RELEASE -> 5.3.3
[INFO]   org.springframework:spring-context ........... 4.3.25.RELEASE -> 5.3.3
[INFO]   org.springframework:spring-core .............. 4.3.25.RELEASE -> 5.3.3
[INFO]   org.springframework:spring-jdbc .............. 4.3.25.RELEASE -> 5.3.3
[INFO]   org.springframework:spring-jms ............... 4.3.25.RELEASE -> 5.3.3
[INFO]   org.springframework:spring-orm ............... 4.3.25.RELEASE -> 5.3.3
[INFO]   org.springframework:spring-tx ................ 4.3.25.RELEASE -> 5.3.3
[INFO]   org.springframework:spring-web ............... 4.3.25.RELEASE -> 5.3.3
[INFO]   org.testcontainers:testcontainers ................... 1.12.0 -> 1.15.1
[INFO]
[INFO] No dependencies in Dependencies have newer versions.
[INFO]
[INFO] artifact org.apache.maven.wagon:wagon-ssh: checking for updates from central
[INFO] The following dependencies in pluginManagement of plugins have newer versions:
[INFO]   javax.xml.bind:jaxb-api .................. 2.3.1 -> 2.4.0-b180830.0359
[INFO]   org.apache.maven.wagon:wagon-ssh ........................ 2.0 -> 3.4.2
[INFO]
[INFO] artifact com.puppycrawl.tools:checkstyle: checking for updates from central
[INFO] artifact org.apache.maven.doxia:doxia-module-markdown: checking for updates from central
[INFO] The following dependencies in Plugin Dependencies have newer versions:
[INFO]   com.puppycrawl.tools:checkstyle ......................... 8.29 -> 8.39
[INFO]   org.apache.maven.doxia:doxia-module-markdown ............ 1.7 -> 1.9.1
[INFO]   org.apache.maven.wagon:wagon-ssh ........................ 2.0 -> 3.4.2

I encourage contributors helping toward updating those libs

Issue Links

• links to: GitHub Pull Request #321