Commons JXPath
  1. Commons JXPath
  2. JXPATH-75

The dependency for xerces in commons-jxpath-1.2.pom is too old

    Details

    • Type: Improvement Improvement
    • Status: Resolved
    • Priority: Minor Minor
    • Resolution: Fixed
    • Affects Version/s: 1.2 Final
    • Fix Version/s: 1.3
    • Labels:
      None
    • Environment:

      java version "1.5.0_04"
      maven2
      commons-configuration-1.3
      commons-jxpath-1.2
      spring-context-2.0.1

      Description

      The following dependency in commons-jxpath-1.2.pom (see http://mirrors.ibiblio.org/pub/mirrors/maven2/commons-jxpath/commons-jxpath/1.2/commons-jxpath-1.2.pom) is out-of-date:

      <dependency>
      <groupId>xerces</groupId>
      <artifactId>xerces</artifactId>
      <version>1.2.3</version>
      </dependency>

      The side effect from this dependency is, that some component, that implicitly uses xerces, may fail with this old xerces version. For example, I am using commons-configuration with spring framework which assumes, that XML parser is able to make XSD verification of configuration files, but xerces-1.2.3 is not able to do this.

      Solutions are:
      a) remove all dependencies from commons-jxpath.pom, related with xerces (I hope, most of the community uses at least java1.5, or one may include dependency on xerces in his .pom, as in (c) )
      b) update version of xerces in commons-jxpath.pom up to 2.4.0
      c) include dependency in your .pom, that overrides version of xerces

        Activity

          People

          • Assignee:
            Unassigned
            Reporter:
            Dmitry Katsubo
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development