[JXPATH-75] The dependency for xerces in commons-jxpath-1.2.pom is too old

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.2 Final
• Fix Version/s: 1.3

Environment

java version "1.5.0_04"
maven2
commons-configuration-1.3
commons-jxpath-1.2
spring-context-2.0.1

• Assignee: Unassigned
• Reporter: Dmitry Katsubo
• Created: 04/Jan/07 10:04
• Updated: 10/Jan/07 23:24
• Resolved: 10/Jan/07 23:24

Description

The following dependency in commons-jxpath-1.2.pom (see http://mirrors.ibiblio.org/pub/mirrors/maven2/commons-jxpath/commons-jxpath/1.2/commons-jxpath-1.2.pom) is out-of-date:

<dependency>
<groupId>xerces</groupId>
<artifactId>xerces</artifactId>
<version>1.2.3</version>
</dependency>

The side effect from this dependency is, that some component, that implicitly uses xerces, may fail with this old xerces version. For example, I am using commons-configuration with spring framework which assumes, that XML parser is able to make XSD verification of configuration files, but xerces-1.2.3 is not able to do this.

Solutions are:
a) remove all dependencies from commons-jxpath.pom, related with xerces (I hope, most of the community uses at least java1.5, or one may include dependency on xerces in his .pom, as in (c) )
b) update version of xerces in commons-jxpath.pom up to 2.4.0
c) include dependency in your .pom, that overrides version of xerces