[OAK-7182] Make it possible to update Guava

• Type: Wish
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Julian Reschke
• Created: 22/Jan/18 10:30
• Updated: 16/Nov/22 13:36

Description

We currently rely on Guava 15, and this affects all users of Oak because they essentially need to use the same version.

This is an overall issue to investigate what would need to be done in Oak in order to make updates possible.

Issue Links

• blocks: OAK-9491 Address vulnerabilities found by dependency checker plugin
• is related to: OAK-10001 Bump up minimal Java version to 11
• is related to: OAK-8874 deprecate use of Guava Predicate class in oak-core API
• is related to: SLING-10972 Testing Sling Mock Oak: Shade (embed and relocate) Guava
• is related to: SOLR-11763 Upgrade Guava to 25.1-jre
• is related to: OAK-8612 Make the Azure Data Store compatible with Guava 15 and 26
• relates to: SOLR-10308 Solr fails to work with Guava 21.0
• relates to: OAK-9261 Upgrade Apache Solr to 8.6.3 and remove Embedded Solr Server
• relates to: JCR-4250 remove guava dependency
• links to: CVE-2018-10237
• links to: Neil Bartlett - Static Linking in OSGi (wayback machine)

Sub-Tasks

• LengthCachingDataStoreTest: Remove unused import of Guava InputSupplier: Closed
• Upgrade jclouds dependency to 2.0.3: Closed
• avoid use of guava Iterators.emptyIterator(): Closed
• guava: ListenableFuture.transform() changes to transformAsync in version 20: Closed
• make Guava version configurable at build time: Closed
• check public Oak APIs for references to Guava: Open
• Replace AtomicCounter Supplier: Closed
• add build profile "guava-latest" to build with latest supported Guava version: Closed
• relax guava version range in Import-Package declarations: Closed
• SegmentCompactionIT's use of com.google.common.util.concurrent.Futures.dereference: Open
• oak-blob-*'s use of Guava File.fileTreeTraverser: Open
• solr support of embedded server conflicts with Guava upgrade: Resolved
• add maven profile to build with Guava beta checks: Closed
• commons: avoid use of Guava beta APIs in StringSort: Closed
• commons: avoid use of Guava beta APIs in FileIOUtils: Open
• guava-latest profile defunct: Closed
• DeclaredMembershipPredicate does not compile with Guava 20: Closed
• deprecate public LazyInputStream(ByteSource byteSource): Closed
• deprecate FileIOUtils.BurnOnCloseFileIterator: Closed
• deprecate FileIOUtils.FileLineDifferenceIterator: Closed
• deprecate FileIOUtils.writeStrings with Guava Function parameter: Closed
• oak-commons: deprecate uses of Guava in exported API: Resolved
• SimpleCredentialsSupport uses Guava API in exported API: Closed
• oak-core-spi: remove uses of Guava from exported API: Open
• deprecate Guava based APIs in WhiteboardUtils: Closed
• deprecate Guava based APIs in ManagementOperation: Closed
• deprecate Guava based APIs in o.a.j.o.cache: Closed
• Mark exported APIs that we don't want to expose with an @Internal annotation: Closed
• Remove deprecated Guava-based APIs: Open
• oak-core-spi: bump up logging for deprecated Guava based APIs to INFO: Closed
• oak-core-spi: CacheLIRS deprecation: add 'org.apache.jackrabbit.oak.plugins.segment' to allowed caller list: Closed
• oak-commons: bump up logging for deprecated Guava based APIs to INFO: Closed
• wrap shaded Guava for internal use: Closed
• oak-core-spi: bump up logging for deprecated Guava based APIs to WARN: Closed
• oak-commons: bump up logging for deprecated Guava based APIs to WARN: Closed
• Remove (Guava) com.google.common.base.Objects.ToStringHelper: Closed
• introduce oak-wrapped-guava project: In Progress
• avoid leaking out transitive dependencies to Guava: Resolved
• oak-blob-cloud-azure: unneeded Guava import declaration: Resolved
• oak-search-mt: unneeded Guava import declaration: Resolved
• remove use of com.google.common.collect.Iterators.emptyIterator: Resolved
• update deprecations with 'since' and 'forRemoval' properties: Open