[SHIRO-502] OSGi import of com.google.inject in shiro-guice has incorrect version range

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.3.0
• Component/s: Integration: Guice
• Labels: patch
• Assignee: Jared Bunting
• Reporter: Stuart McCulloch
• Created: 23/May/14 15:59
• Updated: 01/Jul/16 18:05
• Resolved: 01/Jul/16 15:39

Description

The guice project follows a relaxed* form of semantic versioning in its package exports. So while the bundle version increases on each major release: 2, 3, 4 the exported package version only increases the minor segment: 1.2, 1.3, 1.4 to reflect that the API is still binary compatible - albeit with additional features.

(* relaxed because the same version is applied to all packages in the bundle)

This means that shiro-guice fails to resolve against the official guice bundle, because guice 3 is exporting com.google.inject with a version "1.3", but shiro-guice is importing com.google.inject with a range of "[3, 4)"

Solution is to either remove the version range on the import, or widen it to something like "1.3" (ie. provide a lower bound, but not an upper bound).

Issue Links

• is duplicated by: SHIRO-549 pom specified incorrect package versions for guice