[TIKA-3498] Fix dependency convergence and other import issues in scientific vs standard package

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.1.0
• Assignee: Tim Allison
• Reporter: Tim Allison
• Created: 26/Jul/21 14:46
• Updated: 17/Aug/21 13:30
• Resolved: 26/Jul/21 15:44

Description

dadoonet found that there's a convergence error when users include both the tika-parsers-standard-package jar and tika-parser-scientific-module.

Dependency convergence error for org.slf4j:jcl-over-slf4j:1.7.31 paths to dependency are:
+-org.example:tika-import-test:1.0-SNAPSHOT
  +-org.apache.tika:tika-parsers-standard-package:2.0.0
    +-org.slf4j:jcl-over-slf4j:1.7.31
and
+-org.example:tika-import-test:1.0-SNAPSHOT
  +-org.apache.tika:tika-parser-scientific-module:2.0.0
    +-edu.ucar:netcdf4:4.5.5
      +-edu.ucar:cdm:4.5.5
        +-org.slf4j:jcl-over-slf4j:1.7.7

dadoonet also found that ucar's quartz dependency causes problems with CVE checkers. We should update that dependency as well.