[WICKET-6625] Use Maven range version for dependencies

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Won't Do
• Affects Version/s: 7.11.0, 8.2.0
• Component/s: wicket, wicket-cdi, wicket-extensions, wicket-guice, wicket-http2, wicket-spring
• Assignee: Martin Tzvetanov Grigorov
• Reporter: Martin Tzvetanov Grigorov
• Created: 29/Dec/18 12:40
• Updated: 01/Jan/19 14:16
• Resolved: 01/Jan/19 13:06

Description

We should use Maven range version for 3rd party dependencies, e.g. [2.0.0,3.0.0).

This way Wicket will automatically use the latest released version of the dependency (without major upgrades).

This will help to avoid using vulnerable dependencies in Wicket releases.

The applications can always use a specific version of any dependency, i.e. upgrade or downgrade it, if needed.