[
https://issues.apache.org/jira/browse/GEODE-2506?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15876957#comment-15876957
]
ASF GitHub Bot commented on GEODE-2506:
---------------------------------------
Github user metatype commented on the issue:
https://github.com/apache/geode/pull/403
In this case geode-pulse uses commons-beanutils v1.9.3 while geode-core is
pulling in commons-beanutils v1.8.3 via shiro-core. The version is different
between `lib/*` and `geode-pulse-*.war`.
The override resolution strategy gives us another way to control transitive
dependencies. In some (rare) instances, we may want to ship a different
version than specified in the pom file. Let me know if you think this is
getting overly complicated.
> Update spring dependencies
> --------------------------
>
> Key: GEODE-2506
> URL: https://issues.apache.org/jira/browse/GEODE-2506
> Project: Geode
> Issue Type: Improvement
> Components: build
> Reporter: Anthony Baker
>
> Update Spring dependencies from 4.3.2 to 4.3.6 to pick up latest maintenance
> and security fixes.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
