[
https://issues.apache.org/jira/browse/MNG-7068?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Michael Osipov closed MNG-7068.
-------------------------------
Fix Version/s: 3.9.0
(was: 3.9.0-candidate)
Resolution: Fixed
Fixed with
[e1b46e233930b46f83bc47c373beb41681bb6972|https://gitbox.apache.org/repos/asf?p=maven.git;a=commit;h=e1b46e233930b46f83bc47c373beb41681bb6972]
for {{maven-3.9.x}} branch.
> Active dependency management for Google Guice/Guava
> ---------------------------------------------------
>
> Key: MNG-7068
> URL: https://issues.apache.org/jira/browse/MNG-7068
> Project: Maven
> Issue Type: Improvement
> Components: Dependencies
> Affects Versions: 3.6.3
> Reporter: Boris Unckel
> Assignee: Michael Osipov
> Priority: Major
> Fix For: 4.0.0, 4.0.0-alpha-1, 3.9.0
>
>
> The current pom includes com.google.inject:guice with the default transitive
> dependency of com.google.guava:guava. Guava has declared several
> dependencies, which are not needed at runtime. Only
> com.google.guava:failureaccess is needed.
> The proposal is first to add com.google.guava:guava to the excludes of guice.
> Second guava and failureaccess shall be added as direct dependencies.
> This has two advantages: Downstream projects only get the needed dependencies
> and the version of guava can be independently set.
> The runtime dependencies for Guava are explained in the last section of the
> [README|https://github.com/google/guava/tree/v30.1] "Important Warnings" #3
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
