This message was deleted.
# community-support
s
This message was deleted.
v
Do you use the spring dependency management plugin?
c
no
I'm not even sure though what's sneaking it in... I'm suspicious of the plugins we do use now...
maybe one of them does... some internal proprietary stuff that I have yet to look into
v
Why do you think something sneaked it in?
spring-boot-dependencies
is the Spring BOM, not the Spring Dependency Management plugin
c
because plugins...
lol
really I just don't get it, everything seems to have the spring bom applied with platform, yet somehow I'm getting 2 versions of jackson
15 and 12 in my lockfiles
v
The reasons I asked is, because it uses the big hammer method that is also non obvious in things like
dependencies
and
dependencyInsight
and is often the source of "why the fuck is that verison used without further information"
Of course you can achieve the same manually by doing a forced version
But I'm not familiar with the locking and how that could be involved
c
not sure if I want a scan or not... probably should, I fear exposure of something someone would consider proprietary...
it seems like this is doing it? but... that's not the version that boot 2.5.15 pulls in, an all other versions also use that. I don't understand which thing does it
Copy code
com.fasterxml.jackson.core:jackson-annotations:2.12.7 -> 2.15.3
\--- org.springframework.boot:spring-boot-dependencies:2.5.15
I'm not even sure I should care, but I'd still like to know
v
You mean where 2.15.3 is coming from?
Copy code
com.fasterxml.jackson.core:jackson-annotations:{strictly 2.15.3} -> 2.15.3
\--- project :groups-client
c
yeah
v
groups-client
has it as strict version
c
I mean... but what... that's the project I'm editing
Copy code
intTestImplementation(project)
    intTestImplementation(springBom)
    intTestImplementation(libs.starter.webflux)
    intTestImplementation(libs.starter.test)
    intTestImplementation(libs.reactor.test)
    intTestImplementation(libs.wiremock)
    intTestImplementation(libs.logback.classic)
v
It actually was
Copy code
com.fasterxml.jackson.core:jackson-annotations:{strictly 2.15.3} -> 2.15.3
\--- project :groups-client
     \--- project :groups-client (*)
So the
intTestImplementation(project)
is the relevant line for
intTestImplementation
What do you have for
implementation
and similar?
Ah, I think that strictly is actually coming from the lock file. Though I didn't really use locking much.
c
yeah, I've trashed the lockfile though 😕
so, it's creating it again
v
What if you run those depIn tasks without lockfile / locking?
c
still weird isn't it?
v
What do you think is weird?
Seems pretty clear to me
c
enlighten
v
org.wiremock:wiremock:3.3.1
depends on that version
Copy code
[...]
        {
          "group": "com.fasterxml.jackson",
          "module": "jackson-bom",
          "version": {
            "requires": "2.15.3"
          },
          "attributes": {
            "org.gradle.category": "platform"
          },
          "endorseStrictVersions": true
        },
[...]
It's a pretty stupid move to have a strict version as dependency in a library, but well, ...
c
heh... well... I had tried downgrading, but that didn't help... I think I'm going to ignore it since it only affects the integration tests, and they still work
v
Ah, no, my fault, that is not strict, all is good
If you try to downgrade, just use the usual ways, like defining a strict version for the jackson bom
c
at least from what I can see in the lock file. Thanks for the help. I owe you ... at this point probably a whole what's the word I'm looking for... the wooden things that they stack all the packages on in trucks? anyones one of those in beer (or drink of your choice that's not like super top shelf)
v
the wooden things that they stack all the packages on in trucks
c
yes, what's the word !
roflol
v
Dunno in English
c
roflol
v
but dict.leo.org says same as in German, so palette
c
yep, that's the word
👌 1
well, it's actually "pallet" but pronounced the same
a palette is something you put paint on
anyways, pretty sure I owe you an entire pallet of your preferred drink
❤️ 1
v
Ah, yeah, line 7, not line 2: https://dict.leo.org/englisch-deutsch/Palette 🙂
c
no worries
v
Ah, so palette is
Good ol' Bob
c
correct
at least now I know what's causing it. Before I did my refactor you could litterally see 2 different versions of jackson brought in across 5 different lines...
👌 1
and I'm like... that's terrible
I don't know if it was resolving that way... but the way the dependencies were written I think I saw 3 different versions asked for
🤷‍♂️ 1
hoping you could appreciate why I went insane with "why is this still there"
enjoy your day
I'm out for the night
v
Yeah, day just started, 1:40 am here 🙂
🤣 1
have a good night
👍 1
👋
c
whatever you do, never ask me to think about what time it is in europe
🤷‍♂️ 1
v
Let's just use UGT 🙂
🤣 1