Skip to content

Conversation

@groldan
Copy link
Member

@groldan groldan commented May 26, 2025

As part of the preparation work for the "GeoServer 3" migration to Spring 6, we'll use Maven Bill of Materials for dependency sets that provide them (e.g. the new GeoTools BOM will include BOMs for log4j, slf4j, and jackson).

For server projects, we're adding each individual spring and spring-security dependency, either to the root pom's dependencyManagement or in individual modules.

In order to centralize version management for all spring and spring-security dependencies and reduce boilerplate, we'll adopt the spring-framework-bom and spring-security-bom BOMs.


Fixes #1402

@groldan groldan added the dependencies Pull requests that update a dependency file label May 26, 2025
@groldan
Copy link
Member Author

groldan commented May 26, 2025

The GeoServer pull request is merged.

Copy link
Contributor

@jodygarnett jodygarnett left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That looks much easier to manage

</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-bom</artifactId>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

so much better!

@groldan groldan merged commit 2693514 into GeoWebCache:main May 28, 2025
12 checks passed
@groldan groldan deleted the geoserver3/use-spring-framework-bom branch May 28, 2025 15:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Use Spring framework BOM to manage Spring and Spring Security dependencies

2 participants