Skip to content

[1402] Use Spring framework BOM to manage Spring and Spring Security dependencies#1403

Merged
groldan merged 1 commit intoGeoWebCache:mainfrom
groldan:geoserver3/use-spring-framework-bom
May 28, 2025
Merged

[1402] Use Spring framework BOM to manage Spring and Spring Security dependencies#1403
groldan merged 1 commit intoGeoWebCache:mainfrom
groldan:geoserver3/use-spring-framework-bom

Conversation

@groldan
Copy link
Copy Markdown
Member

@groldan groldan commented May 26, 2025

As part of the preparation work for the "GeoServer 3" migration to Spring 6, we'll use Maven Bill of Materials for dependency sets that provide them (e.g. the new GeoTools BOM will include BOMs for log4j, slf4j, and jackson).

For server projects, we're adding each individual spring and spring-security dependency, either to the root pom's dependencyManagement or in individual modules.

In order to centralize version management for all spring and spring-security dependencies and reduce boilerplate, we'll adopt the spring-framework-bom and spring-security-bom BOMs.


Fixes #1402

@groldan groldan added the dependencies Pull requests that update a dependency file label May 26, 2025
@groldan
Copy link
Copy Markdown
Member Author

groldan commented May 26, 2025

The GeoServer pull request is merged.

Copy link
Copy Markdown
Contributor

@jodygarnett jodygarnett left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That looks much easier to manage

Comment thread geowebcache/pom.xml
</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-bom</artifactId>
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

so much better!

@groldan groldan merged commit 2693514 into GeoWebCache:main May 28, 2025
12 checks passed
@groldan groldan deleted the geoserver3/use-spring-framework-bom branch May 28, 2025 15:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Use Spring framework BOM to manage Spring and Spring Security dependencies

2 participants