Details

    • Type: Task
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: Backlog
    • Component/s: Quality Assurance
    • Labels:
    • Rice Team:
      QA

      Description

      Get a report of jars which are no longer current inorder to better determine priorities for upgrading mvn versions:display-dependency-updates http://mojo.codehaus.org/versions-maven-plugin/

        Attachments

          Issue Links

            Activity

            Hide
            tschneeb Travis Schneeberger added a comment -

            I would also recommend calling display-plugin-updates goal to look for dated maven plugins.

            BTW. This mvn plugin works great (I use it all the time) but it isn't perfect due to the nature of maven. Periodically, someone needs to manually audit rice's dependencies. This is for a couple reasons:

            1) It is pretty common that dependencies change name (groupId and/or artifactId) and the new versions under the new name will not show up in the report
            2) Sometimes dependencies use non-standard version numbers where an older version is considered newer than a newer version

            As a part of this audit I would also look at each module of rice and make sure it is declaring only the dependencies it is using. This way projects depending on rice are only bringing in what is required.

            The following goals in the http://maven.apache.org/plugins/maven-dependency-plugin/ will address this concern. Again this isn't a perfect tool (there will be some false positives). You may consider publishing reports from some of these goals as well.

            dependency:analyze
            dependency:analyze-dep-mgt
            dependency:analyze-only
            dependency:analyze-report
            dependency:analyze-duplicate

            Show
            tschneeb Travis Schneeberger added a comment - I would also recommend calling display-plugin-updates goal to look for dated maven plugins. BTW. This mvn plugin works great (I use it all the time) but it isn't perfect due to the nature of maven. Periodically, someone needs to manually audit rice's dependencies. This is for a couple reasons: 1) It is pretty common that dependencies change name (groupId and/or artifactId) and the new versions under the new name will not show up in the report 2) Sometimes dependencies use non-standard version numbers where an older version is considered newer than a newer version As a part of this audit I would also look at each module of rice and make sure it is declaring only the dependencies it is using. This way projects depending on rice are only bringing in what is required. The following goals in the http://maven.apache.org/plugins/maven-dependency-plugin/ will address this concern. Again this isn't a perfect tool (there will be some false positives). You may consider publishing reports from some of these goals as well. dependency:analyze dependency:analyze-dep-mgt dependency:analyze-only dependency:analyze-report dependency:analyze-duplicate
            Hide
            eghm-kuali-m Erik Meade added a comment - - edited
            Show
            eghm-kuali-m Erik Meade added a comment - - edited Thanks Travis, I've add all those to my local CI. Jeff also skyped http://site.origin.kuali.org/rice/2.2.0-M2-SNAPSHOT/rice-krad/rice-krad-web-framework/graph/transitive/all/linked.png a graph produced by https://github.com/jcaddel/graph-maven-plugin
            Hide
            jcoltrin Jessica Coltrin (Inactive) added a comment -

            removing 2.2 fixVersion since this is tracked as QA-Backlog

            Show
            jcoltrin Jessica Coltrin (Inactive) added a comment - removing 2.2 fixVersion since this is tracked as QA-Backlog

              People

              • Assignee:
                Unassigned
                Reporter:
                eghm-kuali-m Erik Meade
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated: