Boris Unckel opened MNG-7068 and commented
The current pom includes com.google.inject:guice with the default transitive dependency of com.google.guava:guava. Guava has declared several dependencies, which are not needed at runtime. Only com.google.guava:failureaccess is needed.
The proposal is first to add com.google.guava:guava to the excludes of guice. Second guava and failureaccess shall be added as direct dependencies.
This has two advantages: Downstream projects only get the needed dependencies and the version of guava can be independently set.
The runtime dependencies for Guava are explained in the last section of the README "Important Warnings" #3
Affects: 3.6.3
Issue Links:
Remote Links:
Backported to: 4.0.0-alpha-2, 3.9.0
Boris Unckel opened MNG-7068 and commented
The current pom includes com.google.inject:guice with the default transitive dependency of com.google.guava:guava. Guava has declared several dependencies, which are not needed at runtime. Only com.google.guava:failureaccess is needed.
The proposal is first to add com.google.guava:guava to the excludes of guice. Second guava and failureaccess shall be added as direct dependencies.
This has two advantages: Downstream projects only get the needed dependencies and the version of guava can be independently set.
The runtime dependencies for Guava are explained in the last section of the README "Important Warnings" #3
Affects: 3.6.3
Issue Links:
MRESOLVER-156 Active dependency management for Google Guice/Guava
MNG-7502 Upgrade Guice to 5.1.0
Remote Links:
Backported to: 4.0.0-alpha-2, 3.9.0