Spring Security BOM 4.2.14.RELEASE is missing #7975

Activity

1. spring-projects-issues

   added

   status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

   on Feb 10, 2020
2. ghusta commented on Feb 21, 2020

   

   ghusta

   on Feb 21, 2020

   Contributor

   More actions

   In fact the Spring Security BOM artifact is not missing.
   What is missing is the dependencyManagement section containing all the dependencies.

   • Contents OK in 4.2.13 : https://search.maven.org/artifact/org.springframework.security/spring-security-bom/4.2.13.RELEASE/jar

   • Contents missing in 4.2.14 : https://search.maven.org/artifact/org.springframework.security/spring-security-bom/4.2.14.RELEASE/jar
3. jzheaux

   added this to the 4.2.15 milestone on Feb 27, 2020
4. jzheaux

   added

   in: buildAn issue in the buildAn issue in the build

   type: bugA general bugA general bug

   and removed

   status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

   on Feb 27, 2020
5. rwinch

   self-assigned this

   on Mar 30, 2020
6. rwinch

   added a commit that references this issue on Mar 30, 2020

   uploadArchives customizePom for bom

   ...

   This issue will close once commit f892746 is merged into the 'main' branch.

   f892746
7. spring-projects-issues commented on Mar 30, 2020

   

   spring-projects-issues

   on Mar 30, 2020

   More actions

   Fixed via f892746
8. spring-projects-issues

   closed this as completedon Mar 30, 2020
9. rwinch commented on Mar 30, 2020

   

   rwinch

   on Mar 30, 2020

   Member

   More actions

   Thanks for the report @davyrod and additional details @ghusta. This is related to an update to our Bamboo server which required us making some changes to how things were deployed. The good news is that deployment is now totally independent of Bamboo which allows us to ensure passivity.

   A fix has been pushed to 4.2.x and will be released later this week.
10. korbel commented on Apr 7, 2020

    

    korbel

    on Apr 7, 2020

    More actions

    It does not seem to be fixed in 4.2.15
    https://search.maven.org/artifact/org.springframework.security/spring-security-bom/4.2.15.RELEASE/jar

    👍React with 👍1Reacted by Guillaume Husta
11. rwinch commented on Apr 7, 2020

    

    rwinch

    on Apr 7, 2020

    Member

    More actions

    Thanks for pointing that out @korbel The changes seem to have fixed it for SNAPSHOTs but not for releases.

    <?xml version="1.0" encoding="UTF-8"?>
    <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
      <modelVersion>4.0.0</modelVersion>
      <groupId>org.springframework.security</groupId>
      <artifactId>spring-security-bom</artifactId>
      <version>4.2.15.BUILD-SNAPSHOT</version>
      <packaging>pom</packaging>
      <name>spring-security-bom</name>
      <description>spring-security-bom</description>
      <url>https://spring.io/spring-security</url>
      <organization>
        <name>spring.io</name>
        <url>https://spring.io/</url>
      </organization>
      <licenses>
        <license>
          <name>The Apache Software License, Version 2.0</name>
          <url>https://www.apache.org/licenses/LICENSE-2.0.txt</url>
          <distribution>repo</distribution>
        </license>
      </licenses>
      <developers>
        <developer>
          <id>rwinch</id>
          <name>Rob Winch</name>
          <email>rwinch@gopivotal.com</email>
        </developer>
      </developers>
      <scm>
        <connection>scm:git:git://github.com/spring-projects/spring-security</connection>
        <developerConnection>scm:git:git://github.com/spring-projects/spring-security</developerConnection>
        <url>https://github.com/spring-projects/spring-security</url>
      </scm>
      
      <build>
        <plugins>
          <plugin>
            <artifactId>maven-compiler-plugin</artifactId>
            <configuration>
              <source>1.7</source>
              <target>1.7</target>
            </configuration>
          </plugin>
        </plugins>
      </build>
      <dependencyManagement>
        <dependencies>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-acl</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-aspects</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-cas</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-config</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-core</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-crypto</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-data</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-ldap</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-messaging</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-openid</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-remoting</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-taglibs</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-test</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
          <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-web</artifactId>
            <version>4.2.15.BUILD-SNAPSHOT</version>
          </dependency>
        </dependencies>
      </dependencyManagement>
    </project>
12. rwinch

    reopened this on Apr 7, 2020
13. rwinch

    modified the milestones: 4.2.15, 4.2.16 on Apr 7, 2020
14. rwinch

    added a commit that references this issue on May 6, 2020

    uploadArchives.dependsOn mavenBom

    ...

    This issue will close once commit a302106 is merged into the 'main' branch.

    a302106
15. spring-projects-issues commented on May 6, 2020

    

    spring-projects-issues

    on May 6, 2020

    More actions

    Fixed via a302106
16. spring-projects-issues

    closed this as completedon May 6, 2020
17. rwinch commented on May 6, 2020

    

    rwinch

    on May 6, 2020

    Member

    More actions

    This still failed when being deployed to Central :-/
18. rwinch

    reopened this on May 6, 2020
19. rwinch

    modified the milestones: 4.2.16, 4.2.17 on May 6, 2020
20. rwinch

    added a commit that references this issue on Jun 2, 2020

    uploadArchives dependsOn mavenBom

    ...

    This issue will close once commit 75e2483 is merged into the 'main' branch.

    75e2483
21. spring-projects-issues commented on Jun 2, 2020

    

    spring-projects-issues

    on Jun 2, 2020

    More actions

    Fixed via 75e2483
22. spring-projects-issues

    closed this as completedon Jun 2, 2020