Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tolerate JAX-RS 2.2 in jackson-module-jaxb-annotations so that it can be deployed in Liberty alongside features which use 2.2 #233

Closed
JDUNNIN opened this issue Jan 9, 2024 · 6 comments · Fixed by #235

Comments

@JDUNNIN
Copy link
Contributor

JDUNNIN commented Jan 9, 2024

When using a Liberty container image such as icr.io/appcafe/websphere-liberty:23.0.0.9-full-java11-openj9-ubi and trying to use the jackson-module-jaxb-annotations-2.16.0.jar we get a conflict due to two implementations of javax.xml.bind being available.

The features we need to use within Liberty only supply the 2.2 implementation.

Looking at jackson-module-jaxb-annotations-2.16.0.jar we can see it has compile dependencies on jakarta.xml.bind-api 2.3.2 and so provides an implementation at 2.3. This then causes the conflict.

This issue is to request that jaxb annotations be updated in some way to change the toleration that ends up in the /META-INF/MANIFEST.MF file in the Import-Package section to be:

javax.xml.bind;version="[2.2,3)",javax.xml.bind.annotation;
 version="[2.2,3)",javax.xml.bind.annotation.adapters;version="[2.2,3)

Instead of what is currently has:

javax.xml.bind;version="[2.3,3)",javax.xml.bind.annotation;
 version="[2.3,3)",javax.xml.bind.annotation.adapters;version="[2.3,3)

Thanks

@cowtowncoder
Copy link
Member

Two sections you show seem to be identical? Also, not sure how JAX-RS is related here (Jackson does have JAX-RS/Jakarta-RS providers but those are separate from modules here).

But one thing to note is that there are 2 modules: jackson-module-jaxb-annotations is older one for pre-Jakarta (JAXB) annotations; newer jackson-module-jakarta-xmlbind-annotations for Jakarta variant.
Would it be that you want the latter, not former?

@JDUNNIN
Copy link
Contributor Author

JDUNNIN commented Jan 10, 2024

Hi @cowtowncoder there is a tiny difference in the code blocks. The [min,max) version toleration changes between the two. Today the jaxb modules tolerate [2.3,3) but we are looking for them to tolerate [2.2,3) as our Liberty application server does not support 2.3.

@cowtowncoder
Copy link
Member

Ah! Easy to miss.

So, I'd be open for a PR although slightly worried whether it might cause issues for other users. But I guess as long as whatever is including module specifies 2.3 or later as dependency, it should not become problematic.

So, PR against 2.16 would be welcome (I know it's easy enough and I could do but it's still slightly easier to get a PR to review and merge).

@JDUNNIN
Copy link
Contributor Author

JDUNNIN commented Jan 11, 2024

Hi @cowtowncoder I raised a PR at the 2.17 level, as we frequently update to latest version so would be looking to have this in future releases as well. I wasn't sure if having the PR at 2.16 meant it wouldn't go in subsequent releases. I can PR again at 2.16 if that is preferable.

@cowtowncoder
Copy link
Member

@JDUNNIN I always merge forward, so 2.16 would indeed be rolled to 2.17 and then master (3.0).

With the exception that if the change is to pom.xml it needs manual merging (which I will take care of).

So 2.16 would be preferable.

@JDUNNIN
Copy link
Contributor Author

JDUNNIN commented Jan 15, 2024

@cowtowncoder I've recreated the PR at 2.16 👍 Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants