[JENKINS-73867] Backport the override of outdated managed dependency on asm

[jenkins-infra-bot]

From PR-9827

Today, jenkins-bom is delivering a managed dependency on asm 9.5, coming from Guice. While it is bad that we deliver any reference to ASM from jenkins-bom, it is even worse that we deliver an old one. This overrides the old version to a more recent one, which is a strict improvement over the status quo. It is not a complete long-term solution to the problem, but it will surely not make things any worse than they are today, and will make them better in some cases.

---

Originally reported by markewaite, imported from: Backport the override of outdated managed dependency on asm

• status: Resolved
• priority: Minor
• component(s): core
• label(s): 2.479.1-fixed
• resolution: Fixed
• resolved: 2024-10-05T14:56:51+00:00
• votes: 0
• watchers: 1
• imported: 2025-11-24

Raw content of original issue

From PR-9827


Today, jenkins-bom is delivering a managed dependency on asm 9.5, coming from Guice. While it is bad that we deliver any reference to ASM from jenkins-bom, it is even worse that we deliver an old one. This overrides the old version to a more recent one, which is a strict improvement over the status quo. It is not a complete long-term solution to the problem, but it will surely not make things any worse than they are today, and will make them better in some cases.

• environment: Jenkins 2.479