Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

spring-boot-dependencies cannot be used with repositories that ban com.oracle.database.jdbc:ojdbc-bom #39945

Closed
jonathanq opened this issue Mar 14, 2024 · 0 comments
Assignees
Labels
type: bug A general bug
Milestone

Comments

@jonathanq
Copy link

The spring-boot-dependencies includes the com.oracle.database.jdbc:ojdbc-bom in the dependencies (

library("Oracle Database", "21.9.0.0") {
prohibit {
versionRange "[21.10.0.0,21.13.0.0]"
because "they do not work in a JVM with assertions enabled"
}
group("com.oracle.database.jdbc") {
imports = [
"ojdbc-bom"
]
}
}
).

The com.oracle.database.jdbc:ojdbc-bom file is not open-source licensed (https://www.oracle.com/downloads/licenses/oracle-free-license.html) and when included in spring-boot-dependencies, it prevents many companies from using Spring Boot even if they have no intention of using any Oracle database (or even a RDBMS at all). If a company is using an internal repository that blocks non-open-source libraries from getting imported, they will be unable to build Spring Boot projects, or any Spring cloud project that includes spring-boot-dependencies in the dependency closure (such as Spring Boot Cloud Gateway).

There have been many attempts to find a way to exclude this BOM dependency from the project - none of them have worked.

Is there a way you can exclude this com.oracle.database.jdbc:ojdbc-bom dependency or separate it out from the spring-boot-dependencies?

@spring-projects-issues spring-projects-issues added the status: waiting-for-triage An issue we've not yet triaged label Mar 14, 2024
@philwebb philwebb added for: team-meeting An issue we'd like to discuss as a team to make progress type: bug A general bug and removed status: waiting-for-triage An issue we've not yet triaged for: team-meeting An issue we'd like to discuss as a team to make progress labels Mar 14, 2024
@philwebb philwebb changed the title Exclude non-open-source com.oracle.database.jdbc:ojdbc-bom from spring-boot-dependencies spring-boot-dependencies cannot be used with repositories that ban com.oracle.database.jdbc:ojdbc-bom Mar 18, 2024
@philwebb philwebb added this to the 3.1.x milestone Mar 18, 2024
@wilkinsona wilkinsona self-assigned this Apr 26, 2024
@wilkinsona wilkinsona modified the milestones: 3.1.x, 3.1.12 Apr 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: bug A general bug
Projects
None yet
Development

No branches or pull requests

4 participants