Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SEC-1924: POM has hardcoded versions #2151

Closed
spring-projects-issues opened this issue Feb 23, 2012 · 2 comments
Closed

SEC-1924: POM has hardcoded versions #2151

spring-projects-issues opened this issue Feb 23, 2012 · 2 comments
Labels
in: web An issue in web modules (web, webmvc) status: invalid An issue that we don't feel is valid type: bug A general bug type: jira An issue that was migrated from JIRA

Comments

@spring-projects-issues
Copy link

@spring-projects-issues spring-projects-issues commented Feb 23, 2012

stanislav bashkirtsev (Migrated from SEC-1924) said:

This is what I can see in the POM:

<dependency>
  <groupId>org.springframework</groupId>
  <artifactId>spring-tx</artifactId>
  <version>3.0.6.RELEASE</version>
  <scope>compile</scope>
</dependency>```
These versions shouldn't be there, they should be taken from dependencyManagement of the project that uses spring security. 
@spring-projects-issues
Copy link
Author

@spring-projects-issues spring-projects-issues commented Feb 23, 2012

stanislav bashkirtsev said:

Especially it's weird to see these versions in the 3.1.0 version :)

@spring-projects-issues
Copy link
Author

@spring-projects-issues spring-projects-issues commented Mar 11, 2012

Rob Winch said:

You need to Maven dependency management. See the comments in https://jira.springsource.org/browse/SEC-1883 for details on why.

@spring-projects-issues spring-projects-issues added in: web An issue in web modules (web, webmvc) Closed type: bug A general bug status: invalid An issue that we don't feel is valid type: jira An issue that was migrated from JIRA labels Feb 5, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in: web An issue in web modules (web, webmvc) status: invalid An issue that we don't feel is valid type: bug A general bug type: jira An issue that was migrated from JIRA
Projects
None yet
Development

No branches or pull requests

1 participant