Bug#789485: jruby: Don't bundle all jruby dependencies inside jruby-core jar file

Emmanuel Bourg ebourg at apache.org
Sun Jun 21 14:38:24 UTC 2015


Le 21/06/2015 15:31, Miguel Landaeta a écrit :

> This is a bad practice that can lead to bugs due to outdated
> dependencies or security bugs when dependencies are patched
> but jruby is not rebuild.
> 
> This also should reduce jruby binary package size.

It looks like the embedded dependencies are also relocated under the
org.jruby namespace. Removing them could lead to incompatibilities with
applications importing them.

I'd rather document the inclusion with a Built-Using field rather than
diverging from upstream.

Emmanuel Bourg



More information about the pkg-java-maintainers mailing list