Bug#789485: jruby: Don't bundle all jruby dependencies inside jruby-core jar file
Emmanuel Bourg
ebourg at apache.org
Sun Jun 21 14:38:24 UTC 2015
Le 21/06/2015 15:31, Miguel Landaeta a écrit :
> This is a bad practice that can lead to bugs due to outdated
> dependencies or security bugs when dependencies are patched
> but jruby is not rebuild.
>
> This also should reduce jruby binary package size.
It looks like the embedded dependencies are also relocated under the
org.jruby namespace. Removing them could lead to incompatibilities with
applications importing them.
I'd rather document the inclusion with a Built-Using field rather than
diverging from upstream.
Emmanuel Bourg
More information about the pkg-java-maintainers
mailing list