Skip to content

Pin all Wicket artifacts and enforce a single Wicket version - #1689

Open
dashorst wants to merge 1 commit into
wicket-11.xfrom
pin-wicket-artifacts-11
Open

dashorst wants to merge 1 commit into
wicket-11.xfrom
pin-wicket-artifacts-11

Conversation

@dashorst

Copy link
Copy Markdown
Member

wicketstuff 11.0.0 shipped wicketstuff-openlayers3-bootstrap with wicket-request and wicket-util 10.12.0 on its classpath next to wicket-core 11.0.0. The root pom managed wicket-core and wicket-extensions, but not wicket-util and wicket-request, so the versions declared by wicket-bootstrap-core 7.0.16 (built on Wicket 10.12.0) won. This is a fix for 11.0.1.

Changes, all in the root pom.xml:

  • manage wicket-util, wicket-request, wicket-native-websocket-core, wicket-cdi and wicket-bean-validation at ${wicket.version}
  • add a bannedDependencies rule to the enforce-versions execution: only org.apache.wicket:*:${wicket.version} is allowed on any module's classpath

Verification:

  • with only the enforcer rule and without the new pins, the build fails on wicketstuff-openlayers3-bootstrap: wicket-bootstrap-core:7.0.16 → wicket-request:10.12.0 / wicket-util:10.12.0 banned
  • with this change: mvn -DperformRelease=true -Pdo-publish clean verify (javadoc and sources on, GPG skipped) succeeds for all 206 modules
  • mvn dependency:tree -Dverbose -Dincludes=org.apache.wicket over the whole reactor: all 1494 Wicket references resolve to 11.0.0

Moving wicket-bootstrap-core from 7.x (the Wicket 10 line) to 8.x is a separate change. Same fix for master and wicket-10.x: #1687 and #1688.

🤖 Generated with Claude Code

wicket-util and wicket-request were not managed, so wicket-bootstrap-core
7.0.16 put Wicket 10.12.0 versions of them on the classpath of
wicketstuff-openlayers3-bootstrap, next to wicket-core 11.0.0. This
shipped in 11.0.0.

Manage wicket-util, wicket-request, wicket-native-websocket-core,
wicket-cdi and wicket-bean-validation at ${wicket.version}, and add a
bannedDependencies rule that fails the build when any org.apache.wicket
artifact on a classpath has another version.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

This branch was successfully deployed

1 active deployment
CI_DEPLOY — dbed2e49 Deployed Nov 13, 2026 by dashorst via Java 21 Test #1986
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants