-
Notifications
You must be signed in to change notification settings - Fork 581
Closed
Description
Environment Details
- Helidon Version: 4.x
- Helidon SE and Helidon MP
- JDK version: not applicable
- OS: not applicable
- Docker version (if applicable): not applicable
Problem Description
Helidon uses cron-utils for scheduling.
Helidon uses version 9.1.6, but there are some useful contributions in new versions:
- Fixed vulnerability in 9.1.7, details are here
Maybe the exclusion fororg.glassfish:javax.el
should be changed or removed (I'm not sure). Can be connected to helidon-scheduling has transitive dependency on org.glassfish:javax.el #2908
<dependency>
<groupId>com.cronutils</groupId>
<artifactId>cron-utils</artifactId>
<version>${version.lib.cron-utils}</version>
<exclusions>
<exclusion>
<groupId>org.glassfish</groupId>
<artifactId>javax.el</artifactId>
</exclusion>
<exclusion>
<groupId>org.javassist</groupId>
<artifactId>javassist</artifactId>
</exclusion>
</exclusions>
</dependency>
- Javassist was removed in 9.1.7. Now helidon excludes it too and this exclusion can be removed after updating.
These changes can be done for 3.x and 2.x.
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
Closed