Re: jtreg7: request to vendor the dependencies
On Wed, 18 Oct 2023, Vladimir Petko wrote:
>jtreg7 depends on a number of test-related packages (junit4, junit5,
>libhamcrest-java) that require transitive dependencies such as picocli
>or opentest4j-reporting either introduced (that is not an issue) or
>upgraded.
Standard answer is that these must be packaged separately.
>A new point release of the package in the stable release requires
>careful testing and ensuring that there is no impact on reverse
>dependencies.
Right. Please talk to stable release maintainers and security people
and ask them how they’d prefer to have this handled. Do also include
Doko (as openjdk-?? maintainer).
bye,
//mirabilos
--
Infrastrukturexperte • Qvest Digital AG
Am Dickobskreuz 10, D-53121 Bonn • https://www.qvest-digital.com/
Telephon +49 228 54881-393 • Fax: +49 228 54881-235
HRB AG Bonn 18196 • USt-ID (VAT): DE274355441
Vorstand: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg
Vorsitzender Aufsichtsrat: Peter Nöthen
Reply to: