Fix issues with security dependencies

[lgpl/argeo-commons.git] / security / runtime / org.argeo.security.core / pom.xml

diff --git a/security/runtime/org.argeo.security.core/pom.xml b/security/runtime/org.argeo.security.core/pom.xml
index cbc54821e5fe78f860f53f6539faf452594838cc..b6edaf87d55f582e1f591c8b5d3d334dde9698bf 100644 (file)
--- a/security/runtime/org.argeo.security.core/pom.xml
+++ b/security/runtime/org.argeo.security.core/pom.xml
@@ -1,4 +1,5 @@
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
        <modelVersion>4.0.0</modelVersion>
        <parent>
                <groupId>org.argeo.commons.security</groupId>
@@ -45,10 +46,18 @@
                <dependency>
                        <groupId>org.argeo.dep.osgi</groupId>
                        <artifactId>org.argeo.dep.osgi.springframework.ldap</artifactId>
-                       <version>1.3.0.0003</version>
                </dependency>
 
+
                <!-- Security -->
+               <dependency>
+                       <!--
+                               Force inclusion of commons.lang to prevent v2.1.0 to be taken by
+                               Spring Security
+                       -->
+                       <groupId>org.apache.commons</groupId>
+                       <artifactId>com.springsource.org.apache.commons.lang</artifactId>
+               </dependency>
                <dependency>
                        <groupId>org.springframework.security</groupId>
                        <artifactId>org.springframework.security</artifactId>
@@ -72,21 +81,17 @@
                <dependency>
                        <groupId>org.codehaus.jackson</groupId>
                        <artifactId>com.springsource.org.codehaus.jackson.mapper</artifactId>
-                       <version>1.0.0</version>
                </dependency>
 
                <dependency>
                        <groupId>com.springsource.json</groupId>
                        <artifactId>com.springsource.json</artifactId>
-                       <version>1.0.1.RELEASE</version>
                </dependency>
                <dependency>
                        <groupId>org.antlr</groupId>
                        <artifactId>com.springsource.org.antlr</artifactId>
                </dependency>
 
-
-
                <!-- TEST -->
                <dependency>
                        <groupId>org.junit</groupId>