xlconnect icon indicating copy to clipboard operation
xlconnect copied to clipboard

#217 Upgrade commons-compress to version 1.26.1 and upgrade related d…

Open martinstuder opened this issue 11 months ago • 2 comments

…ependencies commons-io and commons-codec; set development version in DESCRIPTION file

martinstuder avatar Mar 11 '24 12:03 martinstuder

@spoltier I updated commons-compress to a newer version to what POI depends on and this now (expectedly) fails some hash checks. How do we best deal with this?

martinstuder avatar Mar 11 '24 12:03 martinstuder

~~You have to align the onLoad function in XLConnect to also download the latest version.~~

Edit: not sure what you are trying to do. Normally we would have dependabot update xlconnect-java, and that would change the pom.xml ; then we resolve all the depencencies (including transitive) and align onLoad. You seem to have changed onLoad manually, but this is not reflected by anything that is pulled from the pom.xml. Was there an update to POI ? If that is the case I would wait for dependabot to detect it and / or investigate why it has not.

Otherwise we can put commons-compress in the pom.xml explicitly.

spoltier avatar Mar 11 '24 12:03 spoltier

With the latest POI release, commons-compress has been updated to 1.26.2.

spoltier avatar Aug 21 '24 12:08 spoltier