Description of problem: JBoss Enterprise Application Platform 6 uses resteasy-jaxrs-2.3.6.Final-redhat-1.jar and this jar has a transitive dependency to scannotation-1.0.3.jar [INFO] +- org.jboss.resteasy:resteasy-jaxrs:jar:2.3.6.Final:compile [INFO] | +- org.scannotation:scannotation:jar:1.0.3:compile but EAP 6.1 uses: scannotation-1.0.2-redhat-2.jar. So we have two different versions of scannotation - 1.0.2 and 1.0.3. I think a solution would be to upgrade the scannotation version in EAP 6.1 to scannotation-1.0.3.jar.
Upstream PR created: https://issues.jboss.org/browse/WFLY-2156
Upstream JIRA: https://issues.jboss.org/browse/WFLY-2156 Upstream PR: https://github.com/wildfly/wildfly/pull/5145/files
EAP bug: https://bugzilla.redhat.com/show_bug.cgi?id=1012792
lower the severity because this never affects building nor affects RESTEasy runtime.
Upstream PR merged. Now this depend on BZ1012792
As Stuart commented: "Just FYI scannotation is not actually used (as we use Jandex instead), I only included it because I was worried about the possibility of runtime NoClassDefFoundErrors". I'd suggest we deduce this from EAP 6.2.0 and fix in future releases.
EAP PR sent: https://github.com/jbossas/jboss-eap/pull/570 Packages built: http://ett.usersys.redhat.com/tasks/jb-eap-6-dot-2-dot-0/packages/scannotation
According to: https://bugzilla.redhat.com/show_bug.cgi?id=1025547 This is fixed.
Created attachment 825439 [details] pom.xml and settings.xml to test dependency tree 1. create temporary directory and change into 2. download and unzip jboss-eap-6.2.0.CR1-maven-repository.zip 3. download pom.xml and settings.xml 4. run rm -rf maven-local-repo; mvn -s settings.xml dependency:tree 2>&1 | tee log.txt
Created attachment 825441 [details] pom.xml and settings.xml to test dependency tree
Verified for EAP 6.2.0.CR1 using procedure from comment#13 [INFO] \- org.jboss.resteasy:resteasy-jaxrs:jar:2.3.7.Final-redhat-2:compile [INFO] +- org.jboss.resteasy:jaxrs-api:jar:2.3.7.Final-redhat-2:compile [INFO] +- org.scannotation:scannotation:jar:1.0.3:compile
Added release note text and marked for inclusion in the 6.2 Release Notes document.
Release Notes NACK-d as policy states that component upgrades are excluded.