[OpenNMS/opennms] bc7d37: NMS-20093: Restore xstream and kotlin-stdlib depen...

  Branch: refs/heads/mm/NMS-20093-smoke
  Home:   https://github.com/OpenNMS/opennms
  Commit: bc7d374e8c5155b323f52ee4b1f43f374e5cf250
      https://github.com/OpenNMS/opennms/commit/bc7d374e8c5155b323f52ee4b1f43f374e5cf250
  Author: Marshall Massengill <[email protected]>
  Date:   2026-07-28 (Tue, 28 Jul 2026)

  Changed paths:
    M pom.xml

  Log Message:
  -----------
  NMS-20093: Restore xstream and kotlin-stdlib dependencyManagement pins

NMS-20085 removed these as unused, but they were pinning the versions
of transitive dependencies that ship in $OPENNMS_HOME/lib: removing
them downgraded xstream 1.4.21 -> 1.4.20 (via drools-xml-support;
1.4.21 was a CVE-motivated bump) and kotlin-stdlib/-common
1.9.10 -> 1.4.10 (via okhttp). CI stayed green because the transitive
consumers declare and work with the older releases - the pins exist to
override them with patched versions. The restored entries carry
comments naming the transitive consumer they govern. Verified via
dependency:tree on opennms-base-assembly, which is the resolution that
populates lib/.



To unsubscribe from these emails, change your notification settings at https://github.com/OpenNMS/opennms/settings/notifications


_______________________________________________
Please read the OpenNMS Mailing List FAQ:
http://www.opennms.org/wiki/index.php?page=MailingListFaq
opennms-cvs mailing list

To *unsubscribe* or change your subscription options, see the bottom of this page:
https://lists.sourceforge.net/lists/listinfo/opennms-cvs