-
Improvement
-
Resolution: Unresolved
-
Major
1.X is stuck with old dependencies we can't upgrade, as they are automatically set in plugin classpath and most plugins do assume those specific versions are available.
For 2.0 we should only expose to plugin core classes but not implementation dependencies (groovy, guava, spring) and get plugin explicitly define dependencies they rely on.
Security is a special case, as we highly depend and expose Acegi Security, but as this project is dead (rebranded as spring-security) we could just adopt it's package namespace and consider it part of jenkins-core, then delegate to spring-security, or any other security framework we select for core.
- depends on
-
JENKINS-29068 Split Groovy out of core
- Open
- is related to
-
JENKINS-36779 Upgrade Guava or properly isolate core Guava dependency from plugins
- Closed
- relates to
-
JENKINS-41827 JenkinsRule mode to use realistic class loading
- Resolved
-
JENKINS-49555 Split most of Spring Framework out of core
- Resolved
-
JENKINS-28942 Allow plugins to declare that they do not use certain implied dependencies
- Open