log4j exclusion from the pom.xml file

log4j exclusion from the pom.xml file - java

I am trying to fix log4j vulnerabilities and I have updated the existing log4j to the latest log4j-core version.
I tried adding exclusion in the googlecode.owasp dependency but the old version of log4j-1.2.12 is added in the war file. As of now, there is no change in the maven plugin.
Please let me know how to exclude log4j-1.2.12.
maven dependency:tree
[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) # Invoice ---
[INFO] Bookings:Invoice:war:0.0.1-SNAPSHOT
[INFO] +- Bookings:Miscellaneous:jar:0.0.1-SNAPSHOT:compile
[INFO] | +- org.owasp.esapi:esapi:jar:2.1.0:compile
[INFO] | | +- commons-configuration:commons-configuration:jar:1.5:compile
[INFO] | | | \- commons-digester:commons-digester:jar:1.8:compile
[INFO] | | +- commons-beanutils:commons-beanutils-core:jar:1.7.0:compile
[INFO] | | +- xom:xom:jar:1.2.5:compile
[INFO] | | | \- xalan:xalan:jar:2.7.0:compile
[INFO] | | \- org.beanshell:bsh-core:jar:2.0b4:compile
[INFO] | + xalan:serializer:jar:2.7.1:compile
[INFO] | | \- xml-apis:xml-apis:jar:1.3.04:compile
[INFO] | +- org.owasp.antisamy:antisamy:jar:1.4.4:compile
[INFO] | | +- xerces:xercesImpl:jar:2.8.1:compile
[INFO] | | +- org.apache.xmlgraphics:batik-css:jar:1.7:compile
[INFO] | | | +- org.apache.xmlgraphics:batik-ext:jar:1.7:compile
[INFO] | | | +- org.apache.xmlgraphics:batik-util:jar:1.7:compile
[INFO] | | | \- xml-apis:xml-apis-ext:jar:1.3.04:compile
[INFO] | | +- net.sourceforge.nekohtml;nekohtml:jar:1.9.12:compile
[INFO] | | \- commons-httpclient:commons-httpclient:jar:3.1:compile
[INFO] | +- com.mikesamuel:json-sanitizer:jar:1.2.0:compile
[INFO] | +- com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer:jar:r156:compile
[INFO] | | +- com.google.guava:guava:jar:31.1-jre:compile (version selected from constraint [11.0,))
[INFO] | | | +- com.google.guava:failureaccess:jar:1.0.1:compile
[INFO] | | | +- com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava:compile
[INFO] | | | +- org.checkerframework:checker-qual:jar:3.12.0:compile
[INFO] | | | +- com.google.errorprone:error_prone_annotations:jar:2.11.0:compile
[INFO] | | | \- com.google.j2objc:j2objc-annotations:jar:1.3:compile
[INFO] | | \- com.google.code.findbugs:jsr305:jar:3.0.2:compile (version selected from constraint [1.3.9,))
[INFO] | \- log4j:log4j:jar:1.2.12:compile

It looks like Bookings:Miscellaneous:jar depends on log4j.
Change the bookings:miscellaneous dependency to something like this:
<dependency>
<groupId>Bookings</groupId>
<artifactId>Miscellaneous</artifactId>
<version>0.0.1-SNAPSHOT</version>
<exclusions>
<exclusion>
<groupId>log4j</groupId>
<artifactId>log4j</artifactId>
</exclusion>
</exclusions>
</dependency>
Then add a dependency to logback.
Something like this:
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-classic</artifactId>
<version>{someversion-your-choise}</version>
</dependency>
Finally,
add the adaptor from log4j to slf4j:
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-to-slf4j</artifactId>
<version>{someversion-your-choise}</version>
</dependency>

Related

java.lang.NoSuchFieldError: INSTANCE at org.jboss.resteasy.core.providerfactory.ResteasyProviderFactoryImpl.initializeCommon

I recently updated the Keycloak client libraries used by by project to version 14.0.0. I have a test is failing with the following:
[ERROR] Caused by: java.lang.NoSuchFieldError: INSTANCE
[ERROR] at org.jboss.resteasy.core.providerfactory.ResteasyProviderFactoryImpl.initializeCommon(ResteasyProviderFactoryImpl.java:225)
[ERROR] at org.jboss.resteasy.core.providerfactory.ResteasyProviderFactoryImpl.initialize(ResteasyProviderFactoryImpl.java:262)
[ERROR] at org.jboss.resteasy.spi.ResteasyProviderFactory.<init>(ResteasyProviderFactory.java:301)
[ERROR] at org.jboss.resteasy.core.providerfactory.ResteasyProviderFactoryImpl.<init>(ResteasyProviderFactoryImpl.java:169)
[ERROR] at org.jboss.resteasy.client.jaxrs.internal.LocalResteasyProviderFactory.<init>(LocalResteasyProviderFactory.java:26)
[ERROR] at com.acme.apollo.idm.idmneo.KeycloakFactory.getClientBuilder(KeycloakFactory.java:177)
[ERROR] at com.acme.apollo.idm.idmneo.KeycloakFactory.getMasterRealmKeycloak(KeycloakFactory.java:50)
[ERROR] at com.acme.verity.qa.tests.TestNextCreateWorkspaceWithExportUser.<clinit>(TestNextCreateWorkspaceWithExportUser.java:50)
[ERROR] at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
[ERROR] at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
[ERROR] at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
[ERROR] at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490)
[ERROR] at org.testng.internal.ObjectFactoryImpl.newInstance(ObjectFactoryImpl.java:23)
[ERROR] at org.testng.internal.InstanceCreator.instantiateUsingDefaultConstructor(InstanceCreator.java:193)
[ERROR] at org.testng
It seems similar to this issue:
https://github.com/oracle/oci-java-sdk/issues/240
which suggests the problem may be due to conflicting libraries, I'm just not sure which? This is the output from mvn dependency:tree:
[INFO] groupId:SCM-Auto:jar:1.0-SNAPSHOT
[INFO] +- com.vertica:vertica-jdbc:jar:7.1.1-0:compile
[INFO] +- ATUReporterlibs:ATUReporter_Selenium_testNG_5.5_BETA:jar:5.5_BETA:compile
[INFO] +- xml-apis:xml-apis:jar:1.4.01:compile
[INFO] +- javax.validation:validation-api:jar:1.1.0.Final:compile
[INFO] +- org.testng:testng:jar:7.4.0:compile
[INFO] | \- org.webjars:jquery:jar:3.5.1:compile
[INFO] +- org.xerial:sqlite-jdbc:jar:3.8.7:compile
[INFO] +- org.seleniumhq.selenium:selenium-server:jar:2.48.1:compile
[INFO] | +- org.bouncycastle:bcprov-jdk15on:jar:1.48:compile
[INFO] | +- org.bouncycastle:bcpkix-jdk15on:jar:1.48:compile
[INFO] | +- mx4j:mx4j-tools:jar:3.0.1:compile
[INFO] | +- org.mortbay.jetty:servlet-api-2.5:jar:6.1.9:compile
[INFO] | +- org.seleniumhq.selenium:jetty-repacked:jar:9.2.13.v20150730:compile
[INFO] | +- javax.servlet:javax.servlet-api:jar:3.1.0:compile
[INFO] | +- org.seleniumhq.selenium:jetty-rc-repacked:jar:5:compile
[INFO] | +- net.jcip:jcip-annotations:jar:1.0:compile
[INFO] | +- org.seleniumhq.selenium:selenium-java:jar:2.48.1:compile
[INFO] | | +- org.seleniumhq.selenium:selenium-chrome-driver:jar:2.48.1:compile
[INFO] | | | \- org.seleniumhq.selenium:selenium-remote-driver:jar:2.48.1:compile
[INFO] | | | +- cglib:cglib-nodep:jar:2.1_3:compile
[INFO] | | | \- org.seleniumhq.selenium:selenium-api:jar:2.48.1:compile
[INFO] | | +- org.seleniumhq.selenium:selenium-edge-driver:jar:2.48.1:compile
[INFO] | | | \- org.apache.commons:commons-exec:jar:1.3:compile
[INFO] | | +- org.seleniumhq.selenium:selenium-htmlunit-driver:jar:2.48.1:compile
[INFO] | | | \- net.sourceforge.htmlunit:htmlunit:jar:2.18:compile
[INFO] | | | +- xalan:xalan:jar:2.7.2:compile
[INFO] | | | | \- xalan:serializer:jar:2.7.2:compile
[INFO] | | | +- commons-collections:commons-collections:jar:3.2.1:compile
[INFO] | | | +- net.sourceforge.htmlunit:htmlunit-core-js:jar:2.17:compile
[INFO] | | | +- xerces:xercesImpl:jar:2.11.0:compile
[INFO] | | | +- net.sourceforge.nekohtml:nekohtml:jar:1.9.22:compile
[INFO] | | | +- net.sourceforge.cssparser:cssparser:jar:0.9.16:compile
[INFO] | | | | \- org.w3c.css:sac:jar:1.3:compile
[INFO] | | | \- org.eclipse.jetty.websocket:websocket-client:jar:9.2.12.v20150709:compile
[INFO] | | | +- org.eclipse.jetty:jetty-io:jar:9.2.12.v20150709:compile
[INFO] | | | \- org.eclipse.jetty.websocket:websocket-common:jar:9.2.12.v20150709:compile
[INFO] | | | \- org.eclipse.jetty.websocket:websocket-api:jar:9.2.12.v20150709:compile
[INFO] | | +- org.seleniumhq.selenium:selenium-firefox-driver:jar:2.48.1:compile
[INFO] | | +- org.seleniumhq.selenium:selenium-ie-driver:jar:2.48.1:compile
[INFO] | | | +- net.java.dev.jna:jna:jar:4.1.0:compile
[INFO] | | | \- net.java.dev.jna:jna-platform:jar:4.1.0:compile
[INFO] | | +- org.seleniumhq.selenium:selenium-safari-driver:jar:2.48.1:compile
[INFO] | | +- org.seleniumhq.selenium:selenium-support:jar:2.48.1:compile
[INFO] | | +- org.webbitserver:webbit:jar:0.4.14:compile
[INFO] | | | \- io.netty:netty:jar:3.5.2.Final:compile
[INFO] | | \- org.seleniumhq.selenium:selenium-leg-rc:jar:2.48.1:compile
[INFO] | +- org.yaml:snakeyaml:jar:1.8:compile
[INFO] | \- commons-codec:commons-codec:jar:1.10:compile
[INFO] +- com.jayway.restassured:rest-assured:jar:2.6.0:compile
[INFO] | +- org.codehaus.groovy:groovy:jar:2.4.4:compile
[INFO] | +- org.codehaus.groovy:groovy-xml:jar:2.4.4:compile
[INFO] | +- org.apache.httpcomponents:httpclient:jar:4.5.1:compile
[INFO] | +- org.apache.httpcomponents:httpmime:jar:4.5.1:compile
[INFO] | +- org.hamcrest:hamcrest-core:jar:1.3:compile
[INFO] | +- org.hamcrest:hamcrest-library:jar:1.3:compile
[INFO] | +- org.ccil.cowan.tagsoup:tagsoup:jar:1.2.1:compile
[INFO] | +- com.jayway.restassured:json-path:jar:2.6.0:compile
[INFO] | | +- org.codehaus.groovy:groovy-json:jar:2.4.4:compile
[INFO] | | \- com.jayway.restassured:rest-assured-common:jar:2.6.0:compile
[INFO] | \- com.jayway.restassured:xml-path:jar:2.6.0:compile
[INFO] +- org.postgresql:postgresql:jar:9.4.1207.jre7:compile
[INFO] +- log4j:log4j:jar:1.2.17:compile
[INFO] +- org.apache.logging.log4j:log4j-api:jar:2.7:compile
[INFO] +- org.apache.logging.log4j:log4j-core:jar:2.7:compile
[INFO] +- org.jsoup:jsoup:jar:1.8.3:compile
[INFO] +- com.googlecode.json-simple:json-simple:jar:1.1.1:compile
[INFO] | \- junit:junit:jar:4.10:compile
[INFO] +- org.json:json:jar:20140107:compile
[INFO] +- com.beust:jcommander:jar:1.48:compile
[INFO] +- com.fasterxml.jackson.core:jackson-databind:jar:2.12.3:compile
[INFO] +- com.fasterxml.jackson.core:jackson-core:jar:2.12.3:compile
[INFO] +- com.fasterxml.jackson.core:jackson-annotations:jar:2.12.3:compile
[INFO] +- commons-io:commons-io:jar:2.4:compile
[INFO] +- org.apache.poi:poi:jar:3.12:compile
[INFO] +- org.apache.poi:poi-ooxml:jar:3.8:compile
[INFO] | +- org.apache.poi:poi-ooxml-schemas:jar:3.8:compile
[INFO] | | \- org.apache.xmlbeans:xmlbeans:jar:2.3.0:compile
[INFO] | | \- stax:stax-api:jar:1.0.1:compile
[INFO] | \- dom4j:dom4j:jar:1.6.1:compile
[INFO] +- org.apache.commons:commons-lang3:jar:3.3.2:compile
[INFO] +- commons-logging:commons-logging:jar:1.2:compile
[INFO] +- com.acme.aspen:aspen-sdk:jar:1.5.0:compile
[INFO] | +- com.acme.aspen:common-entities:jar:1.5.0:compile
[INFO] | | +- io.dropwizard:dropwizard-hibernate:jar:0.8.1:compile
[INFO] | | | +- io.dropwizard:dropwizard-db:jar:0.8.1:compile
[INFO] | | | | \- org.apache.tomcat:tomcat-jdbc:jar:8.0.18:compile
[INFO] | | | | \- org.apache.tomcat:tomcat-juli:jar:8.0.18:compile
[INFO] | | | +- com.fasterxml.jackson.datatype:jackson-datatype-hibernate4:jar:2.5.1:compile
[INFO] | | | +- org.jadira.usertype:usertype.core:jar:3.2.0.GA:compile
[INFO] | | | | \- org.jadira.usertype:usertype.spi:jar:3.2.0.GA:compile
[INFO] | | | \- org.hibernate:hibernate-core:jar:4.3.5.Final:compile
[INFO] | | | +- org.jboss.logging:jboss-logging-annotations:jar:1.2.0.Beta1:compile
[INFO] | | | +- org.jboss.spec.javax.transaction:jboss-transaction-api_1.2_spec:jar:1.0.0.Final:compile
[INFO] | | | +- org.hibernate.common:hibernate-commons-annotations:jar:4.0.4.Final:compile
[INFO] | | | +- org.hibernate.javax.persistence:hibernate-jpa-2.1-api:jar:1.0.0.Final:compile
[INFO] | | | +- antlr:antlr:jar:2.7.7:compile
[INFO] | | | \- org.jboss:jandex:jar:1.1.0.Final:compile
[INFO] | | +- com.acme.aspen:app-resources-lib:jar:1.5.0:compile
[INFO] | | \- org.keycloak:keycloak-jetty92-adapter:jar:1.9.2.Final:compile
[INFO] | +- com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:jar:2.5.3:compile
[INFO] | | +- com.fasterxml.jackson.jaxrs:jackson-jaxrs-base:jar:2.5.3:compile
[INFO] | | \- com.fasterxml.jackson.module:jackson-module-jaxb-annotations:jar:2.5.3:compile
[INFO] | +- javax.mail:mail:jar:1.4:compile
[INFO] | | \- javax.activation:activation:jar:1.1:compile
[INFO] | +- com.sun.jersey:jersey-client:jar:1.19:compile
[INFO] | | \- com.sun.jersey:jersey-core:jar:1.19:compile
[INFO] | +- com.sun.jersey.contribs:jersey-multipart:jar:1.19:compile
[INFO] | | \- org.jvnet.mimepull:mimepull:jar:1.9.3:compile
[INFO] | \acme.aspen:aspen-utils:jar:1.5.0:compile
[INFO] | \- javax.inject:javax.inject:jar:1:compile
[INFO] +- ISTF:ISTFCore:jar:1.0:compile
[INFO] +- commons-net:commons-net:jar:3.5:compile
[INFO] +- com.acme.aspen:idm-lib:jar:2.0.0-SNAPSHOT:compile
[INFO] | +- io.dropwizard:dropwizard-client:jar:1.0.7:compile
[INFO] | | +- io.dropwizard:dropwizard-core:jar:1.0.7:compile
[INFO] | | | +- io.dropwizard:dropwizard-util:jar:1.0.7:compile
[INFO] | | | | +- com.google.code.findbugs:jsr305:jar:3.0.1:compile
[INFO] | | | | \- joda-time:joda-time:jar:2.9.4:compile
[INFO] | | | +- io.dropwizard:dropwizard-jackson:jar:1.0.7:compile
[INFO] | | | | +- com.fasterxml.jackson.datatype:jackson-datatype-guava:jar:2.7.8:compile
[INFO] | | | | +- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:jar:2.7.8:compile
[INFO] | | | | +- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:jar:2.7.8:compile
[INFO] | | | | +- com.fasterxml.jackson.module:jackson-module-afterburner:jar:2.7.8:compile
[INFO] | | | | +- com.fasterxml.jackson.datatype:jackson-datatype-joda:jar:2.7.8:compile
[INFO] | | | | \- ch.qos.logback:logback-classic:jar:1.1.7:compile
[INFO] | | | +- io.dropwizard:dropwizard-validation:jar:1.0.7:compile
[INFO] | | | | +- org.hibernate:hibernate-validator:jar:5.2.4.Final:compile
[INFO] | | | | | \- com.fasterxml:classmate:jar:1.1.0:compile
[INFO] | | | | \- org.glassfish:javax.el:jar:3.0.0:compile
[INFO] | | | +- io.dropwizard:dropwizard-configuration:jar:1.0.7:compile
[INFO] | | | | \- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:jar:2.7.8:compile
[INFO] | | | +- io.dropwizard:dropwizard-logging:jar:1.0.7:compile
[INFO] | | | | +- io.dropwizard.metrics:metrics-logback:jar:3.1.4:compile
[INFO] | | | | +- org.slf4j:jul-to-slf4j:jar:1.7.21:compile
[INFO] | | | | +- ch.qos.logback:logback-core:jar:1.1.7:compile
[INFO] | | | | +- org.slf4j:log4j-over-slf4j:jar:1.7.21:compile
[INFO] | | | | +- org.slf4j:jcl-over-slf4j:jar:1.7.21:compile
[INFO] | | | | \- org.eclipse.jetty:jetty-util:jar:9.3.9.v20160517:compile
[INFO] | | | +- io.dropwizard:dropwizard-metrics:jar:1.0.7:compile
[INFO] | | | +- io.dropwizard:dropwizard-jersey:jar:1.0.7:compile
[INFO] | | | | +- org.glassfish.jersey.core:jersey-server:jar:2.23.2:compile
[INFO] | | | | | \- org.glassfish.jersey.media:jersey-media-jaxb:jar:2.23.2:compile
[INFO] | | | | +- org.glassfish.jersey.ext:jersey-metainf-services:jar:2.23.2:compile
[INFO] | | | | +- org.glassfish.jersey.ext:jersey-bean-validation:jar:2.23.2:compile
[INFO] | | | | +- io.dropwizard.metrics:metrics-jersey2:jar:3.1.4:compile
[INFO] | | | | +- org.glassfish.jersey.containers:jersey-container-servlet:jar:2.23.2:compile
[INFO] | | | | | \- org.glassfish.jersey.containers:jersey-container-servlet-core:jar:2.23.2:compile
[INFO] | | | | +- org.eclipse.jetty:jetty-server:jar:9.3.9.v20160517:compile
[INFO] | | | | +- org.eclipse.jetty:jetty-webapp:jar:9.3.9.v20160517:compile
[INFO] | | | | | \- org.eclipse.jetty:jetty-xml:jar:9.3.9.v20160517:compile
[INFO] | | | | \- org.eclipse.jetty:jetty-continuation:jar:9.3.9.v20160517:compile
[INFO] | | | +- io.dropwizard:dropwizard-servlets:jar:1.0.7:compile
[INFO] | | | | \- io.dropwizard.metrics:metrics-annotation:jar:3.1.4:compile
[INFO] | | | +- io.dropwizard:dropwizard-jetty:jar:1.0.7:compile
[INFO] | | | | +- io.dropwizard.metrics:metrics-jetty9:jar:3.1.4:compile
[INFO] | | | | +- org.eclipse.jetty:jetty-servlet:jar:9.3.9.v20160517:compile
[INFO] | | | | | \- org.eclipse.jetty:jetty-security:jar:9.3.9.v20160517:compile
[INFO] | | | | +- org.eclipse.jetty:jetty-servlets:jar:9.3.9.v20160517:compile
[INFO] | | | | \- org.eclipse.jetty:jetty-http:jar:9.3.9.v20160517:compile
[INFO] | | | +- io.dropwizard:dropwizard-lifecycle:jar:1.0.7:compile
[INFO] | | | +- io.dropwizard.metrics:metrics-core:jar:3.1.4:compile
[INFO] | | | +- io.dropwizard.metrics:metrics-jvm:jar:3.1.4:compile
[INFO] | | | +- io.dropwizard.metrics:metrics-servlets:jar:3.1.4:compile
[INFO] | | | | \- io.dropwizard.metrics:metrics-json:jar:3.1.4:compile
[INFO] | | | +- io.dropwizard.metrics:metrics-healthchecks:jar:3.1.4:compile
[INFO] | | | +- io.dropwizard:dropwizard-request-logging:jar:1.0.7:compile
[INFO] | | | | \- ch.qos.logback:logback-access:jar:1.1.7:compile
[INFO] | | | +- net.sourceforge.argparse4j:argparse4j:jar:0.7.0:compile
[INFO] | | | \- org.eclipse.jetty.toolchain.setuid:jetty-setuid-java:jar:1.0.3:compile
[INFO] | | +- org.glassfish.jersey.core:jersey-client:jar:2.23.2:compile
[INFO] | | | +- javax.ws.rs:javax.ws.rs-api:jar:2.0.1:compile
[INFO] | | | +- org.glassfish.jersey.core:jersey-common:jar:2.23.2:compile
[INFO] | | | | +- javax.annotation:javax.annotation-api:jar:1.2:compile
[INFO] | | | | +- org.glassfish.jersey.bundles.repackaged:jersey-guava:jar:2.23.2:compile
[INFO] | | | | \- org.glassfish.hk2:osgi-resource-locator:jar:1.0.1:compile
[INFO] | | | +- org.glassfish.hk2:hk2-api:jar:2.5.0-b05:compile
[INFO] | | | | +- org.glassfish.hk2:hk2-utils:jar:2.5.0-b05:compile
[INFO] | | | | \- org.glassfish.hk2.external:aopalliance-repackaged:jar:2.5.0-b05:compile
[INFO] | | | +- org.glassfish.hk2.external:javax.inject:jar:2.5.0-b05:compile
[INFO] | | | \- org.glassfish.hk2:hk2-locator:jar:2.5.0-b05:compile
[INFO] | | +- io.dropwizard.metrics:metrics-httpclient:jar:3.1.4:compile
[INFO] | | \- org.glassfish.jersey.connectors:jersey-apache-connector:jar:2.23.2:compile
[INFO] | +- org.keycloak:keycloak-jetty93-adapter:jar:4.0.0.Final:compile
[INFO] | | +- org.jboss.logging:jboss-logging:jar:3.3.1.Final:compile
[INFO] | | +- org.keycloak:keycloak-adapter-core:jar:4.0.0.Final:compile
[INFO] | | \- org.keycloak:keycloak-jetty-core:jar:4.0.0.Final:compile
[INFO] | | +- org.keycloak:keycloak-adapter-spi:jar:4.0.0.Final:compile
[INFO] | | \- org.keycloak:keycloak-jetty-adapter-spi:jar:4.0.0.Final:compile
[INFO] | \- com.wordnik:swagger-jaxrs_2.10:jar:1.3.13:compile
[INFO] | +- org.scala-lang:scala-library:jar:2.10.4:compile
[INFO] | +- com.wordnik:swagger-core_2.10:jar:1.3.13:compile
[INFO] | | +- com.fasterxml.jackson.module:jackson-module-scala_2.10:jar:2.4.1:compile
[INFO] | | | +- org.scala-lang:scala-reflect:jar:2.10.4:compile
[INFO] | | | \- com.thoughtworks.paranamer:paranamer:jar:2.6:compile
[INFO] | | +- com.fasterxml.jackson.module:jackson-module-jsonSchema:jar:2.4.1:compile
[INFO] | | +- com.wordnik:swagger-annotations:jar:1.3.13:compile
[INFO] | | +- org.json4s:json4s-ext_2.10:jar:3.2.11:compile
[INFO] | | | \- org.joda:joda-convert:jar:1.6:compile
[INFO] | | +- org.json4s:json4s-native_2.10:jar:3.2.11:compile
[INFO] | | | \- org.json4s:json4s-core_2.10:jar:3.2.11:compile
[INFO] | | | +- org.json4s:json4s-ast_2.10:jar:3.2.11:compile
[INFO] | | | \- org.scala-lang:scalap:jar:2.10.0:compile
[INFO] | | | \- org.scala-lang:scala-compiler:jar:2.10.0:compile
[INFO] | | \- org.json4s:json4s-jackson_2.10:jar:3.2.11:compile
[INFO] | \- org.reflections:reflections:jar:0.9.9:compile
[INFO] | +- org.javassist:javassist:jar:3.18.2-GA:compile
[INFO] | \- com.google.code.findbugs:annotations:jar:2.0.1:compile
[INFO] +- com.mesosphere:marathon-client:jar:0.6.0:compile
[INFO] | +- com.netflix.feign:feign-core:jar:8.18.0:compile
[INFO] | | \- org.jvnet:animal-sniffer-annotation:jar:1.0:runtime
[INFO] | +- com.netflix.feign:feign-gson:jar:8.18.0:compile
[INFO] | +- com.netflix.feign:feign-slf4j:jar:8.18.0:compile
[INFO] | +- org.slf4j:slf4j-simple:jar:1.7.13:compile
[INFO] | +- com.google.code.gson:gson:jar:2.5:compile
[INFO] | +- com.google.guava:guava:jar:20.0:compile
[INFO] | +- net.oauth.core:oauth:jar:20100527:compile
[INFO] | \- com.nimbusds:nimbus-jose-jwt:jar:4.23:compile
[INFO] | +- com.github.stephenc.jcip:jcip-annotations:jar:1.0-1:compile
[INFO] | \- net.minidev:json-smart:jar:1.3.1:compile
[INFO] +- org.slf4j:slf4j-api:jar:1.7.25:compile
[INFO] +- com.acme.apollo.idm:idm-neo:jar:3.0.0-SCMOD-14133-SNAPSHOT:compile
[INFO] | +- org.keycloak:keycloak-admin-client:jar:14.0.0:compile
[INFO] | | +- org.jboss.resteasy:resteasy-multipart-provider:jar:3.13.2.Final:compile
[INFO] | | | +- org.jboss.resteasy:resteasy-jaxrs:jar:3.13.2.Final:compile
[INFO] | | | +- com.sun.mail:jakarta.mail:jar:1.6.5:compile
[INFO] | | | \- org.apache.james:apache-mime4j:jar:0.6:compile
[INFO] | | \- org.jboss.resteasy:resteasy-jaxb-provider:jar:3.13.2.Final:compile
[INFO] | | \- org.glassfish.jaxb:jaxb-runtime:jar:2.3.3-b02:compile
[INFO] | | +- org.glassfish.jaxb:txw2:jar:2.3.3-b02:compile
[INFO] | | \- com.sun.istack:istack-commons-runtime:jar:3.0.10:compile
[INFO] | +- org.jboss.resteasy:resteasy-client:jar:4.6.0.Final:compile
[INFO] | +- org.jboss.resteasy:resteasy-client-api:jar:4.6.0.Final:compile
[INFO] | +- org.jboss.resteasy:resteasy-core:jar:4.6.0.Final:compile
[INFO] | | +- org.jboss.spec.javax.xml.bind:jboss-jaxb-api_2.3_spec:jar:1.0.1.Final:compile
[INFO] | | +- org.reactivestreams:reactive-streams:jar:1.0.3:compile
[INFO] | | +- jakarta.validation:jakarta.validation-api:jar:2.0.2:compile
[INFO] | | +- com.ibm.async:asyncutil:jar:0.1.0:compile
[INFO] | | +- org.jboss.spec.javax.annotation:jboss-annotations-api_1.3_spec:jar:2.0.1.Final:compile
[INFO] | | +- com.sun.activation:jakarta.activation:jar:1.2.1:compile
[INFO] | | \- io.smallrye.config:smallrye-config:jar:2.0.1:compile
[INFO] | | \- io.smallrye.config:smallrye-config-core:jar:2.0.1:compile
[INFO] | | +- org.eclipse.microprofile.config:microprofile-config-api:jar:2.0:compile
[INFO] | | +- io.smallrye.common:smallrye-common-annotation:jar:1.5.0:compile
[INFO] | | +- io.smallrye.common:smallrye-common-expression:jar:1.5.0:compile
[INFO] | | | \- io.smallrye.common:smallrye-common-function:jar:1.5.0:compile
[INFO] | | +- io.smallrye.common:smallrye-common-constraint:jar:1.5.0:compile
[INFO] | | +- io.smallrye.common:smallrye-common-classloader:jar:1.5.0:compile
[INFO] | | +- org.ow2.asm:asm:jar:9.0:compile
[INFO] | | \- io.smallrye.config:smallrye-config-common:jar:2.0.1:compile
[INFO] | +- org.jboss.resteasy:resteasy-core-spi:jar:4.6.0.Final:compile
[INFO] | +- org.jboss.resteasy:resteasy-jackson2-provider:jar:4.6.0.Final:compile
[INFO] | | \- com.github.java-json-tools:json-patch:jar:1.13:compile
[INFO] | | +- com.github.java-json-tools:msg-simple:jar:1.2:compile
[INFO] | | | \- com.github.java-json-tools:btf:jar:1.3:compile
[INFO] | | \- com.github.java-json-tools:jackson-coreutils:jar:2.0:compile
[INFO] | +- org.apache.httpcomponents:httpcore:jar:4.4.14:compile
[INFO] | +- org.jboss.spec.javax.ws.rs:jboss-jaxrs-api_2.1_spec:jar:2.0.1.Final:compile
[INFO] | +- org.keycloak:keycloak-core:jar:14.0.0:compile
[INFO] | \- org.keycloak:keycloak-common:jar:14.0.0:compile
[INFO] +- com.microsoft.sqlserver:mssql-jdbc:jar:7.4.1.jre8:compile
[INFO] \- org.samba.jcifs:jcifs:jar:1.3.3:compile
pom.xml (dependencies section only):
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
...
<dependencies>
<dependency>
<groupId>com.vertica</groupId>
<artifactId>vertica-jdbc</artifactId>
<version>7.1.1-0</version>
</dependency>
<dependency>
<groupId>ATUReporterlibs</groupId>
<artifactId>ATUReporter_Selenium_testNG_5.5_BETA</artifactId>
<version>5.5_BETA</version>
</dependency>
<dependency>
<groupId>xml-apis</groupId>
<artifactId>xml-apis</artifactId>
<version>1.4.01</version>
</dependency>
<dependency>
<groupId>javax.validation</groupId>
<artifactId>validation-api</artifactId>
<version>1.1.0.Final</version>
</dependency>
<dependency>
<groupId>org.testng</groupId>
<artifactId>testng</artifactId>
<version>7.4.0</version>
</dependency>
<dependency>
<groupId>org.xerial</groupId>
<artifactId>sqlite-jdbc</artifactId>
<version>3.8.7</version>
</dependency>
<dependency>
<groupId>org.seleniumhq.selenium</groupId>
<artifactId>selenium-server</artifactId>
<version>2.48.1</version>
</dependency>
<dependency>
<groupId>com.jayway.restassured</groupId>
<artifactId>rest-assured</artifactId>
<version>2.6.0</version>
</dependency>
<dependency>
<groupId>org.postgresql</groupId>
<artifactId>postgresql</artifactId>
<version>9.4.1207.jre7</version>
</dependency>
<dependency>
<groupId>log4j</groupId>
<artifactId>log4j</artifactId>
<version>1.2.17</version>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
<version>2.7</version>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
<version>2.7</version>
</dependency>
<dependency>
<groupId>org.jsoup</groupId>
<artifactId>jsoup</artifactId>
<version>1.8.3</version>
</dependency>
<dependency>
<groupId>com.googlecode.json-simple</groupId>
<artifactId>json-simple</artifactId>
<version>1.1.1</version>
</dependency>
<dependency>
<groupId>org.json</groupId>
<artifactId>json</artifactId>
<version>20140107</version>
</dependency>
<dependency>
<groupId>com.beust</groupId>
<artifactId>jcommander</artifactId>
<version>1.48</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>2.12.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
<version>2.12.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-annotations</artifactId>
<version>2.12.3</version>
</dependency>
<dependency>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
<version>2.4</version>
</dependency>
<dependency>
<groupId>org.apache.poi</groupId>
<artifactId>poi</artifactId>
<version>3.12</version>
</dependency>
<dependency>
<groupId>org.apache.poi</groupId>
<artifactId>poi-ooxml</artifactId>
<version>3.8</version>
<exclusions>
<exclusion>
<artifactId>xml-apis</artifactId>
<groupId>xml-apis</groupId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-lang3</artifactId>
<version>3.3.2</version>
</dependency>
<dependency>
<groupId>commons-logging</groupId>
<artifactId>commons-logging</artifactId>
<version>1.2</version>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-io</artifactId>
<version>1.3.2</version>
</dependency>
<dependency>
<groupId>com.acme.aspen</groupId>
<artifactId>aspen-sdk</artifactId>
<version>1.5.0</version>
<exclusions>
<exclusion>
<groupId>com.acme.caf</groupId>
<artifactId>storage-sdk</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>ISTF</groupId>
<artifactId>ISTFCore</artifactId>
<version>1.0</version>
</dependency>
<dependency>
<groupId>commons-net</groupId>
<artifactId>commons-net</artifactId>
<version>3.5</version>
</dependency>
<dependency>
<groupId>com.acme.aspen</groupId>
<artifactId>idm-lib</artifactId>
<version>2.0.0-SNAPSHOT</version>
<exclusions>
<exclusion>
<groupId>org.glassfish.jersey.core</groupId>
<artifactId>jersey-server</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>com.mesosphere</groupId>
<artifactId>marathon-client</artifactId>
<version>0.6.0</version>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
<version>1.7.25</version>
</dependency>
<dependency>
<groupId>com.acme.apollo.idm</groupId>
<artifactId>idm-neo</artifactId>
<version>3.0.0-SCMOD-14133-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>com.microsoft.sqlserver</groupId>
<artifactId>mssql-jdbc</artifactId>
<version>7.4.1.jre8</version>
</dependency>
<dependency>
<groupId>org.samba.jcifs</groupId>
<artifactId>jcifs</artifactId>
<version>1.3.3</version>
</dependency>
</dependencies>
</project>
One of the comments on this issue:
https://github.com/oracle/oci-java-sdk/issues/240#issuecomment-677885509
mention that they were able to fix the resteasy error by excluding the jersey-server dependency. I tried that as well but still get the same error after compiling and running the test again:
<dependency>
<groupId>com.acme.aspen</groupId>
<artifactId>idm-lib</artifactId>
<version>2.0.0-SNAPSHOT</version>
<exclusions>
<exclusion>
<groupId>org.glassfish.jersey.core</groupId>
<artifactId>jersey-server</artifactId>
</exclusion>
</exclusions>
</dependency>

Indeed you have a clash in RestEasy (transitive) dependencies in your project:
[INFO] +- com.acme.apollo.idm:idm-neo:jar:3.0.0-SCMOD-14133-SNAPSHOT:compile
[INFO] | +- org.keycloak:keycloak-admin-client:jar:14.0.0:compile
[INFO] | | +- org.jboss.resteasy:resteasy-multipart-provider:jar:3.13.2.Final:compile
[INFO] | | | +- org.jboss.resteasy:resteasy-jaxrs:jar:3.13.2.Final:compile
[INFO] | | | +- com.sun.mail:jakarta.mail:jar:1.6.5:compile
[INFO] | | | \- org.apache.james:apache-mime4j:jar:0.6:compile
[INFO] | | \- org.jboss.resteasy:resteasy-jaxb-provider:jar:3.13.2.Final:compile
[INFO] | | \- org.glassfish.jaxb:jaxb-runtime:jar:2.3.3-b02:compile
[INFO] | | +- org.glassfish.jaxb:txw2:jar:2.3.3-b02:compile
[INFO] | | \- com.sun.istack:istack-commons-runtime:jar:3.0.10:compile
[INFO] | +- org.jboss.resteasy:resteasy-client:jar:4.6.0.Final:compile
[INFO] | +- org.jboss.resteasy:resteasy-client-api:jar:4.6.0.Final:compile
[INFO] | +- org.jboss.resteasy:resteasy-core:jar:4.6.0.Final:compile
You explicit dependencies are fine, but com.acme.apollo.idm:idm-neo:jar:3.0.0-SCMOD-14133-SNAPSHOT has an issue - it depends on resteasy-core:jar:4.6.0.Final explicitly, and on org.jboss.resteasy:resteasy-jaxrs:jar:3.13.2.Final via org.keycloak:keycloak-admin-client:jar:14.0.0
<dependency>
<groupId>com.acme.apollo.idm</groupId>
<artifactId>idm-neo</artifactId>
<version>3.0.0-SCMOD-14133-SNAPSHOT</version>
</dependency>
These two jars are binary incompatible.
Inside resteasy-core:jar:4.6.0.Final jar ResteasyProviderFactoryImpl expects to see a field called INSTANCE in class MediaTypeHeaderDelegate which is part of the same jar.
if (parent == null) {
// parent should always have these delegates
addHeaderDelegateIfAbsent(MediaType.class, MediaTypeHeaderDelegate.INSTANCE);
addHeaderDelegateIfAbsent(NewCookie.class, NewCookieHeaderDelegate.INSTANCE);
public class MediaTypeHeaderDelegate implements RuntimeDelegate.HeaderDelegate<MediaType>
{
public static final MediaTypeHeaderDelegate INSTANCE = new MediaTypeHeaderDelegate();
However org.jboss.resteasy:resteasy-jaxrs:jar:3.13.2.Final also has MediaTypeHeaderDelegate class which doesn't have INSTANCE field - hence your error.
If you don't control that dependency you can try fixing it using excludes:
<dependency>
<groupId>com.acme.apollo.idm</groupId>
<artifactId>idm-neo</artifactId>
<version>3.0.0-SCMOD-14133-SNAPSHOT</version>
<exclusions>
<exclusion>
<groupId>org.keycloak</groupId>
<artifactId>keycloak-admin-client</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.keycloak</groupId>
<artifactId>keycloak-admin-client</artifactId>
<version>14.0.0</version>
<exclusions>
<exclusion>
<groupId>org.jboss.resteasy</groupId>
<artifactId>resteasy-multipart-provider</artifactId>
</exclusion>
<exclusion>
<groupId>org.jboss.resteasy</groupId>
<artifactId>resteasy-jaxb-provider</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.jboss.resteasy</groupId>
<artifactId>resteasy-multipart-provider</artifactId>
<version>4.6.0.Final</version>
</dependency>
<dependency>
<groupId>org.jboss.resteasy</groupId>
<artifactId>resteasy-jaxb-provider</artifactId>
<version>4.6.0.Final</version>
</dependency>
Or you can try using dependencyManagement section to enforce RestEasy version:
<dependencyManagement>
<dependency>
<groupId>org.jboss.resteasy</groupId>
<artifactId>resteasy-multipart-provider</artifactId>
<version>4.6.0.Final</version>
</dependency>
<dependency>
<groupId>org.jboss.resteasy</groupId>
<artifactId>resteasy-jaxb-provider</artifactId>
<version>4.6.0.Final</version>
</dependency>
</dependencyManagement>

Found multiple occurrences of org.json.JSONObject on the class path: [duplicate]

This question already has answers here:
Maven + Spring Boot: Found multiple occurrences of org.json.JSONObject on the class path:
(6 answers)
Closed 2 years ago.
I have a basic SpringBoot 2.1.5.RELEASE app. Using Spring Initializer, JPA, embedded Tomcat, Thymeleaf template engine, and package as an executable JAR. When I init the app I see this message:
Found multiple occurrences of org.json.JSONObject on the class path:
jar:file:/Users/nunito/.m2/repository/com/vaadin/external/google/android-json/0.0.20131108.vaadin1/android-json-0.0.20131108.vaadin1.jar!/org/json/JSONObject.class
jar:file:/Users/nunito/.m2/repository/org/json/json/20160810/json-20160810.jar!/org/json/JSONObject.class
I have delete all the repositoy folders and start from scracth, but I still have the problem and I can't figure out when it comes from looking at my pom.xml:
<dependencies>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-actuator</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-devtools</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-test</artifactId>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-jdbc</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-mail</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-data-jpa</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-classic</artifactId>
</dependency>
<dependency>
<groupId>com.h2database</groupId>
<artifactId>h2</artifactId>
</dependency>
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>com.googlecode.libphonenumber</groupId>
<artifactId>libphonenumber</artifactId>
<version>8.9.0</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-annotations</artifactId>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
</dependency>
<!-- Spring Security -->
<!-- https://mvnrepository.com/artifact/org.springframework.security/spring-security-test -->
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-test</artifactId>
<scope>test</scope>
</dependency>
<!-- https://mvnrepository.com/artifact/org.apache.httpcomponents/httpclient -->
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpclient</artifactId>
<!-- <version>4.5.4</version> -->
</dependency>
<dependency>
<groupId>io.jsonwebtoken</groupId>
<artifactId>jjwt</artifactId>
<version>0.9.1</version>
</dependency>
<!-- https://mvnrepository.com/artifact/javax.ws.rs/javax.ws.rs-api -->
<dependency>
<groupId>javax.ws.rs</groupId>
<artifactId>javax.ws.rs-api</artifactId>
<version>2.1.1</version>
</dependency>
<!-- Firebase dependencies -->
<dependency>
<groupId>com.google.firebase</groupId>
<artifactId>firebase-admin</artifactId>
<version>5.4.0</version>
</dependency>
<dependency>
<groupId>com.google.cloud</groupId>
<artifactId>google-cloud-firestore</artifactId>
<version>0.26.0-beta</version>
</dependency>
<!-- https://mvnrepository.com/artifact/com.google.guava/guava -->
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>23.0</version>
</dependency>
</dependencies>
and
[INFO]
[INFO] --- maven-dependency-plugin:3.1.1:tree (default-cli) # bonanssa-api ---
[INFO] io.bonanssa:bonanssa-api:jar:0.0.1-SNAPSHOT
[INFO] +- org.springframework.boot:spring-boot-starter:jar:2.1.5.RELEASE:compile
[INFO] | +- org.springframework.boot:spring-boot:jar:2.1.5.RELEASE:compile
[INFO] | | \- org.springframework:spring-context:jar:5.1.7.RELEASE:compile
[INFO] | +- org.springframework.boot:spring-boot-autoconfigure:jar:2.1.5.RELEASE:compile
[INFO] | +- org.springframework.boot:spring-boot-starter-logging:jar:2.1.5.RELEASE:compile
[INFO] | | +- org.apache.logging.log4j:log4j-to-slf4j:jar:2.11.2:compile
[INFO] | | | \- org.apache.logging.log4j:log4j-api:jar:2.11.2:compile
[INFO] | | \- org.slf4j:jul-to-slf4j:jar:1.7.26:compile
[INFO] | +- javax.annotation:javax.annotation-api:jar:1.3.2:compile
[INFO] | +- org.springframework:spring-core:jar:5.1.7.RELEASE:compile
[INFO] | | \- org.springframework:spring-jcl:jar:5.1.7.RELEASE:compile
[INFO] | \- org.yaml:snakeyaml:jar:1.23:runtime
[INFO] +- org.springframework.boot:spring-boot-starter-web:jar:2.1.5.RELEASE:compile
[INFO] | +- org.springframework.boot:spring-boot-starter-json:jar:2.1.5.RELEASE:compile
[INFO] | | +- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:jar:2.9.8:compile
[INFO] | | +- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:jar:2.9.8:compile
[INFO] | | \- com.fasterxml.jackson.module:jackson-module-parameter-names:jar:2.9.8:compile
[INFO] | +- org.springframework.boot:spring-boot-starter-tomcat:jar:2.1.5.RELEASE:compile
[INFO] | | +- org.apache.tomcat.embed:tomcat-embed-core:jar:9.0.19:compile
[INFO] | | +- org.apache.tomcat.embed:tomcat-embed-el:jar:9.0.19:compile
[INFO] | | \- org.apache.tomcat.embed:tomcat-embed-websocket:jar:9.0.19:compile
[INFO] | +- org.hibernate.validator:hibernate-validator:jar:6.0.16.Final:compile
[INFO] | | +- javax.validation:validation-api:jar:2.0.1.Final:compile
[INFO] | | +- org.jboss.logging:jboss-logging:jar:3.3.2.Final:compile
[INFO] | | \- com.fasterxml:classmate:jar:1.4.0:compile
[INFO] | +- org.springframework:spring-web:jar:5.1.7.RELEASE:compile
[INFO] | | \- org.springframework:spring-beans:jar:5.1.7.RELEASE:compile
[INFO] | \- org.springframework:spring-webmvc:jar:5.1.7.RELEASE:compile
[INFO] | \- org.springframework:spring-expression:jar:5.1.7.RELEASE:compile
[INFO] +- org.springframework.boot:spring-boot-starter-actuator:jar:2.1.5.RELEASE:compile
[INFO] | +- org.springframework.boot:spring-boot-actuator-autoconfigure:jar:2.1.5.RELEASE:compile
[INFO] | | \- org.springframework.boot:spring-boot-actuator:jar:2.1.5.RELEASE:compile
[INFO] | \- io.micrometer:micrometer-core:jar:1.1.4:compile
[INFO] | +- org.hdrhistogram:HdrHistogram:jar:2.1.9:compile
[INFO] | \- org.latencyutils:LatencyUtils:jar:2.0.3:compile
[INFO] +- org.springframework.boot:spring-boot-devtools:jar:2.1.5.RELEASE:compile
[INFO] +- org.springframework.boot:spring-boot-starter-test:jar:2.1.5.RELEASE:test
[INFO] | +- org.springframework.boot:spring-boot-test:jar:2.1.5.RELEASE:test
[INFO] | +- org.springframework.boot:spring-boot-test-autoconfigure:jar:2.1.5.RELEASE:test
[INFO] | +- com.jayway.jsonpath:json-path:jar:2.4.0:test
[INFO] | | \- net.minidev:json-smart:jar:2.3:test
[INFO] | | \- net.minidev:accessors-smart:jar:1.2:test
[INFO] | | \- org.ow2.asm:asm:jar:5.0.4:test
[INFO] | +- junit:junit:jar:4.12:test
[INFO] | +- org.assertj:assertj-core:jar:3.11.1:test
[INFO] | +- org.mockito:mockito-core:jar:2.23.4:test
[INFO] | | +- net.bytebuddy:byte-buddy:jar:1.9.12:compile
[INFO] | | +- net.bytebuddy:byte-buddy-agent:jar:1.9.12:test
[INFO] | | \- org.objenesis:objenesis:jar:2.6:test
[INFO] | +- org.hamcrest:hamcrest-core:jar:1.3:test
[INFO] | +- org.hamcrest:hamcrest-library:jar:1.3:test
[INFO] | +- org.skyscreamer:jsonassert:jar:1.5.0:test
[INFO] | | \- com.vaadin.external.google:android-json:jar:0.0.20131108.vaadin1:test
[INFO] | +- org.springframework:spring-test:jar:5.1.7.RELEASE:test
[INFO] | \- org.xmlunit:xmlunit-core:jar:2.6.2:test
[INFO] +- org.springframework.boot:spring-boot-starter-jdbc:jar:2.1.5.RELEASE:compile
[INFO] | +- com.zaxxer:HikariCP:jar:3.2.0:compile
[INFO] | \- org.springframework:spring-jdbc:jar:5.1.7.RELEASE:compile
[INFO] | \- org.springframework:spring-tx:jar:5.1.7.RELEASE:compile
[INFO] +- org.springframework.boot:spring-boot-starter-mail:jar:2.1.5.RELEASE:compile
[INFO] | +- org.springframework:spring-context-support:jar:5.1.7.RELEASE:compile
[INFO] | \- com.sun.mail:javax.mail:jar:1.6.2:compile
[INFO] | \- javax.activation:activation:jar:1.1:compile
[INFO] +- org.springframework.boot:spring-boot-starter-data-jpa:jar:2.1.5.RELEASE:compile
[INFO] | +- org.springframework.boot:spring-boot-starter-aop:jar:2.1.5.RELEASE:compile
[INFO] | | \- org.aspectj:aspectjweaver:jar:1.9.4:compile
[INFO] | +- javax.transaction:javax.transaction-api:jar:1.3:compile
[INFO] | +- javax.xml.bind:jaxb-api:jar:2.3.1:compile
[INFO] | | \- javax.activation:javax.activation-api:jar:1.2.0:compile
[INFO] | +- org.hibernate:hibernate-core:jar:5.3.10.Final:compile
[INFO] | | +- javax.persistence:javax.persistence-api:jar:2.2:compile
[INFO] | | +- org.javassist:javassist:jar:3.23.2-GA:compile
[INFO] | | +- antlr:antlr:jar:2.7.7:compile
[INFO] | | +- org.jboss:jandex:jar:2.0.5.Final:compile
[INFO] | | +- org.dom4j:dom4j:jar:2.1.1:compile
[INFO] | | \- org.hibernate.common:hibernate-commons-annotations:jar:5.0.4.Final:compile
[INFO] | +- org.springframework.data:spring-data-jpa:jar:2.1.8.RELEASE:compile
[INFO] | | +- org.springframework.data:spring-data-commons:jar:2.1.8.RELEASE:compile
[INFO] | | \- org.springframework:spring-orm:jar:5.1.7.RELEASE:compile
[INFO] | \- org.springframework:spring-aspects:jar:5.1.7.RELEASE:compile
[INFO] +- org.springframework.boot:spring-boot-starter-security:jar:2.1.5.RELEASE:compile
[INFO] | +- org.springframework:spring-aop:jar:5.1.7.RELEASE:compile
[INFO] | +- org.springframework.security:spring-security-config:jar:5.1.5.RELEASE:compile
[INFO] | \- org.springframework.security:spring-security-web:jar:5.1.5.RELEASE:compile
[INFO] +- ch.qos.logback:logback-classic:jar:1.2.3:compile
[INFO] | +- ch.qos.logback:logback-core:jar:1.2.3:compile
[INFO] | \- org.slf4j:slf4j-api:jar:1.7.26:compile
[INFO] +- com.h2database:h2:jar:1.4.199:compile
[INFO] +- mysql:mysql-connector-java:jar:8.0.16:runtime
[INFO] +- com.googlecode.libphonenumber:libphonenumber:jar:8.9.0:compile
[INFO] +- com.fasterxml.jackson.core:jackson-annotations:jar:2.9.0:compile
[INFO] +- com.fasterxml.jackson.core:jackson-databind:jar:2.9.8:compile
[INFO] | \- com.fasterxml.jackson.core:jackson-core:jar:2.9.8:compile
[INFO] +- org.springframework.security:spring-security-test:jar:5.1.5.RELEASE:test
[INFO] | \- org.springframework.security:spring-security-core:jar:5.1.5.RELEASE:compile
[INFO] +- org.apache.httpcomponents:httpclient:jar:4.5.8:compile
[INFO] | +- org.apache.httpcomponents:httpcore:jar:4.4.11:compile
[INFO] | \- commons-codec:commons-codec:jar:1.11:compile
[INFO] +- io.jsonwebtoken:jjwt:jar:0.9.1:compile
[INFO] +- javax.ws.rs:javax.ws.rs-api:jar:2.1.1:compile
[INFO] +- com.google.firebase:firebase-admin:jar:5.4.0:compile
[INFO] | +- com.google.api-client:google-api-client:jar:1.22.0:compile
[INFO] | | +- com.google.oauth-client:google-oauth-client:jar:1.22.0:compile
[INFO] | | \- com.google.http-client:google-http-client-jackson2:jar:1.22.0:compile
[INFO] | +- com.google.api-client:google-api-client-gson:jar:1.22.0:compile
[INFO] | | \- com.google.http-client:google-http-client-gson:jar:1.22.0:compile
[INFO] | | \- com.google.code.gson:gson:jar:2.8.5:compile
[INFO] | +- com.google.http-client:google-http-client:jar:1.22.0:compile
[INFO] | +- com.google.api:api-common:jar:1.1.0:compile
[INFO] | +- com.google.auth:google-auth-library-oauth2-http:jar:0.8.0:compile
[INFO] | | \- com.google.auth:google-auth-library-credentials:jar:0.8.0:compile
[INFO] | +- com.google.cloud:google-cloud-storage:jar:1.2.1:compile
[INFO] | | \- com.google.apis:google-api-services-storage:jar:v1-rev100-1.22.0:compile
[INFO] | \- org.json:json:jar:20160810:compile
[INFO] +- com.google.cloud:google-cloud-firestore:jar:0.26.0-beta:compile
[INFO] | +- io.netty:netty-tcnative-boringssl-static:jar:2.0.25.Final:compile
[INFO] | +- com.google.cloud:google-cloud-core:jar:1.8.0:compile
[INFO] | | +- joda-time:joda-time:jar:2.10.2:compile
[INFO] | | +- com.google.api:gax:jar:1.9.0:compile
[INFO] | | +- com.google.protobuf:protobuf-java-util:jar:3.3.1:compile
[INFO] | | +- com.google.api.grpc:proto-google-common-protos:jar:0.1.21:compile
[INFO] | | \- com.google.api.grpc:proto-google-iam-v1:jar:0.1.21:compile
[INFO] | +- com.google.cloud:google-cloud-core-grpc:jar:1.8.0:compile
[INFO] | | +- com.google.protobuf:protobuf-java:jar:3.3.1:compile
[INFO] | | +- io.grpc:grpc-protobuf:jar:1.6.1:compile
[INFO] | | | \- io.grpc:grpc-protobuf-lite:jar:1.6.1:compile
[INFO] | | \- io.grpc:grpc-context:jar:1.6.1:compile
[INFO] | +- com.google.api:gax-grpc:jar:0.26.0:compile
[INFO] | | +- com.google.auto.value:auto-value:jar:1.2:compile
[INFO] | | \- org.threeten:threetenbp:jar:1.3.3:compile
[INFO] | +- com.google.cloud:google-cloud-core-http:jar:1.8.0:compile
[INFO] | | +- com.google.http-client:google-http-client-appengine:jar:1.22.0:compile
[INFO] | | \- com.google.http-client:google-http-client-jackson:jar:1.22.0:compile
[INFO] | | \- org.codehaus.jackson:jackson-core-asl:jar:1.9.11:compile
[INFO] | +- com.google.api.grpc:proto-google-cloud-firestore-v1beta1:jar:0.1.21:compile
[INFO] | +- io.grpc:grpc-netty:jar:1.6.1:compile
[INFO] | | +- io.grpc:grpc-core:jar:1.6.1:compile (version selected from constraint [1.6.1,1.6.1])
[INFO] | | | +- com.google.instrumentation:instrumentation-api:jar:0.4.3:compile
[INFO] | | | \- io.opencensus:opencensus-api:jar:0.5.1:compile
[INFO] | | +- io.netty:netty-codec-http2:jar:4.1.36.Final:compile
[INFO] | | | +- io.netty:netty-common:jar:4.1.36.Final:compile
[INFO] | | | +- io.netty:netty-buffer:jar:4.1.36.Final:compile
[INFO] | | | +- io.netty:netty-transport:jar:4.1.36.Final:compile
[INFO] | | | | \- io.netty:netty-resolver:jar:4.1.36.Final:compile
[INFO] | | | +- io.netty:netty-codec:jar:4.1.36.Final:compile
[INFO] | | | +- io.netty:netty-handler:jar:4.1.36.Final:compile
[INFO] | | | \- io.netty:netty-codec-http:jar:4.1.36.Final:compile
[INFO] | | \- io.netty:netty-handler-proxy:jar:4.1.36.Final:compile
[INFO] | | \- io.netty:netty-codec-socks:jar:4.1.36.Final:compile
[INFO] | +- io.grpc:grpc-stub:jar:1.6.1:compile
[INFO] | \- io.grpc:grpc-auth:jar:1.6.1:compile
[INFO] \- com.google.guava:guava:jar:23.0:compile
[INFO] +- com.google.code.findbugs:jsr305:jar:1.3.9:compile
[INFO] +- com.google.errorprone:error_prone_annotations:jar:2.0.18:compile
[INFO] +- com.google.j2objc:j2objc-annotations:jar:1.1:compile
[INFO] \- org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 1.650 s
[INFO] Finished at: 2019-06-12T14:16:18+02:00
[INFO] ------------------------------------------------------------------------

This is because of jar conflicts. It happens because of maven transitive dependencies.
Based on the dependency tree that you have posted here, below two jars are conflicting each other over JSONObject.class.
1) android-json.jar (com.vaadin.external.google:android-json:jar:0.0.20131108.vaadin1:test)
2) json.jar (org.json:json:jar:20160810:compile)
You can exclude one of these jars based on your requirement.
example:
<exclusions>
<exclusion>
<groupId>com.vaadin.external.google</groupId>
<artifactId>android-json</artifactId>
</exclusion>
</exclusions>

Multiple logging implementations found in Spring Boot

I have multi-module maven project whenever I run it, I get the following error:
Exception in thread "main" java.lang.IllegalArgumentException: LoggerFactory is not a Logback LoggerContext but Logback is on the classpath. Either remove Logback or the competing implementation
I have tried several different ways to remove it but nothing works.
For example:
1) Resolve multiple SLF4J bindings in maven project
2) Spring Boot: multiple SLF4J bindings
3) https://dzone.com/articles/solving-dependency-conflicts-in-maven
But none of the above solutions is working for me.
Here is the module's pom.xml:
<dependencies>
<dependency>
<groupId>com.mydomain</groupId>
<artifactId>commons-module</artifactId>
<version>1.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.littleshoot</groupId>
<artifactId>proxy</artifactId>
<version>1.0</version>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-cache</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-test</artifactId>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpclient</artifactId>
<version>4.5.5</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<scope>test</scope>
</dependency>
</dependencies>
Here is the dependency tree for the module:
com.mydomain:circuit-module:jar:1.0-SNAPSHOT
[INFO] +- com.mydomain:commons-module:jar:1.0-SNAPSHOT:compile
[INFO] | +- javax.validation:validation-api:jar:2.0.1.Final:compile
[INFO] | +- org.postgresql:postgresql:jar:42.2.1:compile
[INFO] | +- org.springframework.boot:spring-boot-starter-data-jpa:jar:2.0.0.RELEASE:compile
[INFO] | | +- org.springframework.boot:spring-boot-starter-aop:jar:2.0.0.RELEASE:compile
[INFO] | | | \- org.aspectj:aspectjweaver:jar:1.8.13:compile
[INFO] | | +- org.springframework.boot:spring-boot-starter-jdbc:jar:2.0.0.RELEASE:compile
[INFO] | | | +- com.zaxxer:HikariCP:jar:2.7.8:compile
[INFO] | | | \- org.springframework:spring-jdbc:jar:5.0.4.RELEASE:compile
[INFO] | | +- org.hibernate:hibernate-core:jar:5.2.14.Final:compile
[INFO] | | | +- org.jboss.logging:jboss-logging:jar:3.3.2.Final:compile
[INFO] | | | +- org.hibernate.javax.persistence:hibernate-jpa-2.1-api:jar:1.0.0.Final:compile
[INFO] | | | +- org.javassist:javassist:jar:3.22.0-GA:compile
[INFO] | | | +- antlr:antlr:jar:2.7.7:compile
[INFO] | | | +- org.jboss:jandex:jar:2.0.3.Final:compile
[INFO] | | | +- com.fasterxml:classmate:jar:1.3.4:compile
[INFO] | | | +- dom4j:dom4j:jar:1.6.1:compile
[INFO] | | | \- org.hibernate.common:hibernate-commons-annotations:jar:5.0.1.Final:compile
[INFO] | | +- javax.transaction:javax.transaction-api:jar:1.2:compile
[INFO] | | +- org.springframework.data:spring-data-jpa:jar:2.0.5.RELEASE:compile
[INFO] | | | +- org.springframework.data:spring-data-commons:jar:2.0.5.RELEASE:compile
[INFO] | | | +- org.springframework:spring-orm:jar:5.0.4.RELEASE:compile
[INFO] | | | \- org.springframework:spring-tx:jar:5.0.4.RELEASE:compile
[INFO] | | \- org.springframework:spring-aspects:jar:5.0.4.RELEASE:compile
[INFO] | +- org.springframework.boot:spring-boot-starter-mail:jar:2.0.0.RELEASE:compile
[INFO] | | \- com.sun.mail:javax.mail:jar:1.6.1:compile
[INFO] | | \- javax.activation:activation:jar:1.1:compile
[INFO] | +- org.springframework.boot:spring-boot-starter-freemarker:jar:2.0.0.RELEASE:compile
[INFO] | | \- org.freemarker:freemarker:jar:2.3.27-incubating:compile
[INFO] | +- commons-validator:commons-validator:jar:1.6:compile
[INFO] | | +- commons-beanutils:commons-beanutils:jar:1.9.2:compile
[INFO] | | +- commons-digester:commons-digester:jar:1.8.1:compile
[INFO] | | +- commons-logging:commons-logging:jar:1.2:compile
[INFO] | | \- commons-collections:commons-collections:jar:3.2.2:compile
[INFO] | +- org.springframework.boot:spring-boot-starter-amqp:jar:2.0.0.RELEASE:compile
[INFO] | | +- org.springframework:spring-messaging:jar:5.0.4.RELEASE:compile
[INFO] | | \- org.springframework.amqp:spring-rabbit:jar:2.0.2.RELEASE:compile
[INFO] | | +- org.springframework.amqp:spring-amqp:jar:2.0.2.RELEASE:compile
[INFO] | | +- com.rabbitmq:amqp-client:jar:5.1.2:compile
[INFO] | | +- com.rabbitmq:http-client:jar:1.3.1.RELEASE:compile
[INFO] | | +- org.springframework:spring-web:jar:5.0.4.RELEASE:compile
[INFO] | | \- org.springframework.retry:spring-retry:jar:1.2.2.RELEASE:compile
[INFO] | +- org.springframework.boot:spring-boot-starter-data-redis:jar:2.0.0.RELEASE:compile
[INFO] | | \- org.springframework.data:spring-data-redis:jar:2.0.5.RELEASE:compile
[INFO] | | +- org.springframework.data:spring-data-keyvalue:jar:2.0.5.RELEASE:compile
[INFO] | | \- org.springframework:spring-oxm:jar:5.0.4.RELEASE:compile
[INFO] | \- redis.clients:jedis:jar:2.9.0:compile
[INFO] | \- org.apache.commons:commons-pool2:jar:2.5.0:compile
[INFO] +- org.littleshoot:proxy:jar:1.0:compile
[INFO] +- org.springframework.boot:spring-boot-starter-cache:jar:2.0.0.RELEASE:compile
[INFO] | +- org.springframework:spring-context:jar:5.0.4.RELEASE:compile
[INFO] | | +- org.springframework:spring-aop:jar:5.0.4.RELEASE:compile
[INFO] | | +- org.springframework:spring-beans:jar:5.0.4.RELEASE:compile
[INFO] | | \- org.springframework:spring-expression:jar:5.0.4.RELEASE:compile
[INFO] | \- org.springframework:spring-context-support:jar:5.0.4.RELEASE:compile
[INFO] +- org.springframework.boot:spring-boot-starter-test:jar:2.0.0.RELEASE:test
[INFO] | +- org.springframework.boot:spring-boot-test:jar:2.0.0.RELEASE:test
[INFO] | +- org.springframework.boot:spring-boot-test-autoconfigure:jar:2.0.0.RELEASE:test
[INFO] | +- com.jayway.jsonpath:json-path:jar:2.4.0:test
[INFO] | | +- net.minidev:json-smart:jar:2.3:test
[INFO] | | | \- net.minidev:accessors-smart:jar:1.2:test
[INFO] | | | \- org.ow2.asm:asm:jar:5.0.4:test
[INFO] | | \- org.slf4j:slf4j-api:jar:1.7.25:compile
[INFO] | +- junit:junit:jar:4.12:test
[INFO] | +- org.assertj:assertj-core:jar:3.9.1:test
[INFO] | +- org.mockito:mockito-core:jar:2.15.0:test
[INFO] | | +- net.bytebuddy:byte-buddy:jar:1.7.10:test
[INFO] | | +- net.bytebuddy:byte-buddy-agent:jar:1.7.10:test
[INFO] | | \- org.objenesis:objenesis:jar:2.6:test
[INFO] | +- org.hamcrest:hamcrest-core:jar:1.3:test
[INFO] | +- org.hamcrest:hamcrest-library:jar:1.3:test
[INFO] | +- org.skyscreamer:jsonassert:jar:1.5.0:test
[INFO] | | \- com.vaadin.external.google:android-json:jar:0.0.20131108.vaadin1:test
[INFO] | +- org.springframework:spring-core:jar:5.0.4.RELEASE:compile
[INFO] | | \- org.springframework:spring-jcl:jar:5.0.4.RELEASE:compile
[INFO] | +- org.springframework:spring-test:jar:5.0.4.RELEASE:test
[INFO] | \- org.xmlunit:xmlunit-core:jar:2.5.1:test
[INFO] +- org.apache.httpcomponents:httpclient:jar:4.5.5:test
[INFO] | +- org.apache.httpcomponents:httpcore:jar:4.4.9:test
[INFO] | \- commons-codec:commons-codec:jar:1.11:test
[INFO] +- com.fasterxml.jackson.core:jackson-databind:jar:2.9.4:test
[INFO] | +- com.fasterxml.jackson.core:jackson-annotations:jar:2.9.0:test
[INFO] | \- com.fasterxml.jackson.core:jackson-core:jar:2.9.4:test
[INFO] +- org.springframework.boot:spring-boot-starter:jar:2.0.0.RELEASE:compile
[INFO] | +- org.springframework.boot:spring-boot:jar:2.0.0.RELEASE:compile
[INFO] | +- org.springframework.boot:spring-boot-autoconfigure:jar:2.0.0.RELEASE:compile
[INFO] | +- org.springframework.boot:spring-boot-starter-logging:jar:2.0.0.RELEASE:compile
[INFO] | | +- ch.qos.logback:logback-classic:jar:1.2.3:compile
[INFO] | | | \- ch.qos.logback:logback-core:jar:1.2.3:compile
[INFO] | | +- org.apache.logging.log4j:log4j-to-slf4j:jar:2.10.0:compile
[INFO] | | | \- org.apache.logging.log4j:log4j-api:jar:2.10.0:compile
[INFO] | | \- org.slf4j:jul-to-slf4j:jar:1.7.25:compile
[INFO] | +- javax.annotation:javax.annotation-api:jar:1.3.2:compile
[INFO] | \- org.yaml:snakeyaml:jar:1.19:runtime
[INFO] +- commons-lang:commons-lang:jar:2.6:compile
[INFO] \- org.projectlombok:lombok:jar:1.16.20:provided
Where should I put the tags along with the module to be excluded so that it works?

Excluding logging from boot starter might be what you want, but then you may need to add a dependency for your specific logging framework.
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter</artifactId>
<!-- Exclude Spring Boot logging -->
<exclusions>
<exclusion>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-logging</artifactId>
</exclusion>
</exclusions>
</dependency>
That or excluding Logback from spring-boot-starter-logging in a similar way

How to find out and exclude an implicit dependency with Maven3?

I have a pom.xml file with several dependencies, one of them being c3p0-0.9.5.1.jar. However, when deploying the webapp with Tomcat7, the WEB-INF/lib subdirectory contains two versions for the same dependency:
c3p0-0.9.1.1.jar
c3p0-0.9.5.1.jar
I want to exclude version 0.9.1.1. I run:
mvn dependency:tree
However, only version 0.9.5.1 appears, the other jar file is not listed here. I need to exclude that version because it's causing a library conflict and currently my ugly workaround is manually removing the 0.9.1.1 version via rm and restarting Tomcat7.
I also tried adding an <exclude> block on each dependency but the file is still placed in the WEB-INF/lib subdirectory of the Tomcat7 webapp subdirectory.
Maven version is 3.0.5-1.
How can I find out what dependency is generating that old version and how can I forcibly exclude it?
This is the full pom.xml file:
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd ">
<modelVersion>4.0.0</modelVersion>
<groupId>com.login.cas</groupId>
<artifactId>local-cas-management</artifactId>
<packaging>war</packaging>
<version>4.1.0-SNAPSHOT</version>
<build>
<plugins>
<plugin>
<artifactId>maven-war-plugin</artifactId>
<configuration>
<warName>cas-management</warName>
</configuration>
</plugin>
</plugins>
</build>
<dependencies>
<dependency>
<groupId>org.jasig.cas</groupId>
<artifactId>cas-management-webapp</artifactId>
<version>${cas.version}</version>
<type>war</type>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>org.hibernate</groupId>
<artifactId>hibernate-core</artifactId>
<version>${hibernate.version}</version>
<scope>compile</scope>
</dependency>
<dependency>
<groupId>org.hibernate</groupId>
<artifactId>hibernate-entitymanager</artifactId>
<version>${hibernate.version}</version>
</dependency>
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
<version>${mysql.connector.version}</version>
</dependency>
<dependency>
<groupId>org.jasig.cas</groupId>
<artifactId>cas-server-support-jdbc</artifactId>
<version>${cas.version}</version>
</dependency>
<dependency>
<groupId>org.jasig.cas</groupId>
<artifactId>cas-server-support-ldap</artifactId>
<version>${cas.version}</version>
</dependency>
<dependency>
<groupId>xml-apis</groupId>
<artifactId>xml-apis</artifactId>
<version>${xml.apis.version}</version>
</dependency>
<dependency>
<groupId>com.mchange</groupId>
<artifactId>c3p0</artifactId>
<version>${c3p0.version}</version>
</dependency>
</dependencies>
<properties>
<commons.dbcp.version>2.0</commons.dbcp.version>
<cas.version>4.1.1</cas.version>
<hibernate.version>4.3.10.Final</hibernate.version>
<mysql.connector.version>5.1.6</mysql.connector.version>
<xml.apis.version>1.4.01</xml.apis.version>
<c3p0.version>0.9.5.1</c3p0.version>
</properties>
<repositories>
<repository>
<id>ja-sig</id>
<url>http://oss.sonatype.org/content/repositories/releases/ </url>
</repository>
</repositories>
</project>
This would be the associated dependency:tree. As you can see, there's no version 0.9.1.1.
[INFO] com.login.cas:local-cas-management:war:4.1.0-SNAPSHOT
[INFO] +- org.jasig.cas:cas-management-webapp:war:4.1.1:runtime
[INFO] +- org.hibernate:hibernate-core:jar:4.3.10.Final:compile
[INFO] | +- org.jboss.logging:jboss-logging:jar:3.1.3.GA:compile
[INFO] | +- org.jboss.logging:jboss-logging-annotations:jar:1.2.0.Beta1:compile
[INFO] | +- org.jboss.spec.javax.transaction:jboss-transaction-api_1.2_spec:jar:1.0.0.Final:compile
[INFO] | +- dom4j:dom4j:jar:1.6.1:compile
[INFO] | +- org.hibernate.common:hibernate-commons-annotations:jar:4.0.5.Final:compile
[INFO] | +- org.hibernate.javax.persistence:hibernate-jpa-2.1-api:jar:1.0.0.Final:compile
[INFO] | +- org.javassist:javassist:jar:3.18.1-GA:compile
[INFO] | +- antlr:antlr:jar:2.7.7:compile
[INFO] | \- org.jboss:jandex:jar:1.1.0.Final:compile
[INFO] +- org.hibernate:hibernate-entitymanager:jar:4.3.10.Final:compile
[INFO] +- mysql:mysql-connector-java:jar:5.1.6:compile
[INFO] +- org.jasig.cas:cas-server-support-jdbc:jar:4.1.1:compile
[INFO] | +- org.jasig.cas:cas-server-core:jar:4.1.1:compile
[INFO] | | +- org.jasig.cas:cas-server-core-api:jar:4.1.1:compile
[INFO] | | +- org.jasig.inspektr:inspektr-audit:jar:1.2.GA:compile
[INFO] | | | \- org.jasig.inspektr:inspektr-common:jar:1.2.GA:compile
[INFO] | | +- io.dropwizard.metrics:metrics-core:jar:3.1.2:compile
[INFO] | | +- io.dropwizard.metrics:metrics-annotation:jar:3.1.2:compile
[INFO] | | +- org.jasig.service.persondir:person-directory-impl:jar:1.7.0:compile
[INFO] | | | +- aopalliance:aopalliance:jar:1.0:compile
[INFO] | | | +- com.sun.xml.bind:jaxb-impl:jar:2.2.7:compile
[INFO] | | | | +- com.sun.xml.bind:jaxb-core:jar:2.2.7:compile
[INFO] | | | | | +- javax.xml.bind:jaxb-api:jar:2.2.7:compile
[INFO] | | | | | \- com.sun.istack:istack-commons-runtime:jar:2.16:compile
[INFO] | | | | \- com.sun.xml.fastinfoset:FastInfoset:jar:1.2.12:compile
[INFO] | | | | \- javax.xml.bind:jsr173_api:jar:1.0:compile
[INFO] | | | \- org.jasig.service.persondir:person-directory-api:jar:1.7.0:compile
[INFO] | | +- commons-codec:commons-codec:jar:1.10:compile
[INFO] | | +- org.springframework:spring-core:jar:4.1.6.RELEASE:compile
[INFO] | | +- org.springframework:spring-beans:jar:4.1.6.RELEASE:compile
[INFO] | | +- org.springframework:spring-webmvc:jar:4.1.6.RELEASE:compile
[INFO] | | | \- org.springframework:spring-web:jar:4.1.6.RELEASE:compile
[INFO] | | +- org.springframework:spring-context-support:jar:4.1.6.RELEASE:compile
[INFO] | | +- org.springframework:spring-tx:jar:4.1.6.RELEASE:compile
[INFO] | | +- org.springframework:spring-context:jar:4.1.6.RELEASE:compile
[INFO] | | | \- org.springframework:spring-aop:jar:4.1.6.RELEASE:compile
[INFO] | | +- org.springframework.security:spring-security-core:jar:4.0.1.RELEASE:compile
[INFO] | | +- commons-jexl:commons-jexl:jar:1.1:runtime
[INFO] | | +- commons-io:commons-io:jar:2.4:compile
[INFO] | | +- org.reflections:reflections:jar:0.9.10:compile
[INFO] | | | \- com.google.code.findbugs:annotations:jar:2.0.1:compile
[INFO] | | +- org.apache.httpcomponents:httpclient:jar:4.4.1:compile
[INFO] | | | +- org.apache.httpcomponents:httpcore:jar:4.4.1:compile
[INFO] | | | \- commons-logging:commons-logging:jar:1.1.3:compile
[INFO] | | +- javax.cache:cache-api:jar:1.0.0:compile
[INFO] | | +- org.jsr107.ri:cache-ri-impl:jar:1.0.0:runtime
[INFO] | | | \- javax.enterprise:cdi-api:jar:1.0-SP4:runtime
[INFO] | | | +- org.jboss.spec.javax.interceptor:jboss-interceptors-api_1.1_spec:jar:1.0.0.Beta1:runtime
[INFO] | | | +- javax.annotation:jsr250-api:jar:1.0:runtime
[INFO] | | | \- javax.inject:javax.inject:jar:1:runtime
[INFO] | | +- com.google.guava:guava:jar:18.0:compile
[INFO] | | +- org.bitbucket.b_c:jose4j:jar:0.4.1:compile
[INFO] | | \- org.apache.commons:commons-collections4:jar:4.0:compile
[INFO] | +- org.apache.commons:commons-lang3:jar:3.4:compile
[INFO] | +- org.springframework:spring-jdbc:jar:4.1.6.RELEASE:compile
[INFO] | +- org.springframework:spring-orm:jar:4.1.6.RELEASE:compile
[INFO] | +- org.apache.shiro:shiro-core:jar:1.2.3:compile
[INFO] | | \- commons-beanutils:commons-beanutils:jar:1.8.3:compile
[INFO] | +- org.aspectj:aspectjrt:jar:1.8.6:compile
[INFO] | +- org.aspectj:aspectjweaver:jar:1.8.6:compile
[INFO] | +- javax.validation:validation-api:jar:1.1.0.Final:compile
[INFO] | +- org.glassfish.web:javax.el:jar:2.2.6:runtime
[INFO] | +- org.slf4j:slf4j-api:jar:1.7.12:compile
[INFO] | +- org.slf4j:jul-to-slf4j:jar:1.7.12:runtime
[INFO] | +- org.apache.logging.log4j:log4j-api:jar:2.3:runtime
[INFO] | +- org.apache.logging.log4j:log4j-core:jar:2.3:runtime
[INFO] | +- org.apache.logging.log4j:log4j-slf4j-impl:jar:2.3:runtime
[INFO] | +- org.apache.logging.log4j:log4j-jcl:jar:2.3:runtime
[INFO] | \- org.jasig.inspektr:inspektr-aspects:jar:1.2.GA:compile
[INFO] +- org.jasig.cas:cas-server-support-ldap:jar:4.1.1:compile
[INFO] | +- org.springframework.webflow:spring-webflow:jar:2.4.1.RELEASE:compile
[INFO] | | +- opensymphony:ognl:jar:2.6.11:compile
[INFO] | | +- org.springframework.webflow:spring-binding:jar:2.4.1.RELEASE:compile
[INFO] | | \- org.springframework.webflow:spring-js:jar:2.4.1.RELEASE:compile
[INFO] | | \- org.springframework.webflow:spring-js-resources:jar:2.4.1.RELEASE:compile
[INFO] | +- org.ldaptive:ldaptive:jar:1.0.7:compile
[INFO] | +- org.springframework:spring-expression:jar:4.1.6.RELEASE:compile
[INFO] | +- joda-time:joda-time:jar:2.8.1:compile
[INFO] | \- com.fasterxml.jackson.core:jackson-databind:jar:2.5.3:compile
[INFO] | +- com.fasterxml.jackson.core:jackson-annotations:jar:2.5.0:compile
[INFO] | \- com.fasterxml.jackson.core:jackson-core:jar:2.5.3:compile
[INFO] +- xml-apis:xml-apis:jar:1.4.01:compile
[INFO] \- com.mchange:c3p0:jar:0.9.5.1:compile
[INFO] \- com.mchange:mchange-commons-java:jar:0.2.10:compile

If you want to proceed in a clean way, I strongly suggest you use Eclipse to check your dependency hierarchy. The Maven integration plugin provides for pom.xml files a Dependency Hierarchy view that lets you view which dependencies refer to one another.
In this view, you can manually exclude a given artifact by right-clicking it and selecting Exclude Maven Artifact... from the context menu.
You will be shown a dialog asking where to place dependency exclusion. Usually you shouldn't have to change the selection. Click OK and the <exclude> element will be automatically placed into the pom.xml file for you. If you are comfortable with the modified pom.xml file, don't forget to save it before you rebuild your project.
Apart from adjusting your pom.xml file, run a mvn clean package command to make sure no stale dependencies remain in your target folder.

Try this
<plugin>
<artifactId>maven-war-plugin</artifactId>
<version>2.6</version>
<configuration>
<packagingExcludes>WEB-INF/lib/c3p0-0.9.1.1.jar</packagingExcludes>
</configuration>
</plugin>

jersey-spring and jenkins - strange error reading zip file /jersey-core-1.8.jar

We have a REST server that we want to build in jenkins. Locally everything's builds fine but when I tell jenkins to build the project it gives me
[INFO] Copying 1 resource
[WARNING] POM for 'com.sun.jersey:jersey-core:pom:1.8:compile' is invalid. Its dependencies (if any) will NOT be available to the current build.
[INFO] [compiler:compile {execution: default-compile}]
[INFO] Compiling 2 source files to /usr/share/tomcat6/.jenkins/workspace/xx-engine-integration-server SNAPSHOT/target/classes
[JENKINS] Archiving /usr/share/tomcat6/.jenkins/workspace/xx-engine-integration-server SNAPSHOT/pom.xml to /usr/share/tomcat6/.jenkins/jobs/xx-engine-integration-server SNAPSHOT/modules/our.package.apps$xx-engine-integration-server/builds/2012-07-04_05-23-22/archive/our.package.apps/xx-engine-integration-server/1.0-SNAPSHOT/xx-engine-integration-server-1.0-SNAPSHOT.pom
[INFO] ------------------------------------------------------------------------
[ERROR] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Compilation failure error: error reading /usr/share/tomcat6/.m2/repository/com/sun/jersey/jersey-core/1.8/jersey-core-1.8.jar; error in opening zip file
Anyone seen this before? Why would the jersey-core pom be invalid? Why does jenkins need tomcat to build my project?
My pom
<!-- ... -->
<packaging>war</packaging>
<!-- Build -->
<build>
<!-- Filtering -->
<resources>
<resource>
<filtering>true</filtering>
<directory>src/main/resources</directory>
</resource>
</resources>
<plugins>
<plugin>
<artifactId>maven-compiler-plugin</artifactId>
<configuration>
<source>1.6</source>
<target>1.6</target>
</configuration>
</plugin>
</plugins>
</build>
<repositories>
<repository>
<id>projects-maven</id>
<name>My Maven Repository</name>
<url>http://path.to.our/repository</url>
</repository>
</repositories>
<dependencies>
<!-- Include Spring 3.1 dependencies and more.. -->
<dependency>
<groupId>our.path</groupId>
<artifactId>core-modules</artifactId>
<version>1.0-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>javax.servlet</groupId>
<artifactId>servlet-api</artifactId>
<version>2.5</version>
<scope>provided</scope>
</dependency>
<dependency>
<groupId>com.sun.jersey.contribs</groupId>
<artifactId>jersey-spring</artifactId>
<version>1.8</version>
<exclusions>
<exclusion>
<groupId>org.springframework</groupId>
<artifactId>spring</artifactId>
</exclusion>
<exclusion>
<groupId>org.springframework</groupId>
<artifactId>spring-core</artifactId>
</exclusion>
<exclusion>
<groupId>org.springframework</groupId>
<artifactId>spring-web</artifactId>
</exclusion>
<exclusion>
<groupId>org.springframework</groupId>
<artifactId>spring-beans</artifactId>
</exclusion>
<exclusion>
<groupId>org.springframework</groupId>
<artifactId>spring-context</artifactId>
</exclusion>
</exclusions>
</dependency>
</dependencies>
The dependency tree:
[INFO]
[INFO] --- maven-dependency-plugin:2.4:tree (default-cli) # xx-manager ---
[INFO] our.package.apps:xx-manager:war:1.0-SNAPSHOT
[INFO] +- our.package.base:xx-connect:jar:1.0-SNAPSHOT:compile
[INFO] | +- our.package.base:xx-core:jar:1.1-SNAPSHOT:compile
[INFO] | | +- org.springframework:spring-aspects:jar:3.1.0.RELEASE:compile
[INFO] | | +- org.springframework:spring-orm:jar:3.1.0.RELEASE:compile
[INFO] | | +- org.aspectj:aspectjrt:jar:1.6.12:compile
[INFO] | | +- org.aspectj:aspectjweaver:jar:1.6.12:compile
[INFO] | | +- commons-collections:commons-collections:jar:3.2.1:compile
[INFO] | | +- commons-lang:commons-lang:jar:2.3:compile
[INFO] | | +- log4j:log4j:jar:1.2.16:compile
[INFO] | | +- org.slf4j:slf4j-api:jar:1.6.1:compile
[INFO] | | +- org.slf4j:jcl-over-slf4j:jar:1.6.1:runtime
[INFO] | | +- org.slf4j:slf4j-log4j12:jar:1.6.1:runtime
[INFO] | | +- junit:junit:jar:4.10:compile
[INFO] | | | \- org.hamcrest:hamcrest-core:jar:1.1:compile
[INFO] | | +- org.powermock:powermock-module-junit4:jar:1.4.11:compile
[INFO] | | | \- org.powermock:powermock-module-junit4-common:jar:1.4.11:compile
[INFO] | | | +- org.powermock:powermock-core:jar:1.4.11:compile
[INFO] | | | \- org.powermock:powermock-reflect:jar:1.4.11:compile
[INFO] | | | \- org.objenesis:objenesis:jar:1.2:compile
[INFO] | | +- org.powermock:powermock-api-mockito:jar:1.4.11:compile
[INFO] | | | \- org.powermock:powermock-api-support:jar:1.4.11:compile
[INFO] | | +- org.mockito:mockito-all:jar:1.8.4:compile
[INFO] | | +- com.google.guava:guava:jar:10.0.1:compile
[INFO] | | | \- com.google.code.findbugs:jsr305:jar:1.3.9:compile
[INFO] | | +- com.natpryce:make-it-easy:jar:3.1.0:compile
[INFO] | | | +- org.hamcrest:hamcrest-library:jar:1.2.1:compile
[INFO] | | | \- junit:junit-dep:jar:4.8.1:compile
[INFO] | | +- javax.inject:javax.inject:jar:1:compile
[INFO] | | +- cglib:cglib:jar:2.2:compile
[INFO] | | +- joda-time:joda-time:jar:1.6.2:compile
[INFO] | | +- org.apache.cxf:cxf-rt-frontend-jaxws:jar:2.6.0:compile
[INFO] | | | +- xml-resolver:xml-resolver:jar:1.2:compile
[INFO] | | | +- org.apache.cxf:cxf-api:jar:2.6.0:compile
[INFO] | | | | +- org.codehaus.woodstox:woodstox-core-asl:jar:4.1.2:runtime
[INFO] | | | | | \- org.codehaus.woodstox:stax2-api:jar:3.1.1:runtime
[INFO] | | | | +- org.apache.ws.xmlschema:xmlschema-core:jar:2.0.2:compile
[INFO] | | | | +- org.apache.geronimo.specs:geronimo-javamail_1.4_spec:jar:1.7.1:compile
[INFO] | | | | \- wsdl4j:wsdl4j:jar:1.6.2:compile
[INFO] | | | +- org.apache.cxf:cxf-rt-core:jar:2.6.0:compile
[INFO] | | | +- org.apache.cxf:cxf-rt-bindings-soap:jar:2.6.0:compile
[INFO] | | | | \- org.apache.cxf:cxf-rt-databinding-jaxb:jar:2.6.0:compile
[INFO] | | | +- org.apache.cxf:cxf-rt-bindings-xml:jar:2.6.0:compile
[INFO] | | | +- org.apache.cxf:cxf-rt-frontend-simple:jar:2.6.0:compile
[INFO] | | | \- org.apache.cxf:cxf-rt-ws-addr:jar:2.6.0:compile
[INFO] | | | \- org.apache.cxf:cxf-rt-ws-policy:jar:2.6.0:compile
[INFO] | | | \- org.apache.neethi:neethi:jar:3.0.2:compile
[INFO] | | +- org.apache.cxf:cxf-rt-transports-http:jar:2.6.0:compile
[INFO] | | \- org.apache.cxf:cxf-rt-transports-local:jar:2.6.0:compile
[INFO] | +- org.codehaus.jackson:jackson-mapper-asl:jar:1.9.5:compile
[INFO] | | \- org.codehaus.jackson:jackson-core-asl:jar:1.9.5:compile
[INFO] | +- com.sun.jersey:jersey-server:jar:1.12:compile
[INFO] | | +- asm:asm:jar:3.1:compile
[INFO] | | \- com.sun.jersey:jersey-core:jar:1.12:compile
[INFO] | +- com.sun.jersey:jersey-client:jar:1.12:compile
[INFO] | +- com.sun.jersey:jersey-json:jar:1.12:compile
[INFO] | | +- org.codehaus.jettison:jettison:jar:1.1:compile
[INFO] | | | \- stax:stax-api:jar:1.0.1:compile
[INFO] | | +- com.sun.xml.bind:jaxb-impl:jar:2.2.3-1:compile
[INFO] | | | \- javax.xml.bind:jaxb-api:jar:2.2.2:compile
[INFO] | | | +- javax.xml.stream:stax-api:jar:1.0-2:compile
[INFO] | | | \- javax.activation:activation:jar:1.1:compile
[INFO] | | +- org.codehaus.jackson:jackson-jaxrs:jar:1.9.2:compile
[INFO] | | \- org.codehaus.jackson:jackson-xc:jar:1.9.2:compile
[INFO] | \- com.sun.jersey.contribs:jersey-multipart:jar:1.6:compile
[INFO] | \- org.jvnet:mimepull:jar:1.4:compile
[INFO] +- our.package.base:xx-security:jar:1.1-SNAPSHOT:compile
[INFO] | +- our.package.base:xx-data-jpa:jar:1.1-SNAPSHOT:compile
[INFO] | | +- org.springframework.data:spring-data-jpa:jar:1.0.3.RELEASE:compile
[INFO] | | +- org.springframework.data:spring-data-commons-core:jar:1.1.0.RELEASE:compile
[INFO] | | +- org.hibernate:hibernate-core:jar:4.1.3.Final:compile
[INFO] | | | +- antlr:antlr:jar:2.7.7:compile
[INFO] | | | +- org.jboss.logging:jboss-logging:jar:3.1.0.GA:compile
[INFO] | | | +- org.jboss.spec.javax.transaction:jboss-transaction-api_1.1_spec:jar:1.0.0.Final:compile
[INFO] | | | +- dom4j:dom4j:jar:1.6.1:compile
[INFO] | | | +- org.hibernate.javax.persistence:hibernate-jpa-2.0-api:jar:1.0.1.Final:compile
[INFO] | | | +- org.javassist:javassist:jar:3.15.0-GA:compile
[INFO] | | | \- org.hibernate.common:hibernate-commons-annotations:jar:4.0.1.Final:compile
[INFO] | | +- org.hibernate:hibernate-entitymanager:jar:4.1.3.Final:compile
[INFO] | | +- javax.validation:validation-api:jar:1.0.0.GA:compile
[INFO] | | +- org.hibernate:hibernate-validator:jar:4.3.0.Final:compile
[INFO] | | +- com.mysema.querydsl:querydsl-apt:jar:2.6.0:compile
[INFO] | | | \- com.mysema.querydsl:querydsl-codegen:jar:2.6.0:compile
[INFO] | | | \- com.mysema.codegen:codegen:jar:0.4.11:compile
[INFO] | | +- com.mysema.querydsl:querydsl-jpa:jar:2.6.0:compile
[INFO] | | | \- com.mysema.querydsl:querydsl-core:jar:2.6.0:compile
[INFO] | | | \- com.mysema.commons:mysema-commons-lang:jar:0.2.2:compile
[INFO] | | \- mysql:mysql-connector-java:jar:5.1.11:compile
[INFO] | +- our.package.base:xx-utils:jar:1.1-SNAPSHOT:compile
[INFO] | | \- net.sf.opencsv:opencsv:jar:2.3:compile
[INFO] | +- org.springframework.security:spring-security-core:jar:3.1.0.RELEASE:compile
[INFO] | +- org.springframework.security:spring-security-config:jar:3.1.0.RELEASE:compile
[INFO] | +- org.springframework.security:spring-security-web:jar:3.1.0.RELEASE:compile
[INFO] | +- org.springframework.security:spring-security-acl:jar:3.1.0.RELEASE:compile
[INFO] | +- org.springframework.security:spring-security-crypto:jar:3.1.0.RELEASE:compile
[INFO] | \- net.sf.ehcache:ehcache-core:jar:2.4.6:compile
[INFO] +- our.package.base:xx-view-mvc:jar:1.0-SNAPSHOT:compile
[INFO] | +- org.springframework:spring-webmvc:jar:3.1.0.RELEASE:compile
[INFO] | | \- org.springframework:spring-context-support:jar:3.1.0.RELEASE:compile
[INFO] | +- org.springframework:spring-test:jar:3.1.0.RELEASE:compile
[INFO] | +- cglib:cglib-nodep:jar:2.2:compile
[INFO] | +- javax.servlet:jstl:jar:1.2:compile
[INFO] | \- org.freemarker:freemarker:jar:2.3.19:compile
[INFO] +- our.package.company:xx-engine-integration-server:war:1.0-SNAPSHOT:test
[INFO] +- javax.servlet:servlet-api:jar:2.5:provided
[INFO] +- javax.servlet.jsp:jsp-api:jar:2.1:provided
[INFO] +- org.springframework:spring-test-mvc:jar:1.0.0.BUILD-SNAPSHOT:test
[INFO] +- xmlunit:xmlunit:jar:1.3:test
[INFO] +- org.springframework:spring-aop:jar:3.1.0.RELEASE:compile
[INFO] | \- aopalliance:aopalliance:jar:1.0:compile
[INFO] +- org.springframework:spring-asm:jar:3.1.0.RELEASE:compile
[INFO] +- org.springframework:spring-context:jar:3.1.0.RELEASE:compile
[INFO] +- org.springframework:spring-beans:jar:3.1.0.RELEASE:compile
[INFO] +- org.springframework:spring-core:jar:3.1.0.RELEASE:compile
[INFO] | \- commons-logging:commons-logging:jar:1.1.1:compile
[INFO] +- org.springframework:spring-tx:jar:3.1.0.RELEASE:compile
[INFO] +- org.springframework:spring-web:jar:3.1.0.RELEASE:compile
[INFO] +- org.springframework:spring-jdbc:jar:3.1.0.RELEASE:compile
[INFO] \- org.springframework:spring-expression:jar:3.1.0.RELEASE:compile

So it's the usual: dependency conflicts.. as mvn dependency:tree -Dincludes=com.sun.jersey showed. Sigh..
Solution was to updgrade to jersey-spring 1.12.
That's what you get for copying dependencies from tutorials without worrying about versions and then mixing them with your own project.

Develop Reference

Java is a programming language and computing platform first released by Sun Microsystems in 1995.

log4j exclusion from the pom.xml file - java

Related

java.lang.NoSuchFieldError: INSTANCE at org.jboss.resteasy.core.providerfactory.ResteasyProviderFactoryImpl.initializeCommon

Found multiple occurrences of org.json.JSONObject on the class path: [duplicate]

Multiple logging implementations found in Spring Boot

How to find out and exclude an implicit dependency with Maven3?

jersey-spring and jenkins - strange error reading zip file /jersey-core-1.8.jar

Categories

Resources