Seeking Assurance That Patching gradle-api-6.{...}.jar Is At Least Technically Possible - Somehow

[Dawid Weiss]

I realize this. However xercesImpl has a POM dependency on those
xml-apis -- this dependency brings this JAR in for other projects
(like mine). I have no idea who published xml-apis [1] -- this is
indeed ancient code. Sigh.

Dawid

[1] http://repo1.maven.org/maven2/xml-apis/xml-apis/

On Thu, Nov 14, 2019 at 7:51 PM Alan Bateman <Alan.Bateman at oracle.com> wrote:
>
> On 14/11/2019 17:52, Dawid Weiss wrote:
> > They seem to be aware about it -- see this issue, for example:
> > https://issues.apache.org/jira/browse/XERCESJ-1689
> >
> Thanks but that looks to be xercesImpl.jar. The main troublemaker seems
> to be xml-apis.jar as it has a copy of the JAXP APIs from JDK 6 or older.
>
> -Alan