Dependency downloading old one even after removal

[Jack Tauson]

I have the following maven dependency of hibernate-core which is still getting downloaded for some reason even though I don't have it in my pom.xml. Moved from Spring 5.3.X to Spring 6.X and hence all jakarta related changes.
Here is the image showing the contents of hibernate directory inside my m2.



Here's the URL of the image if above doesn't work:
https://i.sstatic.net/F0yNYUOV.png

Here's my pom.xml where I have only included hibernate-core-jakarta on line 201 as shown below.


<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"> <modelVersion>4.0.0</modelVersion> <groupId>ComWeb</groupId> <artifactId>ComWeb</artifactId> <version>1</version> <properties> <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> </properties> <repositories> <repository> <id>gitlab-maven</id> <url>https://gitlab.abc.com/api/v4/groups/service-apps/-/packages/maven</url> </repository> </repositories> <distributionManagement> <repository> <id>gitlab-maven</id> <url>https://gitlab.abc.com/api/v4/projects/8/packages/maven</url> </repository> <snapshotRepository> <id>gitlab-maven</id> <url>https://gitlab.abc.com/api/v4/projects/8/packages/maven</url> </snapshotRepository> </distributionManagement> <dependencyManagement> <dependencies> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-framework-bom</artifactId> <version>6.0.0</version> <type>pom</type> <scope>import</scope> </dependency>                        <dependency> <groupId>org.springframework.security</groupId> <artifactId>spring-security-bom</artifactId> <version>6.0.0</version> <type>pom</type> <scope>import</scope> </dependency> </dependencies> </dependencyManagement> <dependencies> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-context</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-expression</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-beans</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-aop</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-context-support</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-tx</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-jdbc</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-orm</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-oxm</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-web</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-webmvc</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-test</artifactId> <scope>test</scope> </dependency> <dependency> <groupId>org.springframework.security</groupId> <artifactId>spring-security-web</artifactId> </dependency> <dependency> <groupId>org.springframework.security</groupId> <artifactId>spring-security-config</artifactId> </dependency> <dependency> <groupId>org.springframework.security</groupId> <artifactId>spring-security-core</artifactId> </dependency> <dependency> <groupId>org.springframework.security</groupId> <artifactId>spring-security-taglibs</artifactId> </dependency> <dependency> <groupId>org.springframework</groupId> <artifactId>spring-struts</artifactId> <version>3.2.18.RELEASE</version> <exclusions> <exclusion> <groupId>struts</groupId> <artifactId>struts</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>org.freemarker</groupId> <artifactId>freemarker</artifactId> <version>2.3.31</version> </dependency> <dependency>  <groupId>org.apache.commons</groupId>  <artifactId>commons-fileupload2-jakarta-servlet6</artifactId>  <version>2.0.0-M2</version> </dependency> <!-- START Jakarta EE testing --> <dependency> <groupId>jakarta.platform</groupId> <artifactId>jakarta.jakartaee-api</artifactId> <version>9.0.0</version> <scope>provided</scope> </dependency> <dependency>        <groupId>io.github.weblegacy</groupId>        <artifactId>struts-core</artifactId>        <version>1.5.0-RC1</version>    </dependency>    <dependency>        <groupId>io.github.weblegacy</groupId>        <artifactId>struts-el</artifactId>        <version>1.5.0-RC1</version>    </dependency>    <dependency>        <groupId>io.github.weblegacy</groupId>        <artifactId>struts-extras</artifactId>        <version>1.5.0-RC1</version>    </dependency>    <dependency>        <groupId>io.github.weblegacy</groupId>        <artifactId>struts-taglib</artifactId>        <version>1.5.0-RC1</version>        </dependency> <!-- https://mvnrepository.com/artifact/org.beangle.jakarta/beangle-jakarta-dwr --> <dependency>    <groupId>org.beangle.jakarta</groupId>    <artifactId>beangle-jakarta-dwr</artifactId>    <version>3.0.3-RELEASE</version> </dependency>        <dependency> <groupId>org.springmodules</groupId> <artifactId>spring-modules-validation</artifactId> <version>0.8</version> <exclusions> <exclusion> <groupId>org.springframework</groupId> <artifactId>spring</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>io.jsonwebtoken</groupId> <artifactId>jjwt</artifactId> <version>0.9.1</version> </dependency> <!-- https://github.com/hazendaz/displaytag/blob/master/pom.xml --> <dependency> <groupId>com.github.hazendaz</groupId> <artifactId>displaytag</artifactId> <version>3.0.2</version> </dependency> <dependency> <groupId>org.hibernate</groupId> <artifactId>hibernate-core-jakarta</artifactId> <version>5.6.15.Final</version> </dependency> <!-- Upgrading ehcache to 5.6.15  --> <dependency> <groupId>org.hibernate</groupId> <artifactId>hibernate-ehcache</artifactId> <version>5.6.15.Final</version> </dependency> <dependency> <groupId>net.sf.ehcache</groupId> <artifactId>ehcache</artifactId> <version>2.10.9.2</version> <exclusions> <exclusion> <groupId>org.slf4j</groupId> <artifactId>slf4j-api</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>org.quartz-scheduler</groupId> <artifactId>quartz</artifactId> <version>2.3.2</version> <exclusions> <exclusion> <groupId>org.slf4j</groupId> <artifactId>slf4j-api</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>org.quartz-scheduler</groupId> <artifactId>quartz-jobs</artifactId> <version>2.3.2</version> <exclusions> <exclusion> <groupId>org.slf4j</groupId> <artifactId>slf4j-api</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>org.sitemesh</groupId> <artifactId>sitemesh</artifactId> <version>3.0.1</version> </dependency> <dependency> <groupId>commons-digester</groupId> <artifactId>commons-digester</artifactId> <version>2.1</version> </dependency> <!-- https://mvnrepository.com/artifact/jakarta.servlet.jsp.jstl/jakarta.servlet.jsp.jstl-api --> <dependency>    <groupId>jakarta.servlet.jsp.jstl</groupId>    <artifactId>jakarta.servlet.jsp.jstl-api</artifactId>    <version>3.0.0</version> </dependency> <dependency>            <groupId>jakarta.servlet</groupId>            <artifactId>jakarta.servlet-api</artifactId>            <version>6.0.0</version>            <scope>provided</scope>        </dependency> <dependency> <groupId>org.hibernate.validator</groupId> <artifactId>hibernate-validator</artifactId> <version>6.2.1.Final</version> </dependency> <dependency> <groupId>com.googlecode.owasp-java-html-sanitizer</groupId> <artifactId>owasp-java-html-sanitizer</artifactId> <version>20211018.2</version> </dependency> <dependency> <groupId>javax.xml</groupId> <artifactId>jaxrpc-api</artifactId> <version>1.1</version> </dependency> <dependency> <groupId>javax.xml.soap</groupId> <artifactId>javax.xml.soap-api</artifactId> <version>1.4.0</version> </dependency> <dependency> <groupId>wsdl4j</groupId> <artifactId>wsdl4j</artifactId> <version>1.6.3</version> </dependency> <dependency>    <groupId>com.fasterxml.jackson.core</groupId>    <artifactId>jackson-databind</artifactId>    <version>2.12.1</version> </dependency> <dependency>    <groupId>com.fasterxml.jackson.core</groupId>    <artifactId>jackson-core</artifactId>    <version>2.12.1</version> </dependency> <dependency>  <groupId>com.fasterxml.jackson.dataformat</groupId>  <artifactId>jackson-dataformat-xml</artifactId>  <version>2.10.1</version> </dependency> </dependencies> <build> <sourceDirectory>src</sourceDirectory> <testSourceDirectory>src-test</testSourceDirectory> <resources> <resource> <directory>src</directory> </resource> </resources> <plugins> <plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId>maven-compiler-plugin</artifactId> <version>3.8.1</version> <configuration> <source>17</source> <target>17</target> </configuration> </plugin> <plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId>maven-surefire-plugin</artifactId> <version>3.0.0-M5</version> </plugin> </plugins> </build> </project>

[Liutauras Vilda]

Analyse them through some Dependency Analyser (there are plugins I trust in all major IDEs), and you should be able to track down where it comes from.

[Tim Holloway]

Liutauras Vilda wrote:Analyse them through some Dependency Analyser (there are plugins I trust in all major IDEs), and you should be able to track down where it comes from.

Also you can use the maven dependency:tree goal. You're likely incurring a transitive dependency and need to update one of your pom dependency versions.

[Jack Tauson]

Tim Holloway wrote:

Liutauras Vilda wrote:Analyse them through some Dependency Analyser (there are plugins I trust in all major IDEs), and you should be able to track down where it comes from.

Also you can use the maven dependency:tree goal. You're likely incurring a transitive dependency and need to update one of your pom dependency versions.

Yeah, looks like ehcache is using it so I will have to get rid of it. Looked at it from Eclipse Dependency Tree.

https://i.sstatic.net/Hls9oAIO.png

[Tim Holloway]

Don't forget that ehcache has been forked due to the commercial grab.

[Tim Moores]

Pardon the OT post.

Tim Holloway wrote:Don't forget that ehcache has been forked due to the commercial grab.

I missed that - what was the issue? I don't seem to be able to find any info on that, nor any fork.

[Tim Holloway]

Never mind. It was redis that forked. Sorry about that.