Skip to content

LDEV-3189 use the upstream argon2-jvm Maven artifact - #4

Merged
michaeloffner merged 1 commit into
lucee:masterfrom
GianTschingt:LDEV-3189
Oct 29, 2026
Merged

michaeloffner merged 1 commit into
lucee:masterfrom
GianTschingt:LDEV-3189

Conversation

@GianTschingt

Copy link
Copy Markdown
Contributor

LDEV-3189 use upstream argon2 osgi bundle

Lucee is moving to Maven coordinates and leaving OSGi, so instead of the upstream OSGi manifest (what the ticket originally asked for) this references the upstream artifact by Maven coordinates, like extension-compress does since LDEV-6719.

What changes

  • de.mkammerer:argon2-jvm:2.12 (latest upstream release) replaces the rebundled org.lucee.argon2, org.lucee.argon2-jvm-nolibs and com.sun.jna 5.8.0 jars. argon2-jvm-nolibs and JNA (5.16.0) come in transitively.
  • new source/java/pom.xml builds org.lucee:argon2-functions, the .lex ships it plus all runtime dependencies in a maven/ folder, and function.fld uses maven="..." instead of bundle-name/bundle-version.
  • removed source/java/libs/*.jar and the OSGi MANIFEST.MF (Require-Bundle).
  • build.xml, root pom.xml, copy-parent-poms.sh and .github/workflows/main.yml follow extension-compress (full and lite .lex, Maven Central publishing, test matrix limited to supported cores).
  • extension version is now 1.1.0.0-SNAPSHOT, luceeCoreVersion is 7.1.0.204 (the first final with maven= for functions). Older Lucee versions stay on the previous 1.0.0.x release.
  • no change to the function code and no change in Lucee core.

Tested

  • mvn -f pom.xml clean install -Dgoal=install builds, the .lex has the upstream jars under maven/de/mkammerer/... and maven/net/java/dev/jna/...
  • on Lucee 7.1 (7.1.3.59-SNAPSHOT) with only this .lex installed, GenerateArgon2Hash and Argon2CheckHash work for the default, argon2i, argon2d and argon2id (native library loads through JNA)
  • the existing tests/functions/GenerateArgon2Hash.cfc and Argon2CheckHash.cfc run unchanged in CI

…dled OSGi jars

Reference de.mkammerer:argon2-jvm:2.12 (with argon2-jvm-nolibs and JNA as
transitive dependencies) by Maven coordinates instead of the rebundled
org.lucee.argon2 / org.lucee.argon2-jvm-nolibs / com.sun.jna OSGi bundles.

- new source/java/pom.xml builds org.lucee:argon2-functions
- the .lex ships the artifacts in a maven/ folder, the FLD uses maven=
- remove the bundled jars and the OSGi MANIFEST.MF (Require-Bundle)
- build, CI and the Maven publishing follow extension-compress
- needs Lucee 7.1.0.204 or newer (luceeCoreVersion)
@michaeloffner
michaeloffner merged commit 2fd444b into lucee:master Oct 29, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants