如何完全覆盖spring boot starter的版本？

Question

我的父模块中的spring boot版本是v2.1.17.RELEASE

<dependencyManagement>
  <dependencies>
    <dependency>
      <groupId>org.springframework.boot</groupId>
      <artifactId>spring-boot-dependencies</artifactId>
      <version>2.1.17.RELEASE</version>
      <type>pom</type>
      <scope>import</scope>
    </dependency>
  </dependencies>
</dependencyManagement>

然后我在子模块中引入了spring-boot-starter-security，指定的版本是2.4.4，它覆盖了父模块中的版本(v2.1.17.RELEASE)。

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
    <version>2.4.4</version>
</dependency>

然后，我运行mvn dependency:tree命令，发现子模块中的spring-boot-starter-security版本确实是2.4.4，但是spring-boot-starter-security中引用的spring版本(比如spring-aop)仍然是5.1.x版本，它对应于v2.1.17。发布spring-boot-starter-security版本，而不是5.3.x版本，它对应于v2.4.4版本的spring-boot-starter-security

Answer 1

您好，请检查此示例

<properties>
    <dependencies.version>2.1.17.RELEASE</dependencies.version>
    <security.version>2.4.4</security.version>
</properties>
<dependencyManagement>
  <dependencies>
    <dependency>
      <groupId>org.springframework.boot</groupId>
      <artifactId>spring-boot-dependencies</artifactId>
      <version>${dependencies.version}</version>
      <type>pom</type>
      <scope>import</scope>
    </dependency>
<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
    <version>${security.version}</version>
</dependency>
  </dependencies>
</dependencyManagement>