René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Dependency convergence between msgraph-sdk-java-core for kiota 1.9.0 vs 1.8.10","articleBody":"### Describe the bug\n\nWhen importing the `com.microsoft.graph:microsoft-graph:6.60.0` dependency, we get dependency convergence on quite a few imported dependencies. From what I can tell it is the same for \"all\" kiota versions in play by these two projects ( `com.microsoft.graph:microsoft-graph-core:3.6.5` and `com.microsoft.graph:microsoft-graph:6.60.0`).\n\nThis issue presents itself when using the `maven-enforcer-plugin`, which is quite common. This eliminates issues where two different versions of the same dependency is imported by the same `pom.xml`\n\nThere are  a few other convergence issues as well, but that is at least manageable when using Spring Boot (probably similar tech as well) since they control the versions of those Jackson libraries for instance. \n\n\n### Expected behavior\n\nI would expect Microsoft projects to be aligned with \"internal\" versions, and for this not to be an issue even when using the enforcer-plugin. I would expect both `com.microsoft.graph:microsoft-graph` and `com.microsoft.graph:microsoft-graph-core` to use the same version of kiota-dependencies, since `com.microsoft.graph:microsoft-graph` includes `com.microsoft.graph:microsoft-graph-core`.\n\nWhether they use `1.9.0`, `1.8.12` or `1.8.10` doesn't really matter to me.\n\n### How to reproduce\n\n1. Create a new empty Maven project.\n2. Fill out the pom.xml like the attached file\n3. Run `mvn compile` or `mvn package`  or similar\n\n[pom.xml](https://github.com/user-attachments/files/24749653/pom.xml)\n\n### SDK Version\n\n6.60.0, but also 6.59.0 and 6.58.0\n\n### Latest version known to work for scenario above?\n\n6.57.0\n\n### Known Workarounds\n\nThere are a few workarounds. Either provide dependency management of all the kiota dependencies, or downgrade to 6.57.0\n\n### Debug output\n\n\u003cdetails>\u003csummary>Click to expand log\u003c/summary>\n\n```\nmvn package\n[INFO] Scanning for projects...\n[INFO] \n[INFO] ------------------------\u003c com.example:example >-------------------------\n[INFO] Building example 1.0-SNAPSHOT\n[INFO] --------------------------------[ jar ]---------------------------------\n[INFO] \n[INFO] --- maven-enforcer-plugin:3.6.2:enforce (enforce) @ example ---\n[INFO] Rule 1: org.apache.maven.enforcer.rules.BanDuplicatePomDependencyVersions passed\n[INFO] ------------------------------------------------------------------------\n[INFO] BUILD FAILURE\n[INFO] ------------------------------------------------------------------------\n[INFO] Total time:  0.495 s\n[INFO] Finished at: 2026-01-20T21:10:02+01:00\n[INFO] ------------------------------------------------------------------------\n[ERROR] Failed to execute goal org.apache.maven.plugins:maven-enforcer-plugin:3.6.2:enforce (enforce) on project example: \n[ERROR] Rule 0: org.apache.maven.enforcer.rules.dependency.DependencyConvergence failed with message:\n[ERROR] Failed while enforcing releasability.\n[ERROR] \n[ERROR] Dependency convergence error for org.jetbrains.kotlin:kotlin-stdlib-jdk8:jar:1.9.10. Paths to dependency are:\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.squareup.okhttp3:okhttp:jar:4.12.0:compile\n[ERROR]       +-com.squareup.okio:okio:jar:3.6.0:compile\n[ERROR]         +-com.squareup.okio:okio-jvm:jar:3.6.0:compile\n[ERROR]           +-org.jetbrains.kotlin:kotlin-stdlib-jdk8:jar:1.9.10:compile\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.squareup.okhttp3:okhttp:jar:4.12.0:compile\n[ERROR]       +-org.jetbrains.kotlin:kotlin-stdlib-jdk8:jar:1.8.21:compile\n[ERROR] \n[ERROR] \n[ERROR] Dependency convergence error for com.microsoft.kiota:microsoft-kiota-serialization-form:jar:1.8.10. Paths to dependency are:\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.microsoft.kiota:microsoft-kiota-serialization-form:jar:1.8.10:runtime\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.kiota:microsoft-kiota-serialization-form:jar:1.9.0:runtime\n[ERROR] \n[ERROR] \n[ERROR] Dependency convergence error for com.google.errorprone:error_prone_annotations:jar:2.41.0. Paths to dependency are:\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.google.code.gson:gson:jar:2.13.2:runtime\n[ERROR]         +-com.google.errorprone:error_prone_annotations:jar:2.41.0:runtime\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.auth0:jwks-rsa:jar:0.23.0:runtime\n[ERROR]         +-com.google.guava:guava:jar:32.1.2-jre:runtime\n[ERROR]           +-com.google.errorprone:error_prone_annotations:jar:2.18.0:runtime\n[ERROR] \n[ERROR] \n[ERROR] Dependency convergence error for com.microsoft.kiota:microsoft-kiota-serialization-text:jar:1.8.10. Paths to dependency are:\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.microsoft.kiota:microsoft-kiota-serialization-text:jar:1.8.10:runtime\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.kiota:microsoft-kiota-serialization-text:jar:1.9.0:runtime\n[ERROR] \n[ERROR] \n[ERROR] Dependency convergence error for com.microsoft.kiota:microsoft-kiota-authentication-azure:jar:1.8.10. Paths to dependency are:\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.microsoft.kiota:microsoft-kiota-authentication-azure:jar:1.8.10:compile\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.kiota:microsoft-kiota-authentication-azure:jar:1.9.0:compile\n[ERROR] \n[ERROR] \n[ERROR] Dependency convergence error for com.microsoft.kiota:microsoft-kiota-http-okHttp:jar:1.8.10. Paths to dependency are:\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.microsoft.kiota:microsoft-kiota-http-okHttp:jar:1.8.10:runtime\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.kiota:microsoft-kiota-http-okHttp:jar:1.9.0:runtime\n[ERROR] \n[ERROR] \n[ERROR] Dependency convergence error for com.microsoft.kiota:microsoft-kiota-serialization-multipart:jar:1.8.10. Paths to dependency are:\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.microsoft.kiota:microsoft-kiota-serialization-multipart:jar:1.8.10:runtime\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.kiota:microsoft-kiota-serialization-multipart:jar:1.9.0:runtime\n[ERROR] \n[ERROR] \n[ERROR] Dependency convergence error for com.microsoft.kiota:microsoft-kiota-serialization-json:jar:1.8.10. Paths to dependency are:\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.microsoft.kiota:microsoft-kiota-serialization-json:jar:1.8.10:runtime\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.kiota:microsoft-kiota-serialization-json:jar:1.9.0:runtime\n[ERROR] \n[ERROR] \n[ERROR] Dependency convergence error for com.fasterxml.jackson.core:jackson-databind:jar:2.18.4. Paths to dependency are:\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.azure:azure-core:jar:1.56.1:compile\n[ERROR]         +-com.fasterxml.jackson.core:jackson-databind:jar:2.18.4:compile\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.azure:azure-core:jar:1.56.1:compile\n[ERROR]         +-com.fasterxml.jackson.datatype:jackson-datatype-jsr310:jar:2.18.4:compile\n[ERROR]           +-com.fasterxml.jackson.core:jackson-databind:jar:2.18.4:compile\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.auth0:jwks-rsa:jar:0.23.0:runtime\n[ERROR]         +-com.fasterxml.jackson.core:jackson-databind:jar:2.15.0:runtime\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-io.jsonwebtoken:jjwt-jackson:jar:0.13.0:runtime\n[ERROR]         +-com.fasterxml.jackson.core:jackson-databind:jar:2.12.7.1:runtime\n[ERROR] \n[ERROR] \n[ERROR] Dependency convergence error for com.fasterxml.jackson.core:jackson-core:jar:2.18.4.1. Paths to dependency are:\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.azure:azure-core:jar:1.56.1:compile\n[ERROR]         +-com.fasterxml.jackson.core:jackson-core:jar:2.18.4.1:compile\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.azure:azure-core:jar:1.56.1:compile\n[ERROR]         +-com.fasterxml.jackson.core:jackson-databind:jar:2.18.4:compile\n[ERROR]           +-com.fasterxml.jackson.core:jackson-core:jar:2.18.4:compile\n[ERROR] and\n[ERROR] +-com.example:example:jar:1.0-SNAPSHOT\n[ERROR]   +-com.microsoft.graph:microsoft-graph:jar:6.60.0:compile\n[ERROR]     +-com.microsoft.graph:microsoft-graph-core:jar:3.6.5:compile\n[ERROR]       +-com.azure:azure-core:jar:1.56.1:compile\n[ERROR]         +-com.fasterxml.jackson.datatype:jackson-datatype-jsr310:jar:2.18.4:compile\n[ERROR]           +-com.fasterxml.jackson.core:jackson-core:jar:2.18.4:compile\n[ERROR] \n[ERROR] -> [Help 1]\n[ERROR] \n[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.\n[ERROR] Re-run Maven using the -X switch to enable full debug logging.\n[ERROR] \n[ERROR] For more information about the errors and possible solutions, please read the following articles:\n[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException\n\n```\n\u003c/details>\n\n\n### Configuration\n\n\n- Linux 5.15.0-130-generic x86_64 GNU/Linux\n- Ubuntu 22.04.5 LT\n- Java 21.0.5\n- Maven 3.8.6\n- Maven-enforcer-plugin 3.6.2\n\n### Other information\n\nPR open for bumping msgraph-sdk-java-core to kiota 1.9.0: https://github.com/microsoftgraph/msgraph-sdk-java-core/pull/2041\n\n\n","author":{"url":"https://github.com/jespernylendklp","@type":"Person","name":"jespernylendklp"},"datePublished":"2026-01-20T20:15:15Z","url":"https://github.com/microsoftgraph/msgraph-sdk-java/issues/2533"}