[bug] azure xml 1.2.0 depends on javax.xml.stream which is not available on android making core and identity not usable on android

[baywet]

Hi,
Your friends from Microsoft Graph here 👋
Our CI recently started failing with azure identity 1.55.0 providing the following error. Version 1.54.1 was working perfectly fine.

Error:   /home/runner/.gradle/caches/modules-2/files-2.1/com.azure/azure-xml/1.2.0/5a811882dc4eba119c7d1f0fc65acf39eaf417c/azure-xml-1.2.0.jar: Error: Invalid package reference in com.azure:azure-xml; not included in Android: javax.xml.stream.util. Referenced from com.azure.xml.implementation.aalto.stax.InputFactoryImpl. [InvalidPackage]

This is because azure identity 1.55.0 updates its dependency on xml from 1.1.0 to 1.2.0

This version has a dependency on javax.xml.stream which is not available on Android.

This dependency was introduced by @alzimmermsft with PR #43282

This represents a pretty big regression in my views, and that change should either be amended not to depend on this package, or reverted, or modularized as a variant so it's not necessary to have it as a direct dependency.

Here is the failing PR, which also gives you access to our entire repository configuration.

CC @JonathanGiles the author of the original xml implementation issue.

[joshfree]

@alzimmermsft can you work with @baywet to unblock MSGraph?

[alzimmermsft]

Thanks for reporting this @baywet!

I'll work on a possible solution for this issue, but I don't have a good setup for Android verification. Would it be possible for you to help with verifying the solution I create?

[baywet]

I believe part of your fix should include adding some CI to ensure there are no other regressions like these in the future.
This is how we caught the issue before impacting customers in the first place.

The way we're doing this is through an android project which runs android api level validation (see the plugins)

Let me know if you have any additional comments or questions.