Question

I'm currently using flexmark-all:0.64.8 in my project, which transitively includes jsoup:1.15.4. I would like to upgrade jsoup to the latest version 1.21.2 for security patches and new features.

Would there be any compatibility issues if I explicitly declare jsoup 1.21.2 while still using flexmark-all 0.64.8?

Current Setup

dependencies {
    implementation "com.vladsch.flexmark:flexmark-all:0.64.8"
    implementation "com.vladsch.flexmark:flexmark-html2md-converter:0.64.8"
    // Currently using jsoup 1.15.4 transitively
}

Proposed Change

dependencies {
    implementation "com.vladsch.flexmark:flexmark-all:0.64.8"
    implementation "com.vladsch.flexmark:flexmark-html2md-converter:0.64.8"
    implementation "org.jsoup:jsoup:1.21.2" // Explicit upgrade
}

Motivation

• jsoup 1.21.2 includes HTTP/2 support, performance improvements, and security patches
• Our project requires the latest version of jsoup for other dependencies

Questions

1. Are there any known breaking changes in jsoup between 1.15.4 and 1.21.2 that would affect flexmark-all?
2. Has flexmark been tested with newer versions of jsoup?
3. Would you recommend explicitly excluding jsoup from flexmark dependencies and managing the version separately?

Environment

• flexmark-all: 0.64.8
• Current jsoup (transitive): 1.15.4
• Target jsoup: 1.21.2
• Java: 21
• Gradle: 8.5

I plan to run comprehensive tests, but wanted to check if there are any known issues before proceeding.

Thank you!