zypper dup wants to install a bunch of new packages

Today “zypper dup” wants to install 127 (!) new packages related to java.
Why is that? How can I understand what is triggering this?

  polarisuse  **cris ** **~ ** LANG=C sudo zypper dup
[sudo] password for root:  
Loading repository data...
Reading installed packages...
Warning: You are about to do a distribution upgrade with all enabled repositories. Make sure these repositories are compatible before you continue. See 'man zypper' for more information abo
ut this command.
Computing distribution upgrade...

The following 127 NEW packages are going to be installed:
  ant aopalliance apache-commons-cli apache-commons-codec apache-commons-collections apache-commons-compress apache-commons-configuration apache-commons-io apache-commons-lang
  apache-commons-lang3 apache-pdfbox aqute-bndlib atinject avalon-framework avalon-logkit bsf bsh2 cal10n cdi-api cglib felix-utils geronimo-annotation-1_0-api geronimo-jms-1_1-api
  glassfish-el-api glassfish-servlet-api google-guice guava20 hamcrest-core httpcomponents-client httpcomponents-core icu4j java-12-openjdk java-12-openjdk-devel java-12-openjdk-headless
  javamail jboss-interceptors-1.2-api jcl-over-slf4j jdom jsoup jsr-305 junit log4j maven-antrun-plugin maven-archiver maven-artifact maven-artifact-manager maven-artifact-transfer
  maven-assembly-plugin maven-common-artifact-filters maven-compiler-plugin maven-dependency-tree maven-doxia-core maven-doxia-logging-api maven-doxia-module-apt maven-doxia-module-fml
  maven-doxia-module-fo maven-doxia-module-markdown maven-doxia-module-xdoc maven-doxia-module-xhtml maven-doxia-sink-api maven-doxia-sitetools maven-file-management maven-filtering
  maven-jar-plugin maven-lib maven-model maven-plugin-annotations maven-plugin-build-helper maven-plugin-bundle maven-plugin-registry maven-profile maven-project maven-reporting-api
  maven-reporting-impl maven-resolver-api maven-resolver-connector-basic maven-resolver-impl maven-resolver-spi maven-resolver-transport-wagon maven-resolver-util maven-shared-incremental
  maven-shared-io maven-shared-utils maven-surefire maven-surefire-plugin maven-wagon-file maven-wagon-http maven-wagon-http-shared maven-wagon-provider-api objectweb-asm oro
  osgi-annotation osgi-compendium osgi-core parboiled pegdown plexus-archiver plexus-build-api plexus-cipher plexus-classworlds plexus-compiler plexus-containers-component-annotations
  plexus-containers-container-default plexus-i18n plexus-interpolation plexus-io plexus-languages plexus-sec-dispatcher plexus-utils plexus-velocity qdox servletapi4 sisu-inject sisu-plexus
  slf4j velocity werken-xpath xalan-j2 xbean xerces-j2 xml-commons-resolver xmlgraphics-batik xmlgraphics-batik-css xmlgraphics-commons xmlgraphics-fop xmlunit xz-java

The following 90 packages are going to be upgraded:
  MellowPlayer apache-commons-parent apache2-mod_php7 apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang ffmpeg-4
  geogebra5 libaio-devel libaio1 libapparmor1 libavcodec56 libavcodec57 libavcodec58 libavdevice56 libavdevice57 libavdevice58 libavfilter5 libavfilter6 libavfilter7 libavformat56
  libavformat57 libavformat58 libavresample2 libavresample3 libavresample4 libavutil54 libavutil55 libavutil56 libbsd0 libgdal20 libhdf5-103 libhdf5_cpp103 libhdf5_hl100 liblwgeom-2_5-0
  libnuma1 libpostproc53 libpostproc54 libpostproc55 libsgutils2-1_45-2 libswresample1 libswresample2 libswresample3 libswscale3 libswscale4 libswscale5 libtbb2 libvlc123 libvlccore123
  libxmlsec1-1 libxmlsec1-nss1 numactl openSUSE-Addon-NonOss-release openSUSE-release openSUSE-release-ftp os-prober perl-apparmor php7 php7-ctype php7-dom php7-gd php7-gettext php7-iconv
  php7-intl php7-json php7-mbstring php7-mysql php7-openssl php7-pdo php7-pear php7-phar php7-sqlite php7-tokenizer php7-xmlreader php7-xmlwriter php7-zip php7-zlib
  plasma-browser-integration plasma-browser-integration-lang postgresql11-postgis postgresql11-postgis-utils python3-apparmor sg3_utils skypeforlinux snapd vivaldi-snapshot

The following 2 products are going to be upgraded:
  openSUSE Tumbleweed    20190428-0 -> 20190430-0
  openSUSE NonOSS Addon  20190428-0 -> 20190430-0

90 packages to upgrade, 127 new.
Overall download size: 375.7 MiB. Already cached: 0 B. After the operation, additional 111.4 MiB will be used.
**Continue? [y/n/v/...? shows all options] (y): **n

Thank you in advance
Cris

Just found out that locking apache-commons-parent stops zypper from requiring those 127 new packages.
/var/log/zypp/history tells me that apache-commons-parent was installed on 2019-02-15. I don’t know why, as trying to remove it does not remove anything else.
I think I’m gonna remove it and see if something breaks.

Cris

I ran into that earlier today.

I wasn’t paying close attention, so I installed them all. And later, I went back and removed them. And yes, I think I also removed apache-commons-parent while doing that.

Thanks from me as well. zypper dup just started the download when I read this post and I cancelled out to delete anything which had the name apache-commons (and dependent files) before restarting zypper dup. Even afterwards it wanted to install a package called appache-commons-logging. So I stopped again and tabooed this package before finally running zypper dup.

Hi fuerstu!

You may want to let zypper install apache-commons-logging, as it is apparently needed by a few packages (LibreOffice among them):

  polarisuse  **cris ** **~ ** 1  LANG=C sudo zypper rm apache-commons-logging
[sudo] password for root:
Loading repository data...
Warning: No repositories defined. Operating only with the installed resolvables. Nothing can be installed.
Reading installed packages...
Resolving package dependencies...

The following 11 packages are going to be REMOVED:
  apache-commons-logging libbase libfonts libformula liblayout libloader libreoffice-base librepository libserializer pentaho-libxml pentaho-reporting-flow-engine

11 packages to remove.
After the operation, 12.0 MiB will be freed.
**Continue? [y/n/v/...? shows all options] (y): **n

Hope this helps
Cris

It’s apache-commons-parent that should be removed. It’s only needed for building the apache stack. You locked it now, so, unlock it, remove it and you should be back in business.

Thank you Chris70 and Knurpht for clearing this up. Cheers Uli

Thanks I uninstalled a ton of those packages listed above. I seriously need to dump out what’s installed week to week, and keep an eye on what’s sneaking onto my PC and filling up my root partition over the months …