[ 
https://issues.apache.org/jira/browse/MENFORCER-502?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Konrad Windszus resolved MENFORCER-502.
---------------------------------------
    Resolution: Invalid

Actually it works fine. I was wrongly assuming this does not work because the 
affected modules uses maven-shade-plugin which creates a dependency-reduced POM 
(leaving no compile time dependencies in place).

> ResolverUtil.resolveTransitiveDependencies() does not consider transitive 
> dependencies 
> ---------------------------------------------------------------------------------------
>
>                 Key: MENFORCER-502
>                 URL: https://issues.apache.org/jira/browse/MENFORCER-502
>             Project: Maven Enforcer Plugin
>          Issue Type: Bug
>          Components: bannedDependencies
>    Affects Versions: 3.4.1
>            Reporter: Konrad Windszus
>            Priority: Major
>
> Despite its name 
> https://github.com/apache/maven-enforcer/blob/80ee78e5f7473dafc8ca8e68d8f2af7895290303/enforcer-rules/src/main/java/org/apache/maven/enforcer/rules/dependency/ResolverUtil.java#L113
>  does no longer resolve transitive dependencies.
> Only the direct ones are resolved in the returned {{DependencyNode}}. I.e. 
> the rootNode has direct children, but the children itself never have any 
> children (despite the fact that there are transitive dependencies on that 
> level).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to