Tomas Tulka created MENFORCER-287:
-------------------------------------
Summary: Exclusion of dependencies in a deeper level are ignored
Key: MENFORCER-287
URL: https://issues.apache.org/jira/browse/MENFORCER-287
Project: Maven Enforcer Plugin
Issue Type: Bug
Affects Versions: 3.0.0-M1
Environment: Apache Maven 3.3.9, jdk1.8.0_111, OS name: "windows 7",
version: "6.1", arch: "amd64", family: "dos"
Reporter: Tomas Tulka
Attachments: pom.xml
Dependency Convergence returns an error even when the conflicting version is
excluded (in a deeper level):
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
<version>2.6.3</version>
</dependency>
<dependency>
<groupId>com.vi</groupId>
<artifactId>cloudwatch-log4j-appender</artifactId>
<version>1.3</version>
<exclusions>
<exclusion>
<artifactId>commons-logging</artifactId>
<groupId>commons-logging</groupId>
</exclusion>
<exclusion>
<artifactId>com.fasterxml.jackson.core</artifactId>
<groupId>jackson-core</groupId>
</exclusion>
<exclusion>
<artifactId>com.fasterxml.jackson.core</artifactId>
<groupId>jackson-databind</groupId>
</exclusion>
</exclusions>
</dependency>
Result:
Dependency convergence error for com.fasterxml.jackson.core:jackson-core:2.6.3
paths to dependency are:
+-com.mycompany:MavenDependencyConvergenceEval:1.0-SNAPSHOT
+-com.fasterxml.jackson.core:jackson-core:2.6.3
and
+-com.mycompany:MavenDependencyConvergenceEval:1.0-SNAPSHOT
+-com.vi:cloudwatch-log4j-appender:1.3
+-com.amazonaws:aws-java-sdk-logs:1.11.5
+-com.amazonaws:aws-java-sdk-core:1.11.5
+-com.fasterxml.jackson.core:jackson-databind:2.6.6
+-com.fasterxml.jackson.core:jackson-core:2.6.6
and
+-com.mycompany:MavenDependencyConvergenceEval:1.0-SNAPSHOT
+-com.vi:cloudwatch-log4j-appender:1.3
+-com.amazonaws:aws-java-sdk-logs:1.11.5
+-com.amazonaws:aws-java-sdk-core:1.11.5
+-com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.6.6
+-com.fasterxml.jackson.core:jackson-core:2.6.6
There is actually only one version of dependency
com.fasterxml.jackson.core:jackson-core:
[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @
MavenDependencyConvergenceEval ---
[INFO] com.mycompany:MavenDependencyConvergenceEval:pom:1.0-SNAPSHOT
[INFO] +- com.fasterxml.jackson.core:jackson-core:jar:2.6.3:compile
[INFO] \- com.vi:cloudwatch-log4j-appender:jar:1.3:compile
[INFO] +- org.apache.logging.log4j:log4j-core:jar:2.5:compile
[INFO] | \- org.apache.logging.log4j:log4j-api:jar:2.5:compile
[INFO] \- com.amazonaws:aws-java-sdk-logs:jar:1.11.5:compile
[INFO] \- com.amazonaws:aws-java-sdk-core:jar:1.11.5:compile
[INFO] +- org.apache.httpcomponents:httpclient:jar:4.5.2:compile
[INFO] | +- org.apache.httpcomponents:httpcore:jar:4.4.4:compile
[INFO] | \- commons-codec:commons-codec:jar:1.9:compile
[INFO] +- com.fasterxml.jackson.core:jackson-databind:jar:2.6.6:compile
[INFO] | \-
com.fasterxml.jackson.core:jackson-annotations:jar:2.6.0:compile
[INFO] +-
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:jar:2.6.6:compile
[INFO] \- joda-time:joda-time:jar:2.8.1:compile
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
