[
https://issues.apache.org/jira/browse/MENFORCER-437?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Chesnay Schepler updated MENFORCER-437:
---------------------------------------
Description:
After upgrading from 3.0.0-M1 to 3.1.0 we started getting a dependency
convergence error for a transitive {{provided}} dependencies on
{{org.osgi.core}}.
{code}
...
+-org.xerial.snappy:snappy-java:jar:1.1.8.3:runtime
+-org.osgi:org.osgi.core:jar:4.3.0:runtime
...
+-org.apache.commons:commons-compress:jar:1.21:runtime
+-org.osgi:org.osgi.core:jar:6.0.0:runtime
{code}
It's strange that is is shown here as a runtime dependency, when both
snappy-java and commons-compress declare it as a provided dependency.
In fact osgi doesn't show up in the dependency tree at all.
Being a transitive provided dependency osgi will never be put on the classpath
unless we manually put it there, so having to deal with such errors isn't ideal.
was:
After upgrading from 3.0.0-M1 to 3.1.0 we started getting a dependency
convergence error for a transitive {{provided}} dependencies on
{{org.osgi.core}}.
{code}
...
+-org.xerial.snappy:snappy-java:jar:1.1.8.3:runtime
+-org.osgi:org.osgi.core:jar:4.3.0:runtime
...
+-org.apache.commons:commons-compress:jar:1.21:runtime
+-org.osgi:org.osgi.core:jar:6.0.0:runtime
{code}
It's strange that is is shown here as a runtime dependency, when both
snappy-java and commons-compress declare it as a provided dependency.
In fact osgi doesn't show up in the dependency tree at all.
Being a transitive provided dependency osgi will never be put on the classpath
unless we manually put it there, so having to deal with such errors provides no
real value imo.
> DependencyConvergence treats provided dependencies are runtime dependencies
> ---------------------------------------------------------------------------
>
> Key: MENFORCER-437
> URL: https://issues.apache.org/jira/browse/MENFORCER-437
> Project: Maven Enforcer Plugin
> Issue Type: Bug
> Components: Standard Rules
> Affects Versions: 3.1.0
> Reporter: Chesnay Schepler
> Priority: Major
>
> After upgrading from 3.0.0-M1 to 3.1.0 we started getting a dependency
> convergence error for a transitive {{provided}} dependencies on
> {{org.osgi.core}}.
> {code}
> ...
> +-org.xerial.snappy:snappy-java:jar:1.1.8.3:runtime
> +-org.osgi:org.osgi.core:jar:4.3.0:runtime
> ...
> +-org.apache.commons:commons-compress:jar:1.21:runtime
> +-org.osgi:org.osgi.core:jar:6.0.0:runtime
> {code}
> It's strange that is is shown here as a runtime dependency, when both
> snappy-java and commons-compress declare it as a provided dependency.
> In fact osgi doesn't show up in the dependency tree at all.
> Being a transitive provided dependency osgi will never be put on the
> classpath unless we manually put it there, so having to deal with such errors
> isn't ideal.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
