wei cai created MPMD-384:
----------------------------
Summary: maven-pmd-plugin is dowloading
Key: MPMD-384
URL: https://issues.apache.org/jira/browse/MPMD-384
Project: Maven PMD Plugin
Issue Type: Bug
Components: PMD
Affects Versions: 3.21.0, 3.20.0, 3.19.0, 3.18.0, 3.17.0, 3.16.0, 3.15.0
Reporter: wei cai
The app pom introduces A:1.0-RELEASE, and this artifact A has transitive
dependency B{*}:0.12.0-SNAPSHOT.{*} In app pom, we manage B as version
0.13.0-RELEASE.
When the *pmd:3.15.0* and above is being executed, it will resolve
dependencies, and somehow the B{*}:0.12.0-SNAPSHOT{*} is resolved as a
dependency instead of B{*}:0.13.0-RELEASE.{*}
This means lots of transitive dependencies with unmanaged version will be
downloaded.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
