[
https://issues.apache.org/jira/browse/MPMD-384?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
wei cai updated MPMD-384:
-------------------------
Summary: maven-pmd-plugin is dowloading transitive dependencies of
unmanaged version (was: maven-pmd-plugin is dowloading )
> maven-pmd-plugin is dowloading transitive dependencies of unmanaged version
> ---------------------------------------------------------------------------
>
> Key: MPMD-384
> URL: https://issues.apache.org/jira/browse/MPMD-384
> Project: Maven PMD Plugin
> Issue Type: Bug
> Components: PMD
> Affects Versions: 3.15.0, 3.16.0, 3.17.0, 3.18.0, 3.19.0, 3.20.0, 3.21.0
> Reporter: wei cai
> Priority: Major
>
> The app pom introduces A:1.0-RELEASE, and this artifact A has transitive
> dependency B{*}:0.12.0-SNAPSHOT.{*} In app pom, we manage B as version
> 0.13.0-RELEASE.
> When the *pmd:3.15.0* and above is being executed, it will resolve
> dependencies, and somehow the B{*}:0.12.0-SNAPSHOT{*} is resolved as a
> dependency instead of B{*}:0.13.0-RELEASE.{*}
> This means lots of transitive dependencies with unmanaged version will be
> downloaded.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)