[ https://issues.apache.org/jira/browse/MENFORCER-502?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17835827#comment-17835827 ]
Konrad Windszus edited comment on MENFORCER-502 at 4/10/24 5:09 PM: -------------------------------------------------------------------- Actually it works fine. I was wrongly assuming this does not work because the affected dependency uses maven-shade-plugin which creates a dependency-reduced POM (leaving no transitive compile time dependencies in place). was (Author: kwin): Actually it works fine. I was wrongly assuming this does not work because the affected dependency uses maven-shade-plugin which creates a dependency-reduced POM (leaving no compile time dependencies in place). > ResolverUtil.resolveTransitiveDependencies() does not consider transitive > dependencies > --------------------------------------------------------------------------------------- > > Key: MENFORCER-502 > URL: https://issues.apache.org/jira/browse/MENFORCER-502 > Project: Maven Enforcer Plugin > Issue Type: Bug > Components: bannedDependencies > Affects Versions: 3.4.1 > Reporter: Konrad Windszus > Priority: Major > > Despite its name > https://github.com/apache/maven-enforcer/blob/80ee78e5f7473dafc8ca8e68d8f2af7895290303/enforcer-rules/src/main/java/org/apache/maven/enforcer/rules/dependency/ResolverUtil.java#L113 > does no longer resolve transitive dependencies. > Only the direct ones are resolved in the returned {{DependencyNode}}. I.e. > the rootNode has direct children, but the children itself never have any > children (despite the fact that there are transitive dependencies on that > level). -- This message was sent by Atlassian Jira (v8.20.10#820010)