Jayesh45-master commented on code in PR #11607:
URL: https://github.com/apache/maven/pull/11607#discussion_r2658037119
##########
pom.xml:
##########
@@ -186,6 +186,12 @@ under the License.
<dependencies>
<!-- Maven Modules -->
<!--bootstrap-start-comment-->
+
+ <dependency>
+ <groupId>org.bouncycastle</groupId>
+ <artifactId>bcprov-jdk18on</artifactId>
+ <version>1.78.1</version>
+ </dependency>
Review Comment:
Thanks for the review and the suggestion.
I have removed the unused bcprov-jdk18on dependency as pointed out, since it
is not required by Maven core itself and should be defined by individual
projects if needed.
After updating the POM and force-pushing the changes to this PR, I verified
that:
Maven no longer declares or resolves any BouncyCastle dependencies
The build completes successfully
No SNAPSHOT artifacts are downloaded
Offline build (mvn -o validate) works as expected
This aligns with Maven’s goal of avoiding unnecessary or unstable
dependencies in core.
Please let me know if any further adjustments or validation are required.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
