slachiewicz opened a new pull request, #428: URL: https://github.com/apache/maven-filtering/pull/428
maven-filtering imports `org.sonatype.plexus.build.incremental.BuildContext`, but declared `org.codehaus.plexus:plexus-build-api` 1.2.0, which contains only the new `org.codehaus.plexus.build` API and pulls the Sonatype artifact in transitively. The build compiled only through that transitive edge. It now declares `org.sonatype.plexus:plexus-build-api` 0.0.7 directly, like maven-dependency-plugin and maven-plugin-plugin, until [eclipse-m2e/m2e-core#944](https://github.com/eclipse-m2e/m2e-core/issues/944) adds m2e support for the new coordinates. Nothing in this library uses the `org.codehaus.plexus.build` API; maven-assembly-plugin, which does, declares it itself. Verified: `mvn verify` on Maven 3.9.16 and 4.0.0-rc-7 → 94 tests pass; `dependency:analyze-only` no longer reports the two plexus-build-api findings. --- To make clear that you license your contribution under the [Apache License Version 2.0, January 2004](https://www.apache.org/licenses/LICENSE-2.0) check one of the following: - [x] I hereby declare this contribution to be licensed under the [Apache License Version 2.0, January 2004](https://www.apache.org/licenses/LICENSE-2.0) - [x] I hereby declare that I have filed an [Apache Individual Contributor License Agreement](https://www.apache.org/licenses/icla.pdf). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
