[JIRA] (JENKINS-53957) hpi bundles transitive dependencies of test scope dependencies

[plros...@gmail.com (JIRA)]

Title: Message Title

Pavel Roskin commented on JENKINS-53957   Re: hpi bundles transitive dependencies of test scope dependencies Bitbucket Server Notifier Plugin version 1.9 is also affected. It packages sshd-core-0.14.0.jar unnecessarily. "mvn dependency:tree" shows:   [INFO] +- org.jenkins-ci.main:jenkins-war:executable-war:2.60.3:test [INFO] | +- org.jenkins-ci.modules:instance-identity:jar:2.1:test [INFO] | | \- io.github.stephenc.crypto:self-signed-cert-generator:jar:1.0.0:test [INFO] | +- org.jenkins-ci.modules:ssh-cli-auth:jar:1.4:test [INFO] | +- org.jenkins-ci.modules:slave-installer:jar:1.5:test [INFO] | +- org.jenkins-ci.modules:windows-slave-installer:jar:1.9:test [INFO] | +- org.jenkins-ci.modules:launchd-slave-installer:jar:1.2:test [INFO] | +- org.jenkins-ci.modules:upstart-slave-installer:jar:1.1:test [INFO] | +- org.jenkins-ci.modules:systemd-slave-installer:jar:1.1:test [INFO] | +- org.jenkins-ci.modules:sshd:jar:1.11:test [INFO] | | \- org.apache.sshd:sshd-core:jar:0.14.0:compile That goes against the rule that the dependencies of test dependencies are either test dependencies or not dependencies at all. A way to remove that dependency from the hpi is to declare it explicitly as a test dependency. However, that would be a hack, not a solution. maven-hpi-plugin should either follow the dependency rule or warn loudly (and fail optionally) if it cannot follow that rule for whatever reason, so that the issue could be mitigated right away. Please reopen the ticket, I don't see any reason to close it.   Add Comment   This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.194562.1539080849000.4439.1564541700217%40Atlassian.JIRA.