Mark Nolan created MNG-6965:
-------------------------------

             Summary: archetype-packaging.jar:3.1.2 requires 
org.codehaus.plexus:plexus-utils:jar:1.1
                 Key: MNG-6965
                 URL: https://issues.apache.org/jira/browse/MNG-6965
             Project: Maven
          Issue Type: Bug
          Components: Plugins and Lifecycle
    Affects Versions: 3.6.3, 3.6.0
         Environment: Win7, Win10, at least one variant of Linux (not sure 
which)
            Reporter: Mark Nolan
         Attachments: pom.xml

A simple minimal archetype pom following the manual pages downloads 
plexus-utils 1.1, even though it is not (apparently) declared anywhere. This 
version is banned at my organization, meaning such a pom always fails.

{{<project xmlns="http://maven.apache.org/POM/4.0.0"}}
 {{xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"}}
 {{xsi:schemaLocation="http://maven.apache.org/POM/4.0.0}}
 {{[http://maven.apache.org/xsd/maven-4.0.0.xsd]";>}}
 {{<modelVersion>4.0.0</modelVersion>}}
 {{<groupId>test</groupId>}}
 {{<artifactId>test</artifactId>}}
 {{<version>0.0.1-SNAPSHOT</version>}}
 {{<packaging>maven-archetype</packaging>}}

{{<name>test</name>}}

{{<build>}}
 {{<extensions> }}
 {{<extension>}}
 {{<groupId>org.apache.maven.archetype</groupId>}}
 {{<artifactId>archetype-packaging</artifactId>}}
 {{<version>3.1.2</version>}}
 {{</extension>}}
 {{</extensions>}}

{{<pluginManagement>}}
 {{<plugins>}}
 {{<plugin>}}
 {{<groupId>org.apache.maven.plugins</groupId>}}
 {{<artifactId>maven-archetype-plugin</artifactId>}}
 {{<version>3.1.2</version>}}
 {{</plugin>}}
 {{</plugins>}}
 {{</pluginManagement>}}
 {{</build>}}
 {{</project>}}

 

Running any goal, such as mvn -X clean, produces the following before the goal 
is executed:

{{[DEBUG] Dependency collection stats: {ConflictMarker.analyzeTime=952800, 
ConflictMarker.markTime=586900, ConflictMarker.nodeCount=1, 
ConflictIdSorter.graphTime=549200, ConflictIdSorter.topsortTime=586700, 
ConflictIdSorter.conflictIdCount=1, ConflictIdSorter.conflictIdCycleCount=0, 
ConflictResolver.totalTime=3313100, ConflictResolver.conflictItemCount=1, 
DefaultDependencyCollector.collectTime=66890900, 
DefaultDependencyCollector.transformTime=8523500}}}
 {{[DEBUG] org.apache.maven.archetype:archetype-packaging:jar:3.1.2:}}
 {{[DEBUG] org.codehaus.plexus:plexus-utils:jar:1.1:runtime}}

 

As far as I can see, there is no declared dependency on plexus-utils:1.1.

 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to