[ https://issues.apache.org/jira/browse/MDEP-753?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17491719#comment-17491719 ]
Henning Schmiedehausen commented on MDEP-753: --------------------------------------------- The current 3.3.0-SNAPSHOT has some serious regressions/problem. It is not fit to be released. Here is a very obvious one (and easy to reproduce): {code} % git clone g...@github.com:jdbi/jdbi.git % cd jdbi % git checkout -b test v3.27.1 % mvn -DskipTests clean install -pl :jdbi3-spring5 {code} This builds fine. It uses the 3.1.2 dependency plugin; the last one that actually works. with the current 3.3.0-SNAPSHOT (and the 1.12.0 dependency analyzer library): {code} % mvn -DskipTests clean install -pl :jdbi3-spring5 -Ddep.plugin.dependency.version=3.3.0-SNAPSHOT -Ddep.dependency-analyzer.version=1.12.0 [...] [WARNING] Non-test scoped test only dependencies found: [WARNING] org.springframework:spring-core:jar:5.3.12:compile {code} Clearly, there are spring-core dependencies all over this project. Putting this dependency into test scope fails the build with compile errors. I feel all of the post-3.1.2 work (and post 1.11.1 dependency analyzer) needs to be revisited. There are a number of very serious regressions that have not been addressed for a very long time. > Non-test dependency reported as Non-test scoped test only dependency > -------------------------------------------------------------------- > > Key: MDEP-753 > URL: https://issues.apache.org/jira/browse/MDEP-753 > Project: Maven Dependency Plugin > Issue Type: Bug > Components: analyze > Affects Versions: 3.2.0 > Reporter: Elliotte Rusty Harold > Assignee: Elliotte Rusty Harold > Priority: Critical > Fix For: 3.3.0 > > Attachments: chas.zip, tj.zip > > > Saw this when updating the google-http-java-client from 3.1.2 to 3.2.0 of the > plugin. I'm not immediately sure whether this is a regression: > [INFO] --- maven-dependency-plugin:3.2.0:analyze (default-cli) @ > google-http-client --- > Warning: Non-test scoped test only dependencies found: > Warning: com.google.guava:guava:jar:30.1.1-android:compile > Warning: io.opencensus:opencensus-api:jar:0.28.0:compile > Changing Guava to scope test breaks the build, which is expected based on the > code. The warning seems incorrect. > https://github.com/googleapis/google-http-java-client/pull/1396 > https://github.com/googleapis/google-http-java-client/pull/1396/checks?check_run_id=2809438131 -- This message was sent by Atlassian Jira (v8.20.1#820001)