[ 
https://issues.apache.org/jira/browse/MNG-7826?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17737304#comment-17737304
 ] 

Slawomir Jaranowski commented on MNG-7826:
------------------------------------------

Tested with m-dependency-p

In Maven execution we have:
{noformat}
[DEBUG] org.apache.maven.plugins:maven-dependency-plugin:jar:3.6.0
[DEBUG]    org.apache.maven.doxia:doxia-sink-api:jar:1.11.1:compile
[DEBUG]       org.apache.maven.doxia:doxia-logging-api:jar:1.11.1:compile
[DEBUG]    org.apache.maven.reporting:maven-reporting-api:jar:3.1.1:compile
[DEBUG]    org.apache.maven.reporting:maven-reporting-impl:jar:3.2.0:compile
[DEBUG]       org.apache.maven:maven-core:jar:3.1.0:compile
[DEBUG]          org.apache.maven:maven-settings:jar:3.1.0:compile
[DEBUG]          org.apache.maven:maven-settings-builder:jar:3.1.0:compile
[DEBUG]          org.apache.maven:maven-repository-metadata:jar:3.1.0:compile
[DEBUG]          org.apache.maven:maven-model-builder:jar:3.1.0:compile
[DEBUG]          org.apache.maven:maven-aether-provider:jar:3.1.0:compile
[DEBUG]             org.eclipse.aether:aether-spi:jar:0.9.0.M2:compile
[DEBUG]          org.eclipse.aether:aether-impl:jar:0.9.0.M2:compile
[DEBUG]          org.eclipse.aether:aether-api:jar:0.9.0.M2:compile
[DEBUG]          org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.0.M1:compile 
(version managed from default)
[DEBUG]             javax.enterprise:cdi-api:jar:1.0:compile
[DEBUG]                javax.annotation:jsr250-api:jar:1.0:compile
[DEBUG]             
org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.0.M1:compile (version managed 
from default)
[DEBUG]          org.codehaus.plexus:plexus-interpolation:jar:1.16:compile
[DEBUG]          org.codehaus.plexus:plexus-classworlds:jar:2.4.2:compile
[DEBUG]          org.sonatype.plexus:plexus-sec-dispatcher:jar:1.3:compile
[DEBUG]             org.sonatype.plexus:plexus-cipher:jar:1.4:compile
[DEBUG]       org.apache.maven:maven-artifact:jar:3.1.0:compile
[DEBUG]       org.apache.maven:maven-plugin-api:jar:3.1.0:compile
[DEBUG]       org.apache.maven.doxia:doxia-decoration-model:jar:1.11.1:compile
[DEBUG]       org.apache.maven.doxia:doxia-core:jar:1.11.1:compile
[DEBUG]          org.apache.commons:commons-text:jar:1.10.0:compile (version 
managed from default)
[DEBUG]          org.apache.httpcomponents:httpclient:jar:4.5.13:compile
[DEBUG]             commons-logging:commons-logging:jar:1.2:compile
[DEBUG]             commons-codec:commons-codec:jar:1.11:compile
[DEBUG]          org.apache.httpcomponents:httpcore:jar:4.4.14:compile
[DEBUG]       org.apache.maven.doxia:doxia-integration-tools:jar:1.11.1:compile
[DEBUG]       org.apache.maven.doxia:doxia-site-renderer:jar:1.11.1:compile
[DEBUG]          org.apache.maven.doxia:doxia-skin-model:jar:1.11.1:compile
[DEBUG]          org.apache.maven.doxia:doxia-module-xhtml:jar:1.11.1:compile
[DEBUG]          org.apache.maven.doxia:doxia-module-xhtml5:jar:1.11.1:compile
[DEBUG]          org.codehaus.plexus:plexus-velocity:jar:1.2:compile
[DEBUG]          org.apache.velocity:velocity:jar:1.7:compile
[DEBUG]             commons-lang:commons-lang:jar:2.4:compile
[DEBUG]          org.apache.velocity:velocity-tools:jar:2.0:compile
[DEBUG]             commons-beanutils:commons-beanutils:jar:1.7.0:compile
[DEBUG]             commons-digester:commons-digester:jar:1.8:compile
[DEBUG]             commons-chain:commons-chain:jar:1.1:compile
[DEBUG]             dom4j:dom4j:jar:1.1:compile
[DEBUG]             oro:oro:jar:2.0.8:compile
[DEBUG]          commons-collections:commons-collections:jar:3.2.2:compile
[DEBUG]    commons-io:commons-io:jar:2.11.0:compile
[DEBUG]    org.codehaus.plexus:plexus-archiver:jar:4.7.1:compile
[DEBUG]       javax.inject:javax.inject:jar:1:compile
[DEBUG]       org.apache.commons:commons-compress:jar:1.23.0:compile
[DEBUG]       org.slf4j:slf4j-api:jar:1.7.36:compile
[DEBUG]       org.iq80.snappy:snappy:jar:0.4:compile
[DEBUG]       org.tukaani:xz:jar:1.9:runtime
[DEBUG]       com.github.luben:zstd-jni:jar:1.5.5-2:runtime
[DEBUG]    org.codehaus.plexus:plexus-utils:jar:3.5.1:compile
[DEBUG]    org.codehaus.plexus:plexus-io:jar:3.4.1:compile
[DEBUG]    org.codehaus.plexus:plexus-i18n:jar:1.0-beta-10:compile
[DEBUG]    org.apache.maven.shared:maven-dependency-analyzer:jar:1.13.2:compile
[DEBUG]       org.apache.maven:maven-model:jar:3.2.5:compile
[DEBUG]       org.ow2.asm:asm:jar:9.5:compile
[DEBUG]    org.apache.maven.shared:maven-dependency-tree:jar:3.2.1:compile
[DEBUG]       org.eclipse.aether:aether-util:jar:1.0.0.v20140518:compile
[DEBUG]    
org.apache.maven.shared:maven-common-artifact-filters:jar:3.3.2:compile
[DEBUG]    org.apache.maven.shared:maven-artifact-transfer:jar:0.13.1:compile
[DEBUG]       org.codehaus.plexus:plexus-component-annotations:jar:2.0.0:compile
[DEBUG]    org.apache.maven.shared:maven-shared-utils:jar:3.3.4:compile
[DEBUG]    org.apache.commons:commons-collections4:jar:4.2:compile
[DEBUG]    org.apache.commons:commons-lang3:jar:3.12.0:compile
[DEBUG]    org.sonatype.plexus:plexus-build-api:jar:0.0.7:compile
{noformat}

in project {{dependency:tree}}
{noformat}
[INFO] 
org.apache.maven.plugins:maven-dependency-plugin:maven-plugin:3.6.1-SNAPSHOT
[INFO] +- org.apache.maven:maven-artifact:jar:3.2.5:provided
[INFO] +- org.apache.maven:maven-plugin-api:jar:3.2.5:provided
[INFO] |  \- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.0.M1:provided
[INFO] |     +- javax.enterprise:cdi-api:jar:1.0:provided
[INFO] |     |  \- javax.annotation:jsr250-api:jar:1.0:provided
[INFO] |     \- org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.0.M1:provided
[INFO] +- org.apache.maven:maven-model:jar:3.2.5:provided
[INFO] +- org.apache.maven:maven-core:jar:3.2.5:provided
[INFO] |  +- org.apache.maven:maven-settings-builder:jar:3.2.5:provided
[INFO] |  +- org.apache.maven:maven-model-builder:jar:3.2.5:provided
[INFO] |  +- org.eclipse.aether:aether-impl:jar:1.0.0.v20140518:provided
[INFO] |  +- org.sonatype.sisu:sisu-guice:jar:no_aop:3.2.3:provided
[INFO] |  |  +- aopalliance:aopalliance:jar:1.0:provided
[INFO] |  |  \- com.google.guava:guava:jar:16.0.1:provided
[INFO] |  +- org.codehaus.plexus:plexus-interpolation:jar:1.21:compile
[INFO] |  +- org.codehaus.plexus:plexus-classworlds:jar:2.5.2:provided
[INFO] |  +- org.codehaus.plexus:plexus-component-annotations:jar:1.5.5:compile
[INFO] |  \- org.sonatype.plexus:plexus-sec-dispatcher:jar:1.3:provided
[INFO] |     \- org.sonatype.plexus:plexus-cipher:jar:1.4:provided
[INFO] +- org.apache.maven:maven-repository-metadata:jar:3.2.5:provided
[INFO] +- org.apache.maven:maven-settings:jar:3.2.5:provided
[INFO] +- org.apache.maven:maven-aether-provider:jar:3.2.5:provided
[INFO] |  \- org.eclipse.aether:aether-spi:jar:1.0.0.v20140518:provided
[INFO] +- org.apache.maven.doxia:doxia-sink-api:jar:1.11.1:compile
[INFO] |  \- org.apache.maven.doxia:doxia-logging-api:jar:1.11.1:compile
[INFO] +- org.apache.maven.reporting:maven-reporting-api:jar:3.1.1:compile
[INFO] +- org.apache.maven.reporting:maven-reporting-impl:jar:3.2.0:compile
[INFO] |  +- org.apache.maven.doxia:doxia-decoration-model:jar:1.11.1:compile
[INFO] |  +- org.apache.maven.doxia:doxia-core:jar:1.11.1:compile
[INFO] |  |  +- org.apache.commons:commons-text:jar:1.10.0:compile
[INFO] |  |  \- org.apache.httpcomponents:httpcore:jar:4.4.14:compile
[INFO] |  +- org.apache.maven.doxia:doxia-integration-tools:jar:1.11.1:compile
[INFO] |  \- org.apache.maven.doxia:doxia-site-renderer:jar:1.11.1:compile
[INFO] |     +- org.apache.maven.doxia:doxia-skin-model:jar:1.11.1:compile
[INFO] |     +- org.apache.maven.doxia:doxia-module-xhtml:jar:1.11.1:compile
[INFO] |     +- org.apache.maven.doxia:doxia-module-xhtml5:jar:1.11.1:compile
[INFO] |     +- org.codehaus.plexus:plexus-velocity:jar:1.2:compile
[INFO] |     +- org.apache.velocity:velocity:jar:1.7:compile
[INFO] |     |  \- commons-lang:commons-lang:jar:2.4:compile
[INFO] |     +- org.apache.velocity:velocity-tools:jar:2.0:compile
[INFO] |     |  +- commons-beanutils:commons-beanutils:jar:1.7.0:compile
[INFO] |     |  +- commons-digester:commons-digester:jar:1.8:compile
[INFO] |     |  +- commons-chain:commons-chain:jar:1.1:compile
[INFO] |     |  +- commons-logging:commons-logging:jar:1.1:compile
[INFO] |     |  +- dom4j:dom4j:jar:1.1:compile
[INFO] |     |  \- oro:oro:jar:2.0.8:compile
[INFO] |     \- commons-collections:commons-collections:jar:3.2.2:compile
[INFO] +- commons-io:commons-io:jar:2.13.0:test
[INFO] +- org.codehaus.plexus:plexus-archiver:jar:4.7.1:compile
[INFO] |  +- javax.inject:javax.inject:jar:1:compile
[INFO] |  +- org.apache.commons:commons-compress:jar:1.23.0:compile
[INFO] |  +- org.slf4j:slf4j-api:jar:1.7.36:compile
[INFO] |  +- org.iq80.snappy:snappy:jar:0.4:compile
[INFO] |  +- org.tukaani:xz:jar:1.9:runtime
[INFO] |  \- com.github.luben:zstd-jni:jar:1.5.5-2:runtime
[INFO] +- org.codehaus.plexus:plexus-utils:jar:3.5.1:compile
[INFO] +- org.codehaus.plexus:plexus-io:jar:3.4.1:compile
[INFO] +- org.codehaus.plexus:plexus-i18n:jar:1.0-beta-10:compile
[INFO] +- org.apache.maven.shared:maven-dependency-analyzer:jar:1.13.2:compile
[INFO] |  \- org.ow2.asm:asm:jar:9.5:compile
[INFO] +- org.apache.maven.shared:maven-dependency-tree:jar:3.2.1:compile
[INFO] +- 
org.apache.maven.shared:maven-common-artifact-filters:jar:3.3.2:compile
[INFO] +- org.apache.maven.shared:maven-artifact-transfer:jar:0.13.1:compile
[INFO] +- org.apache.maven.shared:maven-shared-utils:jar:3.4.2:compile
[INFO] +- org.apache.commons:commons-collections4:jar:4.4:compile
[INFO] +- org.apache.commons:commons-lang3:jar:3.12.0:compile
[INFO] +- 
org.apache.maven.plugin-tools:maven-plugin-annotations:jar:3.7.0:provided
[INFO] +- org.eclipse.aether:aether-api:jar:1.0.0.v20140518:provided
[INFO] +- org.eclipse.aether:aether-util:jar:1.0.0.v20140518:provided
[INFO] +- org.sonatype.plexus:plexus-build-api:jar:0.0.7:compile
[INFO] +- org.eclipse.aether:aether-connector-basic:jar:1.0.0.v20140518:test
[INFO] +- org.eclipse.aether:aether-transport-file:jar:1.0.0.v20140518:test
[INFO] +- org.eclipse.aether:aether-transport-http:jar:1.0.0.v20140518:test
[INFO] |  +- org.apache.httpcomponents:httpclient:jar:4.2.6:compile
[INFO] |  |  \- commons-codec:commons-codec:jar:1.6:compile
[INFO] |  \- org.slf4j:jcl-over-slf4j:jar:1.6.2:test
[INFO] +- junit:junit:jar:4.13.2:test
[INFO] |  \- org.hamcrest:hamcrest-core:jar:1.3:test
[INFO] +- 
org.apache.maven.plugin-testing:maven-plugin-testing-harness:jar:3.3.0:test
[INFO] +- org.mockito:mockito-core:jar:4.11.0:test
[INFO] |  +- net.bytebuddy:byte-buddy:jar:1.12.19:test
[INFO] |  +- net.bytebuddy:byte-buddy-agent:jar:1.12.19:test
[INFO] |  \- org.objenesis:objenesis:jar:3.3:test
[INFO] +- org.apache.maven:maven-compat:jar:3.2.5:test
[INFO] |  \- org.apache.maven.wagon:wagon-provider-api:jar:2.8:test
[INFO] +- org.eclipse.jetty:jetty-server:jar:9.4.51.v20230217:test
[INFO] |  +- javax.servlet:javax.servlet-api:jar:3.1.0:test
[INFO] |  +- org.eclipse.jetty:jetty-http:jar:9.4.51.v20230217:test
[INFO] |  \- org.eclipse.jetty:jetty-io:jar:9.4.51.v20230217:test
[INFO] +- org.eclipse.jetty:jetty-util:jar:9.4.51.v20230217:test
[INFO] +- org.eclipse.jetty:jetty-security:jar:9.4.51.v20230217:test
[INFO] \- org.slf4j:slf4j-simple:jar:1.7.36:test
{noformat}

Validation result:
{noformat}
[WARNING]  * org.apache.maven.plugins:maven-dependency-plugin:3.6.0
[WARNING]   Plugin EXTERNAL issue(s):
[WARNING]    * Transitive dependencies mixes multiple Maven versions: [3.2.5, 
3.1.0]
[WARNING]    * Transitive dependencies of Maven artifacts are not in `provided` 
scope. If the plugin already declares them in `provided` scope, update the 
maven-plugin-plugin to latest version. Artifacts found with wrong scope: 
[org.apache.maven:maven-model:3.2.5, org.apache.maven:maven-settings:3.1.0, 
org.apache.maven:maven-artifact:3.1.0, 
org.apache.maven:maven-settings-builder:3.1.0, 
org.apache.maven:maven-model-builder:3.1.0, org.apache.maven:maven-core:3.1.0, 
org.apache.maven:maven-repository-metadata:3.1.0, 
org.apache.maven:maven-aether-provider:3.1.0, 
org.apache.maven:maven-plugin-api:3.1.0]
{noformat}

so only one way to resolve such issue will be use {{managedDependencies}} in 
plugin, because we lost information about {{provided}} scope ...


> Maven Plugin Validation: Jacoco plugin is not reported as problem
> -----------------------------------------------------------------
>
>                 Key: MNG-7826
>                 URL: https://issues.apache.org/jira/browse/MNG-7826
>             Project: Maven
>          Issue Type: Bug
>          Components: Plugins and Lifecycle
>    Affects Versions: 3.9.3
>            Reporter: Tamas Cservenak
>            Priority: Major
>
> Maven 3.9.2 regarding jacoco maven plugin 0.8.10 reports this:
> {noformat}
> [WARNING]  * org.jacoco:jacoco-maven-plugin:0.8.10
> [WARNING]   Declared at location(s):
> [WARNING]    * com.soebes.smpp:smpp:6.0.4-SNAPSHOT (pom.xml) @ line 484
> [WARNING]   Used in module(s):
> [WARNING]    * com.soebes.smpp:smpp:6.0.4-SNAPSHOT (pom.xml)
> [WARNING]    * com.soebes.smpp:smpp-plugins:6.0.4-SNAPSHOT 
> (smpp-plugins/pom.xml)
> [WARNING]   Plugin issue(s):
> [WARNING]    * Plugin is a Maven 2.x plugin, which will be not supported in 
> Maven 4.x
> [WARNING]    * Plugin mixes multiple Maven versions: [3.0, 2.0.2]
> [WARNING]    * Plugin should declare these Maven artifacts in `provided` 
> scope: [org.apache.maven:maven-repository-metadata:3.0, 
> org.apache.maven:maven-artifact:3.0]
> [WARNING]    * Plugin depends on plexus-container-default, which is EOL
> {noformat}
> and all these are true: culprit is ancient shared file-management, that the 
> plugin depends in compile scope, while it brings in
> * p-c-d
> * maven-plugin-api, maven-artifact-manager etc from mvn 2.0.2
> * etc
> Maven 3.9.3 does not report anything related to this plugin, while if 3.9.3 
> runs a build using it, it clearly shows this in debug (presence of Maven 2 
> artifacts and p-c-d):
> {noformat}
> [INFO] --- jacoco:0.8.10:prepare-agent (default) @ smpp ---
> [DEBUG] Using mirror px-oss (http://urnebes.local:8881/content/groups/oss/) 
> for apache.snapshots (http://people.apache.org/repo/m2-snapshot-repository).
> [DEBUG] Using mirror px-oss (http://urnebes.local:8881/content/groups/oss/) 
> for snapshots (http://snapshots.maven.codehaus.org/maven2).
> [DEBUG] Using mirror px-oss (http://urnebes.local:8881/content/groups/oss/) 
> for apache.snapshots (http://cvs.apache.org/maven-snapshot-repository).
> [DEBUG] Using mirror px-oss (http://urnebes.local:8881/content/groups/oss/) 
> for central (http://repo1.maven.org/maven2).
> [DEBUG] Using mirror px-oss (http://urnebes.local:8881/content/groups/oss/) 
> for codehaus.snapshots (http://snapshots.repository.codehaus.org).
> [DEBUG] Using mirror px-oss (http://urnebes.local:8881/content/groups/oss/) 
> for apache.snapshots (http://people.apache.org/maven-snapshot-repository).
> [DEBUG] Using mirror px-oss (http://urnebes.local:8881/content/groups/oss/) 
> for apache.snapshots (http://repository.apache.org/snapshots).
> [DEBUG] Dependency collection stats {ConflictMarker.analyzeTime=88693, 
> ConflictMarker.markTime=60265, ConflictMarker.nodeCount=38, 
> ConflictIdSorter.graphTime=53367, ConflictIdSorter.topsortTime=15824, 
> ConflictIdSorter.conflictIdCount=21, ConflictIdSorter.conflictIdCycleCount=0, 
> ConflictResolver.totalTime=753636, ConflictResolver.conflictItemCount=34, 
> DfDependencyCollector.collectTime=66088125, 
> DfDependencyCollector.transformTime=990804}
> [DEBUG] org.jacoco:jacoco-maven-plugin:jar:0.8.10
> [DEBUG]    org.codehaus.plexus:plexus-utils:jar:3.0.24:compile
> [DEBUG]    org.apache.maven.shared:file-management:jar:1.2.1:compile
> [DEBUG]       org.apache.maven:maven-plugin-api:jar:2.0.6:compile
> [DEBUG]       org.apache.maven.shared:maven-shared-io:jar:1.1:compile
> [DEBUG]          org.apache.maven:maven-artifact:jar:2.0.2:compile
> [DEBUG]          org.apache.maven:maven-artifact-manager:jar:2.0.2:compile
> [DEBUG]             
> org.apache.maven:maven-repository-metadata:jar:2.0.2:compile
> [DEBUG]          
> org.apache.maven.wagon:wagon-provider-api:jar:1.0-alpha-6:compile
> [DEBUG]       
> org.codehaus.plexus:plexus-container-default:jar:1.0-alpha-9:compile
> [DEBUG]          junit:junit:jar:4.13.1:compile (version managed from default)
> [DEBUG]             org.hamcrest:hamcrest-core:jar:1.3:compile
> [DEBUG]          classworlds:classworlds:jar:1.1-alpha-2:compile
> [DEBUG]    org.apache.maven.reporting:maven-reporting-api:jar:3.0:compile
> [DEBUG]       org.apache.maven.doxia:doxia-sink-api:jar:1.0:compile
> [DEBUG]    org.jacoco:org.jacoco.agent:jar:runtime:0.8.10:compile
> [DEBUG]    org.jacoco:org.jacoco.core:jar:0.8.10:compile
> [DEBUG]       org.ow2.asm:asm:jar:9.5:compile (version managed from default)
> [DEBUG]       org.ow2.asm:asm-commons:jar:9.5:compile (version managed from 
> default)
> [DEBUG]       org.ow2.asm:asm-tree:jar:9.5:compile (version managed from 
> default)
> [DEBUG]    org.jacoco:org.jacoco.report:jar:0.8.10:compile
> [DEBUG] Created new class realm plugin>org.jacoco:jacoco-maven-plugin:0.8.10
> {noformat}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to