[
https://issues.apache.org/jira/browse/MENFORCER-502?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17835827#comment-17835827
]
Konrad Windszus edited comment on MENFORCER-502 at 4/10/24 5:09 PM:
--------------------------------------------------------------------
Actually it works fine. I was wrongly assuming this does not work because the
affected dependency uses maven-shade-plugin which creates a dependency-reduced
POM (leaving no transitive compile time dependencies in place).
was (Author: kwin):
Actually it works fine. I was wrongly assuming this does not work because the
affected dependency uses maven-shade-plugin which creates a dependency-reduced
POM (leaving no compile time dependencies in place).
> ResolverUtil.resolveTransitiveDependencies() does not consider transitive
> dependencies
> ---------------------------------------------------------------------------------------
>
> Key: MENFORCER-502
> URL: https://issues.apache.org/jira/browse/MENFORCER-502
> Project: Maven Enforcer Plugin
> Issue Type: Bug
> Components: bannedDependencies
> Affects Versions: 3.4.1
> Reporter: Konrad Windszus
> Priority: Major
>
> Despite its name
> https://github.com/apache/maven-enforcer/blob/80ee78e5f7473dafc8ca8e68d8f2af7895290303/enforcer-rules/src/main/java/org/apache/maven/enforcer/rules/dependency/ResolverUtil.java#L113
> does no longer resolve transitive dependencies.
> Only the direct ones are resolved in the returned {{DependencyNode}}. I.e.
> the rootNode has direct children, but the children itself never have any
> children (despite the fact that there are transitive dependencies on that
> level).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
