arturobernalg opened a new pull request, #899: URL: https://github.com/apache/maven-shade-plugin/pull/899
`createDependencyReducedPom()` built the dependency list to keep from `project.getDependencies()`, which is the effective, post-inheritance list. A module that declares no dependencies of its own and only inherits them from its parent ended up with those inherited dependencies written into its own `dependency-reduced-pom.xml`. The reduced POM keeps the same `<parent>` reference, so the dependency still applies without being re-declared; the redundant entry was harmless under Maven 3 but is rejected as a duplicate dependency since Maven 4.0.0-rc-3. The fix filters the dependency list down to what the project's own model actually declares before building the reduced POM. Adds an IT (`pom-packaging-multimodule`) covering a child module with no dependencies of its own, based on the reproducer from the closed #740. Closes #739 --- To make clear that you license your contribution under the [Apache License Version 2.0, January 2004](https://www.apache.org/licenses/LICENSE-2.0) check one of the following: - [x] I hereby declare this contribution to be licensed under the [Apache License Version 2.0, January 2004](https://www.apache.org/licenses/LICENSE-2.0) - [x] I hereby declare that I have filed an [Apache Individual Contributor License Agreement](https://www.apache.org/licenses/icla.pdf). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
