Frank Jakop created MRELEASE-870:
------------------------------------
Summary: Snapshot dependency check does not consider transitive
dependencies
Key: MRELEASE-870
URL: https://jira.codehaus.org/browse/MRELEASE-870
Project: Maven Release Plugin
Issue Type: Bug
Components: prepare
Affects Versions: 2.4.2
Environment: Maven 3.0.3
Java 1.6
Reporter: Frank Jakop
Priority: Blocker
Attachments: maven-release-bug.zip
With maven-release-plugin 2.4.2 we are encountering an issue which has a very
big impact on our production deployment infrastructure.
In our latest released artifact's poms we were surprised to see snapshot
versions, which is by default prohibited by maven release plugin.
We tracked the issue down and noticed a difference between "normal" maven
dependency resolution (e.g. dependency:tree) and the one produced by
maven-release-plugin.
I attached a sample project suite which very easy reproduces the problem.
Please look into the README in the maven-release-bug-parent project. The steps
to reproduce include the local installation of some artifacts, partially in
different versions.
The outcome of the project is a clearly error-free run release:prepare but with
the following dependency tree:
D:\maven-release-bug-project>mvn dependency:tree
[INFO] Scanning for projects...
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] Building maven-release-bug-project 0.0.1-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-dependency-plugin:2.1:tree (default-cli) @
maven-release-bug-project ---
[INFO] de.tolina.test:maven-release-bug-project:jar:0.0.1-SNAPSHOT
[INFO] \- de.tolina.test:maven-release-bug-dependency2:jar:0.0.1:compile
[INFO] \-
de.tolina.test:maven-release-bug-dependency:jar:*0.0.2-SNAPSHOT*:compile
(version managed from 0.0.1)
--
This message was sent by Atlassian JIRA
(v6.1.6#6162)