[jira] [Created] (MDEP-802) analyze-only

["Marius Grama (Jira)" <ji...@apache.org>]

Marius Grama created MDEP-802:
---------------------------------

             Summary: analyze-only 
                 Key: MDEP-802
                 URL: https://issues.apache.org/jira/browse/MDEP-802
             Project: Maven Dependency Plugin
          Issue Type: Bug
    Affects Versions: 3.3.0
            Reporter: Marius Grama


The maven-dependency-plugin fails to recognize `aws-java-sdk-core` as a compile-time dependency, because we only explicitly use a class from `aws-java-sdk-glue`, which in turn extends from a class from `aws-java-sdk-core`.

 

In order to cope with this problem, we set `aws-java-sdk-core` as an ignored dependency:

 

{code}

                        <artifactId>maven-dependency-plugin</artifactId>
                        <configuration>
                            <ignoredNonTestScopedDependencies>
                                <!-- dependency plugin fails to recognize aws-java-sdk-core as a compile-time dependency, because
                                     we only explicitly use a class from aws-java-sdk-glue, which in turn extends from a class from
                                     aws-java-sdk-core -->
                                <ignoredDependency>com.amazonaws:aws-java-sdk-core</ignoredDependency>
                            </ignoredNonTestScopedDependencies>
                        </configuration>
                    </plugin>

{code}

 

Here is the commit showcasing the issue:

 

[https://github.com/trinodb/trino/pull/11550/commits/22f227bb5721b1ea4783c6a58111ef5007f75316]

 

Ideally we'd like not having to deal with this false positive problem.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)