[jira] [Commented] (MNG-6650) BOM + profile: Transitive dependencies not resolved

["Jörg Hohwiller (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/MNG-6650?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16876010#comment-16876010 ] 

Jörg Hohwiller commented on MNG-6650:
-------------------------------------

It seems I have to correct that it sill is a regression bug:

When building this project:

[https://github.com/devonfw-forge/keywi]

with JDK8 and maven 3.6.0 it is working.

However, with OpenJDK11 and maven 3.6.0 I am getting this error:
{code:java}
[ERROR] /projects/devon/workspaces/main/keywi/api/src/main/java/com/devonfw/keywi/general/service/api/rest/SecurityRestService.java:[29,3] cannot find symbol
  symbol:   class CsrfToken
  location: interface com.devonfw.keywi.general.service.api.rest.SecurityRestService{code}
So there IMHO seems to be a general error in (transitive) dependency resolution with maven 3.6.0 when running on OpenJDK11. I still have no clue what this has to do with the JDK version but in this case no jdk profile trigger is involved regarding the missing spring-security transitive dependency.

> BOM + profile: Transitive dependencies not resolved
> ---------------------------------------------------
>
>                 Key: MNG-6650
>                 URL: https://issues.apache.org/jira/browse/MNG-6650
>             Project: Maven
>          Issue Type: Bug
>          Components: Dependencies
>    Affects Versions: 3.6.0
>         Environment: Works with Java 1.8
> Fails with Java 11
> Reproduced on Mac and Windows as well as in travis-ci (linux).
>            Reporter: Jörg Hohwiller
>            Priority: Major
>         Attachments: MNG-6650.tgz
>
>
> I have found a strange situation where maven seems to be unable to resolve transitive dependencies for a particular dependency but only in Java11+
> The failing build can be found here with all the analysis:
> [https://github.com/devonfw/devon4j/pull/82]
> As you can read there with all the details the error is related to a profile with
> <activation>
>    <jdk>[9,)</jdk>
>  </activation>
> That should fire on Java11 and seems to do but as a result all dependencies are eliminated in this case what seems like a strange maven bug.
> The Code to reproduce the issue locally can also be cloned from here:
> [https://github.com/hohwille/devon4j/tree/feature/16-java-11]
> (be sure to checkout this "feature/16-java-11" branch)
> After building you can even reduce and reproduce the error from {{templates/server/target/test-classes/projects/basic/project/basic}}
> Just "cd" there and run "mvn clean install" with Java1.8 and with Java11.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)