[jira] [Created] (MDEP-780) “Non-test scoped test only dependencies found” false-positive in 3.2.0/1.11.2

["Thorsten Glaser (Jira)" <ji...@apache.org>]

Thorsten Glaser created MDEP-780:
------------------------------------

             Summary: “Non-test scoped test only dependencies found” false-positive in 3.2.0/1.11.2
                 Key: MDEP-780
                 URL: https://issues.apache.org/jira/browse/MDEP-780
             Project: Maven Dependency Plugin
          Issue Type: Bug
    Affects Versions: 3.2.0
            Reporter: Thorsten Glaser


After upgrading maven-dependency-plugin 3.1.2 → 3.2.0 I get the following false positives in [a project|https://evolvis.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=tartools/extract-tool.git]:

{{[WARNING] Non-test scoped test only dependencies found:}}
{{[WARNING]    org.springframework:spring-jdbc:jar:4.3.30.RELEASE:compile}}

This isn’t right, and with spring-jdbc scoped to test, the project doesn’t even compile.

This also applies if I dowgrade the Maven dependency analyser to 1.11.2 [as in this commit|https://evolvis.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=tartools/extract-tool.git;a=commitdiff;h=d2b923304b6d2dfd2f52186d17843c492e4f5957]; I cannot test with 1.11.1 (same version maven-dependency-plugin 3.1.2 used) because that’s incompatible with 3.2.0 so I cannot say for sure which of the two introduced this bug. If this is a bug in the shared component, please reassign appropriately.

I’m setting the severity as it is because this effectively prevents me from upgrading past 3.1.2 in my projects.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)