[jira] [Closed] (MNG-5826) Resolving of a transitive dependency with a range of versions includes snapshot version

["Elliotte Rusty Harold (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/MNG-5826?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Elliotte Rusty Harold closed MNG-5826.
--------------------------------------

> Resolving of a transitive dependency with a range of versions includes snapshot version
> ---------------------------------------------------------------------------------------
>
>                 Key: MNG-5826
>                 URL: https://issues.apache.org/jira/browse/MNG-5826
>             Project: Maven
>          Issue Type: Bug
>          Components: Artifacts and Repositories, Dependencies
>    Affects Versions: 3.0.5, 3.3.1, 3.3.3
>            Reporter: Guy Marom
>            Priority: Major
>         Attachments: debug-log.txt, pom.xml
>
>
> I have a project with the dependency
> {quote}
> <dependency>
>   <groupId>org.glassfish.web</groupId>
>   <artifactId>javax.servlet.jsp</artifactId>
>   <version>2.3.2</version>
> </dependency>
> {quote}
> Which in turn has the following dependency:
> {quote}
> <dependency>
>   <groupId>org.glassfish</groupId>
>   <artifactId>javax.el</artifactId>
>   <version>[3.0.0,)</version>
> </dependency>
> {quote}
> When building this project maven also downloads snapshot versions of this artifact from "https://maven.java.net/content/repositories/snapshots/org/glassfish/javax.el/maven-metadata.xml"
> However, if in my pom I add an exclusion for javax.el under javax.servlet.jsp, and then add that exact same dependency it does not attempt to download the snapshot version
> ----
> *To reproduce:*
> 1) Create a maven project containing only the attached pom.xml.
> 2) Compile the attached pom as is, see that it downloads the snapshot version
> 3) Unignore the exclusion and the dependency
> 4) Delete <local-repo>/org/glassfish/javax.el (with sub directories) 
> 5) Re-compile to see it does not download the snapshot version



--
This message was sent by Atlassian Jira
(v8.3.4#803005)