You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Herve Boutemy (Jira)" <ji...@apache.org> on 2021/02/09 03:11:00 UTC
[jira] [Comment Edited] (MNG-7094) Assure in an IT that reactor
repository definitions are not used when Model Builder downloads
dependencies with scope import
[ https://issues.apache.org/jira/browse/MNG-7094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17281496#comment-17281496 ]
Herve Boutemy edited comment on MNG-7094 at 2/9/21, 3:10 AM:
-------------------------------------------------------------
[import-scoped dependencies (in dependencyManagement)|https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html#Importing_Dependencies] are downloaded by Model Builder during effective POM calculation.
It's completely different from "normal" dependencies (in dependencies, with transitive management), which are downloaded by build lifecycle when required, far later
no surprise that algorithm may differ
"Thus all repos are properly scoped."
no idea if model builder could and/or should be updated to take reactor POM/project into account...
at least this difference should be explained (like here, but more on the site)
was (Author: hboutemy):
[import-scoped dependencies (in dependencyManagement)|https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html#Importing_Dependencies] are downloaded by Model Builder during effective POM calculation.
It's completely different from "normal" dependencies (in dependencies, with transitive management), which are downloaded by build lifecycle when required, far later
no surprise that algorithm may differ
no idea if model builder could be updated to take reactor POM/project into account...
at least this difference should be explained (like here, but more on the site)
> Assure in an IT that reactor repository definitions are not used when Model Builder downloads dependencies with scope import
> ----------------------------------------------------------------------------------------------------------------------------
>
> Key: MNG-7094
> URL: https://issues.apache.org/jira/browse/MNG-7094
> Project: Maven
> Issue Type: Task
> Components: Artifacts and Repositories, Dependencies, Design, Patterns & Best Practices, Integration Tests
> Affects Versions: 3.6.3
> Reporter: Michael Osipov
> Priority: Major
> Fix For: 4.0.x-candidate
>
>
> Based on several discussions (MNG-6772, MNG-6397) the topic of repo scoping causes a lot of confusion.
> Create an IT which shows that repositories defined in a reactor are never available (leak) to download imported dependency BOMs. Thus all repos are properly scoped.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)