Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
2.4.0
Description
Using the change from issue 1470 (makepom with transitive=false dependency) we get a POM file with * for group and artifact exclusion. This may also occur naturally in POMs, but the main case for us is a library with transitive=false on a dependency.
Ex:
<dependency>
<groupId>org.owasp.esapi</groupId>
<artifactId>esapi</artifactId>
<version>2.1.0</version>
<exclusions>
<exclusion>
<groupId>*</groupId>
<artifactId>*</artifactId>
</exclusion>
</exclusions>
</dependency>
When we are consuming this library as a dependency out of Nexus, Ivy translates the above into:
<dependency org="org.owasp.esapi" name="esapi" rev="2.1.0" force="true" conf="compile->compile,master;runtime->runtime">
<exclude org="" module="" name="" type="" ext="*" conf="" matcher="exact"/>
</dependency>
This is having the effect of excluding all artifacts, including the master jar. We are expecting to get the master jar, its sources and javadocs if they exist but no transitive dependencies.
Attachments
Issue Links
- links to