[JENA-2137] Enforcer plugin dependency convergence errors on scope=provider

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Jena 4.2.0
• Assignee: Andy Seaborne
• Reporter: Andy Seaborne
• Created: 01/Aug/21 11:25
• Updated: 16/Sep/21 11:26
• Resolved: 03/Aug/21 10:23

Description

After updating: (probably the enforce plugin itself - the non-convergence seems to be there before)

Updating has causes an enforcer violation:

Dependency convergence error for org.osgi:org.osgi.core:jar:4.3.1:provided paths to dependency are:
+-org.apache.jena:jena-base:jar:4.2.0-SNAPSHOT
  +-org.apache.logging.log4j:log4j-api:jar:2.14.1:compile
    +-org.osgi:org.osgi.core:jar:4.3.1:provided
and
+-org.apache.jena:jena-base:jar:4.2.0-SNAPSHOT
  +-org.apache.logging.log4j:log4j-core:jar:2.14.1:compile
    +-org.osgi:org.osgi.core:jar:4.3.1:provided
and
+-org.apache.jena:jena-base:jar:4.2.0-SNAPSHOT
  +-org.apache.commons:commons-compress:jar:1.21:compile
    +-org.osgi:org.osgi.core:jar:6.0.0:provided

Looking at the log4j2 POM, the OSGi dependency is intentionally an old version - minimum supported.