[MASSEMBLY-998] Transitive dependencies are not properly excluded as of 3.1.1

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.1.1, 3.6.0
• Fix Version/s: 3.7.0
• Component/s: dependencySet
• Assignee: Slawomir Jaranowski
• Reporter: Dmitry Cherniachenko
• Created: 22/Aug/23 19:43
• Updated: 04/Feb/24 10:11
• Resolved: 04/Feb/24 10:11

Description

Please check the attached project.

When using maven-assembly-plugin version 3.1.0 and below running mvn clean package puts just sandbox-0.0.1-SNAPSHOT.jar under target/release.

But when using version 3.1.1 and above (tested with 3.6.0) the same command also puts jackson-core-2.14.2.jar in the target/release directory.

The project only has two dependencies:

• org.elasticsearch.test:framework with the 'test' scope
• and org.elasticsearch:elasticsearch

The latter is excluded in the assembly descriptor. So there shouldn't be any jars under target/release except for the project artifact.
I.e. maven-assembly-plugin:3.1.0 works correctly. And later versions apparently have a bug.

Issue Links

• is caused by: MASSEMBLY-1008 Assembly plugin handles scopes wrongly