[MDEP-753] Non-test dependency reported as Non-test scoped test only dependency

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 3.2.0
• Fix Version/s: 3.3.0
• Component/s: analyze
• Assignee: Elliotte Rusty Harold
• Reporter: Elliotte Rusty Harold
• Created: 14/Jun/21 16:16
• Updated: 30/Aug/23 16:48
• Resolved: 29/Jan/22 14:34

Description

Saw this when updating the google-http-java-client from 3.1.2 to 3.2.0 of the plugin. I'm not immediately sure whether this is a regression:

[INFO] — maven-dependency-plugin:3.2.0:analyze (default-cli) @ google-http-client —
Warning: Non-test scoped test only dependencies found:
Warning: com.google.guava:guava:jar:30.1.1-android:compile
Warning: io.opencensus:opencensus-api:jar:0.28.0:compile

Changing Guava to scope test breaks the build, which is expected based on the code. The warning seems incorrect.

https://github.com/googleapis/google-http-java-client/pull/1396
https://github.com/googleapis/google-http-java-client/pull/1396/checks?check_run_id=2809438131

Issue Links

• is blocked by: MSHARED-1021 Handle different classes from same artifact used by model and test code
• is blocked by: MDEP-784 Upgrade maven-dependency-analyzer to 1.12.0
• is related to: MDEP-754 Analyze incorrectly warns that junit is test only when it is a compile time dependency
• is related to: MDEP-787 Allow ignoring non-test-scoped dependencies
• relates to: MDEP-757 bug with "non-test scoped test only dependencies found"
• relates to: MDEP-759 'Dependency not found' with 3.2.0 and Java-17 while analyzing
• relates to: MDEP-780 “Non-test scoped test only dependencies found” false-positive in 3.2.0/1.11.2
• split to: MDEP-791 Non-test scoped and transitive dependencies in compile scope
• split to: MDEP-790 New Goals: analyze-main and analyze-test
• links to: GitHub Pull Request #34
• links to: GitHub Pull Request #35
• links to: GitHub Pull Request #37