[MDEP-892] go-offline does not correctly resolve overridden properties

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 3.6.1
• Component/s: go-offline
• Assignee: Unassigned
• Reporter: Arnout Engelen
• Created: 03/Nov/23 18:27
• Updated: 14/Nov/23 11:18

Description

When a project shares a parent pom with a dependency, and overrides a property of that parent pom, this is not picked up by dependency:go-offline.

I have shared a reproducer at https://codeberg.org/raboof/maven-property-resolution . The scenario is `one` and `other-mod` both have parent pom `other-parent`. `other-parent` specifies version 7.4 of a dependency, but `one` overrides this to 7.3. Other plugins (including `mvn dependency:tree`) pick 7.3 in this scenario, but `mvn dependency:go-offline` downloads version 7.4.

It seems https://github.com/apache/maven-dependency-plugin/pull/2 (unmerged) fixed this, but its successor https://github.com/apache/maven-dependency-plugin/pull/135 (unmerged) does not.

An alternative is to use https://github.com/qaware/go-offline-maven-plugin instead.