[MENFORCER-128] Fail the build if a dependency is overwriten with an incompatible lower version (patch)

• Type: New Feature
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 1.1
• Component/s: Standard Rules
• Flags: Patch
• Assignee: Paul Gier
• Reporter: Geoffrey De Smet
• Created: 09/Feb/12 05:07
• Updated: 05/Apr/15 14:44
• Resolved: 12/Feb/12 09:56

Description

Overwriting a dependency to a lower version than any of your other dependencies need should fail the build if this new enforcer rule is active.

For example, this is bad:

  <dependencies>
    <dependency>
      <groupId>org.slf4j</groupId>
      <artifactId>slf4j-api</artifactId>
      <version>1.4.0</version>
    </dependency>
    <dependency>
      <groupId>ch.qos.logback</groupId>
      <artifactId>logback-classic</artifactId>
      <version>0.9.9</version>
      <!-- Depends on org.slf4j:slf4j-api:1.5.0 -->
    </dependency>
  </dependencies>

Attaching patch in a few minutes.