[MENFORCER-232] DependencyConvergence doesn't acknowledge exclusion wildcards (MNG-2315)

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.4
• Component/s: Standard Rules
• Assignee: Robert Scholte
• Reporter: Louis Burton
• Created: 03/Aug/15 11:51
• Updated: 07/Feb/20 08:40
• Resolved: 07/Feb/20 08:40

Description

An exclusion that takes advantage of the enhancement in MNG-2315 (Maven 3.2.1+) is not acknowledged in the dependency convergence check and still results in failing this rule:

                        <exclusion>
                            <groupId>*</groupId>
                            <artifactId>*</artifactId>
                        </exclusion>

Adding a specific exclusion instead, or in addition to this allows the failure to be resolved.

                <dependency>
                    <groupId>org.hornetq</groupId>
                    <artifactId>hornetq-commons</artifactId>
                    <version>${hornetq-version}</version>
                    <scope>test</scope>
                    <exclusions>
                        <exclusion>
                            <groupId>*</groupId>
                            <artifactId>*</artifactId>
                        </exclusion>
                        <exclusion>
                            <groupId>org.jboss.logging</groupId>
                            <artifactId>jboss-logging</artifactId>
                        </exclusion>
                    </exclusions>
                </dependency>

The second exclusion is redundant to Maven, but is necessary for this plugin.

Issue Links

• duplicates: MENFORCER-195 Dependency convergence does not support wildcard exclusions
• is duplicated by: MENFORCER-302 DependencyConvergence does not recognize exclusion wildcards
• is required by: MNG-2315 Add option to exclude all transitive dependencies for a particular one
• requires: MSHARED-433 DependencyConvergence doesn't acknowledge exclusion wildcards (MNG-2315)