[MENFORCER-276] Allow ignoring dependency scopes in RequireUpperBoundDeps

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.3.0
• Component/s: requireUpperBoundDeps, Standard Rules
• Assignee: Slawomir Jaranowski
• Reporter: Oleg Nenashev
• Created: 04/Jul/17 13:07
• Updated: 12/Sep/24 16:42
• Resolved: 27/Mar/23 06:50

Description

We have recently adopted RequireUpperBoundDeps in the Jenkins project (https://github.com/jenkinsci/plugin-pom/pull/67). In order to implement it, [e-mail] added a support of ignoring particular dependencies in MENFORCER-273.

Sometimes we declare dependencies between plugins for testing purposes (scope=test), and in such case RequireUpperBoundDeps fails the build if there is a test dependency conflicting with the main code. Although it may cause instability of tests (including false positive results), it does not really impact the distributable package in our case.

I propose to add another option for filtering of dependency scopes.

Issue Links

• is related to: MENFORCER-511 RequireUpperBoundDeps: ExcludedScopes does not work
• links to: GitHub Pull Request #25
• links to: GitHub Pull Request #25
• links to: GitHub Pull Request #261