[MENFORCER-401] DependencyConvergence ignores exclusions

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Won't Fix
• Affects Version/s: 3.0.0
• Component/s: Plugin, Standard Rules
• Assignee: Unassigned
• Reporter: T. Mohme
• Created: 05/Oct/21 08:16
• Updated: 27/Jul/22 16:48
• Resolved: 27/Jul/22 16:10

Description

In my project there is a transitive dependency on an artifact ("idlj-idl") with scope=provided that cannot be resolved (this probably is a different problem) - so far, so good (bad).

...
Caused by: org.eclipse.aether.collection.DependencyCollectionException: Failed to collect dependencies at com.acme:my-project:jar:1.0.0 -> io.quarkus:quarkus-flyway:jar:2.2.3.Final -> io.quarkus:quarkus-agroal:jar:2.2.3.Final -> io.quarkus:quarkus-narayana-jta:jar:2.2.3.Final -> org.jboss.narayana.jts:narayana-jts-integration:jar:5.12.0.Final -> org.jboss.narayana.jts:idlj-idl:jar:5.12.0.Final
...

Interestingly, `./mvnw dependency:tree` doesn't show this dependency.
The tree descends only down to "narayana-jts-integration".

When I exclude the unresolvable dependency ("idle-idl") from an artifact before it in the chain shown by the exception cause, this has no impact:

        <dependency>
            <groupId>io.quarkus</groupId>
            <artifactId>quarkus-agroal</artifactId>
            <exclusions>
                <exclusion>
                    <groupId>org.jboss.narayana.jts</groupId>
                    <artifactId>idlj-idl</artifactId>
                </exclusion>
        </dependency>