[MNG-2205] "provided" scope dependencies must be transitive

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Won't Fix
• Component/s: Dependencies
• Assignee: Unassigned
• Reporter: David Boden
• Created: 06/Apr/06 05:37
• Updated: 15/Mar/22 20:29
• Resolved: 17/Feb/16 11:12

Description

A provided scope dependency can also be thought of as "compile-only".

Project A requires Sybase JConnect on the runtime classpath. Project A declares a "provided" dependency on Sybase JConnect.
Project B depends upon Project A. Project B declares a "compile" dependency on Project A.
Project C depends upon Project B. Project C declares a "compile" dependency on Project B.

C
| - compile dependency
B
| - compile dependency
A
| - provided dependency
Sybase JConnect

So, does Project C transitively depend on Sybase JConnect. Yes, of course! The "provided" dependency needs to be transitive.

Ultimately, when Project C gets deployed, Sybase JConnect needs to be somewhere on the runtime classpath in order for the application to function. It's valid for Project C to assume that Sybase JConnect is available and use JDBC all over the Project C code. Project C is safe to do this because it can happily deduce that Sybase JConnect will be there in the runtime environment because Project A NEEDS IT.

I've got Use Cases all over my aggregated build which make it absolutely critical and common sense that provided scope dependencies are transitive. For the (very rare) odd case where you don't want to inherit provided dependencies, you can <exclude/> them.

Issue Links

• causes: MENFORCER-385 Enforce that transitive provided dependencies are contained in the runtime Maven classpath
• is duplicated by: MNG-4746 A provided scoped transitive dependency of a provided scoped direct dependency will be omitted.
• is duplicated by: MNG-1978 "Provided" scope transitive dependencies required + exclude dependencies for runtime scope only
• is duplicated by: MNG-5048 Optionally include "provided" transitive dependencies on classpath
• is duplicated by: MNG-2611 test scope should inherit provided scope
• is related to: MNG-2589 Inherit transitive dependencies with runtime scope
• relates to: MNG-3890 Transitive dependencies override explicitly set scope.
• relates to: MNG-2317 Provided scope dependencies are based in target app server, current approach doesn't work very well