Uploaded image for project: 'Maven'
  1. Maven
  2. MNG-5761

Dependency management is not transitive.

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Reopened
    • Critical
    • Resolution: Unresolved
    • 3.2.5
    • 4.0.x-candidate
    • Dependencies
    • None

    Description

      A detailed description of the issue is here:

      http://stackoverflow.com/questions/28312975/maven-dependencymanagement-version-ignored-in-transitive-dependencies

      The short of it is that maven appears to be using the wrong <dependencyManagement> version in a transitive dependency. There are two relevant <dependencyManagement> sections in the build, one pulled in by guice and one pulled in by gwizard-parent. These are the dependency paths from the top:

      gwizard-example -> gwizard-config -> gwizard-parent
      gwizard-example -> gwizard-config -> guice -> guice-parent

      gwizard-parent's dependencyManagement specifies guava 18
      guice-parent's dependencyManagement specifies guava 16

      Guava 16 is winning. This seems highly undesirable, and in fact it breaks our build. I would expect that in a version # fight, "closest to the top" should win.

      Attachments

        1. MNG-5761.zip
          2 kB
          Samuel Langlois
        2. depending-pom2.xml
          0.7 kB
          Didier Loiseau

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. FLINK-9091 Failure while enforcing releasability in building flink-json module

          • Major - Major loss of function.
          • Closed
          duplicates

          Bug - A problem which impairs or prevents the functions of the product. MNG-3890 Transitive dependencies override explicitly set scope.

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          is blocked by

          New Feature - A new feature of the product, which has yet to be developed. MRESOLVER-10 New 'TransitiveDependencyManager' supporting transitive dependency management

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Task - A task that needs to be done. MNG-6056 Implement Feature Toggle Module to handle Feature Toggles

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. MNG-5769 Maven is ignoring dependencyManagement for transitive dependencies

          • Major - Major loss of function.
          • Closed
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. MNG-7982 Switch to enable transitivity in depMgr used by Maven

          • Major - Major loss of function.
          • Closed
          is required by

          New Feature - A new feature of the product, which has yet to be developed. MNG-6139 Addition of command line option 'legacy-dependency-management'.

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. MNG-8295 Dependency Manager Transitivity (now default) handles dependency management inconsistently

          • Critical - Crashes, loss of data, severe memory leak.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. MNG-7003 Inconsistent dependency tree

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MNG-4720 Create an integration test to capture effects of exclusions from dependency management in combination with exclusions from regular dependencies

          • Major - Major loss of function.
          • Closed
          mentioned in

          Page Loading...

          Activity

            People

              Unassigned Unassigned
              lhoriman Jeff Schnitzer
              Votes:
              14 Vote for this issue
              Watchers:
              35 Start watching this issue

              Dates

                Created:
                Updated: