[MNG-5826] Resolving of a transitive dependency with a range of versions includes snapshot version

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Not A Bug
• Affects Version/s: 3.0.5, 3.3.1, 3.3.3
• Component/s: Artifacts and Repositories, Dependencies
• Assignee: Unassigned
• Reporter: Guy Marom
• Created: 17/May/15 13:33
• Updated: 23/Dec/19 02:19
• Resolved: 23/Dec/19 02:19

Description

I have a project with the dependency

<dependency>
<groupId>org.glassfish.web</groupId>
<artifactId>javax.servlet.jsp</artifactId>
<version>2.3.2</version>
</dependency>

Which in turn has the following dependency:

<dependency>
<groupId>org.glassfish</groupId>
<artifactId>javax.el</artifactId>
<version>[3.0.0,)</version>
</dependency>

When building this project maven also downloads snapshot versions of this artifact from "https://maven.java.net/content/repositories/snapshots/org/glassfish/javax.el/maven-metadata.xml"

However, if in my pom I add an exclusion for javax.el under javax.servlet.jsp, and then add that exact same dependency it does not attempt to download the snapshot version

---

To reproduce:
1) Create a maven project containing only the attached pom.xml.
2) Compile the attached pom as is, see that it downloads the snapshot version

3) Unignore the exclusion and the dependency
4) Delete <local-repo>/org/glassfish/javax.el (with sub directories)
5) Re-compile to see it does not download the snapshot version