[MNG-7786] Maven Plugin Validation message is misleading

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.9.2
• Fix Version/s: 3.9.3, 4.0.0-alpha-7, 4.0.0
• Component/s: Plugins and Lifecycle
• Assignee: Tamas Cservenak
• Reporter: Tamas Cservenak
• Created: 19/May/23 09:38
• Updated: 17/Jul/23 16:34
• Resolved: 24/May/23 06:53

Description

The Maven artifact scope validation is misleading, it claims "... should declare in provided scope", and this may happen in this case:

• perfectly valid POM (does declare Maven artifacts in provided scope)
• but plugin developer uses problematic maven-plugin-plugin (ie. 3.6.2 that suffers from descriptor generation bug)

Proposal:

• reword the message, to clearly point at "plugin descriptor contains bad entries..."
• add new check that actually checks plugin dependencies (and not "derived" descriptor dependencies that may differ from POM declared ones due m-p-p bug)

Issue Links

• relates to: MNG-7811 Plugins verification - reports are inconsistent
• links to: GH PR#1112