[MNG-8118] Dependency-management "client" exclusions overwrite BOM exclusions

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.0.0-alpha-13, 4.0.x-candidate
• Fix Version/s: 4.0.0-beta-3
• Environment: Any
• Assignee: Guillaume Nodet
• Reporter: Lenny Primak
• Created: 07/May/24 16:37
• Updated: 29/May/24 22:49
• Resolved: 22/May/24 14:59

Description

When importing BOM and introducing exclusions, they overwrite exclusions already present in the BOM. They should not

Slack conversation link: https://the-asf.slack.com/archives/C7Q9JB404/p1714938396499939

Regressed by https://issues.apache.org/jira/browse/MNG-5600

Reproducer app: https://github.com/lprimak/apps/tree/main/emailmanager

Fixed by: https://github.com/apache/maven/pull/1504

Issue Links

• links to: GitHub Pull Request #1504
• links to: GitHub Pull Request #1505