[maven-pmd-plugin] branch master updated: [MPMD-384] maven-pmd-plugin is downloading transitive dependencies of unmanaged version

[michaelo]

This is an automated email from the ASF dual-hosted git repository.

michaelo pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-pmd-plugin.git


The following commit(s) were added to refs/heads/master by this push:
     new 96e5079  [MPMD-384] maven-pmd-plugin is downloading transitive 
dependencies of unmanaged version
96e5079 is described below

commit 96e5079d50dcb719a2fde687835d5e5c0989c174
Author: Eric Cai <we...@ebay.com>
AuthorDate: Fri Aug 4 17:23:16 2023 +0800

    [MPMD-384] maven-pmd-plugin is downloading transitive dependencies of 
unmanaged version
    
    This closes #135
---
 src/main/java/org/apache/maven/plugins/pmd/PmdReport.java | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/main/java/org/apache/maven/plugins/pmd/PmdReport.java 
b/src/main/java/org/apache/maven/plugins/pmd/PmdReport.java
index 168b454..bd41e27 100644
--- a/src/main/java/org/apache/maven/plugins/pmd/PmdReport.java
+++ b/src/main/java/org/apache/maven/plugins/pmd/PmdReport.java
@@ -26,6 +26,7 @@ import java.util.List;
 import java.util.Locale;
 
 import net.sourceforge.pmd.renderers.Renderer;
+import org.apache.maven.model.Dependency;
 import org.apache.maven.plugins.annotations.Component;
 import org.apache.maven.plugins.annotations.Mojo;
 import org.apache.maven.plugins.annotations.Parameter;
@@ -503,8 +504,11 @@ public class PmdReport extends AbstractPmdReport {
                     // use any additional configured repo as well
                     
buildingRequest.getRemoteRepositories().addAll(localProject.getRemoteArtifactRepositories());
 
+                    List<Dependency> managedDependencies = 
localProject.getDependencyManagement() == null
+                            ? null
+                            : 
localProject.getDependencyManagement().getDependencies();
                     Iterable<ArtifactResult> resolvedDependencies = 
dependencyResolver.resolveDependencies(
-                            buildingRequest, localProject.getDependencies(), 
null, filter);
+                            buildingRequest, localProject.getDependencies(), 
managedDependencies, filter);
 
                     for (ArtifactResult resolvedArtifact : 
resolvedDependencies) {
                         dependencies.add(