[ https://issues.apache.org/jira/browse/MENFORCER-407?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17558582#comment-17558582 ]
Matt Nelson commented on MENFORCER-407: --------------------------------------- [~michael-o] In the above example, the 3.1.1-snapshot was locally built from the changes proposed in this PR > https://github.com/apache/maven-dependency-tree/pull/9 Testing with enforcer 3.1.0 and dep tree 3.1.0, still produces the issue. {noformat} [DEBUG] Populating class realm plugin>org.apache.maven.plugins:maven-enforcer-plugin:3.1.0 [DEBUG] Included: org.apache.maven.plugins:maven-enforcer-plugin:jar:3.1.0 [DEBUG] Included: org.apache.maven.shared:maven-dependency-tree:jar:3.1.0 {noformat} {noformat} [WARNING] Dependency convergence error for org.robolectric:android-all:jar:12-robolectric-7732740:runtime paths to dependency are: +-io.mattnelson:menforcer394:pom:1.0-SNAPSHOT +-dnsjava:dnsjava:jar:3.5.1:runtime +-org.robolectric:android-all:jar:12-robolectric-7732740:runtime and +-io.mattnelson:menforcer394:pom:1.0-SNAPSHOT +-io.fabric8:kubernetes-client:jar:5.12.2:runtime +-com.squareup.okhttp3:okhttp:jar:3.12.12:runtime +-org.robolectric:android-all:jar:10-robolectric-5803371:runtime [ERROR] Rule 0: org.apache.maven.plugins.enforcer.DependencyConvergence failed with message: Failed while enforcing releasability. See above detailed error message. {noformat} > Enforcer 3.0.0 breaks with Maven 3.8.4 > -------------------------------------- > > Key: MENFORCER-407 > URL: https://issues.apache.org/jira/browse/MENFORCER-407 > Project: Maven Enforcer Plugin > Issue Type: Bug > Components: Plugin > Affects Versions: 3.0.0 > Reporter: David Pilato > Priority: Major > Fix For: waiting-for-feedback > > Attachments: enforcer-3.0.0.log, enforcer.3.0.0-M3.log > > > Here is the situation. I'm trying to [upgrade enforcer from 3.0.0-M3 to > 3.0.0|https://github.com/dadoonet/fscrawler/pull/1214]. > > Everything worked well on my laptop with Maven 3.5.3. So I looked at the > version used by Github actions and saw that it's using Maven 3.8.4. > As soon as I upgraded my local version of Maven to 3.8.4, I started to hit > the same exact issue. It seems to try to pull > net.sf.ehcache:sizeof-agent:1.0.1. > If I revert Enforcer to 3.0.0-M3 with Maven 3.8.4, I can run without any > issue mvn enforcer:enforce. > So I suspect that the combination of both upgrades is triggering something. > I noted also that 3.0.0 now tries to enforce as well dependencies marked as > provided. Might be the reason of this. > I attached the full logs when running with 3.0.0 and 3.0.0-M3. -- This message was sent by Atlassian Jira (v8.20.7#820007)