[ https://issues.apache.org/jira/browse/MPMD-384?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
wei cai updated MPMD-384: ------------------------- Summary: maven-pmd-plugin is dowloading transitive dependencies of unmanaged version (was: maven-pmd-plugin is dowloading ) > maven-pmd-plugin is dowloading transitive dependencies of unmanaged version > --------------------------------------------------------------------------- > > Key: MPMD-384 > URL: https://issues.apache.org/jira/browse/MPMD-384 > Project: Maven PMD Plugin > Issue Type: Bug > Components: PMD > Affects Versions: 3.15.0, 3.16.0, 3.17.0, 3.18.0, 3.19.0, 3.20.0, 3.21.0 > Reporter: wei cai > Priority: Major > > The app pom introduces A:1.0-RELEASE, and this artifact A has transitive > dependency B{*}:0.12.0-SNAPSHOT.{*} In app pom, we manage B as version > 0.13.0-RELEASE. > When the *pmd:3.15.0* and above is being executed, it will resolve > dependencies, and somehow the B{*}:0.12.0-SNAPSHOT{*} is resolved as a > dependency instead of B{*}:0.13.0-RELEASE.{*} > This means lots of transitive dependencies with unmanaged version will be > downloaded. -- This message was sent by Atlassian Jira (v8.20.10#820010)