[ https://issues.apache.org/jira/browse/MASSEMBLY-998?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dmitry Cherniachenko updated MASSEMBLY-998: ------------------------------------------- Description: Please check the attached project. When using maven-assembly-plugin version 3.1.0 and below running {{mvn clean package}} puts just {{sandbox-0.0.1-SNAPSHOT.jar}} under target/release. But when using version 3.1.1 and above (tested with 3.6.0) the same command also puts {{jackson-core-2.14.2.jar}} in the target/release directory. The project only has two dependencies: - {{org.elasticsearch.test:framework}} with the 'test' scope - and {{org.elasticsearch:elasticsearch}} The latter is excluded in the assembly descriptor. So there shouldn't be any jars under target/release except for the project artifact. I.e. maven-assembly-plugin:3.1.0 works correctly. And later versions apparently have a bug. was: Please check the attached project. When using maven-assembly-plugin version 3.1.0 and below running {{mvn clean package}} puts just {{sandbox-0.0.1-SNAPSHOT.jar}} under target/release. But when using version 3.1.1 and above (tested with 3.6.0) the same command also puts {{jackson-core-2.14.2.jar}} in target/release directory. The project only has two dependencies: - {{org.elasticsearch.test:framework}} with the 'test' scope - and {{org.elasticsearch:elasticsearch}} The latter is excluded in the assembly descriptor. So there shouldn't be any jars under target/release except for the project artifact. I.e. maven-assembly-plugin:3.1.0 works correctly. And later versions apparently have a bug. > Transitive dependencies are not properly excluded as of 3.1.1 > ------------------------------------------------------------- > > Key: MASSEMBLY-998 > URL: https://issues.apache.org/jira/browse/MASSEMBLY-998 > Project: Maven Assembly Plugin > Issue Type: Bug > Components: dependencySet > Affects Versions: 3.1.1, 3.6.0 > Reporter: Dmitry Cherniachenko > Priority: Major > Attachments: sandbox.zip > > > Please check the attached project. > When using maven-assembly-plugin version 3.1.0 and below running {{mvn clean > package}} puts just {{sandbox-0.0.1-SNAPSHOT.jar}} under target/release. > But when using version 3.1.1 and above (tested with 3.6.0) the same command > also puts {{jackson-core-2.14.2.jar}} in the target/release directory. > The project only has two dependencies: > - {{org.elasticsearch.test:framework}} with the 'test' scope > - and {{org.elasticsearch:elasticsearch}} > The latter is excluded in the assembly descriptor. So there shouldn't be any > jars under target/release except for the project artifact. > I.e. maven-assembly-plugin:3.1.0 works correctly. And later versions > apparently have a bug. -- This message was sent by Atlassian Jira (v8.20.10#820010)