[ 
https://issues.apache.org/jira/browse/MASSEMBLY-998?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Dmitry Cherniachenko updated MASSEMBLY-998:
-------------------------------------------
    Description: 
Please check the attached project.

When using maven-assembly-plugin version 3.1.0 and below running {{mvn clean 
package}} puts just {{sandbox-0.0.1-SNAPSHOT.jar}} under target/release.

But when using version 3.1.1 and above (tested with 3.6.0) the same command 
also puts {{jackson-core-2.14.2.jar}} in the target/release directory.

The project only has two dependencies:
- {{org.elasticsearch.test:framework}} with the 'test' scope
- and {{org.elasticsearch:elasticsearch}}

The latter is excluded in the assembly descriptor. So there shouldn't be any 
jars under target/release except for the project artifact.
I.e. maven-assembly-plugin:3.1.0 works correctly. And later versions apparently 
have a bug.


  was:
Please check the attached project.

When using maven-assembly-plugin version 3.1.0 and below running {{mvn clean 
package}} puts just {{sandbox-0.0.1-SNAPSHOT.jar}} under target/release.

But when using version 3.1.1 and above (tested with 3.6.0) the same command 
also puts {{jackson-core-2.14.2.jar}} in target/release directory.

The project only has two dependencies:
- {{org.elasticsearch.test:framework}} with the 'test' scope
- and {{org.elasticsearch:elasticsearch}}

The latter is excluded in the assembly descriptor. So there shouldn't be any 
jars under target/release except for the project artifact.
I.e. maven-assembly-plugin:3.1.0 works correctly. And later versions apparently 
have a bug.



> Transitive dependencies are not properly excluded as of 3.1.1
> -------------------------------------------------------------
>
>                 Key: MASSEMBLY-998
>                 URL: https://issues.apache.org/jira/browse/MASSEMBLY-998
>             Project: Maven Assembly Plugin
>          Issue Type: Bug
>          Components: dependencySet
>    Affects Versions: 3.1.1, 3.6.0
>            Reporter: Dmitry Cherniachenko
>            Priority: Major
>         Attachments: sandbox.zip
>
>
> Please check the attached project.
> When using maven-assembly-plugin version 3.1.0 and below running {{mvn clean 
> package}} puts just {{sandbox-0.0.1-SNAPSHOT.jar}} under target/release.
> But when using version 3.1.1 and above (tested with 3.6.0) the same command 
> also puts {{jackson-core-2.14.2.jar}} in the target/release directory.
> The project only has two dependencies:
> - {{org.elasticsearch.test:framework}} with the 'test' scope
> - and {{org.elasticsearch:elasticsearch}}
> The latter is excluded in the assembly descriptor. So there shouldn't be any 
> jars under target/release except for the project artifact.
> I.e. maven-assembly-plugin:3.1.0 works correctly. And later versions 
> apparently have a bug.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to