[
https://issues.apache.org/jira/browse/MGPG-111?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17824801#comment-17824801
]
Tamas Cservenak commented on MGPG-111:
--------------------------------------
Re junixsocket, in fact BOTH are used (but one goes undetected, as is native):
[https://repo.maven.apache.org/maven2/com/kohlschutter/junixsocket/junixsocket-core/2.9.0/junixsocket-core-2.9.0.pom]
This is how POM looks and even description tells "this is the one you want to
add as dependency".
About "dependency grouping":
[https://blog.sonatype.com/2009/10/maven-tips-and-tricks-grouping-dependencies/]
Note: this technique predates BOMs, but is IMHO maybe better than BOMs as they
do work in "maven way", unlike BOMs. See MNG-8009, MNG-7906, MNG-5971 and many
others.
> Clean upn dependency declarations
> ---------------------------------
>
> Key: MGPG-111
> URL: https://issues.apache.org/jira/browse/MGPG-111
> Project: Maven GPG Plugin
> Issue Type: Dependency upgrade
> Reporter: Elliotte Rusty Harold
> Priority: Minor
>
> [WARNING] Used undeclared dependencies found:
> [WARNING] org.apache.maven:maven-artifact:jar:3.9.6:provided
> [WARNING] org.apache.maven:maven-settings:jar:3.9.6:provided
> [WARNING] com.kohlschutter.junixsocket:junixsocket-common:jar:2.9.0:compile
> [WARNING] org.apache.maven.resolver:maven-resolver-impl:jar:1.9.18:provided
> [WARNING] Unused declared dependencies found:
> [WARNING] com.kohlschutter.junixsocket:junixsocket-core:pom:2.9.0:compile
> [WARNING] org.codehaus.plexus:plexus-cipher:jar:2.0:compile
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
