Bukama commented on issue #364: URL: https://github.com/apache/maven-enforcer/issues/364#issuecomment-2873609518
> The dependency tree has slightly changed between in Maven 4, so I suspect it comes from that. If that's the case (you may want to diff the dependency tree), that's not a bug and you'll have to slightly adjust. Differences in tree (funny to see that Maven 3.9.8 has newer of jsr, while Maven 4 has newer of plexus-cipher) ``` Maven 3.9.8: com.google.code.findbugs:jsr305:jar:3.0.2:provided org.sonatype.plexus:plexus-cipher:jar:1.4:provided Maven 4.0.0-rc3: com.google.code.findbugs:jsr305:jar:3.0.1:provided org.sonatype.plexus:plexus-cipher:jar:1.7:provided ``` [dependency-tree_3.9.8.txt](https://github.com/user-attachments/files/20173697/dependency-tree_3.9.8.txt) [dependency-tree_4.0.0-rc-3.txt](https://github.com/user-attachments/files/20173696/dependency-tree_4.0.0-rc-3.txt) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org