[ https://jira.codehaus.org/browse/MENFORCER-128?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=291376#comment-291376 ]
Robert Scholte commented on MENFORCER-128: ------------------------------------------ You have my +1 for {{RequireUpperBoundDeps}}. I noticed Deps is already used for {{requireReleaseDeps}}, so that should be fine. > Fail the build if a dependency is overwriten with an incompatible lower > version (patch) > --------------------------------------------------------------------------------------- > > Key: MENFORCER-128 > URL: https://jira.codehaus.org/browse/MENFORCER-128 > Project: Maven 2.x Enforcer Plugin > Issue Type: New Feature > Components: Standard Rules > Reporter: Geoffrey De Smet > Assignee: Paul Gier > Priority: Critical > Fix For: 1.1 > > Attachments: MENFORCER-128.patch > > > Overwriting a dependency to a lower version than any of your other > dependencies need should fail the build if this new enforcer rule is active. > For example, this is bad: > {code} > <dependencies> > <dependency> > <groupId>org.slf4j</groupId> > <artifactId>slf4j-api</artifactId> > <version>1.4.0</version> > </dependency> > <dependency> > <groupId>ch.qos.logback</groupId> > <artifactId>logback-classic</artifactId> > <version>0.9.9</version> > <!-- Depends on org.slf4j:slf4j-api:1.5.0 --> > </dependency> > </dependencies> > {code} > Attaching patch in a few minutes. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://jira.codehaus.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira