[
https://jira.codehaus.org/browse/MENFORCER-195?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=347750#comment-347750
]
Tomaz Cerar commented on MENFORCER-195:
---------------------------------------
I can reproduce it also with 2.0-SNAPSHOT
{noformat}
[INFO] --- maven-enforcer-plugin:2.0-SNAPSHOT:enforce (ban-bad-dependencies) @
wildfly-build ---
[WARNING]
Dependency convergence error for commons-httpclient:commons-httpclient:3.1
paths to dependency are:
+-org.wildfly:wildfly-build:9.0.0.Alpha1-SNAPSHOT
+-org.opensaml:openws:1.4.4
+-commons-httpclient:commons-httpclient:3.1
and
+-org.wildfly:wildfly-build:9.0.0.Alpha1-SNAPSHOT
+-org.opensaml:xmltooling:1.3.4
+-ca.juliusdavies:not-yet-commons-ssl:0.3.9
+-commons-httpclient:commons-httpclient:3.0
and
+-org.wildfly:wildfly-build:9.0.0.Alpha1-SNAPSHOT
+-org.jboss.narayana:jbosstxbridge:5.0.2.Final
+-commons-httpclient:commons-httpclient:3.1-jbossorg-1
{noformat}
where org.jboss.narayana:jbosstxbridge and org.opensaml:xmltooling:1.3.4 are
defined as:
{code:xml}
<dependency>
<groupId>org.jboss.narayana</groupId>
<artifactId>jbosstxbridge</artifactId>
<version>${version.org.jboss.narayana}</version>
<exclusions>
<exclusion>
<groupId>*</groupId>
<artifactId>*</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>xmltooling</artifactId>
<version>${version.org.opensaml.xmltooling}</version>
<exclusions>
<exclusion>
<groupId>*</groupId>
<artifactId>*</artifactId>
</exclusion>
</exclusions>
</dependency>
{code}
> Ban bad depedencies does not support wildcard exclusions
> --------------------------------------------------------
>
> Key: MENFORCER-195
> URL: https://jira.codehaus.org/browse/MENFORCER-195
> Project: Maven Enforcer Plugin
> Issue Type: Bug
> Components: Plugin
> Affects Versions: 1.3.1
> Environment: Maven 3.2.1
> Reporter: Tomaz Cerar
>
> Maven 3.2 introduced wildcard exclusions for dependencies.
> But if you use them ban-bad-dependencies wrongly complains that transitive
> dependencies are still present.
--
This message was sent by Atlassian JIRA
(v6.1.6#6162)
