[MDEP-780] “Non-test scoped test only dependencies found” false-positive in 3.2.0/1.11.2

[jira-importer]

Thorsten Glaser opened MDEP-780 and commented

After upgrading maven-dependency-plugin 3.1.2 → 3.2.0 I get the following false positives in a project:

[WARNING] Non-test scoped test only dependencies found:
[WARNING]    org.springframework:spring-jdbc:jar:4.3.30.RELEASE:compile

This isn’t right, and with spring-jdbc scoped to test, the project doesn’t even compile.

This also applies if I dowgrade the Maven dependency analyser to 1.11.2 as in this commit; I cannot test with 1.11.1 (same version maven-dependency-plugin 3.1.2 used) because that’s incompatible with 3.2.0 so I cannot say for sure which of the two introduced this bug. If this is a bug in the shared component, please reassign appropriately.

I’m setting the severity as it is because this effectively prevents me from upgrading past 3.1.2 in my projects.

---

Affects: 3.2.0

Issue Links:

• MDEP-753 Non-test dependency reported as Non-test scoped test only dependency

1 votes, 4 watchers

[jira-importer]

Matthew Janssen commented

Appears to be a dupe of: https://issues.apache.org/jira/browse/MDEP-753

[jira-importer]

Thorsten Glaser commented

Thanks Matthew Janssen it is… WTF‽ This bug is {}critical{}, known for {}seven months{}, has had an MWE for an it {+}five days later{+}, has had an {+}apparent fix another two days later (seven days after the report){+}, has several dozen votes and even more watchers, and is still unfixed‽

[jira-importer]

Slawomir Jaranowski commented

For me is the identical as MDEP-753, so I close as duplicate.
If I missed something please let me know.