question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Enforcer's DependencyConvergence and RequireUpperBounds rules trigger with 2.4.1.Final

See original GitHub issue

Describe the bug

Dependency related rules from maven-enforcer-plugin trigger, failing the build

Configuring maven-enforcer-plugin:3.0.0-M3 and extra-enforcer-rules:1.3 yields different result than configuring maven-enforcer-plugin:3.0.0' and extra-enforcer-rules:1.4` however both lead to failure.

Expected behavior

A successful build.

Actual behavior

maven-enforcer-plugin:3.0.0-M3 and extra-enforcer-rules:1.3 yields:

[INFO] --- maven-enforcer-plugin:3.0.0-M3:enforce (default) @ code-with-quarkus ---
[WARNING] Rule 1: org.apache.maven.plugins.enforcer.RequireUpperBoundDeps failed with message:
Failed while enforcing RequireUpperBoundDeps. The error(s) are [
Require upper bound dependencies error for io.smallrye.common:smallrye-common-annotation:1.6.0 paths to dependency are:
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-resteasy:2.4.1.Final
    +-io.quarkus:quarkus-vertx-http:2.4.1.Final
      +-io.quarkus:quarkus-vertx:2.4.1.Final
        +-io.smallrye.common:smallrye-common-annotation:1.6.0
and
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:2.4.1.Final
    +-io.quarkus:quarkus-core:2.4.1.Final
      +-io.smallrye.config:smallrye-config:2.5.1
        +-io.smallrye.config:smallrye-config-core:2.5.1
          +-io.smallrye.common:smallrye-common-annotation:1.6.0 (managed) <-- io.smallrye.common:smallrye-common-annotation:1.7.1
and
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-resteasy:2.4.1.Final
    +-io.quarkus:quarkus-vertx-http:2.4.1.Final
      +-io.quarkus:quarkus-mutiny:2.4.1.Final
        +-io.smallrye.reactive:mutiny:1.1.2
          +-io.smallrye.common:smallrye-common-annotation:1.6.0 (managed) <-- io.smallrye.common:smallrye-common-annotation:1.7.1

maven-enforcer-plugin:3.0.0 and extra-enforcer-rules:1.4 yields:

[INFO] --- maven-enforcer-plugin:3.0.0:enforce (default) @ code-with-quarkus ---
[WARNING] The POM for org.apache.logging.log4j:log4j-api-java9:zip:2.11.2 is missing, no dependency information available
Downloading from central: https://repo.maven.apache.org/maven2/io/quarkus/quarkus-extension-processor/2.4.1.Final/quarkus-extension-processor-2.4.1.Final.pom
Downloaded from central: https://repo.maven.apache.org/maven2/io/quarkus/quarkus-extension-processor/2.4.1.Final/quarkus-extension-processor-2.4.1.Final.pom (2.5 kB at 8.4 kB/s)
Downloading from central: https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-api-java9/2.13.3/log4j-api-java9-2.13.3.pom
[WARNING] The POM for org.apache.logging.log4j:log4j-api-java9:zip:2.13.3 is missing, no dependency information available
Downloading from central: https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-core-java9/2.13.3/log4j-core-java9-2.13.3.pom
[WARNING] The POM for org.apache.logging.log4j:log4j-core-java9:zip:2.13.3 is missing, no dependency information available
Downloading from central: https://repo.maven.apache.org/maven2/io/vertx/vertx-docgen/0.9.4/vertx-docgen-0.9.4.pom
Downloaded from central: https://repo.maven.apache.org/maven2/io/vertx/vertx-docgen/0.9.4/vertx-docgen-0.9.4.pom (2.1 kB at 54 kB/s)
[WARNING] 
Dependency convergence error for org.jboss.jdeparser:jdeparser:jar:2.0.3.Final:provided paths to dependency are:
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:jar:2.4.1.Final:compile
    +-io.quarkus:quarkus-core:jar:2.4.1.Final:compile
      +-io.smallrye.config:smallrye-config:jar:2.5.1:compile
        +-org.jboss.logging:jboss-logging-processor:jar:2.2.1.Final:provided
          +-org.jboss.jdeparser:jdeparser:jar:2.0.3.Final:provided
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:jar:2.4.1.Final:compile
    +-io.quarkus:quarkus-core:jar:2.4.1.Final:compile
      +-io.quarkus:quarkus-extension-processor:jar:2.4.1.Final:provided
        +-org.jboss.jdeparser:jdeparser:jar:2.0.2.Final:provided

[WARNING] 
Dependency convergence error for org.jboss.logmanager:jboss-logmanager:jar:2.1.9.Final:provided paths to dependency are:
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:jar:2.4.1.Final:compile
    +-io.quarkus.arc:arc:jar:2.4.1.Final:compile
      +-org.jboss.logging:jboss-logging:jar:3.4.2.Final:compile
        +-org.jboss.logmanager:jboss-logmanager:jar:2.1.9.Final:provided
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:jar:2.4.1.Final:compile
    +-io.quarkus:quarkus-core:jar:2.4.1.Final:compile
      +-org.jboss.slf4j:slf4j-jboss-logmanager:jar:1.1.0.Final:compile
        +-org.jboss.logmanager:jboss-logmanager:jar:2.1.17.Final:provided

[WARNING] 
Dependency convergence error for org.glassfish.jaxb:txw2:jar:2.3.3-b02:test paths to dependency are:
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.rest-assured:rest-assured:jar:4.4.0:test
    +-io.rest-assured:xml-path:jar:4.4.0:test
      +-com.sun.xml.bind:jaxb-impl:jar:2.3.3:test
        +-org.glassfish.jaxb:jaxb-runtime:jar:2.3.3-b02:test
          +-org.glassfish.jaxb:txw2:jar:2.3.3-b02:test
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.rest-assured:rest-assured:jar:4.4.0:test
    +-io.rest-assured:xml-path:jar:4.4.0:test
      +-com.sun.xml.bind:jaxb-impl:jar:2.3.3:test
        +-org.glassfish.jaxb:txw2:jar:2.3.3:test

[WARNING] 
Dependency convergence error for com.sun.istack:istack-commons-runtime:jar:3.0.10:test paths to dependency are:
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.rest-assured:rest-assured:jar:4.4.0:test
    +-io.rest-assured:xml-path:jar:4.4.0:test
      +-com.sun.xml.bind:jaxb-impl:jar:2.3.3:test
        +-org.glassfish.jaxb:jaxb-runtime:jar:2.3.3-b02:test
          +-com.sun.istack:istack-commons-runtime:jar:3.0.10:test
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.rest-assured:rest-assured:jar:4.4.0:test
    +-io.rest-assured:xml-path:jar:4.4.0:test
      +-com.sun.xml.bind:jaxb-impl:jar:2.3.3:test
        +-com.sun.istack:istack-commons-runtime:jar:3.0.11:test

[WARNING] 
Dependency convergence error for org.jsoup:jsoup:jar:1.14.2:provided paths to dependency are:
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:jar:2.4.1.Final:compile
    +-io.quarkus:quarkus-core:jar:2.4.1.Final:compile
      +-io.quarkus:quarkus-extension-processor:jar:2.4.1.Final:provided
        +-org.jsoup:jsoup:jar:1.14.2:provided
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-junit5:jar:2.4.1.Final:test
    +-io.quarkus:quarkus-bootstrap-core:jar:2.4.1.Final:test
      +-io.quarkus:quarkus-bootstrap-maven-resolver:jar:2.4.1.Final:test
        +-org.apache.maven.wagon:wagon-http:jar:3.4.3:test
          +-org.apache.maven.wagon:wagon-http-shared:jar:3.4.3:test
            +-org.jsoup:jsoup:jar:1.12.1:test

[WARNING] 
Dependency convergence error for org.codehaus.plexus:plexus-container-default:jar:2.1.0:test paths to dependency are:
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-junit5:jar:2.4.1.Final:test
    +-io.quarkus:quarkus-bootstrap-core:jar:2.4.1.Final:test
      +-io.quarkus:quarkus-bootstrap-maven-resolver:jar:2.4.1.Final:test
        +-org.apache.maven:maven-embedder:jar:3.8.1:test
          +-org.apache.maven.shared:maven-shared-utils:jar:3.3.3:test
            +-org.codehaus.plexus:plexus-container-default:jar:2.1.0:test
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-junit5:jar:2.4.1.Final:test
    +-io.quarkus:quarkus-bootstrap-core:jar:2.4.1.Final:test
      +-io.quarkus:quarkus-bootstrap-maven-resolver:jar:2.4.1.Final:test
        +-org.apache.maven:maven-settings-builder:jar:3.8.1:test
          +-org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:test
            +-org.sonatype.plexus:plexus-cipher:jar:1.4:test
              +-org.codehaus.plexus:plexus-container-default:jar:1.0-alpha-9-stable-1:test
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-junit5:jar:2.4.1.Final:test
    +-io.quarkus:quarkus-bootstrap-core:jar:2.4.1.Final:test
      +-io.quarkus:quarkus-bootstrap-maven-resolver:jar:2.4.1.Final:test
        +-org.apache.maven:maven-settings-builder:jar:3.8.1:test
          +-org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:test
            +-org.codehaus.plexus:plexus-container-default:jar:1.0-alpha-9-stable-1:test

[WARNING] 
Dependency convergence error for org.apache.logging.log4j:log4j-api:jar:2.11.2:provided paths to dependency are:
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:jar:2.4.1.Final:compile
    +-io.quarkus.arc:arc:jar:2.4.1.Final:compile
      +-org.jboss.logging:jboss-logging:jar:3.4.2.Final:compile
        +-org.apache.logging.log4j:log4j-api:jar:2.11.2:provided
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-resteasy:jar:2.4.1.Final:compile
    +-io.quarkus:quarkus-vertx-http:jar:2.4.1.Final:compile
      +-io.vertx:vertx-web:jar:4.1.5:compile
        +-io.vertx:vertx-core:jar:4.1.5:compile
          +-org.apache.logging.log4j:log4j-api:jar:2.13.3:provided
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-resteasy:jar:2.4.1.Final:compile
    +-io.quarkus:quarkus-vertx-http:jar:2.4.1.Final:compile
      +-io.vertx:vertx-web:jar:4.1.5:compile
        +-io.vertx:vertx-core:jar:4.1.5:compile
          +-org.apache.logging.log4j:log4j-core:jar:2.13.3:provided
            +-org.apache.logging.log4j:log4j-api:jar:2.13.3:provided
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-resteasy:jar:2.4.1.Final:compile
    +-io.quarkus:quarkus-resteasy-server-common:jar:2.4.1.Final:compile
      +-io.quarkus:quarkus-resteasy-common:jar:2.4.1.Final:compile
        +-org.jboss.resteasy:resteasy-core:jar:4.7.0.Final:compile
          +-org.jboss.resteasy:resteasy-core-spi:jar:4.7.0.Final:compile
            +-org.apache.logging.log4j:log4j-api:jar:2.13.3:provided

[WARNING] 
Dependency convergence error for com.google.inject:guice:jar:no_aop:4.2.1:test paths to dependency are:
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-junit5:jar:2.4.1.Final:test
    +-io.quarkus:quarkus-bootstrap-core:jar:2.4.1.Final:test
      +-io.quarkus:quarkus-bootstrap-maven-resolver:jar:2.4.1.Final:test
        +-org.apache.maven:maven-embedder:jar:3.8.1:test
          +-org.apache.maven:maven-core:jar:3.8.1:test
            +-com.google.inject:guice:jar:no_aop:4.2.1:test
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-junit5:jar:2.4.1.Final:test
    +-io.quarkus:quarkus-bootstrap-core:jar:2.4.1.Final:test
      +-io.quarkus:quarkus-bootstrap-maven-resolver:jar:2.4.1.Final:test
        +-org.apache.maven:maven-embedder:jar:3.8.1:test
          +-com.google.inject:guice:jar:no_aop:4.2.1:test
and
+-org.acme:code-with-quarkus:jar:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-junit5:jar:2.4.1.Final:test
    +-org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:test
      +-com.google.inject:guice:jar:3.0:test

[WARNING] Rule 0: org.apache.maven.plugins.enforcer.DependencyConvergence failed with message:
Failed while enforcing releasability. See above detailed error message.
[WARNING] Rule 1: org.apache.maven.plugins.enforcer.RequireUpperBoundDeps failed with message:
Failed while enforcing RequireUpperBoundDeps. The error(s) are [
Require upper bound dependencies error for org.jboss.logmanager:jboss-logmanager:2.1.9.Final [provided] paths to dependency are:
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:2.4.1.Final
    +-io.quarkus.arc:arc:2.4.1.Final (managed) <-- io.quarkus.arc:arc:2.4.1.Final
      +-org.jboss.logging:jboss-logging:3.4.2.Final (managed) <-- org.jboss.logging:jboss-logging:3.4.2.Final
        +-org.jboss.logmanager:jboss-logmanager:2.1.9.Final [provided]
and
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:2.4.1.Final
    +-io.quarkus:quarkus-core:2.4.1.Final (managed) <-- io.quarkus:quarkus-core:2.4.1.Final
      +-org.jboss.slf4j:slf4j-jboss-logmanager:1.1.0.Final (managed) <-- org.jboss.slf4j:slf4j-jboss-logmanager:1.1.0.Final
        +-org.jboss.logmanager:jboss-logmanager:2.1.17.Final [provided]
, 
Require upper bound dependencies error for org.apache.logging.log4j:log4j-api:2.11.2 [provided] paths to dependency are:
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:2.4.1.Final
    +-io.quarkus.arc:arc:2.4.1.Final (managed) <-- io.quarkus.arc:arc:2.4.1.Final
      +-org.jboss.logging:jboss-logging:3.4.2.Final (managed) <-- org.jboss.logging:jboss-logging:3.4.2.Final
        +-org.apache.logging.log4j:log4j-api:2.11.2 [provided]
and
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-resteasy:2.4.1.Final
    +-io.quarkus:quarkus-vertx-http:2.4.1.Final (managed) <-- io.quarkus:quarkus-vertx-http:2.4.1.Final
      +-io.vertx:vertx-web:4.1.5 (managed) <-- io.vertx:vertx-web:4.1.5
        +-io.vertx:vertx-core:4.1.5 (managed) <-- io.vertx:vertx-core:4.1.5
          +-org.apache.logging.log4j:log4j-api:2.13.3 [provided]
and
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-resteasy:2.4.1.Final
    +-io.quarkus:quarkus-vertx-http:2.4.1.Final (managed) <-- io.quarkus:quarkus-vertx-http:2.4.1.Final
      +-io.vertx:vertx-web:4.1.5 (managed) <-- io.vertx:vertx-web:4.1.5
        +-io.vertx:vertx-core:4.1.5 (managed) <-- io.vertx:vertx-core:4.1.5
          +-org.apache.logging.log4j:log4j-core:2.13.3 [provided]
            +-org.apache.logging.log4j:log4j-api:2.13.3 [provided]
and
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-resteasy:2.4.1.Final
    +-io.quarkus:quarkus-resteasy-server-common:2.4.1.Final (managed) <-- io.quarkus:quarkus-resteasy-server-common:2.4.1.Final
      +-io.quarkus:quarkus-resteasy-common:2.4.1.Final (managed) <-- io.quarkus:quarkus-resteasy-common:2.4.1.Final
        +-org.jboss.resteasy:resteasy-core:4.7.0.Final (managed) <-- org.jboss.resteasy:resteasy-core:4.7.0.Final
          +-org.jboss.resteasy:resteasy-core-spi:4.7.0.Final (managed) <-- org.jboss.resteasy:resteasy-core-spi:4.7.0.Final
            +-org.apache.logging.log4j:log4j-api:2.13.3 [provided]
, 
Require upper bound dependencies error for io.smallrye.common:smallrye-common-annotation:1.6.0 paths to dependency are:
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-resteasy:2.4.1.Final
    +-io.quarkus:quarkus-vertx-http:2.4.1.Final (managed) <-- io.quarkus:quarkus-vertx-http:2.4.1.Final
      +-io.quarkus:quarkus-vertx:2.4.1.Final (managed) <-- io.quarkus:quarkus-vertx:2.4.1.Final
        +-io.smallrye.common:smallrye-common-annotation:1.6.0 (managed) <-- io.smallrye.common:smallrye-common-annotation:1.6.0
and
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:2.4.1.Final
    +-io.quarkus:quarkus-core:2.4.1.Final (managed) <-- io.quarkus:quarkus-core:2.4.1.Final
      +-io.smallrye.config:smallrye-config:2.5.1 (managed) <-- io.smallrye.config:smallrye-config:2.5.1
        +-io.smallrye.config:smallrye-config-core:2.5.1
          +-io.smallrye.common:smallrye-common-annotation:1.6.0 (managed) <-- io.smallrye.common:smallrye-common-annotation:1.6.0
and
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-resteasy:2.4.1.Final
    +-io.quarkus:quarkus-vertx-http:2.4.1.Final (managed) <-- io.quarkus:quarkus-vertx-http:2.4.1.Final
      +-io.quarkus:quarkus-mutiny:2.4.1.Final (managed) <-- io.quarkus:quarkus-mutiny:2.4.1.Final
        +-io.smallrye.reactive:mutiny:1.1.2 (managed) <-- io.smallrye.reactive:mutiny:1.1.2
          +-io.smallrye.common:smallrye-common-annotation:1.6.0 (managed) <-- io.smallrye.common:smallrye-common-annotation:1.7.1
, 
Require upper bound dependencies error for org.jboss.jdeparser:jdeparser:2.0.2.Final [provided] paths to dependency are:
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:2.4.1.Final
    +-io.quarkus:quarkus-core:2.4.1.Final (managed) <-- io.quarkus:quarkus-core:2.4.1.Final
      +-io.quarkus:quarkus-extension-processor:2.4.1.Final [provided]
        +-org.jboss.jdeparser:jdeparser:2.0.2.Final [provided]
and
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-arc:2.4.1.Final
    +-io.quarkus:quarkus-core:2.4.1.Final (managed) <-- io.quarkus:quarkus-core:2.4.1.Final
      +-io.smallrye.config:smallrye-config:2.5.1 (managed) <-- io.smallrye.config:smallrye-config:2.5.1
        +-org.jboss.logging:jboss-logging-processor:2.2.1.Final [provided] (managed) <-- org.jboss.logging:jboss-logging-processor:2.2.1.Final [provided]
          +-org.jboss.jdeparser:jdeparser:2.0.3.Final [provided]
, 
Require upper bound dependencies error for com.google.inject:guice:3.0 [test] paths to dependency are:
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-junit5:2.4.1.Final [test]
    +-org.eclipse.sisu:org.eclipse.sisu.inject:0.3.4 [test] (managed) <-- org.eclipse.sisu:org.eclipse.sisu.inject:0.3.4 [test]
      +-com.google.inject:guice:3.0 [test]
and
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-junit5:2.4.1.Final [test]
    +-io.quarkus:quarkus-bootstrap-core:2.4.1.Final [test] (managed) <-- io.quarkus:quarkus-bootstrap-core:2.4.1.Final [test]
      +-io.quarkus:quarkus-bootstrap-maven-resolver:2.4.1.Final [test] (managed) <-- io.quarkus:quarkus-bootstrap-maven-resolver:2.4.1.Final [test]
        +-org.apache.maven:maven-embedder:3.8.1 [test] (managed) <-- org.apache.maven:maven-embedder:3.8.1 [test]
          +-com.google.inject:guice:4.2.1:no_aop [test]
and
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.quarkus:quarkus-junit5:2.4.1.Final [test]
    +-io.quarkus:quarkus-bootstrap-core:2.4.1.Final [test] (managed) <-- io.quarkus:quarkus-bootstrap-core:2.4.1.Final [test]
      +-io.quarkus:quarkus-bootstrap-maven-resolver:2.4.1.Final [test] (managed) <-- io.quarkus:quarkus-bootstrap-maven-resolver:2.4.1.Final [test]
        +-org.apache.maven:maven-embedder:3.8.1 [test] (managed) <-- org.apache.maven:maven-embedder:3.8.1 [test]
          +-org.apache.maven:maven-core:3.8.1 [test] (managed) <-- org.apache.maven:maven-core:3.8.1 [test]
            +-com.google.inject:guice:4.2.1:no_aop [test]
, 
Require upper bound dependencies error for org.glassfish.jaxb:jaxb-runtime:2.3.3-b02 [test] paths to dependency are:
+-org.acme:code-with-quarkus:1.0.0-SNAPSHOT
  +-io.rest-assured:rest-assured:4.4.0 [test]
    +-io.rest-assured:xml-path:4.4.0 [test]
      +-com.sun.xml.bind:jaxb-impl:2.3.3 [test]
        +-org.glassfish.jaxb:jaxb-runtime:2.3.3-b02 [test] (managed) <-- org.glassfish.jaxb:jaxb-runtime:2.3.3 [test]

How to Reproduce?

  1. create a new project at code.quarkus.io. Use the provided defaults, don’t add any extensions.
  2. add the following plugin configuration to the <plugins> block
    <plugins>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-enforcer-plugin</artifactId>
        <version>3.0.0</version>
        <executions>
          <execution>
            <phase>validate</phase>
            <goals>
              <goal>enforce</goal>
            </goals>
            <configuration>
              <rules>
                <dependencyConvergence/>
                <requireUpperBoundDeps/>
              </rules>
            </configuration>
          </execution>
        </executions>
        <dependencies>
          <dependency>
            <groupId>org.codehaus.mojo</groupId>
            <artifactId>extra-enforcer-rules</artifactId>
            <version>1.4</version>
          </dependency>
        </dependencies>
      </plugin>
  1. attempt a full build with ./mvnw verify.

Output of uname -a or ver

Darwin aalmiray2.local 20.6.0 Darwin Kernel Version 20.6.0: Mon Aug 30 06:12:21 PDT 2021; root:xnu-7195.141.6~3/RELEASE_X86_64 x86_64

Output of java -version

openjdk version “17.0.1” 2021-10-19 OpenJDK Runtime Environment GraalVM CE 21.3.0 (build 17.0.1+12-jvmci-21.3-b05) OpenJDK 64-Bit Server VM GraalVM CE 21.3.0 (build 17.0.1+12-jvmci-21.3-b05, mixed mode, sharing)

GraalVM version (if different from Java)

No response

Quarkus version or git rev

2.4.1.Final

Build tool (ie. output of mvnw --version or gradlew --version)

Apache Maven 3.8.1 (05c21c65bdfed0f71a2f2ada8b84da59348c4c5d) Maven home: /Users/aalmiray/.m2/wrapper/dists/apache-maven-3.8.1-bin/2l5mhf2pq2clrde7f7qp1rdt5m/apache-maven-3.8.1 Java version: 17.0.1, vendor: GraalVM Community, runtime: /Users/aalmiray/.sdkman/candidates/java/21.3.0.r17-grl Default locale: en_US, platform encoding: UTF-8 OS name: “mac os x”, version: “11.6”, arch: “x86_64”, family: “mac”

Additional information

No response

Issue Analytics

  • State:closed
  • Created 2 years ago
  • Reactions:1
  • Comments:13 (12 by maintainers)

github_iconTop GitHub Comments

1reaction
gsmetcommented, Jan 6, 2022

I’m closing this one as won’t fix.

0reactions
famodcommented, Jan 2, 2022

Yeah, maintaining specific excludes for each Quarkus release sounds like a maintenance nightmare.

OTOH, when updating a dependency, is everyone aware that he/she might be forcing this dependency to run on outdated transitive dependencies?

Read more comments on GitHub >

github_iconTop Results From Across the Web

java - Failed to execute goal org.apache.maven.plugins ...
1:enforce (enforce-versions) on project SIMI: Some Enforcer rules have failed. Look above for specific messages explaining why the rule failed.
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found