maven-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Michael Osipov <>
Subject Dependencies in Dep Mngt without version
Date Wed, 07 Oct 2015 21:24:22 GMT
Hi folks,

I am currently trying to fix MDEP-506 [1].

The core problem is that a POM has a dep in dep mngt without version and 
that dependency is never referenced. Unfortunately, that build succeeds 
though the POM is invalid.

I have done some digging and found 
DefaultModelBuilder#importDependencyManagement. The faulty dependency is 
skipped because it is neither type pom nor import [2]. That would make 
the build fail in the first place.

After all that the DefaultModelValidator#validateEffectiveDependency 
method kicks in and validates the dependency elements but explicitly 
excludes deps from dep mngt from version validation [3].

Can someone tell me why? It does not feel right.

An issue was raised and committed but not resolved [4].



To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message