Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix maven dependency plugin warnings #340

Merged
merged 14 commits into from
Sep 26, 2024

Conversation

Awambeng
Copy link
Collaborator

  • add used undeclared dependencies
  • remove all unused declared dependencies

@Awambeng Awambeng linked an issue Jul 25, 2024 that may be closed by this pull request
datasafe-rest-impl/pom.xml Outdated Show resolved Hide resolved
last-module-codecoverage-check/pom.xml Outdated Show resolved Hide resolved
Copy link

codecov bot commented Jul 26, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 86.76%. Comparing base (89da57d) to head (353a076).
Report is 32 commits behind head on develop.

Additional details and impacted files
@@              Coverage Diff              @@
##             develop     #340      +/-   ##
=============================================
+ Coverage      86.14%   86.76%   +0.62%     
  Complexity         1        1              
=============================================
  Files            165      164       -1     
  Lines           3348     3348              
  Branches         217      217              
=============================================
+ Hits            2884     2905      +21     
+ Misses           330      309      -21     
  Partials         134      134              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@Awambeng Awambeng requested a review from max402 July 26, 2024 08:15
Copy link
Collaborator

@max402 max402 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't like that dependency-plugin requires to specify explicitly all transitive dependencies

datasafe-rest-impl/pom.xml Outdated Show resolved Hide resolved
datasafe-rest-impl/pom.xml Outdated Show resolved Hide resolved
datasafe-rest-impl/pom.xml Outdated Show resolved Hide resolved
datasafe-rest-impl/pom.xml Outdated Show resolved Hide resolved
datasafe-rest-impl/pom.xml Outdated Show resolved Hide resolved
datasafe-rest-impl/pom.xml Show resolved Hide resolved
datasafe-rest-impl/pom.xml Show resolved Hide resolved
datasafe-rest-impl/pom.xml Show resolved Hide resolved
@Awambeng Awambeng requested a review from max402 August 5, 2024 07:54
Copy link
Collaborator

@max402 max402 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Check before commit, that datasafe-rest-impl application is working

<groupId>jakarta.validation</groupId>
<artifactId>jakarta.validation-api</artifactId>
</exclusion>
</exclusions>
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What is the reason to exclude jakarta.validation-api and then add it separately?

<groupId>com.amazonaws</groupId>
<artifactId>aws-java-sdk-core</artifactId>
</exclusion>
</exclusions>
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What is the reason to exclude com.amazonaws dependencies and then add them again?
If there are maven-dependency-plugin warnings, please add ignoredUsedUndeclaredDependencies in plugin configuration.

<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
</exclusion>
</exclusions>
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That makes no sense. If there are plugin warnings, then add ignore in plugin configuration.

<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-actuator-autoconfigure</artifactId>
</exclusion>
</exclusions>
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please don't exclude from starters, add ignore in plugin configuration

<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot</artifactId>
</exclusion>
</exclusions>
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please don't exclude, add ignore in plugin configuration

<groupId>org.springframework.security</groupId>
<artifactId>spring-security-core</artifactId>
</exclusion>
</exclusions>
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please don't exclude, add ignore in plugin configuration

<groupId>com.amazonaws</groupId>
<artifactId>aws-java-sdk-core</artifactId>
</exclusion>
</exclusions>
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please don't exclude, add ignore in plugin configuration

<groupId>org.jetbrains</groupId>
<artifactId>annotations</artifactId>
</exclusion>
</exclusions>
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

makes no sense. assertj-core doesn't include jetbrains annotation

@Elwizzy12 Elwizzy12 self-assigned this Sep 3, 2024
Copy link

sonarcloud bot commented Sep 3, 2024

@AssahBismarkabah
Copy link
Collaborator

looks good to me @max402

@francis-pouatcha francis-pouatcha merged commit c23e1ef into develop Sep 26, 2024
4 checks passed
@francis-pouatcha francis-pouatcha deleted the fix-dependency-plugin-warnings branch September 26, 2024 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Fix dependency-plugin warnings
5 participants