[MDEP-507] dependency:resolve-plugins and dependency:go-offline doesn't respect plugin dependencies from pom.xml

**[Marek Hudik](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=amra_san)** opened **[MDEP-507](https://issues.apache.org/jira/browse/MDEP-507?redirect=false)** and commented

When I override plugin dependecies in `pom.xml` then dependency:resolve-plugins and dependency:go-offline displays wrong dependencies.

This example shows selenium version `2.21.0` instead of `2.47.1`. The only way to check what is used is to delete local maven repo, execute the target and see what dependencies were downloaded.

`pom.xml`

```

org.codehaus.mojo
selenium-maven-plugin
2.3


org.seleniumhq.selenium
selenium-server
2.47.1


org.seleniumhq.selenium
selenium-remote-driver
2.47.1


org.seleniumhq.selenium
selenium-api
2.47.1


```

`mvn dependency:resolve-plugins`

```
[INFO] Plugin Resolved: selenium-maven-plugin-2.3.jar
[INFO] Plugin Dependency Resolved: gmaven-mojo-1.3.jar
[INFO] Plugin Dependency Resolved: gmaven-mojo-support-1.3.jar
[INFO] Plugin Dependency Resolved: groovy-all-1.7.5.jar
[INFO] Plugin Dependency Resolved: selenium-server-2.21.0.jar
[INFO] Plugin Dependency Resolved: selenium-remote-driver-2.21.0.jar
[INFO] Plugin Dependency Resolved: selenium-api-2.21.0.jar
[INFO] Plugin Dependency Resolved: selenium-remote-control-2.0rc2.jar
[INFO] Plugin Dependency Resolved: bcprov-jdk15-140.jar
[INFO] Plugin Dependency Resolved: guava-10.0.1.jar
[INFO] Plugin Dependency Resolved: commons-exec-1.1.jar
[INFO] Plugin Dependency Resolved: commons-logging-1.1.1.jar
[INFO] Plugin Dependency Resolved: selenium-java-client-driver-1.0.2.jar
[INFO] Plugin Dependency Resolved: servlet-api-2.4.jar
[INFO] Plugin Dependency Resolved: commons-lang-2.4.jar
[INFO] Plugin Dependency Resolved: commons-codec-1.5.jar
[INFO] Plugin Dependency Resolved: log4j-1.2.14.jar
```

`mvn dependency:go-offline`

```
[INFO] Plugin Resolved: selenium-maven-plugin-2.3.jar
[INFO] Plugin Dependency Resolved: gmaven-mojo-1.3.jar
[INFO] Plugin Dependency Resolved: gmaven-mojo-support-1.3.jar
[INFO] Plugin Dependency Resolved: groovy-all-1.7.5.jar
[INFO] Plugin Dependency Resolved: selenium-server-2.21.0.jar
[INFO] Plugin Dependency Resolved: selenium-remote-driver-2.21.0.jar
[INFO] Plugin Dependency Resolved: selenium-api-2.21.0.jar
[INFO] Plugin Dependency Resolved: selenium-remote-control-2.0rc2.jar
[INFO] Plugin Dependency Resolved: bcprov-jdk15-140.jar
[INFO] Plugin Dependency Resolved: guava-10.0.1.jar
[INFO] Plugin Dependency Resolved: commons-exec-1.1.jar
[INFO] Plugin Dependency Resolved: commons-logging-1.1.1.jar
[INFO] Plugin Dependency Resolved: selenium-java-client-driver-1.0.2.jar
[INFO] Plugin Dependency Resolved: servlet-api-2.4.jar
[INFO] Plugin Dependency Resolved: commons-lang-2.4.jar
[INFO] Plugin Dependency Resolved: commons-codec-1.5.jar
[INFO] Plugin Dependency Resolved: log4j-1.2.14.jar
```

---

**Affects:** 2.8, 3.1.2, 3.3.0

**Issue Links:**
- [MDEP-474](https://issues.apache.org/jira/browse/MDEP-474) Overriding the tomcat-maven-plugin dependencies to 7.0.53 does not get picked up by dependency:resolve-plugins
(_**"is duplicated by"**_)
- [MDEP-863](https://issues.apache.org/jira/browse/MDEP-863) go-offline / resolve-plugins don't take into account dependency overwrite
(_**"is duplicated by"**_)
- [MDEP-934](https://issues.apache.org/jira/browse/MDEP-934) dependency:resolve-plugins doesn't consider plugin dependency overrides
(_**"is duplicated by"**_)
- [MDEP-820](https://issues.apache.org/jira/browse/MDEP-820) dependency:go-offline does not download plugin dependencies
(_**"is duplicated by"**_)
- [MDEP-830](https://issues.apache.org/jira/browse/MDEP-830) Dependencies of explicit dependencies of plugins are not resolved

5 votes, 5 watchers

Reproduce the issue with the shown pom.xml using dependency:resolve-plugins and dependency:go-offline, comparing the reported Selenium versions with the plugin overrides. Trace the dependency resolution entry points for these goals and verify completion when both commands report the overridden 2.47.1 dependencies.

Written by the indexing model from the issue text.