[MRELEASE-917] Snapshot dependency not detected by release:prepare
- Dominant language
- Java
- Stars
- 128
- Forks
- 145
- Avg merge
- 7h 7m
- Merged PRs (30d)
- 3
Description
**[Hendrik Saly](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=salyh)** opened **[MRELEASE-917](https://issues.apache.org/jira/browse/MRELEASE-917?redirect=false)** and commented
Submodule pom contains a \ dependency to a library which contains a snapshot dependency. This was was not detected by the release plugin.
submodule pom (which should be released)
> \
> > > \com.github.stefanbirkner\
> > > \system-rules\
> > > \1.8.0\
> > > \test\
> > > \
The system-rules library pom contains:
> \
> > \commons-io\
> > \commons-io\
> > \[2.0,)\
> > \compile\
> > \
This is resolved to a snapshot like commons-io 2.5-20150806.132407-140
---
**Affects:** 2.5.1
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the release:prepare snapshot-dependency check and reproduce the supplied Maven setup: a test-scoped dependency on system-rules whose transitive commons-io range resolves to a timestamped snapshot. Trace how dependency scopes and version ranges are inspected. Done means release:prepare detects and reports that resolved snapshot dependency instead of proceeding.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system, release
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100