apache / apache/maven-release

[MRELEASE-917] Snapshot dependency not detected by release:prepare

Open
#1,067 1 comment 0 reactions 0 assignees View on GitHub
bug
Dominant language
Java
Stars
128
Forks
145
Avg merge
7h 7m
Merged PRs (30d)
3

Description

**[Hendrik Saly](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=salyh)** opened **[MRELEASE-917](https://issues.apache.org/jira/browse/MRELEASE-917?redirect=false)** and commented

Submodule pom contains a \ dependency to a library which contains a snapshot dependency. This was was not detected by the release plugin.

submodule pom (which should be released)

> \
> > > \com.github.stefanbirkner\
> > > \system-rules\
> > > \1.8.0\
> > > \test\
> > > \

The system-rules library pom contains:

> \
> > \commons-io\
> > \commons-io\
> > \[2.0,)\
> > \compile\
> > \

This is resolved to a snapshot like commons-io 2.5-20150806.132407-140

---

**Affects:** 2.5.1

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the release:prepare snapshot-dependency check and reproduce the supplied Maven setup: a test-scoped dependency on system-rules whose transitive commons-io range resolves to a timestamped snapshot. Trace how dependency scopes and version ranges are inspected. Done means release:prepare detects and reports that resolved snapshot dependency instead of proceeding.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system, release
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.