jenkinsci / jenkinsci/plugin-pom
Require upper bound dependencies error for `org.ow2.asm:asm:9.5`
- Dominant language
- Java
- Stars
- 75
- Forks
- 81
- Avg merge
- 9m
- Merged PRs (30d)
- 18
Description
While trying to upgrade `workflow-job` to the 5.0 release in https://github.com/jenkinsci/workflow-job-plugin/pull/471, I am getting this bizarre Enforcer error:
```
Require upper bound dependencies error for org.ow2.asm:asm:9.5 paths to dependency are:
+-org.jenkins-ci.plugins.workflow:workflow-job:999999-SNAPSHOT
+-org.jenkins-ci.plugins.workflow:workflow-api:1322.v857eeeea_9902
+-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:683.vb_16722fb_b_80b_
+-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
+-org.ow2.asm:asm:9.5 (managed) <-- org.ow2.asm:asm:9.7
and
+-org.jenkins-ci.plugins.workflow:workflow-job:999999-SNAPSHOT
+-org.jenkins-ci.plugins.workflow:workflow-api:1322.v857eeeea_9902
+-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:683.vb_16722fb_b_80b_
+-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
+-org.ow2.asm:asm-commons:9.7
+-org.ow2.asm:asm:9.5 (managed) <-- org.ow2.asm:asm:9.7
and
+-org.jenkins-ci.plugins.workflow:workflow-job:999999-SNAPSHOT
+-org.jenkins-ci.plugins.workflow:workflow-api:1322.v857eeeea_9902
+-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:683.vb_16722fb_b_80b_
+-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
+-org.ow2.asm:asm-tree:9.7
+-org.ow2.asm:asm:9.5 (managed) <-- org.ow2.asm:asm:9.7
and
+-org.jenkins-ci.plugins.workflow:workflow-job:999999-SNAPSHOT
+-org.jenkins-ci.plugins.workflow:workflow-api:1322.v857eeeea_9902
+-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:683.vb_16722fb_b_80b_
+-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
+-org.ow2.asm:asm-util:9.7
+-org.ow2.asm:asm:9.5 (managed) <-- org.ow2.asm:asm:9.7
```
I cannot figure out where ASM 9.5 is coming from in the above dependency tree. Does anyone have any idea what is going on here?
Contributor guide
Research direction
Start with the dependency paths in the reported workflow-job 5.0 upgrade and inspect the managed versions for scm-api, asm-api, and the ASM modules. Determine why org.ow2.asm:asm:9.5 remains managed while related modules resolve to 9.7, then verify that the Enforcer error is resolved without breaking the dependency tree.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100