jenkinsci / jenkinsci/plugin-pom

Require upper bound dependencies error for `org.ow2.asm:asm:9.5`

Open
#1,032 7 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
75
Forks
81
Avg merge
9m
Merged PRs (30d)
18

Description

While trying to upgrade `workflow-job` to the 5.0 release in https://github.com/jenkinsci/workflow-job-plugin/pull/471, I am getting this bizarre Enforcer error:

```
Require upper bound dependencies error for org.ow2.asm:asm:9.5 paths to dependency are:
+-org.jenkins-ci.plugins.workflow:workflow-job:999999-SNAPSHOT
+-org.jenkins-ci.plugins.workflow:workflow-api:1322.v857eeeea_9902
+-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:683.vb_16722fb_b_80b_
+-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
+-org.ow2.asm:asm:9.5 (managed) <-- org.ow2.asm:asm:9.7
and
+-org.jenkins-ci.plugins.workflow:workflow-job:999999-SNAPSHOT
+-org.jenkins-ci.plugins.workflow:workflow-api:1322.v857eeeea_9902
+-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:683.vb_16722fb_b_80b_
+-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
+-org.ow2.asm:asm-commons:9.7
+-org.ow2.asm:asm:9.5 (managed) <-- org.ow2.asm:asm:9.7
and
+-org.jenkins-ci.plugins.workflow:workflow-job:999999-SNAPSHOT
+-org.jenkins-ci.plugins.workflow:workflow-api:1322.v857eeeea_9902
+-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:683.vb_16722fb_b_80b_
+-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
+-org.ow2.asm:asm-tree:9.7
+-org.ow2.asm:asm:9.5 (managed) <-- org.ow2.asm:asm:9.7
and
+-org.jenkins-ci.plugins.workflow:workflow-job:999999-SNAPSHOT
+-org.jenkins-ci.plugins.workflow:workflow-api:1322.v857eeeea_9902
+-org.jenkins-ci.plugins:scm-api:690.vfc8b_54395023 (managed) <-- org.jenkins-ci.plugins:scm-api:683.vb_16722fb_b_80b_
+-io.jenkins.plugins:asm-api:9.7-33.v4d23ef79fcc8 (managed) <-- io.jenkins.plugins:asm-api:9.6-3.v2e1fa_b_338cd7
+-org.ow2.asm:asm-util:9.7
+-org.ow2.asm:asm:9.5 (managed) <-- org.ow2.asm:asm:9.7
```

I cannot figure out where ASM 9.5 is coming from in the above dependency tree. Does anyone have any idea what is going on here?

Contributor guide

Open the contributing guide

Research direction

Start with the dependency paths in the reported workflow-job 5.0 upgrade and inspect the managed versions for scm-api, asm-api, and the ASM modules. Determine why org.ow2.asm:asm:9.5 remains managed while related modules resolve to 9.7, then verify that the Enforcer error is resolved without breaking the dependency tree.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.