Uploaded image for project: 'SonarPHP'
  1. SonarPHP
  2. SONARPHP-341

Remove XStream transitive dependency

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.3
    • Component/s: Plugin
    • Labels:
      None

      Description

      To do this, the following dependency should be added in the pom.xml :

      <dependency>
          <groupId>com.thoughtworks.xstream</groupId>
          <artifactId>xstream</artifactId>
          <version>1.3.1</version>
      </dependency>
      

      And as XStream is still provided by SonarQube, the Sonar packaging maven plugin will detect it as a transitive dependency and remove it from the jar, so sonar-plugin-api dependency should be updated to be able to embed XStream in the jar :

      <dependency>
          <groupId>org.codehaus.sonar</groupId>
          <artifactId>sonar-plugin-api</artifactId>
          <version>${sonar.version}</version>
          <scope>provided</scope>
          <exclusions>
              <!-- allows to package dependencies into plugin -->
              <exclusion>
                  <groupId>com.thoughtworks.xstream</groupId>
                  <artifactId>xstream</artifactId>
              </exclusion>
          </exclusions>
      </dependency>
      

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              lindamartin OLD - Linda Martin (Inactive)
              Reporter:
              lindamartin OLD - Linda Martin (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Due:
                Created:
                Updated:
                Resolved: