Description
com.microsoft.azure:azure-servicebus-jms:1.0.0
depends on org.apache.geronimo.specs:geronimo-jms_2.0_spec:LATEST
when it probably should be depending on version 1.0-alpha-2.
While LATEST is still supported by maven mainly for backward compatibility, it should be avoided since it can't guarantee reproducible builds.
[INFO] - com.azure.spring:spring-cloud-azure-starter-appconfiguration-config:jar:4.14.0:compile
[INFO] - com.azure.spring:spring-cloud-azure-appconfiguration-config-web:jar:4.14.0:compile (version managed from 4.14.0)
[INFO] - com.azure.spring:spring-cloud-azure-appconfiguration-config:jar:4.14.0:compile (version managed from 4.14.0)
[INFO] - com.azure.spring:spring-cloud-azure-autoconfigure:jar:4.14.0:compile (version managed from 4.13.0)
[INFO] - com.microsoft.azure:azure-servicebus-jms:jar:1.0.0:compile
[INFO] +- org.apache.qpid:qpid-jms-client:jar:0.53.0:compile
[INFO] | - (org.apache.geronimo.specs:geronimo-jms_2.0_spec:jar:1.0-alpha-2:compile - version managed from 1.0-alpha-2; omitted for duplicate)
[INFO] - org.apache.geronimo.specs:geronimo-jms_2.0_spec:jar:1.0-alpha-2:compile (version managed from LATEST)
Exception or Stack Trace
Add the exception log and stack trace if available
Steps to reproduce the behavior:
Run ./mvnw dependency:tree -Dincludes=org.apache.geronimo.specs -Dverbose
on any project that depends on com.microsoft.azure:azure-servicebus-jms:1.0.0
Metadata
Metadata
Assignees
Labels
Type
Projects
Status