Skip to content

Conversation

@MarkEWaite
Copy link
Contributor

Explicitly declare dependencies

Reduce the risk that new dependencies will be injected accidentally from a dependency update.

The developer documentation provides more details.

Originally added to Maven hpi plugin in pull request:

Testing done

  • Confirmed that automated tests pass

Submitter checklist

  • Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
  • Ensure that the pull request title represents the desired changelog entry
  • Please describe what you did
  • Link to relevant issues in GitHub or Jira
  • Link to relevant pull requests, esp. upstream and downstream changes

Reduce the risk that new dependencies will be injected accidentally from
a dependency update.

The developer documentation provides more details at
https://www.jenkins.io/doc/developer/plugin-development/dependencies-and-class-loading/#build-time-validation-of-bundled-artifacts

Originally added to Maven hpi plugin in pull request:

* jenkinsci/maven-hpi-plugin#771

Testing done

* Confirmed that automated tests pass
@MarkEWaite
Copy link
Contributor Author

@alecharp could you review and merge this pull request? It is part of the effort to make explicitly declared dependencies an opt-out configuration of a future release of the plugin parent pom.

Copy link
Member

@alecharp alecharp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sadly I cannot merge this one. cc @jenkinsci/ec2-plugin-developers

@res0nance res0nance merged commit 44286f6 into jenkinsci:master Jan 16, 2026
16 checks passed
@MarkEWaite MarkEWaite deleted the explicitly-declare-dependencies branch January 16, 2026 13:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants