From 51dd9eae147fefcac3d514bd30732f574aca8697 Mon Sep 17 00:00:00 2001
From: Mark Waite <mark.earl.waite@gmail.com>
Date: Sat, 10 Jan 2026 08:28:28 -0700
Subject: [PATCH] Explicitly declare dependencies

Reduce the risk that new dependencies will be injected accidentally from
a dependency update.

The developer documentation provides more details at
https://www.jenkins.io/doc/developer/plugin-development/dependencies-and-class-loading/#build-time-validation-of-bundled-artifacts

Originally added to Maven hpi plugin in pull request:

* https://github.com/jenkinsci/maven-hpi-plugin/pull/771

Testing done

* Confirmed that automated tests pass
---
 pom.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pom.xml b/pom.xml
index 40beaefd..4718353b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -50,6 +50,8 @@
     <revision>3.22</revision>
     <changelist>-SNAPSHOT</changelist>
     <gitHubRepo>jenkinsci/${project.artifactId}-plugin</gitHubRepo>
+    <hpi.bundledArtifacts>atlassian-event,atlassian-httpclient-api,atlassian-util-concurrent,fugue,jira-rest-java-client-api,jira-rest-java-client-core,maven-artifact,plexus-utils,sal-api</hpi.bundledArtifacts>
+    <hpi.strictBundledArtifacts>true</hpi.strictBundledArtifacts>
     <jira-rest-client.version>6.0.2</jira-rest-client.version>
     <fugue.version>4.7.2</fugue.version>
     <!-- https://www.jenkins.io/doc/developer/plugin-development/choosing-jenkins-baseline/ -->