maven-dependency-plugin icon indicating copy to clipboard operation
maven-dependency-plugin copied to clipboard

[MDEP-976] artifactId is not guaranteed to be globally unique

Open jira-importer opened this issue 9 months ago • 1 comments

Gili opened MDEP-976 and commented

The copy-dependencies Mojo incorrectly assumes that a dependency's artifactId is globally unique. If a project depends on two different groupIds that happen to have the same artifactId then one dependency will overwrite the other.

Consider adding ${groupId} to the default output filename and/or add an option for doing so in case users wish to retain backwards compatibility.


Affects: 3.8.1

Remote Links:

jira-importer avatar Feb 18 '25 13:02 jira-importer

Gili commented

To be honest, I wasn't even aware of "prependGroupId" existed until the PR was filed. Why not just flip the default value to "true" then? Users who wish to retain the old behavior can explicitly set it to "false".

jira-importer avatar Apr 23 '25 14:04 jira-importer