maven 程序集提取错误的依赖项

Question

当我使用程序集插件时，我得到了一个意外版本的依赖项 (1.5.8)，但在其他地方没有。在我的 pom 中，我有：

    <dependency>
        <groupId>org.slf4j</groupId>
        <artifactId>slf4j-log4j12</artifactId>
        <version>1.6.0</version>
    </dependency>

当我运行dependency:tree 或dependency:list 时，我看到了正确的版本，并且只看到了正确的版本。当我签入 Eclipse 时，我只看到正确的版本。

在我的 assembly.xml 我有：

<dependencySets>
    <dependencySet>
        <outputDirectory>lib</outputDirectory>
    </dependencySet>
</dependencySets>

在生成的 zip 中，我得到了 slf4j-log4j12-1.5.8.jar。不知道这是从哪里来的。有什么帮助吗？

使用 maven 3.0.4。

Answer 1

这是由于“错误”的程序集插件版本 (2.2-beta-5) 造成的。我的 pom.xml 没有指定插件版本。当我明确将其标记为 2.4（或阅读本文时的最新版本！）时，插件提取了正确的依赖项。

经验教训 - 如果您在构建中收到以下警告：

[WARNING] 'build.plugins.plugin.version' for org.apache.maven.plugins:maven-whatever-plugin is missing
It is highly recommended to fix these problems because they threaten the stability of your build.

.. 修复它！

Answer 2

1. 您可以尝试从您的 maven 存储库中删除错误的 JAR (slf4j-log4j12-1.5.8.jar) 并在其中添加正确的 JAR (slf4j-log4j12-1.6.0.jar)。然后使用--offline 开关运行您的构建。在 maven 尝试获取错误 JAR 的那一刻，构建将失败，并且 maven 将向您展示它试图从什么传递依赖中获取它。然后你将它从传递依赖中排除：

   <exclusions>
     <exclusion>
       <artifactId>slf4j-api</artifactId>
       <groupId>slf4j-log4j12</groupId>
     </exclusion>
   </exclusions>
   

2. 检查您获得的 JAR 是否具有正确的 groupId。有些人为愚蠢和邪恶特殊目的创建常见 JAR 的副本，这可能会使 maven 感到困惑。特别是，检查您是否没有收到org.jboss.resteasy:slf4j-log4j12。您可以使用 maven-enforcer-plugin 禁止不需要的依赖项，如下所示：

   <plugin>
     <groupId>org.apache.maven.plugins</groupId>
     <artifactId>maven-enforcer-plugin</artifactId>
     <version>1.0</version>
     <executions>
       <execution>
         <id>enforce-banned-dependencies</id>
         <goals>
            <goal>enforce</goal>
         </goals>
         <configuration>
           <rules>
             <bannedDependencies>
               <excludes>
                 <exclude>org.slf4j:slf4j-log4j12:1.5.8</exclude> <!-- Wrong version, dude! -->
                 <exclude>commons-logging:*</exclude> <!-- Worst, stupidest, lamest logging framework ever! -->
                 <exclude>org.jboss.resteasy:slf4j-simple</exclude> <!-- Evil JAR duplication. -->
                 <exclude>org.jboss.resteasy:slf4j-api</exclude> <!-- Evil JAR duplication. -->
                 <exclude>org.jboss.resteasy:slf4j-log4j12</exclude> <!-- Evil JAR duplication. -->
                 <exclude>org.jboss.resteasy:jackson-core-asl</exclude> <!-- Evil JAR duplication. -->
                 <exclude>org.jboss.resteasy:jackson-mapper-asl</exclude> <!-- Evil JAR duplication. -->
                 <exclude>org.jboss.resteasy:jackson-core-lgpl</exclude> <!-- Evil JAR duplication. -->
                 <exclude>org.jboss.resteasy:jackson-mapper-lgpl</exclude> <!-- Evil JAR duplication. -->
                 <exclude>org.codehaus.jackson:jackson-core-lgpl</exclude> <!-- Two distinct packages for the exact same thing always creates conflicts. We want the ASL one. -->
                 <exclude>org.codehaus.jackson:jackson-mapper-lgpl</exclude> <!-- Two distinct packages for the exact same thing always creates conflicts. We want the ASL one. -->
                 <exclude>velocity-tools:velocity-tools</exclude> <!-- Was renamed. -->
                 <exclude>velocity:velocity</exclude> <!-- Was renamed. -->
                 <exclude>struts:struts</exclude> <!-- Was renamed. -->
                 <exclude>javassist:javassist</exclude> <!-- Was renamed. -->
                 <exclude>axis:*</exclude> <!-- Was renamed to org.apache.axis:* and wsdl4j:wsdl4j . -->
                 <exclude>commons-beanutils:commons-beanutils-core</exclude> <!-- Redundant package. -->
                 <exclude>xpp3:xpp3_min</exclude> <!-- Redundant package. -->
                 <exclude>xml-apis:xml-apis:2.0.0</exclude> <!-- Bad package, for some strange reason 2.0.x is inferior to 1.4.x. -->
                 <exclude>xml-apis:xml-apis:2.0.2</exclude> <!-- Bad package, for some strange reason 2.0.x is inferior to 1.4.x. -->
                 <exclude>quartz:quartz</exclude> <!-- Was renamed. -->
               </excludes>
             </bannedDependencies>
           </rules>
         </configuration>
       </execution>
     </executions>
   </plugin>