[CAMEL-24635] Cleanup of unused maven plugin related dependencies - #26231
Conversation
|
🌟 Thank you for your contribution to the Apache Camel project! 🌟 🐫 Apache Camel Committers, please review the following items:
|
gnodet
left a comment
There was a problem hiding this comment.
LGTM — verified that none of these 4 removed managed dependencies (maven-toolchain, maven-artifact-manager, maven-plugin-descriptor, maven-project) are actually used as direct dependencies in any child module. The two references to maven-plugin-descriptor in camel-maven-plugin and camel-csimple-maven-plugin are exclusions on exec-maven-plugin, which work independently of dependency management.
Clean removal of ancient Maven 2.2.1 artifacts with known CVE-2021-26291. 👍
|
🧪 CI tested the following changed modules:
|
Description
Some dependencies mentioned under dependency management are not used, 17 years old and contain CVE's. Better to remove them.
Target
mainbranch)Tracking
Apache Camel coding standards and style
mvn clean install -DskipTestslocally from root folder and I have committed all auto-generated changes.AI-assisted contributions
Only manually edited changes