Change BOM activation and stop managing dependencies

apache / logging-parent

Parent project internally used in Maven-based projects of the Apache Logging Services

https://logging.apache.org/logging-parent

Apache License 2.0

2 stars 6 forks source link

Closed vy closed 1 week ago

vy commented 1 week ago

This PR implements following changes

Activate flatten-bom execution of flatten-maven-plugin using a .logging-parent-bom-activator file
Remove following managed dependencies to avoid polluting BOMs:
- biz.aQute.bnd:biz.aQute.bnd.annotation
- com.github.spotbugs:spotbugs-annotations
- org.jspecify:jspecify
- org.osgi:osgi.annotation
- org.osgi:org.osgi.annotation.bundle
- org.osgi:org.osgi.annotation.versioning

The removal of managed dependencies fixes apache/logging-log4j2#3066.

vy commented 1 week ago

That makes me wonder if we can omit <pomElements> and use the defaults.

@ppkarwasz, I prefer not to – it keeps properties, profiles, etc. all redundant (and potentially dangerous) stuff there.