librariesio / bibliothecary

:notebook_with_decorative_cover: Libraries.io Package Manager Manifest Parsers
https://libraries.io/rubygems/bibliothecary
GNU Affero General Public License v3.0
89 stars 36 forks source link

8.7.0: fix dependencyManagement section usage in maven pom.xml parser #578

Closed tiegz closed 1 year ago

tiegz commented 1 year ago

In version 6.6.0 we added support for deps declared in the <dependencyManagement> section. This section is only for dependency configuration though, not for explicitly importing deps into the project.

This change reverts that behavior so we no longer import those deps, but we'll use the information (version/scope) in there as fallbacks for the actual deps in <dependencies> section instead.

https://github.com/librariesio/bibliothecary/pull/451