Open algomaster99 opened 1 year ago
Thanks for reporting this issue! Sounds like a big problem if we are not reporting the right version!
Maybe a good way to start working on this would be to try to replicate this in a test like those ones: https://github.com/openrewrite/rewrite-maven-plugin/blob/main/src/test/java/org/openrewrite/maven/RewriteCycloneDxIT.java
If you open a Draft Pull Request we can have a look at it together.
I am on it. I will submit a pull request soon.
What version of OpenRewrite are you using?
I am using
How are you running OpenRewrite?
I am running the maven plugin on https://github.com/vmi/selenese-runner-java/tree/3e84e8e4e7e06aa1bdacaa8266db00f62ebef559.
What is the smallest, simplest way to reproduce the problem?
What did you expect to see?
The version of
io.netty:netty-handler
should be4.1.79.Final
according to maven dependency plugin. See our report generated from maven-dependency-plugin here.What did you see instead?
4.1.78.Final
was reported.What is the full stack trace of any errors you encountered?
See the SBOM file produced.
https://github.com/chains-project/SBOM-2023/blob/major-revision/sbom-production/results/selenese-runner-java/openrewrite/sbom.json
Are you interested in contributing a fix to OpenRewrite?
I could give it a try if the contributors can help me debug it.