Regression: parent dependencies missing in flattened pom since 1.4.0

[hohwille]

When I have a parent POM that has a compile time dependency X and I do flatten a child POM of it, then flatten-maven-plugin version 1.5.0 does not have X as dependency in the flattened POM.
This is working until version 1.3.0.
Some change broke this - maybe 5b757ae

I am slightly confused why the IT inherit-parent-dependency did not fail (maybe the version of the parent dependency has to be omitted and defined in dependency management).

Here some links to prove the error in my project:

• build-failure due to missing dependency
• build overview
• workaround for the bug
• downgrade of flatten-plugin to 1.3.0 as root fix
• revert of previous workaround to prove that flatten downgrade was the real fix

Related issues:

• flatten fails when dependencies declared in parent and versions defined in parent profile #117

[leonarta]

Was it caused by #329?

[hkampbjorn]

Was it caused by #329?

No, it was #220 that introduced this regression.

Revision 2b1a1d3 works and next revision (aab4485) fails :-/

Here is a patch to reproduce the issue
reproduce-issue-377.patch

[hkampbjorn]

It turned out that

• inherit-parent-dependency
• parent-with-version-range

were configured default to flattenDependencyMode direct by default.

They also failed after implementing the bug fix for #220

Originally posted by @KemalSoysal in #220 (comment)

That's the regression, dependencies in parent are direct dependencies and not transitive dependencies. The inherit-parent-dependency IT did fail, and the "fix" was to change the IT and add flattenDependencyMode: all (instead of direct which is the default)

[KemalSoysal]

What exactly is the desired behavior?
I am happy to contribute changes accordingly, but I do not understand the requirement
@hohwille , @leonarta and @hkampbjorn.
Maybe we could layout the tests accordingly to improve.
I am unhappy to have missed, that there was an issue about i#220's implementation and tests.
Maybe we should complete the coverage of the integration tests on requirements first to find out other issues as a first step...

[filip26]

@KemalSoysal try

• run mvn flatten:flatten on a project using pom_parent.xml, e.g. https://github.com/filip26/titanium-json-ld It uses flatten plugin version 1.3.0 that works as expected.
• then save the generated pom and upgrade on the latest flatten plugin and run it again.
• Compare the generated poms. The one generated with newer version would not contain dependencies declared in pom_parent.xml

[KemalSoysal]

Hi @filip26,
thank You very much for your quick response:
As outlined in the description the flatten dependency mode is defaulted to direct

The parent_pom.xml configures the flatten plugin with only ossrh flatten-mode (did I miss a configuration somewhere else?).
There is no code or documentation about ossrh-FlattenMode including the all-flatten-dependency-mode.
I think this needs to be configured in the parent_pom.xml accordingly to your desired flatten-dependency-mode all <flattenDependencyMode>all</flattenDependencyMode>

@filip26 , @leonarta , @hohwille, @filip26, @hkampbjorn Please advise how to proceed

If the requirement is, that the flattenDependencyMode is defaulted to all with the flattenModel ossrh then we should locate the integration tests, enhance if needed and implement the desired behavior.
I only found

src/it/projects/optional-elements-modeOssrh/pom.xml
src/it/projects/flatten-shaded-drp/pom.xml

[filip26]

I guess the issue could be in terminology, transitive vs direct dependency. You suggest that a dependency declared outside main pom.xml is transitive, that the difference is in a location of dependency declaration.

Convenient interpretation is that a direct dependency is the one that an artifact requires to compile/run, no matter where the dependency is declared. Transitive dependency is a dependency of a direct dependency or any other transitive dependency.

[KemalSoysal]

I tested the pom_parent.xml after adding
<flattenDependencyMode>all</flattenDependencyMode>
with the version 1.3.0 and 1.6.0:

I get a difference: <optional>false</optional>. Is this ok for You, @filip26 ?

[filip26]

@KemalSoysal Well, I don't mind adding the config line, generally, the issue is that this plugin changed behavior unexpectedly - a minor version change. I've released a few artifacts with broken pom because of this, so the real issue is to establish a trust again. For now, I'm sticking with 1.3.0 ;)

[KemalSoysal]

I guess the issue could be in terminology, transitive vs direct dependency. You suggest that a dependency declared outside main pom.xml is transitive, that the difference is in a location of dependency declaration.

Communication is always context related and prone to misunderstandings....
the maven way of direct dependency understanding is described here: https://maven.apache.org/pom.html#pom-relationships

[KemalSoysal]

@KemalSoysal Well, I don't mind adding the config line, generally, the issue is that this plugin changed behavior unexpectedly - a minor version change. I've released a few artifacts with broken pom because of this, so the real issue is to establish a trust again. For now, I'm sticking with 1.3.0 ;)

I think there are still a lot of integration tests missing for flatten-maven-plugin....
So we should maybe check the expectations with the documentation....
@hohwille , @leonarta , @hkampbjorn

[KemalSoysal]

@filip26 I guess it was hard to test a <scope>provided</scope> dependency....

[hkampbjorn]

The problem is that 1.4.0 change the behaviour of "direct" from the effective dependencies including those inherited from parent, to exclude those inherited from parent. Without any clarifying updated documentation. To have those inherited dependencies included in versions 1.4.0 up to 1.6.0 we need to change to flatten dependency mode "all" but this will also includes all transitive dependencies. We cannot get the default behaviour in 1.3.0 or before

@KemalSoysal yes there are many small variations that are missing from integration tests, like having dependencies in parent module that have transitive dependencies.

I have a patch that introduces a new "effective" flatten dependency mode, which behaves like 1.2.0 and before, and as "direct" in 1.3.0. And I would also like to make this the default from 1.7.0 on.

I'd like to make "effective" the new default too

PS Personally I consider having compile scope dependencies in parent modules an anti-pattern, but it's allowed in maven, and internally we do have such projects :-(

[KemalSoysal]

Hi @hkampbjorn,

I need your help to really understand the scenario, that you describe.

Could you point to repositories eligible to showcase the flattened-pom problem when changed

• from --- to direct ?
• from --- to all?
  where we can compare the outcome with versions 1.3, 1.4,.. 1.6 ?

Or can you provide a simplistic maybe mermaid diagram to define the the dependencies scenario which fail to be flattened correctly like:

---
title pom dependency diagram
---
graph LR;
    B[module B] -->  A[parent A];
    C[module C] -->A;
    D[module D] --> B;
    E[module E]--> C;
    E--> B;

The problem is that 1.4.0 change the behaviour of "direct" from the effective dependencies including those inherited from parent, to exclude those inherited from parent. Without any clarifying updated documentation. To have those inherited dependencies included in versions 1.4.0 up to 1.6.0 we need to change to flatten dependency mode "all" but this will also includes all transitive dependencies. We cannot get the default behaviour in 1.3.0 or before

• The default behavior was to get all in that case, as far as I remember.
• When you mention effective, do you mean the help:effective-pom result?
• Are you observing, when you make an effective pom from the flattened, then you get different results?

I have a patch that introduces a new "effective" flatten dependency mode, which behaves like 1.2.0 and before, and as "direct" in 1.3.0. And I would also like to make this the default from 1.7.0 on.

What is the difference in the flattened-pom ?