aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMatthias Andreas Benkard <code@mail.matthias.benkard.de>2024-03-02 21:49:26 +0100
committerMatthias Andreas Benkard <code@mail.matthias.benkard.de>2024-03-02 21:53:57 +0100
commit6f2e5bf0dcf5fcb1553d0f73d7ce6145f6d4e2d1 (patch)
treeb9ec7117e50ec0dd26214b66a5648585a95d84c2
parent7a038210d620686727d0f843868b428a5ba42ff5 (diff)
jgvariant-tool: Mark compile-time-only dependencies as optional.
The way flatten-maven-plugin is configured, optional dependencies are omitted, but provided dependencies are included in the final POM. Since they are not needed at runtime, it makes sense to omit them by marking them as optional. This causes fewer security alerts. Change-Id: I8f39c0066331c067186b9fa016bf60477653a48c
-rw-r--r--jgvariant-tool/pom.xml3
1 files changed, 3 insertions, 0 deletions
diff --git a/jgvariant-tool/pom.xml b/jgvariant-tool/pom.xml
index ac21749..f4026e4 100644
--- a/jgvariant-tool/pom.xml
+++ b/jgvariant-tool/pom.xml
@@ -50,16 +50,19 @@ SPDX-License-Identifier: GPL-3.0-or-later
<groupId>com.google.errorprone</groupId>
<artifactId>error_prone_annotations</artifactId>
<scope>provided</scope>
+ <optional>true</optional>
</dependency>
<dependency>
<groupId>org.jetbrains</groupId>
<artifactId>annotations</artifactId>
<scope>provided</scope>
+ <optional>true</optional>
</dependency>
<dependency>
<groupId>org.apiguardian</groupId>
<artifactId>apiguardian-api</artifactId>
<scope>provided</scope>
+ <optional>true</optional>
</dependency>
<!-- Command line tooling -->