From 6f2e5bf0dcf5fcb1553d0f73d7ce6145f6d4e2d1 Mon Sep 17 00:00:00 2001
From: Matthias Andreas Benkard <code@mail.matthias.benkard.de>
Date: Sat, 2 Mar 2024 21:49:26 +0100
Subject: jgvariant-tool: Mark compile-time-only dependencies as optional.

The way flatten-maven-plugin is configured, optional dependencies are
omitted, but provided dependencies are included in the final POM.
Since they are not needed at runtime, it makes sense to omit them by
marking them as optional.  This causes fewer security alerts.

Change-Id: I8f39c0066331c067186b9fa016bf60477653a48c
---
 jgvariant-tool/pom.xml | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'jgvariant-tool')

diff --git a/jgvariant-tool/pom.xml b/jgvariant-tool/pom.xml
index ac21749..f4026e4 100644
--- a/jgvariant-tool/pom.xml
+++ b/jgvariant-tool/pom.xml
@@ -50,16 +50,19 @@ SPDX-License-Identifier: GPL-3.0-or-later
       <groupId>com.google.errorprone</groupId>
       <artifactId>error_prone_annotations</artifactId>
       <scope>provided</scope>
+      <optional>true</optional>
     </dependency>
     <dependency>
       <groupId>org.jetbrains</groupId>
       <artifactId>annotations</artifactId>
       <scope>provided</scope>
+      <optional>true</optional>
     </dependency>
     <dependency>
       <groupId>org.apiguardian</groupId>
       <artifactId>apiguardian-api</artifactId>
       <scope>provided</scope>
+      <optional>true</optional>
     </dependency>
 
     <!-- Command line tooling -->
-- 
cgit v1.2.3