SONAR-2512 Fix dependencies on commons-beanutils

Forbid dependency on commons-beanutils-core and instead use
commons-beanutils 1.8.3

diff --git a/plugins/sonar-checkstyle-plugin/pom.xml b/plugins/sonar-checkstyle-plugin/pom.xml
index 7c5109974b2e52a4c9dde98456fe6eb333ca5f4c..a8e3ba70b5949623ea8d40e56cd25c449bd09296 100644 (file)
--- a/plugins/sonar-checkstyle-plugin/pom.xml
+++ b/plugins/sonar-checkstyle-plugin/pom.xml
@@ -44,6 +44,11 @@
           <groupId>commons-collections</groupId>
           <artifactId>commons-collections</artifactId>
         </exclusion>
+        <exclusion>
+          <!-- See SONAR-2512 -->
+          <groupId>commons-beanutils</groupId>
+          <artifactId>commons-beanutils-core</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
 

diff --git a/plugins/sonar-squid-java-plugin/pom.xml b/plugins/sonar-squid-java-plugin/pom.xml
index 56ec735923adfccde961747c4272fdd00df8ed47..3af4a6616c3f0928c58d53875ecdaf7fd3f19d24 100644 (file)
--- a/plugins/sonar-squid-java-plugin/pom.xml
+++ b/plugins/sonar-squid-java-plugin/pom.xml
@@ -53,6 +53,11 @@
           <groupId>commons-cli</groupId>
           <artifactId>commons-cli</artifactId>
         </exclusion>
+        <exclusion>
+          <!-- See SONAR-2512 -->
+          <groupId>commons-beanutils</groupId>
+          <artifactId>commons-beanutils-core</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
     <dependency>

diff --git a/pom.xml b/pom.xml
index bf50184670180a8e0b4bbd665b03f4b8aaf7ac79..d10e9aba2682afc4171101b382aa487983f436f5 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -337,6 +337,23 @@
               </rules>
             </configuration>
           </execution>
+          <execution>
+            <id>enforce-banned-dependencies</id>
+            <goals>
+              <goal>enforce</goal>
+            </goals>
+            <configuration>
+              <rules>
+                <bannedDependencies>
+                  <searchTransitive>true</searchTransitive>
+                  <message>commons-beanutils should be used instead</message>
+                  <excludes>
+                    <exclude>commons-beanutils:commons-beanutils-core</exclude>
+                  </excludes>
+                </bannedDependencies>
+              </rules>
+            </configuration>
+          </execution>
         </executions>
       </plugin>
       <plugin>
@@ -525,6 +542,12 @@
         <!-- do not upgrade to version 1.4, not compatible with Java5 -->
         <version>1.3</version>
       </dependency>
+      <dependency>
+        <!-- See SONAR-2512 -->
+        <groupId>commons-beanutils</groupId>
+        <artifactId>commons-beanutils</artifactId>
+        <version>1.8.3</version>
+      </dependency>
       <dependency>
         <groupId>commons-configuration</groupId>
         <artifactId>commons-configuration</artifactId>
@@ -534,6 +557,11 @@
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
           </exclusion>
+          <exclusion>
+            <!-- See SONAR-2512 -->
+            <groupId>commons-beanutils</groupId>
+            <artifactId>commons-beanutils-core</artifactId>
+          </exclusion>
         </exclusions>
       </dependency>
       <dependency>