Banned dependencies error compiling SAML plugin PR

[kuisathaverat]

Hi,

I am updating the pac4j library in the SAML plugin, the enforcing
plugin tells me that there are some banned dependencies. I have
checked the banned dependencies at
https://github.com/jenkinsci/pom/blob/master/pom.xml#L683C18-L709 and
none of my dependencies is there (see the dependencies tree at the
end). I dunno if it could be related to the Shibboleth libraries that
are not in the maven repo, a long time ago I requested to mirror the
repo to do the same task
https://github.com/jenkins-infra/helpdesk/issues/2375 Do I have to
request it again? Is it a different thing?

[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 01:14 min
[INFO] Finished at: 2023-12-12T21:29:27+01:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal
org.apache.maven.plugins:maven-enforcer-plugin:3.4.1:enforce
(display-info) on project saml:
[ERROR] Rule 3:
org.codehaus.mojo.extraenforcer.dependencies.EnforceBytecodeVersion
failed with message:
[ERROR] Found Banned Dependency: org.opensaml:opensaml-messaging-API:jar:5.0.0
[ERROR] Found Banned Dependency: org.pac4j:pac4j-saml:jar:6.0.0
[ERROR] Found Banned Dependency: org.pac4j:pac4j-core:jar:6.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-core-impl:jar:5.0.0
[ERROR] Found Banned Dependency: net.shibboleth:ship-security:jar:9.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-storage-impl:jar:5.0.0
[ERROR] Found Banned Dependency: net.shibboleth:ship-velocity:jar:9.0.0
[ERROR] Found Banned Dependency: org.pac4j:pac4j-javaee:jar:6.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-soap-impl:jar:5.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-saml-api:jar:5.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-soap-api:jar:5.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-profile-API:jar:5.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-security-impl:jar:5.0.0
[ERROR] Found Banned Dependency: net.shibboleth:shib-networking:jar:9.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-saml-impl:jar:5.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-xmlsec-api:jar:5.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-profile-impl:jar:5.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-core-API:jar:5.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-security-API:jar:5.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-storage-api:jar:5.0.0
[ERROR] Found Banned Dependency: net.shibboleth:shib-support:jar:9.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-xmlsec-impl:jar:5.0.0
[ERROR] Found Banned Dependency: org.opensaml:opensaml-messaging-impl:jar:5.0.0
[ERROR] Use 'mvn dependency:tree' to locate the source of the banned
dependencies.
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with
the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions,
please read the following articles:
[ERROR] [Help 1]
http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
Dec 12, 2023 9:29:27 PM io.opentelemetry.sdk.trace.SdkTracerProvider shutdown
WARNING: Calling shutdown() multiple times.


Dependency tree

❯ mvn dependency:tree

[INFO] Scanning for projects...

[INFO]

[INFO] --------------------< org.jenkins-ci.plugins:saml >---------------------

[INFO] Building SAML Plugin 4.999999-SNAPSHOT

[INFO] --------------------------------[ hpi ]---------------------------------

[INFO]

[INFO] --- maven-dependency-plugin:3.6.1:tree (default-cli) @ saml ---

[INFO] org.jenkins-ci.plugins:saml:hpi:4.999999-SNAPSHOT

[INFO] +- io.jenkins.plugins:commons-lang3-api:jar:3.13.0-62.v7d18e55f51e2:compile

[INFO] | \- org.apache.commons:commons-lang3:jar:3.13.0:compile

[INFO] +- io.jenkins.plugins:apache-httpcomponents-client-5-api:jar:5.2.3-1.0:compile

[INFO] | +- org.apache.httpcomponents.core5:httpcore5:jar:5.2.4:compile

[INFO] | +- org.apache.httpcomponents.core5:httpcore5-h2:jar:5.2.4:compile

[INFO] | +- org.apache.httpcomponents.core5:httpcore5-reactive:jar:5.2.4:compile

[INFO] | | \- org.reactive streams:reactive-streams:jar:1.0.4:compile

[INFO] | +- org.apache.httpcomponents.client5:httpclient5:jar:5.2.3:compile

[INFO] | +- org.apache.httpcomponents.client5:httpclient5-cache:jar:5.2.3:compile

[INFO] | \- org.apache.httpcomponents.client5:httpclient5-fluent:jar:5.2.3:compile

[INFO] +- io.jenkins.plugins:jaxb:jar:2.3.9-1:compile

[INFO] | +- com.sun.xml.bind:jaxb-impl:jar:2.3.9:compile

[INFO] | +- io.jenkins.plugins:javax-activation-api:jar:1.2.0-6:compile

[INFO] | | \- com.sun.activation:javax.activation:jar:1.2.0:compile

[INFO] | \- javax.xml.bind:jaxb-api:jar:2.3.1:compile

[INFO] +- org.pac4j:pac4j-saml:jar:6.0.0:compile

[INFO] | +- org.pac4j:pac4j-core:jar:6.0.0:compile

[INFO] | | \- org.apache.commons:commons-text:jar:1.11.0:compile

[INFO] | +- org.opensaml:opensaml-core-api:jar:5.0.0:compile

[INFO] | | +- io.dropwizard.metrics:metrics-core:jar:4.2.19:compile

[INFO] | | \- net.shibboleth:shib-support:jar:9.0.0:compile

[INFO] | +- org.opensaml:opensaml-saml-api:jar:5.0.0:compile

[INFO] | | +- net.shibboleth:shib-security:jar:9.0.0:compile

[INFO] | | \- org.apache.santuario:xmlsec:jar:4.0.1:compile

[INFO] | +- org.opensaml:opensaml-saml-impl:jar:5.0.0:compile

[INFO] | | +- org.opensaml:opensaml-core-impl:jar:5.0.0:compile

[INFO] | | | \- io.dropwizard.metrics:metrics-json:jar:4.2.19:compile

[INFO] | | +- org.opensaml:opensaml-soap-impl:jar:5.0.0:compile

[INFO] | | +- org.opensaml:opensaml-storage-api:jar:5.0.0:compile

[INFO] | | +- net.shibboleth:shib-networking:jar:9.0.0:compile

[INFO] | | \- net.shibboleth:shib-velocity:jar:9.0.0:compile

[INFO] | +- org.opensaml:opensaml-soap-api:jar:5.0.0:compile

[INFO] | +- org.opensaml:opensaml-xmlsec-api:jar:5.0.0:compile

[INFO] | +- org.opensaml:opensaml-security-api:jar:5.0.0:compile

[INFO] | +- org.opensaml:opensaml-security-impl:jar:5.0.0:compile

[INFO] | +- org.opensaml:opensaml-profile-api:jar:5.0.0:compile

[INFO] | +- org.opensaml:opensaml-profile-impl:jar:5.0.0:compile

[INFO] | +- org.opensaml:opensaml-messaging-api:jar:5.0.0:compile

[INFO] | +- org.opensaml:opensaml-messaging-impl:jar:5.0.0:compile

[INFO] | +- org.opensaml:opensaml-storage-impl:jar:5.0.0:compile

[INFO] | | \- org.glassfish:jakarta.json:jar:2.0.1:runtime

[INFO] | +- org.opensaml:opensaml-xmlsec-impl:jar:5.0.0:compile

[INFO] | +- org.cryptacular:cryptacular:jar:1.2.6:compile

[INFO] | +- org.apache.velocity:velocity-engine-core:jar:2.3:compile

[INFO] | +- org.projectlombok:lombok:jar:1.18.30:compile

[INFO] | \- com.google.code.findbugs:findbugs-annotations:jar:3.0.1:compile

[INFO] +- io.jenkins.plugins:joda-time-api:jar:2.12.5-5.v5495a_235fedf:compile

[INFO] | \- joda-time:joda-time:jar:2.12.5:compile

[INFO] +- org.pac4j:pac4j-javaee:jar:6.0.0:compile

[INFO] +- org.jenkins-ci.plugins:mailer:jar:463.vedf8358e006b_:compile

[INFO] | +- org.jenkins-ci.plugins:display-url-api:jar:2.200.vb_9327d658781:compile

[INFO] | +- org.jenkins-ci.modules:instance-identity:jar:185.v303dc7c645f9:compile

[INFO] | \- io.jenkins.plugins:jakarta-mail-api:jar:2.0.1-3:compile

[INFO] | +- com.sun.mail:jakarta.mail:jar:2.0.1:compile

[INFO] | \- io.jenkins.plugins:jakarta-activation-api:jar:2.0.1-3:compile

[INFO] | \- com.sun.activation:jakarta.activation:jar:2.0.1:compile

[INFO] +- org.jenkins-ci.plugins:bouncycastle-api:jar:2.30.1.77-225.v26ea_c9455fd9:compile

[INFO] | +- org.bouncycastle:bcpkix-jdk18on:jar:1.77:compile

[INFO] | +- org.bouncycastle:bcprov-jdk18on:jar:1.77:compile

[INFO] | \- org.bouncycastle:bcutil-jdk18on:jar:1.77:compile

[INFO] +- org.jenkins-ci.plugins:jackson2-api:jar:2.15.3-372.v309620682326:compile

[INFO] | +- com.fasterxml.jackson.core:jackson-databind:jar:2.15.3:compile

[INFO] | +- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:jar:2.15.3:compile

[INFO] | +- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:jar:2.15.3:compile

[INFO] | +- com.fasterxml.jackson.datatype:jackson-datatype-json-org:jar:2.15.3:compile

[INFO] | +- com.fasterxml.jackson.module:jackson-module-parameter-names:jar:2.15.3:compile

[INFO] | +- com.fasterxml.jackson.core:jackson-core:jar:2.15.3:compile

[INFO] | +- com.fasterxml.jackson.core:jackson-annotations:jar:2.15.3:compile

[INFO] | +- com.fasterxml.jackson.module:jackson-module-jaxb-annotations:jar:2.15.3:compile

[INFO] | +- com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:jar:2.15.3:compile

[INFO] | +- com.fasterxml.jackson.dataformat:jackson-dataformat-xml:jar:2.15.3:compile

[INFO] | | +- org.codehaus.woodstox:stax2-api:jar:4.2.1:compile

[INFO] | | \- com.fasterxml.woodstox:woodstox-core:jar:6.5.1:compile

[INFO] | +- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:jar:2.15.3:compile

[INFO] | +- io.jenkins.plugins:snakeyaml-api:jar:2.2-111.vc6598e30cc65:compile

[INFO] | | \- org.yaml:snakeyaml:jar:2.2:compile

[INFO] | \- org.json:json:jar:20231013:compile

[INFO] +- org.mockito:mockito-core:jar:5.8.0:test

[INFO] | +- net.bytebuddy:byte-buddy:jar:1.14.10:test

[INFO] | +- net.bytebuddy:byte-buddy-agent:jar:1.14.10:test

[INFO] | \- org.objenesis:objenesis:jar:3.3:test

[INFO] +- io.jenkins:configuration-as-code:jar:1700.v6f448841296e:test

[INFO] | +- com.google.code.findbugs:jsr305:jar:3.0.1:compile

[INFO] | +- io.jenkins.plugins:caffeine-api:jar:3.1.8-133.v17b_1ff2e0599:test

[INFO] | | \- com.github.ben-manes.caffeine:caffeine:jar:3.1.8:test

[INFO] | +- io.jenkins.plugins:commons-text-api:jar:1.11.0-95.v22a_d30ee5d36:test

[INFO] | \- io.vavr:vavr:jar:0.10.4:test

[INFO] | \- io.vavr:vavr-match:jar:0.10.4:test

[INFO] +- io.jenkins.configuration-as-code:test-harness:jar:1700.v6f448841296e:test

[INFO] | +- com.github.erosb:everit-json-schema:jar:1.14.2:test

[INFO] | | +- commons-validator:commons-validator:jar:1.7:test

[INFO] | | | \- commons-digester:commons-digester:jar:2.1:test

[INFO] | | +- com.damnhandy:handy-uri-templates:jar:2.1.8:test

[INFO] | | \- com.google.re2j:re2j:jar:1.6:test

[INFO] | +- com.github.stefanbirkner:system-rules:jar:1.19.0:test

[INFO] | +- com.vladsch.flexmark:flexmark-all:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-abbreviation:jar:0.64.8:test

[INFO] | | | \- com.vladsch.flexmark:flexmark-util:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-admonition:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-anchorlink:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-aside:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-attributes:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-autolink:jar:0.64.8:test

[INFO] | | | \- org.nibor.autolink:autolink:jar:0.6.0:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-definition:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-emoji:jar:0.64.8:test

[INFO] | | +-
com.vladsch.flexmark:flexmark-ext-enumerated-reference:jar:0.64.8:test

[INFO] | | +-
com.vladsch.flexmark:flexmark-ext-escaped-character:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-footnotes:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-gfm-issues:jar:0.64.8:test

[INFO] | | +-
com.vladsch.flexmark:flexmark-ext-gfm-strikethrough:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-gfm-tasklist:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-gfm-users:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-gitlab:jar:0.64.8:test

[INFO] | | +-
com.vladsch.flexmark:flexmark-ext-jekyll-front-matter:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-jekyll-tag:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-media-tags:jar:0.64.8:test

[INFO] | | +-
com.vladsch.flexmark:flexmark-ext-resizable-image:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-macros:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-ins:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-xwiki-macros:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-superscript:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-tables:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-toc:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-typographic:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-ext-wikilink:jar:0.64.8:test

[INFO] | | +-
com.vladsch.flexmark:flexmark-ext-yaml-front-matter:jar:0.64.8:test

[INFO] | | +-
com.vladsch.flexmark:flexmark-ext-youtube-embedded:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-html2md-converter:jar:0.64.8:test

[INFO] | | | \- org.jsoup:jsoup:jar:1.15.4:test

[INFO] | | +- com.vladsch.flexmark:flexmark-jira-converter:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-pdf-converter:jar:0.64.8:test

[INFO] | | | +- com.ibm.icu:icu4j:jar:72.1:test

[INFO] | | | +- com.openhtmltopdf:openhtmltopdf-core:jar:1.0.10:test

[INFO] | | | +- com.openhtmltopdf:openhtmltopdf-pdfbox:jar:1.0.10:test

[INFO] | | | | +- org.apache.pdfbox:pdfbox:jar:2.0.24:test

[INFO] | | | | | \- org.apache.pdfbox:fontbox:jar:2.0.24:test

[INFO] | | | | +- org.apache.pdfbox:xmpbox:jar:2.0.24:test

[INFO] | | | | \- de.rototor.pdfbox:graphics2d:jar:0.32:test

[INFO] | | | \- com.openhtmltopdf:openhtmltopdf-rtl-support:jar:1.0.10:test

[INFO] | | +- com.vladsch.flexmark:flexmark-profile-pegdown:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-util-ast:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-util-builder:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-util-collection:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-util-data:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-util-dependency:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-util-format:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-util-html:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-util-misc:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-util-options:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-util-sequence:jar:0.64.8:test

[INFO] | | +- com.vladsch.flexmark:flexmark-util-visitor:jar:0.64.8:test

[INFO] | | \- com.vladsch.flexmark:flexmark-youtrack-converter:jar:0.64.8:test

[INFO] | \- junit:junit:jar:4.13.2:test

[INFO] +- org.testcontainers:testcontainers:jar:1.19.3:test

[INFO] | +- org.rnorth.duct-tape:duct-tape:jar:1.0.8:test

[INFO] | | \- org.jetbrains:annotations:jar:17.0.0:test

[INFO] | +- com.github.docker-java:docker-java-api:jar:3.3.4:test

[INFO] | \- com.github.docker-java:docker-java-transport-zerodep:jar:3.3.4:test

[INFO] | \- com.github.docker-java:docker-java-transport:jar:3.3.4:test

[INFO] +- org.jenkins-ci.main:jenkins-core:jar:2.401.3:provided

[INFO] | +- org.jenkins-ci.main:cli:jar:2.401.3:provided

[INFO] | +- org.jenkins-ci.main:remoting:jar:3107.v665000b_51092:provided

[INFO] | +- args4j:args4j:jar:2.33:provided

[INFO] | +- com.github.spotbugs:spotbugs-annotations:jar:4.7.3:provided

[INFO] | +- com.google.guava:guava:jar:31.1-jre:provided

[INFO] | | +- com.google.guava:failureaccess:jar:1.0.1:provided

[INFO] | | \-
com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava:provided

[INFO] | +- com.google.inject:guice:jar:6.0.0:provided

[INFO] | | +- javax.inject:javax.inject:jar:1:provided

[INFO] | | \- jakarta.inject:jakarta.inject-api:jar:2.0.1:provided

[INFO] | +- com.infradna.tool:bridge-method-annotation:jar:1.26:provided

[INFO] | +- com.jcraft:jzlib:jar:1.1.3-kohsuke-1:provided

[INFO] | +- com.sun.solaris:embedded_su4j:jar:1.1:provided

[INFO] | +- com.sun.xml.txw2:txw2:jar:20110809:provided

[INFO] | | \- relaxngDatatype:relaxngDatatype:jar:20020414:provided

[INFO] | +- com.thoughtworks.xstream:xstream:jar:1.4.20:provided

[INFO] | | \- io.github.x-stream:mxparser:jar:1.2.2:provided

[INFO] | +- commons-beanutils:commons-beanutils:jar:1.9.4:provided

[INFO] | +- commons-codec:commons-codec:jar:1.15:provided

[INFO] | +- commons-collections:commons-collections:jar:3.2.2:provided

[INFO] | +- commons-fileupload:commons-fileupload:jar:1.5:provided

[INFO] | +- commons-io:commons-io:jar:2.11.0:provided

[INFO] | +- commons-jelly:commons-jelly-tags-fmt:jar:1.0:provided

[INFO] | +- commons-jelly:commons-jelly-tags-xml:jar:1.1:provided

[INFO] | +- commons-lang:commons-lang:jar:2.6:provided

[INFO] | +- io.jenkins.stapler:jenkins-stapler-support:jar:1.1:provided

[INFO] | +- jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api:jar:1.2.7:provided

[INFO] | +- jaxen:jaxen:jar:2.0.0:provided

[INFO] | +- jline:jline:jar:2.14.6:provided

[INFO] | +- net.java.dev.jna:jna:jar:5.13.0:provided

[INFO] | +- net.java.sezpoz:sezpoz:jar:1.13:provided

[INFO] | +- net.jcip:jcip-annotations:jar:1.0:provided

[INFO] | +- net.sf.kxml:kxml2:jar:2.3.0:provided

[INFO] | +- org.antlr:antlr4-runtime:jar:4.12.0:provided

[INFO] | +- org.apache.ant:ant:jar:1.10.13:provided

[INFO] | | \- org.apache.ant:ant-launcher:jar:1.10.13:provided

[INFO] | +- org.apache.commons:commons-compress:jar:1.23.0:provided

[INFO] | +- org.codehaus.groovy:groovy-all:jar:2.4.21:provided

[INFO] | +- org.connectbot.jbcrypt:jbcrypt:jar:1.0.0:provided

[INFO] | +- org.fusesource.jansi:jansi:jar:1.11:provided

[INFO] | +- org.jenkins-ci:annotation-indexer:jar:1.17:provided

[INFO] | +- org.jenkins-ci:commons-jexl:jar:1.1-jenkins-20111212:provided

[INFO] | +- org.jenkins-ci:crypto-util:jar:1.8:provided

[INFO] | +- org.jenkins-ci:memory-monitor:jar:1.12:provided

[INFO] | +- org.jenkins-ci:symbol-annotation:jar:1.24:provided

[INFO] | +- org.jenkins-ci:task-reactor:jar:1.8:provided

[INFO] | +- org.jenkins-ci:version-number:jar:1.11:provided

[INFO] | +- org.jenkins-ci.main:websocket-spi:jar:2.401.3:provided

[INFO] | +- org.jfree:jfreechart:jar:1.0.19:provided

[INFO] | | \- org.jfree:jcommon:jar:1.0.23:provided

[INFO] | +- org.jvnet.hudson:commons-jelly-tags-define:jar:1.1-jenkins-20230124:provided

[INFO] | | \- org.jenkins-ci:commons-jelly:jar:1.1-jenkins-20230124:provided

[INFO] | +- org.jvnet.localizer:localizer:jar:1.31:provided

[INFO] | +- org.jvnet.robust-http-client:robust-http-client:jar:1.2:provided

[INFO] | +- org.jvnet.winp:winp:jar:1.30:provided

[INFO] | +- org.kohsuke:access-modifier-annotation:jar:1.31:provided

[INFO] | +- org.kohsuke:windows-package-checker:jar:1.2:provided

[INFO] | +- org.kohsuke.jinterop:j-interop:jar:2.0.8-kohsuke-1:provided

[INFO] | | \- org.kohsuke.jinterop:j-interopdeps:jar:2.0.8-kohsuke-1:provided

[INFO] | | \- org.samba.jcifs:jcifs:jar:1.3.18-kohsuke-1:provided

[INFO] | +- org.kohsuke.stapler:json-lib:jar:2.4-jenkins-3:provided

[INFO] | | \- net.sf.ezmorph:ezmorph:jar:1.0.6:provided

[INFO] | +- org.kohsuke.stapler:stapler:jar:1777.v7c6fe6d54a_0c:provided

[INFO] | | +- commons-discovery:commons-discovery:jar:0.5:provided

[INFO] | | +- jakarta.annotation:jakarta.annotation-api:jar:2.1.1:provided

[INFO] | | +- javax.annotation:javax.annotation-api:jar:1.3.2:provided

[INFO] | | \- org.jvnet:tiger-types:jar:2.2:provided

[INFO] | +- org.kohsuke.stapler:stapler-adjunct-codemirror:jar:1.3:provided

[INFO] | +- org.kohsuke.stapler:stapler-adjunct-timeline:jar:1.5:provided

[INFO] | +- org.kohsuke.stapler:stapler-groovy:jar:1777.v7c6fe6d54a_0c:provided

[INFO] | | \-
org.kohsuke.stapler:stapler-jelly:jar:1777.v7c6fe6d54a_0c:provided

[INFO] | | \- org.dom4j:dom4j:jar:2.1.4:provided

[INFO] | +- org.ow2.asm:asm:jar:9.5:provided

[INFO] | +- org.ow2.asm:asm-analysis:jar:9.5:provided

[INFO] | +- org.ow2.asm:asm-commons:jar:9.5:provided

[INFO] | +- org.ow2.asm:asm-tree:jar:9.5:provided

[INFO] | +- org.ow2.asm:asm-util:jar:9.5:provided

[INFO] | +- org.slf4j:jcl-over-slf4j:jar:2.0.7:provided

[INFO] | | \- org.slf4j:slf4j-api:jar:2.0.7:provided

[INFO] | +- org.slf4j:log4j-over-slf4j:jar:2.0.7:provided

[INFO] | +- org.springframework.security:spring-security-web:jar:5.8.2:provided

[INFO] | | +-
org.springframework.security:spring-security-core:jar:5.8.2:provided

[INFO] | | | \-
org.springframework.security:spring-security-crypto:jar:5.8.2:provided

[INFO] | | +- org.springframework:spring-core:jar:5.3.27:provided

[INFO] | | +- org.springframework:spring-aop:jar:5.3.27:provided

[INFO] | | +- org.springframework:spring-beans:jar:5.3.27:provided

[INFO] | | +- org.springframework:spring-context:jar:5.3.27:provided

[INFO] | | +- org.springframework:spring-expression:jar:5.3.27:provided

[INFO] | | \- org.springframework:spring-web:jar:5.3.27:provided

[INFO] | \- xpp3:xpp3:jar:1.1.4c:provided

[INFO] +- org.jenkins-ci.main:jenkins-war:executable-war:2.401.3:test

[INFO] | +- org.jenkins-ci.main:websocket-jetty10:jar:2.401.3:test

[INFO] | | \- org.kohsuke.metainf-services:metainf-services:jar:1.9:test

[INFO] | +- org.jenkins-ci.main:websocket-jetty9:jar:2.401.3:test

[INFO] | \- org.slf4j:slf4j-jdk14:jar:2.0.7:test

[INFO] +- jakarta.servlet:jakarta.servlet-api:jar:4.0.4:provided

[INFO] +- commons-logging:commons-logging:jar:1.2:provided

[INFO] +- org.jenkins-ci.main:jenkins-test-harness:jar:2129.v09f309d2339c:test

[INFO] | +- io.jenkins.lib:support-log-formatter:jar:1.2:test

[INFO] | +- org.eclipse.jetty:jetty-security:jar:10.0.18:test

[INFO] | | \- org.eclipse.jetty:jetty-server:jar:10.0.18:test

[INFO] | | +- org.eclipse.jetty:jetty-http:jar:10.0.18:test

[INFO] | | \- org.eclipse.jetty:jetty-io:jar:10.0.18:test

[INFO] | +- org.eclipse.jetty:jetty-webapp:jar:10.0.18:test

[INFO] | | +- org.eclipse.jetty:jetty-servlet:jar:10.0.18:test

[INFO] | | \- org.eclipse.jetty:jetty-xml:jar:10.0.18:test

[INFO] | | \- org.eclipse.jetty:jetty-util:jar:10.0.18:test

[INFO] | +- org.eclipse.jetty.websocket:websocket-jetty-server:jar:10.0.18:test

[INFO] | | +- org.eclipse.jetty.websocket:websocket-jetty-api:jar:10.0.18:test

[INFO] | | +-
org.eclipse.jetty.websocket:websocket-jetty-common:jar:10.0.18:test

[INFO] | | | \-
org.eclipse.jetty.websocket:websocket-core-common:jar:10.0.18:test

[INFO] | | +- org.eclipse.jetty.websocket:websocket-servlet:jar:10.0.18:test

[INFO] | | | \-
org.eclipse.jetty.websocket:websocket-core-server:jar:10.0.18:test

[INFO] | | \- org.eclipse.jetty.toolchain:jetty-servlet-api:jar:4.0.6:test

[INFO] | +- org.hamcrest:hamcrest:jar:2.2:test

[INFO] | +- org.jenkins-ci.main:jenkins-test-harness-htmlunit:jar:164.v87e5a_1809c10:test

[INFO] | +- org.junit.jupiter:junit-jupiter-api:jar:5.10.1:test

[INFO] | | +- org.opentest4j:opentest4j:jar:1.3.0:test

[INFO] | | \- org.junit.platform:junit-platform-commons:jar:1.10.1:test

[INFO] | +- org.netbeans.modules:org-netbeans-insane:jar:RELEASE200:test

[INFO] | +- org.openjdk.jmh:jmh-core:jar:1.37:test

[INFO] | | +- net.sf.jopt-simple:jopt-simple:jar:5.0.4:test

[INFO] | | \- org.apache.commons:commons-math3:jar:3.6.1:test

[INFO] | \- org.openjdk.jmh:jmh-generator-annprocess:jar:1.37:test

[INFO] +- org.jenkins-ci:test-annotations:jar:1.4:test

[INFO] +- org.junit.jupiter:junit-jupiter:jar:5.10.1:test

[INFO] | +- org.junit.jupiter:junit-jupiter-params:jar:5.10.1:test

[INFO] | \- org.junit.jupiter:junit-jupiter-engine:jar:5.10.1:test

[INFO] \- org.junit.vintage:junit-vintage-engine:jar:5.10.1:test

[INFO] +- org.junit.platform:junit-platform-engine:jar:1.10.1:test

[INFO] \- org.apiguardian:apiguardian-api:jar:1.1.2:test

--
Regards
Ivan Fernandez Calvo

[Basil Crow]

As of v6.x, pac4j requires Java 17 or newer. The Jenkins plugin
development toolchain will not accept Java 17 bytecode as long as
Jenkins core still supports Java 11. You will need to stay on v5.x of
pac4j until around fall of next year when Jenkins requires Java 17 or
newer.

[Ivan Fernandez Calvo]

I missed the actual error message between too much text

ERROR] Rule 3:
org.codehaus.mojo.extraenforcer.dependencies.EnforceBytecodeVersion

I will bump it to the latest 5.X and wait for Java 17 bytecode

[Ullrich Hafner]

I think our tool chain will accept Java 17 dependencies if you explicitly declare it as supported by setting the java.version in you pom. But this makes no sense in your case, as you are just using a wrong dependency.
(I have a plugin distributed that is based on Java 17 as the underlying library uses Java 17 as a minimum version.)

> --
> You received this message because you are subscribed to the Google Groups "Jenkins Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-de...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CAFwNDjrCoZb186jw%2BOOXtF2JzBVw7X%2BUZw_LT2D0r7ngYdxeOQ%40mail.gmail.com.

[Jesse Glick]

On Wed, Dec 13, 2023 at 5:56 AM Ullrich Hafner <ullrich...@gmail.com> wrote:

I think our tool chain will accept Java 17 dependencies if you explicitly declare it as supported by setting the java.version in you pom.

If you meant java.level, no, this is gone as of https://github.com/jenkinsci/plugin-pom/releases/tag/plugin-4.40

[Ullrich Hafner]

The correct setting is:

<maven.compiler.release>17</maven.compiler.release>
<maven.compiler.testRelease>17</maven.compiler.testRelease>

--
You received this message because you are subscribed to the Google Groups "Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-de...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CANfRfr0H-T7OQ8bUcw7KUFkA7bi8YZMXeY-n%2B4O_xkP%2BR5-%3DvA%40mail.gmail.com.

[James Nord]

All the supporting code for providing a warning about this has been removed from the update center and Jenkins IIRC.

So you will have no warning when you try and install the plugin - but it will blow up at runtime if you try and use it.

Which is probably not a good idea for a critical plugin like an Authentication or Authorisation based plugin.

/James

[Basil Crow]

Agreed; this is neither recommended nor supported.

> To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/a24e7247-9be1-4d4b-91ac-76ef52a21009n%40googlegroups.com.