konveyor/rulesets

EAP 8 ruleset does not catch old EAP BOM dependencies

Open

#285 aperta il 14 ago 2025

Vedi su GitHub
 (6 commenti) (0 reazioni) (0 assegnatari)Java (49 fork)auto 404
good first issuekind/bugpriority/important-soontriage/accepted

Metriche repository

Star
 (6 star)
Metriche merge PR
 (Metriche PR in attesa)

Descrizione

When analyzing old EAP apps targeting EAP 8 it is important to capture EAP BOM imports inside the pom's <dependencyManagement> section.

For instance, an EAP 6 app's pom.xml may contain the following BOM imports:

    <dependencyManagement>
        <dependencies>
            <!-- JBoss distributes a complete set of Java EE 6 APIs including a Bill 
                of Materials (BOM). A BOM specifies the versions of a "stack" (or a collection) 
                of artifacts. We use this here so that we always get the correct versions 
                of artifacts. Here we use the jboss-javaee-6.0-with-tools stack (you can 
                read this as the JBoss stack of the Java EE 6 APIs, with some extras tools 
                for your project, such as Arquillian for testing) and the jboss-javaee-6.0-with-hibernate 
                stack you can read this as the JBoss stack of the Java EE 6 APIs, with extras 
                from the Hibernate family of projects) -->
            <dependency>
                <groupId>org.jboss.bom.eap</groupId>
                <artifactId>jboss-javaee-6.0-with-tools</artifactId>
                <version>${version.jboss.bom.eap}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
            <dependency>
                <groupId>org.jboss.bom.eap</groupId>
                <artifactId>jboss-javaee-6.0-with-hibernate</artifactId>
                <version>${version.jboss.bom.eap}</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
        </dependencies>
    </dependencyManagement>

When migrating to EAP 8, its migration guide instructs updating to:

<dependencyManagement>
   <dependencies>
       <dependency>
           <groupId>org.jboss.bom</groupId>
           <artifactId>jboss-eap-ee-with-tools</artifactId>
           <version>${version.bom}</version>
           <type>pom</type>
           <scope>import</scope>
       </dependency>
   </dependencies>
</dependencyManagement>

Guida contributor