From aca0f09fa623ed15d1e1aaf24322cfc57333594f Mon Sep 17 00:00:00 2001
From: Elliotte Rusty Harold <elharo@ibiblio.org>
Date: Mon, 30 Dec 2024 11:34:21 -0500
Subject: [PATCH 1/3] Move mail sendcer implementations to runtime scope

---
 pom.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pom.xml b/pom.xml
index b587f613..1804bba9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -190,6 +190,7 @@ under the License.
       <groupId>org.codehaus.plexus</groupId>
       <artifactId>plexus-mail-sender-javamail</artifactId>
       <version>1.0-alpha-7</version>
+      <scope>runtime</scope>
       <exclusions>
         <exclusion>
           <groupId>org.codehaus.plexus</groupId>
@@ -201,6 +202,7 @@ under the License.
       <groupId>org.codehaus.plexus</groupId>
       <artifactId>plexus-mail-sender-simple</artifactId>
       <version>1.0-alpha-7</version>
+      <scope>runtime</scope>
       <exclusions>
         <exclusion>
           <groupId>org.codehaus.plexus</groupId>

From 7c04ca38b671b31377f971219e93003fdd28366c Mon Sep 17 00:00:00 2001
From: Elliotte Rusty Harold <elharo@ibiblio.org>
Date: Wed, 22 Jan 2025 07:46:32 -0500
Subject: [PATCH 2/3] check dependencies on build

---
 pom.xml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/pom.xml b/pom.xml
index 1804bba9..dc466778 100644
--- a/pom.xml
+++ b/pom.xml
@@ -471,6 +471,21 @@ under the License.
                 </dependency>
               </dependencies>
             </plugin>
+            <plugin>
+              <groupId>org.apache.maven.plugins</groupId>
+              <artifactId>maven-dependency-plugin</artifactId>
+              <executions>
+                <execution>
+                  <id>analyze</id>
+                  <goals>
+                    <goal>analyze-only</goal>
+                  </goals>
+                  <configuration>
+                    <failOnWarning>true</failOnWarning>
+                  </configuration>
+                </execution>
+              </executions>
+            </plugin>
           </plugins>
         </pluginManagement>
       </build>

From 7a3021d5478c84db3a5bf63ec757f35bf0eb0af3 Mon Sep 17 00:00:00 2001
From: Elliotte Rusty Harold <elharo@ibiblio.org>
Date: Wed, 22 Jan 2025 08:03:53 -0500
Subject: [PATCH 3/3] Prevent adding new undeclared dependencies

---
 pom.xml | 38 ++++++++++++++++++++++----------------
 1 file changed, 22 insertions(+), 16 deletions(-)

diff --git a/pom.xml b/pom.xml
index dc466778..2c712df4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -76,7 +76,6 @@ under the License.
     <doxiaVersion>2.0.0</doxiaVersion>
     <mavenVersion>3.6.3</mavenVersion>
     <mavenResolverVersion>1.4.1</mavenResolverVersion>
-    <!-- TODO check with next parent -->
     <version.maven-site-plugin>3.21.0</version.maven-site-plugin>
     <version.maven-fluido-skin>2.0.0</version.maven-fluido-skin>
 
@@ -442,6 +441,28 @@ under the License.
           </execution>
         </executions>
       </plugin>
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-dependency-plugin</artifactId>
+        <executions>
+          <execution>
+            <id>analyze</id>
+            <goals>
+              <goal>analyze-only</goal>
+            </goals>
+            <configuration>
+              <failOnWarning>true</failOnWarning>
+              <ignoredUnusedDeclaredDependencies>
+                <ignoredUnusedDeclaredDependency>org.apache.maven.resolver:maven-resolver-connector-basic</ignoredUnusedDeclaredDependency>
+                <ignoredUnusedDeclaredDependency>org.apache.maven.resolver:maven-resolver-transport-http</ignoredUnusedDeclaredDependency>
+                <!-- These next two should be removed. See https://issues.apache.org/jira/browse/MCHANGES-463 -->
+                <ignoredUnusedDeclaredDependency>org.codehaus.plexus:plexus-mail-sender-javamail</ignoredUnusedDeclaredDependency>
+                <ignoredUnusedDeclaredDependency>org.codehaus.plexus:plexus-mail-sender-simple</ignoredUnusedDeclaredDependency>
+              </ignoredUnusedDeclaredDependencies>
+            </configuration>
+          </execution>
+        </executions>
+      </plugin>
     </plugins>
   </build>
 
@@ -471,21 +492,6 @@ under the License.
                 </dependency>
               </dependencies>
             </plugin>
-            <plugin>
-              <groupId>org.apache.maven.plugins</groupId>
-              <artifactId>maven-dependency-plugin</artifactId>
-              <executions>
-                <execution>
-                  <id>analyze</id>
-                  <goals>
-                    <goal>analyze-only</goal>
-                  </goals>
-                  <configuration>
-                    <failOnWarning>true</failOnWarning>
-                  </configuration>
-                </execution>
-              </executions>
-            </plugin>
           </plugins>
         </pluginManagement>
       </build>