From 9158df60ea694250ef7bf878b81906cd177e3b60 Mon Sep 17 00:00:00 2001
From: Tamas Cservenak <tamas@cservenak.net>
Date: Thu, 14 Oct 2021 11:03:53 +0200
Subject: [PATCH 1/2] Drop legacy profile

A "helper" profile that is meant to help for downstream projects
to ensure they are not depending on anything legacy, so to say
that they are future-proof.
---
 pom.xml | 48 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)

diff --git a/pom.xml b/pom.xml
index 94f0fe16..2d8c9b70 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1204,6 +1204,54 @@ under the License.
   </reporting>
 
   <profiles>
+    <profile>
+      <!-- "utility" profile allowing all downstream projects to prepare for upcoming bans: drop legacy -->
+      <id>drop-legacy-dependencies</id>
+      <build>
+        <plugins>
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-enforcer-plugin</artifactId>
+            <executions>
+              <execution>
+                <id>drop-legacy-dependencies</id>
+                <goals>
+                  <goal>enforce</goal>
+                </goals>
+                <configuration>
+                  <rules>
+                    <bannedDependencies>
+                      <excludes>
+                        <!-- Plexus -->
+                        <!-- Old Plexus -> org.eclipse.sisu:org.eclipse.sisu.plexus -->
+                        <exclude>org.codehaus.plexus:plexus-container-default</exclude>
+                        <!-- Legacy Shim -> org.eclipse.sisu:org.eclipse.sisu.(inject/plexus) -->
+                        <exclude>org.sonatype.sisu:sisu-inject-bean</exclude>
+                        <exclude>org.sonatype.sisu:sisu-inject-plexus</exclude>
+                        <!-- Resolver: you want org.eclipse.aether OR org.apache.maven.resolver instead -->
+                        <exclude>org.sonatype.aether:*</exclude>
+                        <!-- Various: most probably you want org.codehaus.plexus instead -->
+                        <exclude>org.sonatype.plexus:*</exclude>
+                        <!-- Maven: lowest version we support -->
+                        <exclude>org.apache.maven:maven-plugin-api:[,3.2.5)</exclude>
+                      </excludes>
+                      <includes>
+                        <!-- This is dead API -->
+                        <include>org.sonatype.plexus:plexus-build-api</include>
+                        <!-- Not including these would make painful lives of anyone depending on maven-core < 3.8.3 -->
+                        <include>org.sonatype.plexus:plexus-sec-dispatcher</include>
+                        <include>org.sonatype.plexus:plexus-cipher</include>
+                      </includes>
+                    </bannedDependencies>
+                  </rules>
+                  <fail>true</fail>
+                </configuration>
+              </execution>
+            </executions>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
     <profile>
       <id>jdk-toolchain</id>
       <build>

From 3eca81ae7601d6cf6af2b6de42b0d888d0d4489f Mon Sep 17 00:00:00 2001
From: Tamas Cservenak <tamas@cservenak.net>
Date: Thu, 14 Oct 2021 11:13:26 +0200
Subject: [PATCH 2/2] Make possible to mark module as not included in this
 check

---
 pom.xml | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/pom.xml b/pom.xml
index 2d8c9b70..fca9ac4e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1207,6 +1207,10 @@ under the License.
     <profile>
       <!-- "utility" profile allowing all downstream projects to prepare for upcoming bans: drop legacy -->
       <id>drop-legacy-dependencies</id>
+      <properties>
+        <!-- If you MUST depend on any of these, set this to "false", but we WILL come after you! -->
+        <drop-legacy-dependencies.include>true</drop-legacy-dependencies.include>
+      </properties>
       <build>
         <plugins>
           <plugin>
@@ -1222,18 +1226,19 @@ under the License.
                   <rules>
                     <bannedDependencies>
                       <excludes>
-                        <!-- Plexus -->
-                        <!-- Old Plexus -> org.eclipse.sisu:org.eclipse.sisu.plexus -->
+                        <!-- Original Plexus -> org.eclipse.sisu:org.eclipse.sisu.plexus -->
                         <exclude>org.codehaus.plexus:plexus-container-default</exclude>
-                        <!-- Legacy Shim -> org.eclipse.sisu:org.eclipse.sisu.(inject/plexus) -->
+                        <!-- Legacy Shim -> org.eclipse.sisu:org.eclipse.sisu.(inject|plexus) -->
                         <exclude>org.sonatype.sisu:sisu-inject-bean</exclude>
                         <exclude>org.sonatype.sisu:sisu-inject-plexus</exclude>
-                        <!-- Resolver: you want org.eclipse.aether OR org.apache.maven.resolver instead -->
+                        <!-- Resolver: -> org.eclipse.aether OR -> org.apache.maven.resolver instead -->
                         <exclude>org.sonatype.aether:*</exclude>
                         <!-- Various: most probably you want org.codehaus.plexus instead -->
                         <exclude>org.sonatype.plexus:*</exclude>
                         <!-- Maven: lowest version we support -->
                         <exclude>org.apache.maven:maven-plugin-api:[,3.2.5)</exclude>
+                        <exclude>org.apache.maven:maven-core:[,3.2.5)</exclude>
+                        <exclude>org.apache.maven:maven-compat:[,3.2.5)</exclude>
                       </excludes>
                       <includes>
                         <!-- This is dead API -->
@@ -1244,7 +1249,7 @@ under the License.
                       </includes>
                     </bannedDependencies>
                   </rules>
-                  <fail>true</fail>
+                  <fail>${drop-legacy-dependencies.include}</fail>
                 </configuration>
               </execution>
             </executions>