Skip to content

Remove redundant dependencies from pom files in ai-service, user-mgt and user-store components - #8338

Merged
ShanChathusanda93 merged 1 commit into
wso2:masterfrom
ShanChathusanda93:dependency-clean-branch
Oct 9, 2026
Merged

ShanChathusanda93 merged 1 commit into
wso2:masterfrom
ShanChathusanda93:dependency-clean-branch

Conversation

@ShanChathusanda93

Copy link
Copy Markdown
Contributor

Purpose

Fixes the PR builder failure caused by duplicate dependency and plugin declarations in three POMs:

[ERROR] The build could not read 3 projects
... 'dependencies.dependency.(groupId:artifactId:type:classifier)' must be unique ...
... 'build.plugins.plugin.(groupId:artifactId)' must be unique ...

Root cause

The GitHub ubuntu-24.04 runner image was updated from 20260927.320 to 20261004.327. Its release changelog upgrades Maven
from 3.9.16 to 3.10.0 (under Project Management). pr-builder.yml doesn't pin a Maven version, so it picked up 3.10.0.

The Maven 3.10.0 release notes list this under "Potentially Breaking Core Changes":

Maven 3.10.0 raises the POM validation level: many WARNINGs from the 3.9 lineage (in fact, from the 3.1 lineage) will now FAIL the build. Things like duplicated dependency entries or duplicated plugin
entries will not be tolerated anymore.

These duplicates have been in the repo for a while. Maven 3.9.x only reported them as warnings.

@coderabbitai

coderabbitai Bot commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Repository: wso2/carbon-identity-framework/.coderabbit.yml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 898d7862-dfed-4c26-9b5f-867c4b2c0cc2
📥 Commits

Reviewing files that changed from the base of the PR and between 834f475 and 14f3361.

📒 Files selected for processing (3)
  • components/ai-services-mgt/org.wso2.carbon.identity.ai.service.mgt/pom.xml
  • components/user-mgt/org.wso2.carbon.identity.user.pre.update.password.action/pom.xml
  • components/user-store/org.wso2.carbon.identity.user.store.configuration.deployer/pom.xml
💤 Files with no reviewable changes (3)
  • components/ai-services-mgt/org.wso2.carbon.identity.ai.service.mgt/pom.xml
  • components/user-mgt/org.wso2.carbon.identity.user.pre.update.password.action/pom.xml
  • components/user-store/org.wso2.carbon.identity.user.store.configuration.deployer/pom.xml

Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 1 remain after this review.


📝 Walkthrough

Walkthrough

Three Maven POM files remove redundant or superseded dependency and plugin declarations. The remaining declarations retain the provided logging scope, the original action dependency, and the configured Surefire version.

Changes

AI service logging dependency

Layer / File(s) Summary
Logging dependency scope
components/ai-services-mgt/org.wso2.carbon.identity.ai.service.mgt/pom.xml
The POM removes the unscoped pax-logging-api declaration and retains its provided-scope declaration.

Password action dependency

Layer / File(s) Summary
Duplicate action dependency
components/user-mgt/org.wso2.carbon.identity.user.pre.update.password.action/pom.xml
The POM removes the second org.wso2.carbon.identity.action.execution declaration. The earlier declaration remains.

User store Surefire plugin

Layer / File(s) Summary
Surefire plugin declaration
components/user-store/org.wso2.carbon.identity.user.store.configuration.deployer/pom.xml
The POM removes the Surefire declaration pinned to version 2.3. The declaration using ${maven.surefire.plugin.version} remains.

Priority: ➖ Normal

Change: Bug fix

Merge Risk: ⚪ Minimal · up to 14f33

No actionable regression was established in the dependency or plugin cleanup. The change is mergeable after normal build checks.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check Warning The description clearly explains the build failure and root cause, but it omits most template sections, including Goals, Approach, User stories, Release note, Documentation, Testing, Security checks, … Complete the required template sections. Add the goals, implementation approach, user stories, release note, documentation impact, training, certification, marketing, automation test results, security checks, samples, related PRs, migration…
✅ Passed checks (4 passed)
Check name Status Explanation
Title check Passed The title clearly identifies the removal of redundant POM declarations in the affected components. It does not mention the redundant plugin declaration, but it accurately describes the primary cleanup…
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Description check

Explanation

The description clearly explains the build failure and root cause, but it omits most template sections, including Goals, Approach, User stories, Release note, Documentation, Testing, Security checks, and other repository-required sections.

Resolution

Complete the required template sections. Add the goals, implementation approach, user stories, release note, documentation impact, training, certification, marketing, automation test results, security checks, samples, related PRs, migration impact, test environment, and learning details. Enter N/A with a brief explanation where a section does not apply.

  • Fix all pre-merge checks with AI
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@sonarqubecloud

sonarqubecloud Bot commented Oct 9, 2026

Copy link
Copy Markdown


<dependencies>
<dependency>
<groupId>org.ops4j.pax.logging</groupId>

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Kept the dependency in

<scope>test</scope>
</dependency>
<dependency>
<groupId>org.wso2.carbon.identity.framework</groupId>

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Kept the dependency in

<plugins>

<plugin>
<groupId>org.apache.maven.plugins</groupId>

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@codecov

codecov Bot commented Oct 9, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 53.69%. Comparing base (91bc20e) to head (14f3361).
⚠️ Report is 6 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##             master    #8338    +/-   ##
==========================================
  Coverage     53.68%   53.69%            
+ Complexity    22659    22622    -37     
==========================================
  Files          2264     2264            
  Lines        138114   138122     +8     
  Branches      22886    23873   +987     
==========================================
+ Hits          74140    74158    +18     
+ Misses        55047    55033    -14     
- Partials       8927     8931     +4     
Flag Coverage Δ
unit 39.81% <ø> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@jenkins-is-staging

Copy link
Copy Markdown

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/37895419274

@jenkins-is-staging

Copy link
Copy Markdown

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/37895419274
Status: success

@jenkins-is-staging jenkins-is-staging left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving the pull request based on the successful pr build https://github.com/wso2/product-is/actions/runs/37895419274

@ShanChathusanda93
ShanChathusanda93 merged commit afe0aa8 into wso2:master Oct 9, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants