commit 96e5079d50dcb719a2fde687835d5e5c0989c174
author Eric Cai <wecai@ebay.com> Fri Aug 04 17:23:16 2023 +0800
committer Michael Osipov <michaelo@apache.org> Fri Aug 04 12:59:33 2023 +0200
tree b05e515d041da70ab2f06679a1f4464005ef522f
parent 3dcc10d139428984b43d8c512fe83784ef27842e

[MPMD-384] maven-pmd-plugin is downloading transitive dependencies of unmanaged version

This closes #135

src/main/java/org/apache/maven/plugins/pmd/PmdReport.java

diff --git a/src/main/java/org/apache/maven/plugins/pmd/PmdReport.java b/src/main/java/org/apache/maven/plugins/pmd/PmdReport.java
index 168b454..bd41e27 100644
--- a/src/main/java/org/apache/maven/plugins/pmd/PmdReport.java
+++ b/src/main/java/org/apache/maven/plugins/pmd/PmdReport.java
@@ -26,6 +26,7 @@
 import java.util.Locale;
 
 import net.sourceforge.pmd.renderers.Renderer;
+import org.apache.maven.model.Dependency;
 import org.apache.maven.plugins.annotations.Component;
 import org.apache.maven.plugins.annotations.Mojo;
 import org.apache.maven.plugins.annotations.Parameter;
@@ -503,8 +504,11 @@
                     // use any additional configured repo as well
                     buildingRequest.getRemoteRepositories().addAll(localProject.getRemoteArtifactRepositories());
 
+                    List<Dependency> managedDependencies = localProject.getDependencyManagement() == null
+                            ? null
+                            : localProject.getDependencyManagement().getDependencies();
                     Iterable<ArtifactResult> resolvedDependencies = dependencyResolver.resolveDependencies(
-                            buildingRequest, localProject.getDependencies(), null, filter);
+                            buildingRequest, localProject.getDependencies(), managedDependencies, filter);
 
                     for (ArtifactResult resolvedArtifact : resolvedDependencies) {
                         dependencies.add(