Fix maven-core and maven-compat dependency location

- using as project dependencies was bringing it to code level, which
is unecessary
- sonar needs to have specific core and compat versions
- uplifted to 3.9.11 to fix cves

Issue-ID: POLICY-5413
Change-Id: I480ee086ee9225de029f6a1a252de3248c42d275
Signed-off-by: adheli.tavares <adheli.tavares@est.tech>

diff --git a/integration/pom.xml b/integration/pom.xml
index 4845d5d..dcf3d31 100644 (file)
--- a/integration/pom.xml
+++ b/integration/pom.xml
@@ -1286,6 +1286,18 @@
                     <groupId>org.sonarsource.scanner.maven</groupId>
                     <artifactId>sonar-maven-plugin</artifactId>
                     <version>${version.sonar}</version>
+                    <dependencies>
+                        <dependency>
+                            <groupId>org.apache.maven</groupId>
+                            <artifactId>maven-core</artifactId>
+                            <version>3.9.11</version>
+                        </dependency>
+                        <dependency>
+                            <groupId>org.apache.maven</groupId>
+                            <artifactId>maven-compat</artifactId>
+                            <version>3.9.11</version>
+                        </dependency>
+                    </dependencies>
                 </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>

diff --git a/pom.xml b/pom.xml
index 45e9757..bdc6b2c 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -51,19 +51,6 @@
         </snapshotRepository>
     </distributionManagement>
 
-    <dependencies>
-        <dependency>
-            <groupId>org.apache.maven</groupId>
-            <artifactId>maven-core</artifactId>
-            <version>3.9.10</version>
-        </dependency>
-        <dependency>
-            <groupId>org.apache.maven</groupId>
-            <artifactId>maven-compat</artifactId>
-            <version>3.9.10</version>
-        </dependency>
-    </dependencies>
-
     <build>
         <pluginManagement>
             <plugins>