From: adheli.tavares <adheli.tavares@est.tech>
Date: Tue, 28 Oct 2025 15:05:18 +0000 (+0000)
Subject: Fix maven-core and maven-compat dependency location
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;ds=inline;p=policy%2Fparent.git

Fix maven-core and maven-compat dependency location

- using as project dependencies was bringing it to code level, which
is unecessary
- sonar needs to have specific core and compat versions
- uplifted to 3.9.11 to fix cves

Issue-ID: POLICY-5413
Change-Id: I480ee086ee9225de029f6a1a252de3248c42d275
Signed-off-by: adheli.tavares <adheli.tavares@est.tech>
---

diff --git a/integration/pom.xml b/integration/pom.xml
index 4845d5d0..dcf3d31a 100644
--- a/integration/pom.xml
+++ b/integration/pom.xml
@@ -1286,6 +1286,18 @@
                     <groupId>org.sonarsource.scanner.maven</groupId>
                     <artifactId>sonar-maven-plugin</artifactId>
                     <version>${version.sonar}</version>
+                    <dependencies>
+                        <dependency>
+                            <groupId>org.apache.maven</groupId>
+                            <artifactId>maven-core</artifactId>
+                            <version>3.9.11</version>
+                        </dependency>
+                        <dependency>
+                            <groupId>org.apache.maven</groupId>
+                            <artifactId>maven-compat</artifactId>
+                            <version>3.9.11</version>
+                        </dependency>
+                    </dependencies>
                 </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
diff --git a/pom.xml b/pom.xml
index 45e97571..bdc6b2c2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -51,19 +51,6 @@
         </snapshotRepository>
     </distributionManagement>
 
-    <dependencies>
-        <dependency>
-            <groupId>org.apache.maven</groupId>
-            <artifactId>maven-core</artifactId>
-            <version>3.9.10</version>
-        </dependency>
-        <dependency>
-            <groupId>org.apache.maven</groupId>
-            <artifactId>maven-compat</artifactId>
-            <version>3.9.10</version>
-        </dependency>
-    </dependencies>
-
     <build>
         <pluginManagement>
             <plugins>