From 0cea4c1fc2542d5d0146c1d4843fba1a87d8d468 Mon Sep 17 00:00:00 2001
From: "adheli.tavares" <adheli.tavares@est.tech>
Date: Tue, 28 Oct 2025 15:05:18 +0000
Subject: [PATCH] Fix maven-core and maven-compat dependency location

- using as project dependencies was bringing it to code level, which
is unecessary
- sonar needs to have specific core and compat versions
- uplifted to 3.9.11 to fix cves

Issue-ID: POLICY-5413
Change-Id: I480ee086ee9225de029f6a1a252de3248c42d275
Signed-off-by: adheli.tavares <adheli.tavares@est.tech>
---
 integration/pom.xml | 12 ++++++++++++
 pom.xml             | 13 -------------
 2 files changed, 12 insertions(+), 13 deletions(-)

diff --git a/integration/pom.xml b/integration/pom.xml
index 4845d5d0..dcf3d31a 100644
--- a/integration/pom.xml
+++ b/integration/pom.xml
@@ -1286,6 +1286,18 @@
                     <groupId>org.sonarsource.scanner.maven</groupId>
                     <artifactId>sonar-maven-plugin</artifactId>
                     <version>${version.sonar}</version>
+                    <dependencies>
+                        <dependency>
+                            <groupId>org.apache.maven</groupId>
+                            <artifactId>maven-core</artifactId>
+                            <version>3.9.11</version>
+                        </dependency>
+                        <dependency>
+                            <groupId>org.apache.maven</groupId>
+                            <artifactId>maven-compat</artifactId>
+                            <version>3.9.11</version>
+                        </dependency>
+                    </dependencies>
                 </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
diff --git a/pom.xml b/pom.xml
index 45e97571..bdc6b2c2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -51,19 +51,6 @@
         </snapshotRepository>
     </distributionManagement>
 
-    <dependencies>
-        <dependency>
-            <groupId>org.apache.maven</groupId>
-            <artifactId>maven-core</artifactId>
-            <version>3.9.10</version>
-        </dependency>
-        <dependency>
-            <groupId>org.apache.maven</groupId>
-            <artifactId>maven-compat</artifactId>
-            <version>3.9.10</version>
-        </dependency>
-    </dependencies>
-
     <build>
         <pluginManagement>
             <plugins>
-- 
2.16.6