Merge branch 'main' into bugfix/commons-dependencies-leaking-from-vaadin-dev

Author: mcollovati

flow-plugins/flow-dev-bundle-plugin/src/main/java/com/vaadin/flow/plugin/maven/Reflector.java

@@ -56,7 +56,7 @@ public final class Reflector {
             "org.eclipse.sisu");
     // Dependency required by the plugin but not provided by Flow at runtime
     private static final Set<String> REQUIRED_PLUGIN_DEPENDENCIES = Set.of(
-            "org.reflections:reflections:jar",
+            "io.github.classgraph:classgraph:jar",
             "org.zeroturnaround:zt-exec:jar");
     private static final ScopeArtifactFilter PRODUCTION_SCOPE_FILTER = new ScopeArtifactFilter(
             Artifact.SCOPE_COMPILE_PLUS_RUNTIME);

flow-plugins/flow-maven-plugin/src/it/plugin-pinned-deps-project/invoker.properties

@@ -14,4 +14,6 @@
 # the License.
 #
 
-invoker.goals=clean package
+# Build will fail with a ClassNotFoundException if using the outdate version
+# of the plugin required dependencies.
+invoker.goals=clean package -ntp

flow-plugins/flow-maven-plugin/src/it/plugin-pinned-deps-project/pom.xml

@@ -35,9 +35,9 @@
             <version>${flow.version}</version>
         </dependency>
         <dependency>
-            <groupId>org.reflections</groupId>
-            <artifactId>reflections</artifactId>
-            <version>0.9.10</version>
+            <groupId>io.github.classgraph</groupId>
+            <artifactId>classgraph</artifactId>
+            <version>4.0.0</version>
         </dependency>
         <dependency>
             <groupId>org.zeroturnaround</groupId>

flow-plugins/flow-maven-plugin/src/main/java/com/vaadin/flow/plugin/maven/Reflector.java

@@ -69,7 +69,7 @@ public final class Reflector {
             "org.eclipse.sisu");
     // Dependency required by the plugin but not provided by Flow at runtime
     private static final Set<String> REQUIRED_PLUGIN_DEPENDENCIES = Set.of(
-            "org.reflections:reflections:jar",
+            "io.github.classgraph:classgraph:jar",
             "org.zeroturnaround:zt-exec:jar");
     private static final ScopeArtifactFilter PRODUCTION_SCOPE_FILTER = new ScopeArtifactFilter(
             Artifact.SCOPE_COMPILE_PLUS_RUNTIME);

flow-plugins/flow-plugin-base/pom.xml

@@ -30,28 +30,9 @@
       <artifactId>license-checker</artifactId>
     </dependency>
     <dependency>
-      <groupId>org.reflections</groupId>
-      <artifactId>reflections</artifactId>
-      <version>0.10.2</version>
-      <exclusions>
-        <exclusion>
-          <groupId>org.dom4j</groupId>
-          <artifactId>dom4j</artifactId>
-        </exclusion>
-        <exclusion>
-          <groupId>com.google.code.gson</groupId>
-          <artifactId>gson</artifactId>
-        </exclusion>
-        <exclusion>
-          <groupId>org.javassist</groupId>
-          <artifactId>javassist</artifactId>
-        </exclusion>
-      </exclusions>
-    </dependency>
-    <dependency>
-      <groupId>org.javassist</groupId>
-      <artifactId>javassist</artifactId>
-      <version>${javassist.version}</version>
+      <groupId>io.github.classgraph</groupId>
+      <artifactId>classgraph</artifactId>
+      <version>4.8.184</version>
     </dependency>
     <dependency>
       <groupId>org.zeroturnaround</groupId>