build(yudao-server): 使用 spring-boot-maven-plugin 排除 BouncyCastle 替代 maven-enforcer-plugin
Some checks failed
Build and Deploy / deploy (push) Has been cancelled

将防 BouncyCastle 签名 JAR 进入 fat JAR 的策略从 maven-enforcer-plugin 的编译时限制
改为 spring-boot-maven-plugin 的打包时排除,并从根 pom 移除不再需要的 enforcer 插件
及依赖版本属性。同时删除 yudao-dependencies 中全局提供的空壳 BouncyCastle 依赖,
避免污染所有模块的类路径。
This commit is contained in:
2026-05-27 20:52:06 +08:00
parent 5477e2f261
commit 98fb35f0b9
3 changed files with 21 additions and 63 deletions

View File

@@ -111,31 +111,6 @@
</exclusion>
</exclusions>
</dependency>
<!-- 全局排除:所有 BouncyCastle 变体提供空壳版本,从源头杜绝 -->
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk18on</artifactId>
<version>0.0.0</version>
<scope>provided</scope>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcpkix-jdk18on</artifactId>
<version>0.0.0</version>
<scope>provided</scope>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk15on</artifactId>
<version>0.0.0</version>
<scope>provided</scope>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcpkix-jdk15on</artifactId>
<version>0.0.0</version>
<scope>provided</scope>
</dependency>
<!-- 锁定 volcengine SDK 版本,避免 agents-flex-image-volcengine 的 LATEST 解析到不存在的 2.0.6 -->
<dependency>
<groupId>com.volcengine</groupId>