[BUG]: site plugin fails

[jeremylong]

When trying to release 12.0.2 I ran into an issue with the maven-site:

[ERROR] Failed to execute goal org.apache.maven.plugins:maven-site-plugin:3.21.0:site (default-site) on project dependency-check-core: Error generating maven-dependency-plugin:3.8.1:analyze-report report: Cannot analyze dependencies: Trying to force use of dependencies which are declared but already detected as used: [ch.qos.logback:logback-classic] -> [Help 1]

See the error on the attempted release: https://github.com/jeremylong/DependencyCheck/actions/runs/13030928514/job/36350430369

[jeremylong]

@aikebah I haven't had a lot of time to look into this. I was just trying to release 12.0.2 to get the fixes to the JSON and gitlab reports out. However, I ran into this bug. It'll be tomorrow before I can look at this.

[aikebah]

@jeremylong I'll dive into it further.. not sure what happened in between that makes it fail, at the time I added the forcing it was because the report indicated 'unused declared'

[aikebah]

Got it... 406ea7f introduced explicit use of logback in the ArtifactorySearchResponseHandlerTest in order to be able to validate the appropriate logs are sent towards slf4j by injecting an appender in the logging during test. PR to fixup the configuration (also adding a new 'used undeclared' as an explicit dependency) following soon.

[jeremylong]

@aikebah thank you!