Merge pull request #47 from jonesbusy/feature/strict-package

Declare dependencies explicitly and depends on jspecify api plugin

Author: jonesbusy

pom.xml

@@ -38,6 +38,8 @@
     <gitHubRepo>jenkinsci/${project.artifactId}-plugin</gitHubRepo>
     <spotless.check.skip>false</spotless.check.skip>
     <ban-junit4-imports.skip>false</ban-junit4-imports.skip>
+    <hpi.bundledArtifacts>oras-java-sdk</hpi.bundledArtifacts>
+    <hpi.strictBundledArtifacts>true</hpi.strictBundledArtifacts>
   </properties>
 
   <dependencyManagement>
@@ -61,6 +63,15 @@
       <groupId>io.jenkins.plugins</groupId>
       <artifactId>gson-api</artifactId>
     </dependency>
+    <dependency>
+      <groupId>io.jenkins.plugins</groupId>
+      <artifactId>gson-api</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>io.jenkins.plugins</groupId>
+      <artifactId>jspecify-api</artifactId>
+      <version>1.0.0-1.ve7231e6d0d15</version>
+    </dependency>
     <dependency>
       <groupId>land.oras</groupId>
       <artifactId>oras-java-sdk</artifactId>
@@ -89,6 +100,11 @@
           <groupId>org.bouncycastle</groupId>
           <artifactId>bcprov-jdk18on</artifactId>
         </exclusion>
+        <!-- provided by jspecify API plugin -->
+        <exclusion>
+          <groupId>org.jspecify</groupId>
+          <artifactId>jspecify</artifactId>
+        </exclusion>
         <!-- provided by jenkins core -->
         <exclusion>
           <groupId>org.slf4j</groupId>