Dependency convergence issue since 2.20.8

[Venorcis]

Describe the bug

We use the maven-enforcer-plugin with <dependencyConvergence /> in our project. Since version 2.20.8 (so including 2.20.9) there are issues with the software.amazon.awssdk:bom.

Expected Behavior

maven-enforcer-plugin to succeed (like it does on 2.20.7 and earlier).

Current Behavior

maven-enforcer-plugin reports the following error:

Dependency convergence error for commons-codec:commons-codec:jar:1.11 paths to dependency are:
+-<myproject>:jar:1.2.0
  +-software.amazon.awssdk:s3:jar:2.20.8:compile
    +-software.amazon.awssdk:apache-client:jar:2.20.8:runtime
      +-org.apache.httpcomponents:httpclient:jar:4.5.14:runtime
        +-commons-codec:commons-codec:jar:1.11:runtime
and
+-<myproject>:jar:1.2.0
  +-software.amazon.awssdk:s3:jar:2.20.8:compile
    +-software.amazon.awssdk:apache-client:jar:2.20.8:runtime
      +-commons-codec:commons-codec:jar:1.15:runtime

Reproduction Steps

Add a dependency on software.amazon.awssdk:s3:jar:2.20.8 and do a mvn install including the maven-enforcer-plugin with <dependencyConvergence /> set.

Possible Solution

No response

Additional Information/Context

No response

AWS Java SDK version used

2.20.8

JDK version used

openjdk 17.0.6

Operating System and version

ubuntu 22.04.2

[debora-ito]

Moving to the Java 2.x repository.

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.