fix(pom): recursive check all nested depManagements with import scope

pkg/java/pom/parse.go

@@ -396,6 +396,10 @@ func (p *parser) resolveDepManagement(props map[string]string, depManagement []p
 		if err != nil {
 			continue
 		}
+
+		// We need to recursively check all nested depManagements,
+		// so that we don't miss dependencies on nested depManagements with `Import` scope.
+		result.dependencyManagement = p.resolveDepManagement(utils.MergeMaps(result.properties, props), result.dependencyManagement)
 		for k, dd := range result.dependencyManagement {
 			// Evaluate variables and overwrite dependencyManagement
 			result.dependencyManagement[k] = dd.Resolve(result.properties, nil, nil)

pkg/java/pom/parse_test.go

@@ -562,17 +562,16 @@ func TestPom_Parse(t *testing.T) {
 					License: "Apache 2.0",
 				},
 				{
-					ID:      "org.example:example-api:1.7.30",
+					ID:      "org.example:example-api:1.1.1",
 					Name:    "org.example:example-api",
-					Version: "1.7.30",
-					License: "The Apache Software License, Version 2.0",
+					Version: "1.1.1",
 				},
 			},
 			wantDeps: []types.Dependency{
 				{
 					ID: "com.example:import:2.0.0",
 					DependsOn: []string{
-						"org.example:example-api:1.7.30",
+						"org.example:example-api:1.1.1",
 					},
 				},
 			},

pkg/java/pom/testdata/import-dependency-management/pom.xml

@@ -23,7 +23,7 @@
             <dependency>
                 <groupId>org.example</groupId>
                 <artifactId>example-dependency-management</artifactId>
-                <version>2.2.2</version>
+                <version>3.3.3</version>
                 <scope>import</scope>
                 <type>pom</type>
             </dependency>

pkg/java/pom/testdata/repository/org/example/example-dependency-management/3.3.3/example-dependency-management-3.3.3.pom

@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+
+    <modelVersion>4.0.0</modelVersion>
+
+    <groupId>org.example</groupId>
+    <artifactId>example-dependency-management</artifactId>
+    <version>3.3.3</version>
+
+    <packaging>pom</packaging>
+    <name>Example API Dependency Management</name>
+    <description>The example API</description>
+
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>org.example</groupId>
+                <artifactId>example-dependency-management2</artifactId>
+                <version>1.1.1</version>
+                <scope>import</scope>
+                <type>pom</type>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
+</project>