Build failure when enforcing RequireUpperBoundDeps for kotlin

[jonaslind]

Jenkins and plugins versions report

Not applicable

What Operating System are you using (both controller, and any agents involved in the problem)?

Ubuntu 18.04.6 LTS
Apache Maven 3.8.6
openjdk version "11.0.18" 2023-01-17

Reproduction steps

1. Clone this repo and checkout master branch (currently at commit 767def9)
2. Build with maven (mvn install should be enough)

Expected Results

Successful maven build.

Actual Results

Maven builds on the master branch since commit 78dcae2 fail due to a RequireUpperBoundDeps violation for kotlin:

[ERROR] Failed to execute goal org.apache.maven.plugins:maven-enforcer-plugin:3.2.1:enforce (display-info) on project junit: 
[ERROR] Rule 5: org.apache.maven.enforcer.rules.dependency.RequireUpperBoundDeps failed with message:
[ERROR] Failed while enforcing RequireUpperBoundDeps. The error(s) are [
[ERROR] Require upper bound dependencies error for org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.6.10 [test] paths to dependency are:
[ERROR] +-org.jenkins-ci.plugins:junit:1187.v32485122a_a_80
[ERROR]   +-io.jenkins.plugins:github-checks:1.0.19 [test]
[ERROR]     +-org.jenkins-ci.plugins:github-api:1.303-400.v35c2d8258028 [test] (managed) <-- org.jenkins-ci.plugins:github-api:1.117 [test]
[ERROR]       +-io.jenkins.plugins:okhttp-api:4.10.0-125.v3593b_a_f8c97b_ [test] (managed) <-- io.jenkins.plugins:okhttp-api:4.9.2-20211102 [test]
[ERROR]         +-com.squareup.okhttp3:logging-interceptor:4.10.0 [test]
[ERROR]           +-org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.6.10 [test]
[ERROR] and
[ERROR] +-org.jenkins-ci.plugins:junit:1187.v32485122a_a_80
[ERROR]   +-io.jenkins.plugins:github-checks:1.0.19 [test]
[ERROR]     +-org.jenkins-ci.plugins:github-api:1.303-400.v35c2d8258028 [test] (managed) <-- org.jenkins-ci.plugins:github-api:1.117 [test]
[ERROR]       +-io.jenkins.plugins:okhttp-api:4.10.0-125.v3593b_a_f8c97b_ [test] (managed) <-- io.jenkins.plugins:okhttp-api:4.9.2-20211102 [test]
[ERROR]         +-com.squareup.okio:okio:3.3.0 [test]
[ERROR]           +-com.squareup.okio:okio-jvm:3.3.0 [test]
[ERROR]             +-org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.8.0 [test]

Anything else?

The root cause for this is tracked in jenkinsci/plugin-pom#705.

These conflicting kotlin versions were present in the dependency tree in older commits too, but the conflict was not spotted by the maven enforcer plugin until dependabot updated the plugin-pom to 4.55, probably because that update steps the enforcer plugin from 3.1.0 to 3.2.1.