diff --git a/src/it/projects/analyze-ignore-used-undeclared-dependency/pom.xml b/src/it/projects/analyze-ignore-used-undeclared-dependency/pom.xml
index 281cb3b59..d22b2acb7 100644
--- a/src/it/projects/analyze-ignore-used-undeclared-dependency/pom.xml
+++ b/src/it/projects/analyze-ignore-used-undeclared-dependency/pom.xml
@@ -40,7 +40,7 @@
     <dependency>
       <groupId>org.apache.maven</groupId>
       <artifactId>maven-core</artifactId>
-      <version>3.0</version>
+      <version>3.9.16</version>
     </dependency>
   </dependencies>
 
diff --git a/src/it/projects/mdep-689-apply-filtering-go-offline-goal/pom.xml b/src/it/projects/mdep-689-apply-filtering-go-offline-goal/pom.xml
index 0fee5f399..a4a1c600f 100644
--- a/src/it/projects/mdep-689-apply-filtering-go-offline-goal/pom.xml
+++ b/src/it/projects/mdep-689-apply-filtering-go-offline-goal/pom.xml
@@ -57,7 +57,7 @@ under the License.
 		<dependency> <!-- excluded by excludeClassifier -->
 			<groupId>ch.qos.logback</groupId>
 			<artifactId>logback-core</artifactId>
-			<version>1.5.6</version>
+			<version>1.5.34</version>
 			<classifier>skipThisClassifierToo</classifier>
 		</dependency>
 		<dependency><!-- should not be excluded -->
diff --git a/src/it/projects/tree-scope/expected1-v4.txt b/src/it/projects/tree-scope/expected1-v4.txt
index cbec48bd7..48cb13275 100644
--- a/src/it/projects/tree-scope/expected1-v4.txt
+++ b/src/it/projects/tree-scope/expected1-v4.txt
@@ -1,37 +1,33 @@
 org.apache.maven.its.dependency:test:jar:1.0-SNAPSHOT
-\- org.apache.maven:maven-core:jar:3.6.3:compile
-   +- org.apache.maven:maven-model:jar:3.6.3:compile
-   +- org.apache.maven:maven-settings:jar:3.6.3:compile
-   +- org.apache.maven:maven-settings-builder:jar:3.6.3:compile
-   |  +- org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
-   |  \- org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
-   |     \- org.sonatype.plexus:plexus-cipher:jar:1.7:compile
-   +- org.apache.maven:maven-builder-support:jar:3.6.3:compile
-   +- org.apache.maven:maven-repository-metadata:jar:3.6.3:compile
-   +- org.apache.maven:maven-artifact:jar:3.6.3:compile
-   +- org.apache.maven:maven-plugin-api:jar:3.6.3:compile
-   +- org.apache.maven:maven-model-builder:jar:3.6.3:compile
-   +- org.apache.maven:maven-resolver-provider:jar:3.6.3:compile
-   +- org.apache.maven.resolver:maven-resolver-impl:jar:1.4.1:compile
-   +- org.apache.maven.resolver:maven-resolver-api:jar:1.4.1:compile
-   +- org.apache.maven.resolver:maven-resolver-spi:jar:1.4.1:compile
-   +- org.apache.maven.resolver:maven-resolver-util:jar:1.4.1:compile
-   +- org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
-   |  \- commons-io:commons-io:jar:2.5:compile
-   +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.4:compile
-   |  \- javax.enterprise:cdi-api:jar:1.0:compile
-   |     \- javax.annotation:jsr250-api:jar:1.0:compile
-   +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile
-   +- com.google.inject:guice:jar:no_aop:4.2.1:compile
-   |  +- aopalliance:aopalliance:jar:1.0:compile
-   |  \- com.google.guava:guava:jar:25.1-android:compile
-   |     +- com.google.code.findbugs:jsr305:jar:3.0.1:compile
-   |     +- org.checkerframework:checker-compat-qual:jar:2.0.0:compile
-   |     +- com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
-   |     +- com.google.j2objc:j2objc-annotations:jar:1.1:compile
-   |     \- org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
+\- org.apache.maven:maven-core:jar:3.9.16:compile
+   +- org.apache.maven:maven-model:jar:3.9.16:compile
+   +- org.apache.maven:maven-settings:jar:3.9.16:compile
+   +- org.apache.maven:maven-settings-builder:jar:3.9.16:compile
+   |  \- org.codehaus.plexus:plexus-sec-dispatcher:jar:2.0:compile
+   |     \- org.codehaus.plexus:plexus-cipher:jar:2.0:compile
+   +- org.apache.maven:maven-builder-support:jar:3.9.16:compile
+   +- org.apache.maven:maven-repository-metadata:jar:3.9.16:compile
+   +- org.apache.maven:maven-artifact:jar:3.9.16:compile
+   +- org.apache.maven:maven-plugin-api:jar:3.9.16:compile
+   +- org.apache.maven:maven-model-builder:jar:3.9.16:compile
+   +- org.apache.maven:maven-resolver-provider:jar:3.9.16:compile
+   +- org.apache.maven.resolver:maven-resolver-impl:jar:1.9.27:compile
+   |  \- org.apache.maven.resolver:maven-resolver-named-locks:jar:1.9.27:compile
+   +- org.apache.maven.resolver:maven-resolver-api:jar:1.9.27:compile
+   +- org.apache.maven.resolver:maven-resolver-spi:jar:1.9.27:compile
+   +- org.apache.maven.resolver:maven-resolver-util:jar:1.9.27:compile
+   +- org.apache.maven.shared:maven-shared-utils:jar:3.4.2:compile
+   +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:1.0.0:compile
+   +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:1.0.0:compile
+   +- org.ow2.asm:asm:jar:9.9.1:compile
+   +- com.google.inject:guice:jar:classes:5.1.0:compile
+   |  \- aopalliance:aopalliance:jar:1.0:compile
+   +- com.google.guava:guava:jar:33.6.0-jre:compile
+   |  \- org.jspecify:jspecify:jar:1.0.0:compile
+   +- com.google.guava:failureaccess:jar:1.0.3:compile
    +- javax.inject:javax.inject:jar:1:compile
-   +- org.codehaus.plexus:plexus-utils:jar:3.2.1:compile
-   +- org.codehaus.plexus:plexus-classworlds:jar:2.6.0:compile
-   +- org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile
-   \- org.apache.commons:commons-lang3:jar:3.8.1:compile
+   +- org.codehaus.plexus:plexus-utils:jar:3.6.1:compile
+   +- org.codehaus.plexus:plexus-classworlds:jar:2.11.0:compile
+   +- org.codehaus.plexus:plexus-interpolation:jar:1.29:compile
+   +- org.codehaus.plexus:plexus-component-annotations:jar:2.2.0:compile
+   \- org.slf4j:slf4j-api:jar:1.7.36:compile
diff --git a/src/it/projects/tree-scope/expected1.txt b/src/it/projects/tree-scope/expected1.txt
index a86117e10..48cb13275 100644
--- a/src/it/projects/tree-scope/expected1.txt
+++ b/src/it/projects/tree-scope/expected1.txt
@@ -1,37 +1,33 @@
 org.apache.maven.its.dependency:test:jar:1.0-SNAPSHOT
-\- org.apache.maven:maven-core:jar:3.6.3:compile
-   +- org.apache.maven:maven-model:jar:3.6.3:compile
-   +- org.apache.maven:maven-settings:jar:3.6.3:compile
-   +- org.apache.maven:maven-settings-builder:jar:3.6.3:compile
-   |  +- org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
-   |  \- org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
-   |     \- org.sonatype.plexus:plexus-cipher:jar:1.4:compile
-   +- org.apache.maven:maven-builder-support:jar:3.6.3:compile
-   +- org.apache.maven:maven-repository-metadata:jar:3.6.3:compile
-   +- org.apache.maven:maven-artifact:jar:3.6.3:compile
-   +- org.apache.maven:maven-plugin-api:jar:3.6.3:compile
-   +- org.apache.maven:maven-model-builder:jar:3.6.3:compile
-   +- org.apache.maven:maven-resolver-provider:jar:3.6.3:compile
-   +- org.apache.maven.resolver:maven-resolver-impl:jar:1.4.1:compile
-   +- org.apache.maven.resolver:maven-resolver-api:jar:1.4.1:compile
-   +- org.apache.maven.resolver:maven-resolver-spi:jar:1.4.1:compile
-   +- org.apache.maven.resolver:maven-resolver-util:jar:1.4.1:compile
-   +- org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
-   |  \- commons-io:commons-io:jar:2.5:compile
-   +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.4:compile
-   |  \- javax.enterprise:cdi-api:jar:1.0:compile
-   |     \- javax.annotation:jsr250-api:jar:1.0:compile
-   +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile
-   +- com.google.inject:guice:jar:no_aop:4.2.1:compile
-   |  +- aopalliance:aopalliance:jar:1.0:compile
-   |  \- com.google.guava:guava:jar:25.1-android:compile
-   |     +- com.google.code.findbugs:jsr305:jar:3.0.2:compile
-   |     +- org.checkerframework:checker-compat-qual:jar:2.0.0:compile
-   |     +- com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
-   |     +- com.google.j2objc:j2objc-annotations:jar:1.1:compile
-   |     \- org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
+\- org.apache.maven:maven-core:jar:3.9.16:compile
+   +- org.apache.maven:maven-model:jar:3.9.16:compile
+   +- org.apache.maven:maven-settings:jar:3.9.16:compile
+   +- org.apache.maven:maven-settings-builder:jar:3.9.16:compile
+   |  \- org.codehaus.plexus:plexus-sec-dispatcher:jar:2.0:compile
+   |     \- org.codehaus.plexus:plexus-cipher:jar:2.0:compile
+   +- org.apache.maven:maven-builder-support:jar:3.9.16:compile
+   +- org.apache.maven:maven-repository-metadata:jar:3.9.16:compile
+   +- org.apache.maven:maven-artifact:jar:3.9.16:compile
+   +- org.apache.maven:maven-plugin-api:jar:3.9.16:compile
+   +- org.apache.maven:maven-model-builder:jar:3.9.16:compile
+   +- org.apache.maven:maven-resolver-provider:jar:3.9.16:compile
+   +- org.apache.maven.resolver:maven-resolver-impl:jar:1.9.27:compile
+   |  \- org.apache.maven.resolver:maven-resolver-named-locks:jar:1.9.27:compile
+   +- org.apache.maven.resolver:maven-resolver-api:jar:1.9.27:compile
+   +- org.apache.maven.resolver:maven-resolver-spi:jar:1.9.27:compile
+   +- org.apache.maven.resolver:maven-resolver-util:jar:1.9.27:compile
+   +- org.apache.maven.shared:maven-shared-utils:jar:3.4.2:compile
+   +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:1.0.0:compile
+   +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:1.0.0:compile
+   +- org.ow2.asm:asm:jar:9.9.1:compile
+   +- com.google.inject:guice:jar:classes:5.1.0:compile
+   |  \- aopalliance:aopalliance:jar:1.0:compile
+   +- com.google.guava:guava:jar:33.6.0-jre:compile
+   |  \- org.jspecify:jspecify:jar:1.0.0:compile
+   +- com.google.guava:failureaccess:jar:1.0.3:compile
    +- javax.inject:javax.inject:jar:1:compile
-   +- org.codehaus.plexus:plexus-utils:jar:3.2.1:compile
-   +- org.codehaus.plexus:plexus-classworlds:jar:2.6.0:compile
-   +- org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile
-   \- org.apache.commons:commons-lang3:jar:3.8.1:compile
+   +- org.codehaus.plexus:plexus-utils:jar:3.6.1:compile
+   +- org.codehaus.plexus:plexus-classworlds:jar:2.11.0:compile
+   +- org.codehaus.plexus:plexus-interpolation:jar:1.29:compile
+   +- org.codehaus.plexus:plexus-component-annotations:jar:2.2.0:compile
+   \- org.slf4j:slf4j-api:jar:1.7.36:compile
diff --git a/src/it/projects/tree-scope/expected2-v4.txt b/src/it/projects/tree-scope/expected2-v4.txt
index 1b7e59ae3..783e75950 100644
--- a/src/it/projects/tree-scope/expected2-v4.txt
+++ b/src/it/projects/tree-scope/expected2-v4.txt
@@ -1,39 +1,34 @@
 org.apache.maven.its.dependency:test:jar:1.0-SNAPSHOT
-+- org.apache.maven:maven-core:jar:3.6.3:compile
-|  +- org.apache.maven:maven-model:jar:3.6.3:compile
-|  +- org.apache.maven:maven-settings:jar:3.6.3:compile
-|  +- org.apache.maven:maven-settings-builder:jar:3.6.3:compile
-|  |  +- org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
-|  |  \- org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
-|  |     \- org.sonatype.plexus:plexus-cipher:jar:1.7:compile
-|  +- org.apache.maven:maven-builder-support:jar:3.6.3:compile
-|  +- org.apache.maven:maven-repository-metadata:jar:3.6.3:compile
-|  +- org.apache.maven:maven-artifact:jar:3.6.3:compile
-|  +- org.apache.maven:maven-plugin-api:jar:3.6.3:compile
-|  +- org.apache.maven:maven-model-builder:jar:3.6.3:compile
-|  +- org.apache.maven:maven-resolver-provider:jar:3.6.3:compile
-|  +- org.apache.maven.resolver:maven-resolver-impl:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-api:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-spi:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-util:jar:1.4.1:compile
-|  +- org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
-|  |  \- commons-io:commons-io:jar:2.5:compile
-|  +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.4:compile
-|  |  \- javax.enterprise:cdi-api:jar:1.0:compile
-|  |     \- javax.annotation:jsr250-api:jar:1.0:compile
-|  +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile
-|  +- com.google.inject:guice:jar:no_aop:4.2.1:compile
-|  |  +- aopalliance:aopalliance:jar:1.0:compile
-|  |  \- com.google.guava:guava:jar:25.1-android:compile
-|  |     +- com.google.code.findbugs:jsr305:jar:3.0.1:compile
-|  |     +- org.checkerframework:checker-compat-qual:jar:2.0.0:compile
-|  |     +- com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
-|  |     +- com.google.j2objc:j2objc-annotations:jar:1.1:compile
-|  |     \- org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
++- org.apache.maven:maven-core:jar:3.9.16:compile
+|  +- org.apache.maven:maven-model:jar:3.9.16:compile
+|  +- org.apache.maven:maven-settings:jar:3.9.16:compile
+|  +- org.apache.maven:maven-settings-builder:jar:3.9.16:compile
+|  |  \- org.codehaus.plexus:plexus-sec-dispatcher:jar:2.0:compile
+|  |     \- org.codehaus.plexus:plexus-cipher:jar:2.0:compile
+|  +- org.apache.maven:maven-builder-support:jar:3.9.16:compile
+|  +- org.apache.maven:maven-repository-metadata:jar:3.9.16:compile
+|  +- org.apache.maven:maven-artifact:jar:3.9.16:compile
+|  +- org.apache.maven:maven-plugin-api:jar:3.9.16:compile
+|  +- org.apache.maven:maven-model-builder:jar:3.9.16:compile
+|  +- org.apache.maven:maven-resolver-provider:jar:3.9.16:compile
+|  +- org.apache.maven.resolver:maven-resolver-impl:jar:1.9.27:compile
+|  |  \- org.apache.maven.resolver:maven-resolver-named-locks:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-api:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-spi:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-util:jar:1.9.27:compile
+|  +- org.apache.maven.shared:maven-shared-utils:jar:3.4.2:compile
+|  +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:1.0.0:compile
+|  +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:1.0.0:compile
+|  +- org.ow2.asm:asm:jar:9.9.1:compile
+|  +- com.google.inject:guice:jar:classes:5.1.0:compile
+|  |  \- aopalliance:aopalliance:jar:1.0:compile
+|  +- com.google.guava:guava:jar:33.6.0-jre:compile
+|  |  \- org.jspecify:jspecify:jar:1.0.0:compile
+|  +- com.google.guava:failureaccess:jar:1.0.3:compile
 |  +- javax.inject:javax.inject:jar:1:compile
-|  +- org.codehaus.plexus:plexus-utils:jar:3.2.1:compile
-|  +- org.codehaus.plexus:plexus-classworlds:jar:2.6.0:compile
-|  +- org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile
-|  \- org.apache.commons:commons-lang3:jar:3.8.1:compile
+|  +- org.codehaus.plexus:plexus-utils:jar:3.6.1:compile
+|  +- org.codehaus.plexus:plexus-classworlds:jar:2.11.0:compile
+|  +- org.codehaus.plexus:plexus-interpolation:jar:1.29:compile
+|  +- org.codehaus.plexus:plexus-component-annotations:jar:2.2.0:compile
+|  \- org.slf4j:slf4j-api:jar:1.7.36:compile
 \- org.slf4j:slf4j-simple:jar:2.0.13:test
-   \- org.slf4j:slf4j-api:jar:2.0.13:compile
diff --git a/src/it/projects/tree-scope/expected2.txt b/src/it/projects/tree-scope/expected2.txt
index 03f4e394b..783e75950 100644
--- a/src/it/projects/tree-scope/expected2.txt
+++ b/src/it/projects/tree-scope/expected2.txt
@@ -1,39 +1,34 @@
 org.apache.maven.its.dependency:test:jar:1.0-SNAPSHOT
-+- org.apache.maven:maven-core:jar:3.6.3:compile
-|  +- org.apache.maven:maven-model:jar:3.6.3:compile
-|  +- org.apache.maven:maven-settings:jar:3.6.3:compile
-|  +- org.apache.maven:maven-settings-builder:jar:3.6.3:compile
-|  |  +- org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
-|  |  \- org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
-|  |     \- org.sonatype.plexus:plexus-cipher:jar:1.4:compile
-|  +- org.apache.maven:maven-builder-support:jar:3.6.3:compile
-|  +- org.apache.maven:maven-repository-metadata:jar:3.6.3:compile
-|  +- org.apache.maven:maven-artifact:jar:3.6.3:compile
-|  +- org.apache.maven:maven-plugin-api:jar:3.6.3:compile
-|  +- org.apache.maven:maven-model-builder:jar:3.6.3:compile
-|  +- org.apache.maven:maven-resolver-provider:jar:3.6.3:compile
-|  +- org.apache.maven.resolver:maven-resolver-impl:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-api:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-spi:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-util:jar:1.4.1:compile
-|  +- org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
-|  |  \- commons-io:commons-io:jar:2.5:compile
-|  +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.4:compile
-|  |  \- javax.enterprise:cdi-api:jar:1.0:compile
-|  |     \- javax.annotation:jsr250-api:jar:1.0:compile
-|  +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile
-|  +- com.google.inject:guice:jar:no_aop:4.2.1:compile
-|  |  +- aopalliance:aopalliance:jar:1.0:compile
-|  |  \- com.google.guava:guava:jar:25.1-android:compile
-|  |     +- com.google.code.findbugs:jsr305:jar:3.0.2:compile
-|  |     +- org.checkerframework:checker-compat-qual:jar:2.0.0:compile
-|  |     +- com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
-|  |     +- com.google.j2objc:j2objc-annotations:jar:1.1:compile
-|  |     \- org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
++- org.apache.maven:maven-core:jar:3.9.16:compile
+|  +- org.apache.maven:maven-model:jar:3.9.16:compile
+|  +- org.apache.maven:maven-settings:jar:3.9.16:compile
+|  +- org.apache.maven:maven-settings-builder:jar:3.9.16:compile
+|  |  \- org.codehaus.plexus:plexus-sec-dispatcher:jar:2.0:compile
+|  |     \- org.codehaus.plexus:plexus-cipher:jar:2.0:compile
+|  +- org.apache.maven:maven-builder-support:jar:3.9.16:compile
+|  +- org.apache.maven:maven-repository-metadata:jar:3.9.16:compile
+|  +- org.apache.maven:maven-artifact:jar:3.9.16:compile
+|  +- org.apache.maven:maven-plugin-api:jar:3.9.16:compile
+|  +- org.apache.maven:maven-model-builder:jar:3.9.16:compile
+|  +- org.apache.maven:maven-resolver-provider:jar:3.9.16:compile
+|  +- org.apache.maven.resolver:maven-resolver-impl:jar:1.9.27:compile
+|  |  \- org.apache.maven.resolver:maven-resolver-named-locks:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-api:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-spi:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-util:jar:1.9.27:compile
+|  +- org.apache.maven.shared:maven-shared-utils:jar:3.4.2:compile
+|  +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:1.0.0:compile
+|  +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:1.0.0:compile
+|  +- org.ow2.asm:asm:jar:9.9.1:compile
+|  +- com.google.inject:guice:jar:classes:5.1.0:compile
+|  |  \- aopalliance:aopalliance:jar:1.0:compile
+|  +- com.google.guava:guava:jar:33.6.0-jre:compile
+|  |  \- org.jspecify:jspecify:jar:1.0.0:compile
+|  +- com.google.guava:failureaccess:jar:1.0.3:compile
 |  +- javax.inject:javax.inject:jar:1:compile
-|  +- org.codehaus.plexus:plexus-utils:jar:3.2.1:compile
-|  +- org.codehaus.plexus:plexus-classworlds:jar:2.6.0:compile
-|  +- org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile
-|  \- org.apache.commons:commons-lang3:jar:3.8.1:compile
+|  +- org.codehaus.plexus:plexus-utils:jar:3.6.1:compile
+|  +- org.codehaus.plexus:plexus-classworlds:jar:2.11.0:compile
+|  +- org.codehaus.plexus:plexus-interpolation:jar:1.29:compile
+|  +- org.codehaus.plexus:plexus-component-annotations:jar:2.2.0:compile
+|  \- org.slf4j:slf4j-api:jar:1.7.36:compile
 \- org.slf4j:slf4j-simple:jar:2.0.13:test
-   \- org.slf4j:slf4j-api:jar:2.0.13:compile
diff --git a/src/it/projects/tree-scope/pom.xml b/src/it/projects/tree-scope/pom.xml
index 6b915596c..4aaefaa7b 100644
--- a/src/it/projects/tree-scope/pom.xml
+++ b/src/it/projects/tree-scope/pom.xml
@@ -40,7 +40,7 @@
     <dependency>
       <groupId>org.apache.maven</groupId>
       <artifactId>maven-core</artifactId>
-      <version>3.6.3</version>
+      <version>3.9.16</version>
     </dependency>
 
     <dependency>
diff --git a/src/it/projects/tree/expected-v4.txt b/src/it/projects/tree/expected-v4.txt
index 48b9a84f6..bb079c2e8 100644
--- a/src/it/projects/tree/expected-v4.txt
+++ b/src/it/projects/tree/expected-v4.txt
@@ -1,38 +1,34 @@
 org.apache.maven.its.dependency:test:jar:1.0-SNAPSHOT
-+- org.apache.maven:maven-core:jar:3.6.3:compile
-|  +- org.apache.maven:maven-model:jar:3.6.3:compile
-|  +- org.apache.maven:maven-settings:jar:3.6.3:compile
-|  +- org.apache.maven:maven-settings-builder:jar:3.6.3:compile
-|  |  +- org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
-|  |  \- org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
-|  |     \- org.sonatype.plexus:plexus-cipher:jar:1.7:compile
-|  +- org.apache.maven:maven-builder-support:jar:3.6.3:compile
-|  +- org.apache.maven:maven-repository-metadata:jar:3.6.3:compile
-|  +- org.apache.maven:maven-artifact:jar:3.6.3:compile
-|  +- org.apache.maven:maven-plugin-api:jar:3.6.3:compile
-|  +- org.apache.maven:maven-model-builder:jar:3.6.3:compile
-|  +- org.apache.maven:maven-resolver-provider:jar:3.6.3:compile
-|  |  \- org.slf4j:slf4j-api:jar:1.7.29:compile
-|  +- org.apache.maven.resolver:maven-resolver-impl:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-api:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-spi:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-util:jar:1.4.1:compile
-|  +- org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
-|  |  \- commons-io:commons-io:jar:2.5:compile
-|  +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.4:compile
-|  |  \- javax.enterprise:cdi-api:jar:1.0:compile
-|  |     \- javax.annotation:jsr250-api:jar:1.0:compile
-|  +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile
-|  +- com.google.inject:guice:jar:no_aop:4.2.1:compile
-|  |  +- aopalliance:aopalliance:jar:1.0:compile
-|  |  \- com.google.guava:guava:jar:25.1-android:compile
-|  |     +- com.google.code.findbugs:jsr305:jar:3.0.1:compile
-|  |     +- org.checkerframework:checker-compat-qual:jar:2.0.0:compile
-|  |     +- com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
-|  |     +- com.google.j2objc:j2objc-annotations:jar:1.1:compile
-|  |     \- org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
++- org.apache.maven:maven-core:jar:3.9.16:compile
+|  +- org.apache.maven:maven-model:jar:3.9.16:compile
+|  +- org.apache.maven:maven-settings:jar:3.9.16:compile
+|  +- org.apache.maven:maven-settings-builder:jar:3.9.16:compile
+|  |  \- org.codehaus.plexus:plexus-sec-dispatcher:jar:2.0:compile
+|  |     \- org.codehaus.plexus:plexus-cipher:jar:2.0:compile
+|  +- org.apache.maven:maven-builder-support:jar:3.9.16:compile
+|  +- org.apache.maven:maven-repository-metadata:jar:3.9.16:compile
+|  +- org.apache.maven:maven-artifact:jar:3.9.16:compile
+|  +- org.apache.maven:maven-plugin-api:jar:3.9.16:compile
+|  +- org.apache.maven:maven-model-builder:jar:3.9.16:compile
+|  +- org.apache.maven:maven-resolver-provider:jar:3.9.16:compile
+|  +- org.apache.maven.resolver:maven-resolver-impl:jar:1.9.27:compile
+|  |  \- org.apache.maven.resolver:maven-resolver-named-locks:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-api:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-spi:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-util:jar:1.9.27:compile
+|  +- org.apache.maven.shared:maven-shared-utils:jar:3.4.2:compile
+|  +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:1.0.0:compile
+|  +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:1.0.0:compile
+|  +- org.ow2.asm:asm:jar:9.9.1:compile
+|  +- com.google.inject:guice:jar:classes:5.1.0:compile
+|  |  \- aopalliance:aopalliance:jar:1.0:compile
+|  +- com.google.guava:guava:jar:33.6.0-jre:compile
+|  |  \- org.jspecify:jspecify:jar:1.0.0:compile
+|  +- com.google.guava:failureaccess:jar:1.0.3:compile
 |  +- javax.inject:javax.inject:jar:1:compile
-|  +- org.codehaus.plexus:plexus-utils:jar:3.2.1:compile
-|  +- org.codehaus.plexus:plexus-classworlds:jar:2.6.0:compile
-|  \- org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile
+|  +- org.codehaus.plexus:plexus-utils:jar:3.6.1:compile
+|  +- org.codehaus.plexus:plexus-classworlds:jar:2.11.0:compile
+|  +- org.codehaus.plexus:plexus-interpolation:jar:1.29:compile
+|  +- org.codehaus.plexus:plexus-component-annotations:jar:2.2.0:compile
+|  \- org.slf4j:slf4j-api:jar:1.7.36:compile
 \- org.apache.commons:commons-lang3:jar:3.18.0:compile (optional)
diff --git a/src/it/projects/tree/expected.txt b/src/it/projects/tree/expected.txt
index 0c8f28deb..bb079c2e8 100644
--- a/src/it/projects/tree/expected.txt
+++ b/src/it/projects/tree/expected.txt
@@ -1,38 +1,34 @@
 org.apache.maven.its.dependency:test:jar:1.0-SNAPSHOT
-+- org.apache.maven:maven-core:jar:3.6.3:compile
-|  +- org.apache.maven:maven-model:jar:3.6.3:compile
-|  +- org.apache.maven:maven-settings:jar:3.6.3:compile
-|  +- org.apache.maven:maven-settings-builder:jar:3.6.3:compile
-|  |  +- org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
-|  |  \- org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
-|  |     \- org.sonatype.plexus:plexus-cipher:jar:1.4:compile
-|  +- org.apache.maven:maven-builder-support:jar:3.6.3:compile
-|  +- org.apache.maven:maven-repository-metadata:jar:3.6.3:compile
-|  +- org.apache.maven:maven-artifact:jar:3.6.3:compile
-|  +- org.apache.maven:maven-plugin-api:jar:3.6.3:compile
-|  +- org.apache.maven:maven-model-builder:jar:3.6.3:compile
-|  +- org.apache.maven:maven-resolver-provider:jar:3.6.3:compile
-|  |  \- org.slf4j:slf4j-api:jar:1.7.29:compile
-|  +- org.apache.maven.resolver:maven-resolver-impl:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-api:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-spi:jar:1.4.1:compile
-|  +- org.apache.maven.resolver:maven-resolver-util:jar:1.4.1:compile
-|  +- org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
-|  |  \- commons-io:commons-io:jar:2.5:compile
-|  +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.4:compile
-|  |  \- javax.enterprise:cdi-api:jar:1.0:compile
-|  |     \- javax.annotation:jsr250-api:jar:1.0:compile
-|  +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile
-|  +- com.google.inject:guice:jar:no_aop:4.2.1:compile
-|  |  +- aopalliance:aopalliance:jar:1.0:compile
-|  |  \- com.google.guava:guava:jar:25.1-android:compile
-|  |     +- com.google.code.findbugs:jsr305:jar:3.0.2:compile
-|  |     +- org.checkerframework:checker-compat-qual:jar:2.0.0:compile
-|  |     +- com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
-|  |     +- com.google.j2objc:j2objc-annotations:jar:1.1:compile
-|  |     \- org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
++- org.apache.maven:maven-core:jar:3.9.16:compile
+|  +- org.apache.maven:maven-model:jar:3.9.16:compile
+|  +- org.apache.maven:maven-settings:jar:3.9.16:compile
+|  +- org.apache.maven:maven-settings-builder:jar:3.9.16:compile
+|  |  \- org.codehaus.plexus:plexus-sec-dispatcher:jar:2.0:compile
+|  |     \- org.codehaus.plexus:plexus-cipher:jar:2.0:compile
+|  +- org.apache.maven:maven-builder-support:jar:3.9.16:compile
+|  +- org.apache.maven:maven-repository-metadata:jar:3.9.16:compile
+|  +- org.apache.maven:maven-artifact:jar:3.9.16:compile
+|  +- org.apache.maven:maven-plugin-api:jar:3.9.16:compile
+|  +- org.apache.maven:maven-model-builder:jar:3.9.16:compile
+|  +- org.apache.maven:maven-resolver-provider:jar:3.9.16:compile
+|  +- org.apache.maven.resolver:maven-resolver-impl:jar:1.9.27:compile
+|  |  \- org.apache.maven.resolver:maven-resolver-named-locks:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-api:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-spi:jar:1.9.27:compile
+|  +- org.apache.maven.resolver:maven-resolver-util:jar:1.9.27:compile
+|  +- org.apache.maven.shared:maven-shared-utils:jar:3.4.2:compile
+|  +- org.eclipse.sisu:org.eclipse.sisu.plexus:jar:1.0.0:compile
+|  +- org.eclipse.sisu:org.eclipse.sisu.inject:jar:1.0.0:compile
+|  +- org.ow2.asm:asm:jar:9.9.1:compile
+|  +- com.google.inject:guice:jar:classes:5.1.0:compile
+|  |  \- aopalliance:aopalliance:jar:1.0:compile
+|  +- com.google.guava:guava:jar:33.6.0-jre:compile
+|  |  \- org.jspecify:jspecify:jar:1.0.0:compile
+|  +- com.google.guava:failureaccess:jar:1.0.3:compile
 |  +- javax.inject:javax.inject:jar:1:compile
-|  +- org.codehaus.plexus:plexus-utils:jar:3.2.1:compile
-|  +- org.codehaus.plexus:plexus-classworlds:jar:2.6.0:compile
-|  \- org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile
+|  +- org.codehaus.plexus:plexus-utils:jar:3.6.1:compile
+|  +- org.codehaus.plexus:plexus-classworlds:jar:2.11.0:compile
+|  +- org.codehaus.plexus:plexus-interpolation:jar:1.29:compile
+|  +- org.codehaus.plexus:plexus-component-annotations:jar:2.2.0:compile
+|  \- org.slf4j:slf4j-api:jar:1.7.36:compile
 \- org.apache.commons:commons-lang3:jar:3.18.0:compile (optional)
diff --git a/src/it/projects/tree/pom.xml b/src/it/projects/tree/pom.xml
index c757695b3..5b9102dfe 100644
--- a/src/it/projects/tree/pom.xml
+++ b/src/it/projects/tree/pom.xml
@@ -40,7 +40,7 @@
     <dependency>
       <groupId>org.apache.maven</groupId>
       <artifactId>maven-core</artifactId>
-      <version>3.6.3</version>
+      <version>3.9.16</version>
     </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>