+1 (nb)

It works faster, especially when all dependencies are already cached in
.m2/repository. Good maven-resolver 2.x optimization (in comparison with
3.9.16 with maven-resolver 1.x) 👍

The only one thing is unclear diagnostics when the inner artifacts are
downloaded from the corporate repository (especially declared in
.mvn/extensions.xml, not only pom.xml), actual names replaced with
PRIVATECORP placeholder:

./mvnw validate
[INFO] Loaded 21364 auto-discovered prefixes for remote repository
central (prefixes-central.txt)
[INFO] Loaded 21364 auto-discovered prefixes for remote repository
snapshots (prefixes-snapshots.txt)
[INFO] Artifact
com.privatecorp:maven-metrics-extension:pom:v0.0.5-alpha1 is present
in the local repository, but cached from a remote repository ID that
is unavailable in current build context, verifying
that is downloadable from [central
(https://artifactory.privatecorp.local:443/artifactory/java-virtual,
default, releases),
snapshots (https://artifactory.privatecorp.local:443/artifactory/java-virtual,
default, releases+snapshots)]
[WARNING] The POM for
com.privatecorp:maven-metrics-extension:jar:v0.0.5-alpha1 is missing,
no dependency information available
[INFO] Artifact
com.privatecorp:maven-metrics-extension:jar:v0.0.5-alpha1 is present
in the local repository,
but cached from a remote repository ID that is unavailable in current
build context, verifying that is downloadable from
[central (https://artifactory.privatecorp.local:443/artifactory/java-virtual,
default, releases),
snapshots (https://artifactory.privatecorp.local:443/artifactory/java-virtual,
default, releases+snapshots)]
[ERROR] Error executing Maven.
[ERROR] Extension
com.privatecorp:maven-metrics-extension:v0.0.5-alpha1 or one of its
dependencies could not be resolved:
Plugin com.privatecorp:maven-metrics-extension:v0.0.5-alpha1 or one of
its dependencies
could not be resolved:
  prefixes: Path
com/privatecorp/maven-metrics-extension/v0.0.5-alpha1/maven-metrics-extension-v0.0.5-alpha1.jar
NOT allowed from central
  prefixes: Path
com/privatecorp/maven-metrics-extension/v0.0.5-alpha1/maven-metrics-extension-v0.0.5-alpha1.jar
NOT allowed from snapshots
[ERROR] Caused by: Plugin
com.privatecorp:maven-metrics-extension:v0.0.5-alpha1 or one of its
dependencies could not be resolved:
  prefixes: Path
com/privatecorp/maven-metrics-extension/v0.0.5-alpha1/maven-metrics-extension-v0.0.5-alpha1.jar
NOT allowed from central
  prefixes: Path
com/privatecorp/maven-metrics-extension/v0.0.5-alpha1/maven-metrics-extension-v0.0.5-alpha1.jar
NOT allowed from snapshots

It does not give any navigation to the README, documentation URL, etc. And
it's very unclear. I know, we discussed this several times, but this
failure message does not give enough clarity. Also I remember, we
discussed, that this way to configure corporate repositories (mixing maven
central proxy + host own in the same virtual repo) is wrong, I don't argue
about this. *But that's how it's configured today in zillions of
enterprises (at least at each company I worked at last decade)*.
Luckily, AI tools can give proper advice on how to fix it.

I believe there will be many complaints about this once the version becomes
default in SDKMAN, brew, etc.

(In case if you found this message by search): to fix this, declare in your
.mvn/maven.config:
-Daether.remoteRepositoryFilter.prefixes=false

Thanks, looking forward to the 3.10.x release!


On Fri, Jul 10, 2026 at 2:17 PM Sandra Parsick <[email protected]> wrote:

> +1 (nb)
>
> Am 09.07.26 um 22:02 schrieb [email protected]:
> > Hello Maven,
> >
> > I'd like to call a vote on releasing the following artifacts as
> > Apache Maven 3.10.0-rc-1. This vote is being conducted using an
> > Alpha version of the Apache Trusted Releases (ATR) platform.
> > Please report any bugs or issues to the ASF Tooling team.
> >
> > The release candidate page, including downloads, can be found at:
> >
> >    https://release-test.apache.org/vote/maven/3.10.0-rc-1
> >
> > The release artifacts are signed with one or more OpenPGP keys from:
> >
> >    https://dist.apache.org/repos/dist/release/maven/KEYS
> >
> > We solved issues:
> >
> >    https://github.com/apache/maven/issues?q=milestone%3A3.10.0-rc-1
> >
> > Changes since the last release:
> >
> >
> https://github.com/apache/maven/compare/maven-3.9.16...maven-3.10.0-rc-1
> >
> > Dev dist directory (binaries and sources bundles):
> >
> >    https://dist.apache.org/repos/dist/dev/maven/maven-3/3.10.0-rc-1/
> >
> > Staging repo:
> >
> >    https://repository.apache.org/content/repositories/maven-2444/
> >
> > Staging site:
> >
> >    https://maven.apache.org/ref/3-LATEST/
> >
> > Draft for release notes:
> >
> >    https://gist.github.com/cstamas/1a0561e307c9138f79a6ed5948dda425
> >
> > Guide to testing staged releases:
> >
> >
> https://maven.apache.org/guides/development/guide-testing-releases.html
> >
> > Please review the release candidate and vote accordingly.
> >
> > [ ] +1 Release this package
> > [ ] +0 Abstain
> > [ ] -1 Do not release this package (please provide specific comments)
> >
> > You can vote on ATR at the URL above, or manually by replying to this
> email.
> >
> > The vote is open for 72 hours.
> >
> >
> > Thanks,
> > Tamas Cservenak (cstamas)
> >
> > This email was sent by [email protected] on the Apache Trusted
> Releases platform
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [email protected]
> > For additional commands, e-mail: [email protected]
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

Reply via email to