[
https://issues.apache.org/jira/browse/MNG-5997?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15237692#comment-15237692
]
Robert Scholte commented on MNG-5997:
-------------------------------------
bq. So looks like the daily roundtrips are performed since there are version
ranges defined?!
Yes, that's the reason. I hope you are aware of the content of the
{{maven-metadata.xml}}. It contains all versions of this G:A on which Maven can
decide which version to choose *in case of a range*. In your case it will check
if there's a better match of {{com.this:com.that}} compared to yesterday.
So there should always be a check, but I'm not sure if Aether (responsible for
downloading) does a http HEAD before the http GET, probably not.
Be aware that version ranges are very tricky in case of reproducible builds,
the result can very on a day to day base. For that reason the advice is to
specify the preferred version with dependencyManagement.
If it is such an issue, have you considered using a repository manager, even
locally?
> Continuous download of maven-metadata.xml for version ranges.
> -------------------------------------------------------------
>
> Key: MNG-5997
> URL: https://issues.apache.org/jira/browse/MNG-5997
> Project: Maven
> Issue Type: Bug
> Components: Dependencies
> Affects Versions: 3.2.2
> Reporter: Michael Hüttermann
> Priority: Critical
>
> With every first build of the day, Maven downloads *maven-metadata.xml* from
> remote repository. Generally, this is ok since the default update policy
> enforces an update. But: the daily synced dependency artifacts are release
> artifacts, in the declaration form of:
> {code}
> <dependency>
> <groupId>com.this</groupId>
> <artifactId>com.that</artifactId>
> <version>[1.0.0,1.0.1)</version>
> <type>jar</type>
> </dependency>
> {code}
> So looks like the daily roundtrips are performed since there are version
> ranges defined?! Since there are hundreds of dependencies, this takes a
> pretty long time, and nothing did change, operationally, because I've already
> downloaded all required dependencies.
> Please suppress these daily roundtrips of downloading *maven-metadata.xml*,
> for that use case, in general a check for new updates should be applied of
> cause (thus just using the offline mode is not a solution).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
