Michael Osipov wrote:
> Please file an issue. I will add this to the known issues list then.
Thanks for confirming this regression, I’ve filed it as a bug here:
https://issues.apache.org/jira/browse/MNG-7219
Nils.
-
To
-dispatcher:1.4
(https://search.maven.org/artifact/org.sonatype.plexus/plexus-sec-dispatcher/1.4/jar)
indeed declares a dependency on plexus-cipher 1.4, but it’s not there when
depending on maven-core 3.8.2.
How can this be? And is this intentional? Is there an exclusion somewhere?
Nils Breunese.
Another option is creating an artifact of type ‘pom’ that consists of just a
pom.xml with a section and optionally properties for the
versions (so they can easily be overridden when needed), and importing this BOM
(bill of materials) artifact in your applications.
See spring-boot-dependencies
Manuel Dahmen wrote:
> I don't understand why XStream library is loaded since I don't have this in
> my dependencies.
>
> pom.xml:
> https://github.com/manuelddahmen/empty3/blob/android/pom.xml
I do see this dependency at
https://github.com/manuelddahmen/empty3/blob/android/pom.xml#L308-L312
Hervé BOUTEMY wrote:
> Looking at the log, I see "Could not find artifact com.x.commonlibrary:cl-
> parent:pom:1.5.39-20210922124845805-SNAPSHOT"
>
> It seems you referenced parent POM as "1.5.39-20210922124845805-SNAPSHOT"
> when:
> 1. you should not add the "-SNAPSHOT" suffix but
Marc Hoppins wrote:
> This is a stock ambari 2.7.6 build attempt on Ubuntu 18.04. I am not a java
> entity but I am interested in understanding how these tools operate with a
> view to getting away from Cloudera. We currently run with CDH 6.3, the
> free/express version and this leaves us
Rimvydas Vaidelis wrote:
> Thank you for the answer. I know that I can override the dependency version
> in pom that imports the bom module. I wanted to avoid duplicating of the
> dependency overriding in my library and in another project. However now I
> see that it is the only way to implement
Rimvydas Vaidelis wrote:
> I have a multi-module project and I want to create a bill of materials
> (BOM) module. BOM module contains dependencyManagement. My parent module
> imports BOM module. BOM module will be used in another project that is
> going to use my library. In development
Steve Hannah wrote:
> I'm trying to achieve better integration into VSCode with my project
> archetype. The way that the VSCode maven extension seems to prefer to work
> is for users to explicitly "run" a goal from a plugin of the project.
>
> You can see the VSCode instructions for running a
Steve Hannah wrote:
> VSCode does let you execute phases,
> but the "phase" model doesn't work well when you are working on
> desktop application. You expect there to be an action to "run" the app and
> a separate action to "build" the app.
I don’t generally work on desktop application
Thomas Broyer wrote:
> Le mer. 9 mars 2022 à 23:48, Nils Breunese a écrit :
>
>> The Maven build lifecycle consists of phases [0] and you can bind plugin
>> goals to phases. As far as I know it doesn’t work the other way around, so
>> you can’t make a plugin goal e
Bernd Eckenfels wrote:
> First thing would be to determine if those are failed downloads or creates
> (installed from local built). In both cases however failures should not
> result in that. For downloads you have checksum checks and for build
> artifacts they are copied from target/
Tushar Kapila wrote:
> Just out of curiosity which os are you using?
I run macOS myself, but I’ve also seen it happen on Linux. On StackOverflow I
also find posts from people who encountered this issue on Windows, so it
doesn’t seem to be an OS-specific issue.
> And are you doing parallel
>
Good news: Michael Osipov reports in the comments that this issue should go
away with the fixes for concurrency issues that are coming up in Maven 3.9.0.
Nils.
> Op 28 feb. 2022, om 01:04 heeft Nils Breunese het volgende
> geschreven:
>
> After reading the various responses to
Hi,
I’ve been encountering Maven warnings like these for years from time to time:
WARN: zip file is empty:
/Users/username/.m2/repository/com/example/example-artifact/1.2.3/example-artifact-1.2.3.jar
java.util.zip.ZipException: zip file is empty
I know that when I encounter this I
After reading the various responses to this thread with people recognizing this
issue on various operating systems, I’ve opened an issue in the Maven issue
tracker: https://issues.apache.org/jira/browse/MNG-7425
Nils.
> Op 18 feb. 2022, om 13:43 heeft Nils Breunese het volgende
> gesc
Tamás Cservenák wrote:
> Would be good to know
> - OS (from path I guess macOS)
Got recent reports from both macOS and Linux hosts.
> - Java
Mostly Azul Zulu OpenJDK, but probably also other OpenJDK-based distributions.
> - maven version (w/ any modding, if applicable)
Mostly 3.8.4, maybe
x.html
I’ve asked my colleagues, but they weren’t doing parallel builds (-T or
--threads).
Nils.
> Not sure of the implications of assuming an empty zip file means a failed
> download, it seems reasonable to me but I'll let others chip in.
> On Feb 18, 2022, 7:43 AM -0500, Nils Br
2 builds in
> parallel, something like
> cd /some/repo1
> mvn clean verify &
> cd /some/repo2
> mvn clean verify &
>
> It could also be your IDE auto building too, I've seen that happen.
>
>
> On Fri, Feb 18, 2022 at 11:13 AM Nils Breunese wrote:
>
Alexander Ushakov wrote:
>
>org.apache.maven.plugins
>maven-compiler-plugin
>3.1
>
> 1.17
> 1.17
>
>
>
> (…)
>
> results with error
>
> ```
> [ERROR] Failed to execute goal
>
Olivier Lamy wrote:
> should be 1.7 not 1.17 ;)
No, 1.7 is for Java 7. For Java 17 it should be just 17.
Nils.
> On Sat, 26 Mar 2022 at 13:48, Alexander Ushakov <
> alexander.ushakov.em...@gmail.com> wrote:
>
>> Hello!
>>
>> I am trying to play with Apache Kafka and craft next pom.xml
>>
christopher.mil...@gd-ms.com wrote:
> I was able to curl that URL along with pulling that .pom file with the
> following command:
>
> curl -o maven-archiver-2.5.pom
> https://repo.maven.apache.org/maven2/org/apache/maven/maven-archiver/2.5/maven-archiver-2.5.pom
>
> So I'm still at a loss
haven’t really answered your questions yet. If you can let us know more about
what exactly you’re trying to achieve, we may be able to help you with more
focused issues.
Nils.
> On 1/26/2022 5:26 AM, Nils Breunese wrote:
>> Bruno Melloni wrote:
>>
>>> If I understood th
christopher.mil...@gd-ms.com wrote:
> Using Maven 3.5.4 on RHEL 8.1 with OpenJDK 1.8.
>
> I've been using maven okay for awhile now and now I'm getting the following
> error when running a pom.xml file.
>
> [ERROR] Failed to execute goal
> org.apache.maven.plugins:maven-jar-plugin:2.4:jar
I’m not sure, but I suspect RHEL 8.1 might have some outdated CA certificates.
I think that updating to the latest RHEL update (8.4?) might resolve this issue.
Nils.
> Op 31 jan. 2022, om 16:01 heeft christopher.mil...@gd-ms.com het volgende
> geschreven:
>
>
> Here is the java output:
>
>
christopher.mil...@gd-ms.com wrote:
> Yes, we have a local Nexus repo where I can use curl command to
> upload/download without errors.
When you have issues it’s when Maven is trying to download something directly
from repo.maven.apache.org? So you don’t use your Nexus instance as a proxy for
You can create a multi-module project, with one of the modules using its
sibling modules as dependencies. The parent pom.xml would be of type ‘pom’ and
contain the list of all modules in the project of type ‘jar’.
Nils.
> Op 31 jan. 2022 om 13:58 heeft Delany het
> volgende geschreven:
>
>
Joel Moberg wrote:
> I want to use Mavens java API to read dependencies (including transitive)
> in a project and retrieve class and source jars. I would like to use an
> instance of MavenProject because this class seems to have everything I
> need. MavenCli constructs this instance in some way
Bruno Melloni wrote:
> If I understood the explanation, it seems that the spring boot starter
> (parent) defaults to slf4j and that the code above removes that support while
> replacing it with log4j2.
I don’t know what your goals are for this library, but I do wonder if it’s a
good idea to
Alexander Kriegisch wrote:
> A personal note: I am trying to keep my hands off version ranges. I am
> not sure the assumed flexibility is worth the trouble of using it and
> running into the same issues as you. It also potentially creates a huge
> matrix of possible dependency version
Richard Schmidt wrote:
> I am new to maven, NetBeans 13, and gluon and graalvm. I just created a a
> gluon javafx project for desktop platform. I needed to add a dependency to
> POM.XML file for org.openjfx, javafx-web. Most of the time I get the “could
> not find artifact” javafx-web. Once
If you wish to control the version of a transitive dependency, you can specify
it in .
Nils.
> Op 29 aug. 2023 om 19:10 heeft David Karr het
> volgende geschreven:
>
> I support a large number of SpringBoot services built with Maven.
>
> I recently noticed that one of our transient
Hi Manas,
Why do you believe that version 3.2.5 of this plugin exists? There is no
version 3.2.5 of this plugin at
https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-compiler-plugin/
and the archive site on the Maven Compiler Plugin download page
Hi Alexis,
I don’t know if SHA-256 hashes are published anywhere, but after verifying the
other hashes that are published on Maven Central, you could calculate the
SHA-256 hashes yourself. (I’m sorry if I’m being Captain Obvious here.)
For the Maven distribution:
❯ shasum -a 256
Joseph Kesselman wrote:
> Re "IDE droppings"... My experience is that they can actually be useful in
> expressing things like preferred code formatting style in
> importable/executable form. (I'd rather have a standard cross-editor way if
> representing that, but I don't know of one.)
You
Justin Lee wrote:
> I'm trying to write a plugin, it's probably an extension but whatever, that
> can arbitrarily bind functionality to different lifecycle phases based on
> the configuration in the pom file. I'm curious 1) if this is even possible
> in maven, and 2) how I would go about that.
Guillaume Nodet wrote:
> The Apache Maven team is pleased to announce release of the Apache Maven
> Daemon version 0.8.0.
>
> Apache Maven Daemon is a daemon infrastructure for Maven with caching
> capabilities and a native client for a better and faster user experience.
>
> This is the 1st
David Karr wrote:
> We have a bunch of services running Spring Boot 2.3.12, which by default
> uses junit-platform 1.6.3 and junit-jupiter 5.6.3.
>
> We are trying to instead use junit-platform 1.8.2 and junit-jupiter 5.8.2.
> All the artifacts and versions we need are in junit-bom-5.8.2.
>
>
I don’t believe you can _include_ plugins and plugin dependencies, as far as I
know you can only _inherit_ them from a parent. And an artifact can only have
one parent.
There’s import for BOM artifacts, but that only ‘includes’ the
entries from the BOM’s section, and doesn’t do anything
with
I can recommend not using version ranges, because they break build
reproducibility. If you use a specific version and a tool like Dependabot or
Renovate to create pull requests for updates, you’ll have a reproducible build
without having to keep an eye out for updates yourself.
Nils.
> Op 27
I also use .mvn/maven.config with ‘--settings
`. It works, but only when you invoke the mvnw
script from the root directory of the project, otherwise the path to the
settings.xml file will be wrong. That’s a slightly annoying limitation.
There’s an open issue to improve this:
Hi Bruno,
It’s not completely clear to me what your issue is exactly. Is ’the old cached
version from January’ that you refer to an artifact with a snapshot version or
a release version? If it is a snapshot version, it depends on the update policy
whether Maven will use a locally cached
Bruno Melloni wrote:
> First, you are right... I misread. When I look at the maven plugins in
> pluginManagement I see v2 and v3: clean=3.1.0, compiler=3.8.1,
> surefire=2.22.1, jar=3.0.2, install=2.5.2, deploy=2.8.2, site=3.7.1,
> project-info-reports=3.0.0. Still, it is > 2.0 so LATEST
Burkhard Meier wrote:
> If I had a Jira account, I would create a bug to get this fixed (…)
I’m not sure if you already requested a Jira account, but if not, please note
that you can request a Jira account via the instructions on
https://issues.apache.org/jira/
Nils.
I’d say it’s pretty common to have binary files under src/main/resources
actually. Images, movies, etc. for instance.
It’s also pretty common to commit Gradle Wrapper or Maven Wrapper JAR files,
but in this case it looks like this Gradle Wrapper JAR is not used for building
the codebase
Excuse me if this has been previously discussed, but has using semantic
versioning [0] ever been considered for versioning Maven itself? Maybe this
could be adopted from Maven 4 onwards?
I’m a framework maintainer, and software that uses semantic versioning make
users’ lives (including mine)
Max Allan wrote:
> I cannot easily set the values in a settings.xml or elsewhere because the
> proxy host is always different for each build and the proxy settings are
> only needed in CICD, so adding them to settings would break local developer
> builds.
You could have a CI-specific settings
As far as I know this is only an issue on Java 9+ if you use a modulepath
instead of a classpath. I can use these dependencies just fine on Java 11 and
17.
Nils.
> Op 20 apr. 2023, om 18:50 heeft Rodrigo Bourbon
> het volgende geschreven:
>
> Hi, I'm currently working with Java 11 and my
n Thu, Apr 20, 2023 at 8:49 PM Nils Breunese wrote:
>
>> As far as I know this is only an issue on Java 9+ if you use a modulepath
>> instead of a classpath. I can use these dependencies just fine on Java 11
>> and 17.
>>
>> Nils.
>>
>>> Op
As far as I know this dependency is not suitable for use with JMS. Using JMS is
optional in Java 9+. You can use this dependency when using classpath instead
of modulepath.
Nils.
> Op 21 apr. 2023, om 15:31 heeft Rodrigo Bourbon
> het volgende geschreven:
>
> Hi Karl, indeed I'm talking
Kevin Huntly wrote:
> I want to set up multiple build profiles for my app but I'm kindof
> confused. I have the idea of 1 global build profile that always gets used,
> plus smaller build profiles that get activated by the -P flag. Is this
> possible?
Anything that is not defined in a profile is
Tommy Svensson wrote:
> I'm running Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0)
> That is what the latest version of IDEA gives me.
If you add Maven Wrapper [0] to your project, you can use any version of Maven
you like, including the latest 3.9.1 release.
Nils.
[0]
ps://lists.apache.org/thread/274g9dqj812rzs31q2xmj8tms0kv7wvk
>
> Yes, there was a change that seems to have made it a bit stricter than it
> was before.
>
> Michael?
>
> HTH
> Tamas
>
> On Mon, Feb 6, 2023 at 1:27 PM Nils Breunese wrote:
>
>> Hell
wed on
> command line is unfortunate.
> Delany
>
> On Mon, 6 Feb 2023 at 14:39, Nils Breunese wrote:
>
>> Thanks for the link. When I replace this:
>>
>> --errors
>> --show-version
>> -DinstallAtEnd=true
>> -DdeployAtEnd=true
>> --
Hello,
I saw that Maven 3.9.0 was just released (congrats!) and I tried upgrading my
projects. Sadly they failed with this error message:
Unable to parse maven.config file options: Unrecognised option: --settings
.mvn/settings.xml
My projects indeed have a .mvn/maven.config file
I don’t have answers for your Surefire questions, but I wanted to mention that
you can also tell JUnit 5.9.2 to execute tests in parallel:
https://junit.org/junit5/docs/5.9.2/user-guide/index.html
Nils.
> Op 29 mei 2023 om 16:13 heeft Debraj Manna het
> volgende geschreven:
>
> I updated
You can create a backup of the directory so you can restore it whenever you
want for reproduction purposes.
You can also run Maven with an alternative local repository directory
(-Dmaven.repo.local=/path/to/alternative/local/repo) to see if the issue is
related to the state in your local Maven
Delany wrote:
> Oh hi Nils. Yeah well a compromise is reached. I would still support a ban
> on tag in project-specific settings - more for enforcer.
> Its just about maintaining good abstractions. "User settings" what should
> that mean? Its basically the settings that a user doesn't want to
Delany wrote:
> In any case, what repository on the Internet is configured to allow
> anonymous uploads? The settings.xml must always be populated with
> credentials for a deployment to take place.
> If you fear someone accidentally uploading artefacts to random repos then
> "you're doing it
Maven says it can’t find
org.mule.tests.plugin:mule-tests-component-plugin:jar:mule-plugin:4.2.1 at
https://repository-master.mulesoft.org/nexus/content/repositories/releases/
I can’t find it myself either, because there is no tests directory under
David Karr wrote:
> I've been struggling with trying to do this, along with trying to
> understand the output of "mvn dependency:tree" and the apparently
> functionally similar output in the "Dependency Hierarchy" view in Eclipse
> using the m2e plugin. Although I can loosely see the
Garret Wilson wrote:
> It is not a job for profiles. If I put it in a profile, a developer has to
> only mistakenly use `-P nexus` or whatever the profile is, and our
> super-secret million-dollar project gets published. I want it to be disabled
> altogether.
Can I ask why you publish this
Justin Lee wrote:
> I understand that. My question was doing that programmatically because my
> situation is rather dynamic and codify it in the pom is not what I need.
You wrote: "I'm trying to write a plugin (…) that can arbitrarily bind
functionality to different lifecycle phases based on
is issue. Unfortunately, after enabling the maven-build-cache-extension
> I still hit the same issue.
> Joe
>
> On 2024/02/06 12:54:59 Nils Breunese wrote:
>> I can’t comment on your question directly, but I just wanted to say that
>> your use case sounds like it could b
I can’t comment on your question directly, but I just wanted to say that your
use case sounds like it could benefit from the Maven Build Cache Extension
(https://maven.apache.org/extensions/maven-build-cache-extension/).
Just my 2 cents.
Nils.
> Op 6 feb 2024 om 11:40 heeft Joseph Leonard
>
Fabric8’s docker-maven-plugin works for my projects on macOS with Rancher
Desktop providing Docker.
The GitHub issue you reported seems to be specifically related to the docker
command being run by docker-maven-plugin not being supported by the docker
binary on your system.
Maybe the BuildPlan Maven Plugin [0] can provide interesting insights?
Nils.
[0] https://www.mojohaus.org/buildplan-maven-plugin/
> Op 21 dec 2023, om 17:46 heeft Laird Nelson het volgende
> geschreven:
>
> Thanks. I'll take whatever help I can get right now.
>
> I've tried the jar goal and
or elements are not imported when a project imports a BOM with
import, only is imported.
Other elements only get inherited when a project uses another project as a
parent.
> Op 8 jan 2024, om 20:57 heeft Ceki Gulcu het volgende
> geschreven:
>
> Hi Tamás,
>
> Thank you for your
Hi Neil,
java.library.path is a system property. The Exec Maven Plugin documentation for
exec:java and system properties is here:
https://www.mojohaus.org/exec-maven-plugin/java-mojo.html#systemProperties
Nils.
> Op 5 jan 2024, om 17:40 heeft Neil Aggarwal het
> volgende geschreven:
>
>
Can’t these resources be packaged in plain JARs and added as a regular
dependency to the applications that require them, instead of using WAR overlays?
Nils.
> Op 19 dec 2023, om 06:53 heeft Mark Eggers
> het volgende geschreven:
>
> I have several artifacts that consist of WAR archives with
This only imports Spring Boot dependencyManagement, and it looks like the
thread starter would also like access to the plugins configured by
spring-boot-parent. He’d have to duplicate Spring Boot's plugin configuration
in his own project.
Nils.
> Op 5 dec 2023, om 15:11 heeft Francois Marot
I recommend using a bot like Dependabot or Renovate to keep dependencies
up-to-date.
Nils.
> Op 29 feb 2024, om 16:05 heeft Tamás Cservenák het
> volgende geschreven:
>
> Correct!
> It says "Maven 3.x no longer supports usage of these metaversions in the
> POM"
>
> T
>
> On Thu, Feb 29,
Timothy Stone wrote:
> Organizationally, we lack a policy and much of our code lacks even a
> "copyright."
Where I live (The Netherlands) there is no need to explicitly add a copyright
notice to the work you create, you automatically have the copyright on anything
you create (not just
Alexander Kriegisch wrote:
> I think what Nils says applies internationally, not just in the NL. A
> copyright claim for any project which sports at least one easily
> discoverable licence file in its SCM and in each major artifact should
> be easy to defend against any licence violations.
cial License“,
> url=„https://www.companyname.com/terms“, distribution=„manual“ but also think
> it would be good to have standard distribution and classifier for properitary
> code.
>
> Nils Breunese wrote on 27. Mar 2024 20:02 (GMT +01:00):
>> I personally omit the ele
I personally omit the element when there are no applicable licenses.
But it sounds like you'd want to be able to distinguish between ’there are no
applicable licenses’ and ’there may or may not be applicable licenses’?
Nils.
> Op 27 mrt 2024, om 16:38 heeft Timothy Stone het
> volgende
I use Renovate [0] to automatically keep dependencies up-to-date. I noticed
that the upgrade to Maven Wrapper 3.3.0 removed the `wrapperUrl` line from
`.mvn/wrapper/maven-wrapper.properties`. I guess that is related to
https://issues.apache.org/jira/browse/MWRAPPER-120.
A couple of my
some (clearly visible/parsable) value
>> into
>>> script, probably interpolated during build?
>>>
>>> T
>>>
>>> On Mon, Apr 22, 2024 at 11:46 AM Nils Breunese wrote:
>>>
>>>> I use Renovate [0] to automatically keep depend
Tamás Cservenák wrote:
> The Apache Maven team is pleased to announce the release of the Apache
> Maven Wrapper, version 3.3.1
>
> The Maven Wrapper is an easy way to ensure a user of your Maven build has
> everything necessary to run your Maven build.
>
> See https://maven.apache.org/wrapper/
Maven colors logging output by default when possible (`--color=auto`, see
https://maven.apache.org/ref/3.8.7/maven-embedder/cli.html), so Maven code
(including plugins) should log errors via the logging API used by Maven (SLF4J,
see https://maven.apache.org/maven-logging.html) instead of
See https://maven.apache.org/maven-logging.html for information on how to
configure Maven logging. You can either configure this globally or for a
specific project or Maven invocation. When using the default SLF4J Simple
logging implementation, you can override the
81 matches
Mail list logo
