All anyone in Maven-land can do is ensure that the JARs are consistent
between mirrors of central, which they are AFAICT.that 2.5.6 and
2.5.6.SEC01 are two different versions. There are artifacts for
2.5.6.SEC01 in central (and mirrors) which are dated 4/22/09.
Justin
Rob Leland wrote:
The jars at the ibibilo repository obtained through maven does NOT match
what is at the spring website:
What I believe to be the real spring-webmvc-2.5.6 jars were dated
10/31/2008.
This is what I downloaded a year ago and is what I still download using a
browser.
What I download using maven from ibibilo is dated 11/02/2008 and built with
a different version of java.
The spring-webmvc-2.5.6.SEC01.jar is dated 4/21/2009 inside the jar file and
it was built with the same version of java as the jar dates 10/31/2008.
I'll try at the spring mailing list to see if they can explain whats going
on.
In general, SpringSource-hosted repositories do not have the same
immutability policy that Central does. It appears that Spring updated the
2.5.6 artifacts in May 2009 whereas the ones in Central date from November
2008 (which was the actual release date for Spring 2.5.6).
Justin
On Fri, Mar 26, 2010 at 10:05 PM, Rob Leland <[email protected]>wrote:
I am getting a different jar file and sha1 signature from bilbo.org maven
repo depending on whether I use maven or a browser.
When I manually clear out my local repository for spring-webmvc
When I build a project from the command line with maven 2.0.9 I see that
the
only file downloaded is:
Downloading:
http://mirrors.ibiblio.org/pub/mirrors/maven2/org/springframework/spring-webmvc/2.5.6/spring-webmvc-2.5.6.pom
5K downloaded
Downloading:
http://maven.springframework.org/release/org/springframework/spring-webmvc/2.5.6/spring-webmvc-2.5.6.jar
392K downloaded
When I look at the spring-webmvc-2.5.6.jar.sha1 downloaded by maven I see:
f19e2e60721a2fc2111c0d6f95f51f224b9e9883
If I go to the same URL on ibiblio.org using my browser and down load it:
spring-webmvc-2.5.6.jar.sha1 has a value of:
fa425355629ce2ce0bfb870849a6b6634f299649
When I do a jar file comparison between the one maven downloaded and the
one
I downloaded with my browser
There are 18 files in the jar file that are different including the
MANIFEST.MF.
I have done this experiment twice and get the same results.
I have a version of the spring-webmvc-2.5.6.jar.sha1 and
spring-webmvc-2.5.6.jar that I downloaded a year ago,
and those files match the version I downloaded with the browser i.e.:
fa425355629ce2ce0bfb870849a6b6634f299649
What's going on here?
Rob Leland
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
