[LUCENE-9836] Fix 8.x Maven Validation and publication to work with Maven Central and HTTPS again; remove pure Maven build (did not work anymore)

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 8.x, 8.9
• Fix Version/s: 8.x, 8.9
• Component/s: general/build
• Lucene Fields: New
• Assignee: Uwe Schindler
• Reporter: Uwe Schindler
• Created: 12/Mar/21 11:46
• Updated: 12/Feb/24 20:41
• Resolved: 11/May/21 15:19

Description

Currenty the Maven related stuff in 8.x completely fails, because Maven-Ant-Tasks is so outdated, that it has hardcoded Maven Central without HTTPS. This makes downloading fail.

You can mostly fix this with an additional remote repository, so it can fallback to that one.

I'd like to do the following on 8.x:

• Remove the Ant-Support for Maven: ant run-maven-build (this no longer bootsraps, because Maven Ant Tasks can't download Maven, as here is no way to override hardcoded repo; I have a workaround in forbiddenapis, but that's too complicated, so I will simply remoe that task)
• Fix the dependency checker: This works, but unfortunately there are some artifacts which itsself have "http:" in their POM file, those fail to download. Newer Maven versions have an hardcoded "fixer" in it, but Maven Ant Tasks again is missing this. I have no idea how to handle that.

I already tried some heavy committing, but the only way to solve this is to replace maven-ant-tasks with the followup ant task. I am not sure if this worth the trouble!

What do others think? Should we maybe simply disable the Maven Dependency checker?

Issue Links

• links to: GitHub Pull Request #2469