Downloading already-built patched jars is not permissible within Apache any longer. The fix to this will entail downloading source and patching that as part of the build process. In order for the build process to succeed on Windows, this currently means that the sources must be checked out using svn.
The following changes will therefore need to occur under this ticket:
(1) Apache binaries that are available as releases but which are not in Maven should be downloaded and unpacked from http://archive.apache.org/dist. This will include the solr and sharepoint mcf plugins.
(2) The "download-dependencies" target must be split into "download-dependencies" and "download-proprietary-dependencies". The "download-dependencies" target will become responsible for downloading, patching, and building the non-proprietary packages. Packages that will need to be checked out by this target from svn include: httpclient 3.1, xerces 2.9.1, hsqldb 2.2.8, and jetty 6.1.26.
(3) A new release artifact, XXX-dep.zip/tar.gz, will be produced which will contain all the dependency binaries.
(4) Any non-sourceable dependency binaries we find must be replaced with a sourced equivalent, or code for it developed from scratch.