[MNG-6759] [REGRESSION] Maven fails to use <repositories> section from dependency when resolving transitive dependencies in some cases

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.6.2
• Fix Version/s: 3.6.3
• Assignee: Robert Scholte
• Reporter: Stig Rohde Døssing
• Created: 07/Sep/19 11:21
• Updated: 10/Oct/21 19:27
• Resolved: 17/Nov/19 21:11

Description

With Maven 3.6.2, I get the following error on a project using the ASF parent POM version 21:

[ERROR] Failed to execute goal org.apache.maven.plugins:maven-remote-resources-plugin:1.5:process (process-resource-bundles) on project ChildA: Failed to resolve dependencies for one or more projects in the reactor. Reason: Missing:
[ERROR] ----------
[ERROR] 1) io.confluent:kafka-avro-serializer:jar:1.0
[ERROR]
[ERROR] Try downloading the file manually from the project website.
[ERROR]
[ERROR] Then, install it using the command:
[ERROR] mvn install:install-file -DgroupId=io.confluent -DartifactId=kafka-avro-serializer -Dversion=1.0 -Dpackaging=jar -Dfile=/path/to/file
[ERROR]
[ERROR] Alternatively, if you host your own repository you can deploy the file there:
[ERROR] mvn deploy:deploy-file -DgroupId=io.confluent -DartifactId=kafka-avro-serializer -Dversion=1.0 -Dpackaging=jar -Dfile=/path/to/file -Durl=[url] -DrepositoryId=[id]
[ERROR]
[ERROR] Path to dependency:
[ERROR] 1) io.github.srdo:ChildA:jar:0.0.1-SNAPSHOT
[ERROR] 2) io.github.srdo:ChildB:jar:0.0.1-SNAPSHOT
[ERROR] 3) io.confluent:kafka-avro-serializer:jar:1.0
[ERROR] ----------
[ERROR] 1 required artifact is missing.
[ERROR]
[ERROR] for artifact:
[ERROR] io.github.srdo:ChildA:jar:0.0.1-SNAPSHOT
[ERROR]
[ERROR] from the specified remote repositories:
[ERROR] apache.snapshots (https://repository.apache.org/snapshots, releases=false, snapshots=true),
[ERROR] central (https://repo.maven.apache.org/maven2, releases=true, snapshots=false)

This build works on Maven 3.6.1. I've put up a reproduction at https://github.com/srdo/Maven362RepositoriesRegression

I've found the following workarounds:

• Dropping the ASF parent POM. Maybe there's a plugin version in there Maven 3.6.2 doesn't like?
• Copying the <repositories> section from ChildB into ChildA

Issue Links

• is caused by: MNG-6638 Prevent reparsing POMs in MavenMetadataSource
• links to: GitHub Pull Request #50
• links to: GitHub Pull Request #294