[MNG-6996] Upgrade Maven Resolver to 1.6.1

• Type: Dependency upgrade
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.6.3
• Component/s: Dependencies
• Assignee: Michael Osipov
• Reporter: Michael Osipov
• Created: 09/Oct/20 16:46
• Updated: 24/Oct/22 13:37
• Resolved: 09/Oct/20 18:24

Description

Release Notes - Maven Resolver - Version 1.6.1

• • Sub-task
• MRESOLVER-139 - Make SimpleDigest use SHA-1 or MD5 only
• MRESOLVER-140 - Default to SHA-1 and MD5 hashing algorithms

• • Bug
• MRESOLVER-25 - Resume support is broken under high concurrency
• MRESOLVER-114 - ArtifactNotFoundExceptions when building in parallel
• MRESOLVER-129 - Exclusion has no setters
• MRESOLVER-137 - Make OSGi bundles reproducible
• MRESOLVER-138 - MRESOLVER-56 introduces severe performance regression

• • New Feature
• MRESOLVER-109 - AndDependencySelector should override toString
• MRESOLVER-115 - Make checksum algorithms configurable
• MRESOLVER-123 - Provide a global locking sync context by default
• MRESOLVER-131 - Introduce a Redisson-based SyncContextFactory

• • Improvement
• MRESOLVER-56 - Support SHA-256 and SHA-512 as checksums
• MRESOLVER-116 - Add page with all supported configuration options
• MRESOLVER-125 - Use type conversions returning primitives
• MRESOLVER-127 - Don't use boolean for property 'aether.updateCheckManager.sessionState'
• MRESOLVER-136 - Migrate from maven-bundle-plugin to bnd-maven-plugin

• • Task
• MRESOLVER-119 - Turn log messages to SLF4J placeholders
• MRESOLVER-130 - Move GlobalSyncContextFactory to a separate module
• MRESOLVER-132 - Remove synchronization in TrackingFileManager

• • Dependency upgrade
• MRESOLVER-105 - Update Plexus Components
• MRESOLVER-106 - Update HttpComponents
• MRESOLVER-107 - Update Wagon Provider API to 3.4.0
• MRESOLVER-108 - Update mockito-core to 2.28.2
• MRESOLVER-117 - Upgrade SLF4J to 1.7.30
• MRESOLVER-118 - Upgrade Sisu Components to 0.3.4

Issue Links

• is required by: MNG-6281 ArrayIndexOutOfBoundsException caused by pom.xml with invalid/duplicate XML
• is required by: MNG-4706 Multithreaded building can create bad files for downloaded artifacts in local repository
• is required by: MNG-5307 NPE during resolution of dependencies - parallel mode
• is required by: MNG-5838 Maven on No-File-Lock Systems
• is required by: MNG-6604 Intermittent failures while downloading GAVs from Nexus
• is required by: MNG-5315 Artifact resolution sporadically fails in parallel builds
• is required by: MNG-2802 Concurrent-safe access to local Maven repository
• is superceded by: MNG-7522 Upgrade Maven Resolver to 1.8.2