jackrabbit-oak-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Munteanu (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (OAK-6880) Build fails on a fresh m2 repo
Date Mon, 08 Apr 2019 16:27:00 GMT

    [ https://issues.apache.org/jira/browse/OAK-6880?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16812569#comment-16812569
] 

Robert Munteanu commented on OAK-6880:
--------------------------------------

It seems that we would be able to exclude unexpected Maven artifacts using a custom enforcer
rule, see

https://stackoverflow.com/questions/14214406/how-to-enforce-a-strict-maven-dependency-policy-dependency-chain-attack

So we could revert the change and validate that the artifact is strictly the upstream one.
This would make the builds reproducible and clearly state the reason for failure.

> Build fails on a fresh m2 repo
> ------------------------------
>
>                 Key: OAK-6880
>                 URL: https://issues.apache.org/jira/browse/OAK-6880
>             Project: Jackrabbit Oak
>          Issue Type: Bug
>          Components: parent
>            Reporter: Christian Schneider
>            Assignee: Julian Reschke
>            Priority: Major
>
> When I build from a fresh m2 repo with no special settings.xml I get this failure:
> {noformat}
> [ERROR] Failed to execute goal on project oak-solr-core: Could not resolve dependencies
for project org.apache.jackrabbit:oak-solr-core:bundle:1.8-SNAPSHOT: The following artifacts
could not be resolved: org.restlet.jee:org.restlet:jar:2.1.1, org.restlet.jee:org.restlet.ext.servlet:jar:2.1.1:
Failure to find org.restlet.jee:org.restlet:jar:2.1.1 in https://repo.maven.apache.org/maven2
was cached in the local repository, resolution will not be reattempted until the update interval
of central has elapsed or updates are forced -> [Help 1]
> {noformat}
> It seems the restlet jars are only in the restlet maven repo.
> I will provide a PR.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message