From users-return-145938-archive-asf-public=cust-asf.ponee.io@maven.apache.org Sat Aug 14 07:26:31 2021 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mxout1-ec2-va.apache.org (mxout1-ec2-va.apache.org [3.227.148.255]) by mx-eu-01.ponee.io (Postfix) with ESMTPS id B6F0A180654 for ; Sat, 14 Aug 2021 09:26:31 +0200 (CEST) Received: from mail.apache.org (mailroute1-lw-us.apache.org [207.244.88.153]) by mxout1-ec2-va.apache.org (ASF Mail Server at mxout1-ec2-va.apache.org) with SMTP id 8E0154046D for ; Sat, 14 Aug 2021 07:26:30 +0000 (UTC) Received: (qmail 262 invoked by uid 500); 14 Aug 2021 07:26:27 -0000 Mailing-List: contact users-help@maven.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Help: List-Post: List-Id: "Maven Users List" Reply-To: "Maven Users List" Delivered-To: mailing list users@maven.apache.org Received: (qmail 249 invoked by uid 99); 14 Aug 2021 07:26:26 -0000 Received: from spamproc1-he-fi.apache.org (HELO spamproc1-he-fi.apache.org) (95.217.134.168) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 14 Aug 2021 07:26:26 +0000 Received: from localhost (localhost [127.0.0.1]) by spamproc1-he-fi.apache.org (ASF Mail Server at spamproc1-he-fi.apache.org) with ESMTP id 5B880BFA13 for ; Sat, 14 Aug 2021 07:26:25 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamproc1-he-fi.apache.org X-Spam-Flag: NO X-Spam-Score: 0.001 X-Spam-Level: X-Spam-Status: No, score=0.001 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, NORMAL_HTTP_TO_IP=0.001, NUMERIC_HTTP_ADDR=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamproc1-he-fi.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-ec2-va.apache.org ([116.203.227.195]) by localhost (spamproc1-he-fi.apache.org [95.217.134.168]) (amavisd-new, port 10024) with ESMTP id eyRPC6zzbtyL for ; Sat, 14 Aug 2021 07:26:24 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.128.54; helo=mail-wm1-f54.google.com; envelope-from=delany.middleton@gmail.com; receiver= Received: from mail-wm1-f54.google.com (mail-wm1-f54.google.com [209.85.128.54]) by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 4A749BB94E for ; Sat, 14 Aug 2021 07:26:24 +0000 (UTC) Received: by mail-wm1-f54.google.com with SMTP id i10-20020a05600c354ab029025a0f317abfso11204356wmq.3 for ; Sat, 14 Aug 2021 00:26:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=laSX88eAyYmi1QYk20FOoVD1tbxO/sxGua4srd0x2bY=; b=ZkDkJ4JB4Z805hDlFItcjTfJjqq+zatrWlBB+5IawDMURWGz8AG9rAEbTs1t4OSCwL 4BHbT25NpAIBPayBi6M9l9jDy0ySybA51kACv64JkhSNkFq0LGSCBXBLsn5qy8wpmjea uv3lLEutz/InwEa0KfmmmlQjaFExBpn83zvADOS91hLQn/X6PV68eaMjEv/rfiLLtMui 0TtfPWWIo+52znXnJ/cuqJ65QMhKqMVisiSKhbifbru+x9v3zJnSsJ+hoUNJ4WFwOPRq g9ffSEjBI4VsAL20c8QYPBativCpdPySnpwc9kEmCdqNMay13WcO3Y9Llb+P9BeO7jlZ /Abg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=laSX88eAyYmi1QYk20FOoVD1tbxO/sxGua4srd0x2bY=; b=ILTMXXUR5+bq+vsRGpAqZ3uFKCu909LGQhXKp8V+SjIQhI37sN1MUtl0cvCO5ga0mt 6kJiNjcyP09CGFZL1vb+PEYrMJg3eZCiBiVXPzLwQwYStlO2cAm+tlBO1T71Vi2M6dNo SWGYNBazbGrgvr8LYV3CaI331pj5JH+u1NtrjAR8xE+YdkWBLihV8biAQxCxDGieFA1V T3PSdsT/yfS27Zz1eDNQt/4lf+6P+dARHJ/Y+bKta+CUd/iccHnk8uCDwwXVZXqNCBGJ +9qGHWJmaeffGP+pNKONKr0Wja8lzZdjrmw4mNlchQ32WVnn2EQya6gzQnddy042+q1y +H6Q== X-Gm-Message-State: AOAM5337Flzee/2gyycCMJP+jcMXatz8gSFNBUlaxwiyyVRfhJmXSzg6 UlecTbfae2IplswhGNTtoJERjkp+mzuMbcZVcvjs+2uQi88= X-Google-Smtp-Source: ABdhPJwIWsLDd10ZUdmaDiyN29OlJIEWfcQXQviXjHMy5lUwL/7wpJ4xGxOQUkcrpXijf62rYLiRgN3VIP/VA7EZI+w= X-Received: by 2002:a05:600c:21d2:: with SMTP id x18mr6164943wmj.31.1628925983189; Sat, 14 Aug 2021 00:26:23 -0700 (PDT) MIME-Version: 1.0 From: Delany Date: Sat, 14 Aug 2021 09:25:47 +0200 Message-ID: Subject: 3.8.2 transitive dependency insecure repo To: Maven Users List Content-Type: multipart/alternative; boundary="00000000000097edba05c97fe242" --00000000000097edba05c97fe242 Content-Type: text/plain; charset="UTF-8" The new org.apache.maven:maven-core:3.8.2 has a transitive dependency org.jboss.weld:weld-parent:pom:6, but its source repository is http://repository.jboss.org/maven2 When I run flatten-plugin with set to "all", it fails to resolve. [ERROR] Failed to execute goal org.codehaus.mojo:flatten-maven-plugin:1.2.7:flatten (default-cli) on project dummy: failed to create a clean pom: unable to create flattened dependencies: caught exception when flattening dependencies: Failed to read artifact descriptor for javax.enterprise:cdi-api::1.0: Could not transfer artifact org.jboss.weld:weld-parent:pom:6 from/to maven-default-http-blocker (http://0.0.0.0/): Blocked mirror for repositories: [repository.jboss.org (http://repository.jboss.org/maven2, default, releases), snapshots.jboss.org (http://snapshots.jboss.org/maven2, default, snapshots), oss.sonatype.org/jboss-snapshots ( http://oss.sonatype.org/content/repositories/jboss-snapshots, default, snapshots)] -> [Help 1] Shouldn't the maven-core dependency tree at least not contradict itself? Thanks, Delany 4.0.0 tools dummy 1.0.0 Dummy org.apache.maven maven-core 3.8.2 org.apache.maven maven-model 3.8.2 org.codehaus.mojo flatten-maven-plugin 1.2.7 true clean all flatten.clean clean clean flatten flatten initialize --00000000000097edba05c97fe242--