Skip to content

fix: Pin Maven 3.9.16 so Central accepts the release bundle - #132

Merged
thced merged 1 commit into
masterfrom
fix/release-maven-3.9
Oct 8, 2026
Merged

thced merged 1 commit into
masterfrom
fix/release-maven-3.9

Conversation

@thced

@thced thced commented Oct 8, 2026

Copy link
Copy Markdown
Contributor

Summary

The Release workflow has failed on the last two master pushes (v2.11.2, v2.12.0) at the Central upload:

Bundle has content that does NOT have a .pom file: com/retailsvc/openapi-httpserver-java

Cause: #130 bumped the Maven wrapper 3.9.16 → 3.10.0. With 3.10.0, central-publishing-maven-plugin 0.11.0 (latest) stages _remote.repositories (+ checksums) and maven-metadata-local.xml into the bundle; Central rejects the stray metadata file.

  • Revert the wrapper to Maven 3.9.16.
  • Dependabot: ignore org.apache.maven:apache-maven >= 3.10.0 until the plugin supports it.

v2.11.2 and v2.12.0 were tagged but never reached Central; the release from this fix: commit publishes everything since v2.11.1.

Verification

Built the bundle locally against a dummy Central endpoint (-DcentralBaseUrl), same commit, both Maven versions. The only difference is the extra files under 3.10.0:

> com/retailsvc/openapi-httpserver-java/9.9.9/_remote.repositories{,.md5,.sha1,.sha256,.sha512}
> com/retailsvc/openapi-httpserver-java/maven-metadata-local.xml

Under 3.9.16 the bundle has only the jar, sources, javadoc and pom with checksums, as in earlier successful releases.

Maven 3.10.0 makes central-publishing-maven-plugin 0.11.0 stage
_remote.repositories and maven-metadata-local.xml into the bundle, which
Central rejects. Revert the wrapper to 3.9.16 and have dependabot ignore
apache-maven >= 3.10.0.
@sonarqubecloud

sonarqubecloud Bot commented Oct 8, 2026

Copy link
Copy Markdown

@thced
thced merged commit 3ecefdb into master Oct 8, 2026
5 checks passed
@thced
thced deleted the fix/release-maven-3.9 branch October 8, 2026 13:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant