You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Christian Schulte (JIRA)" <ji...@apache.org> on 2016/01/24 23:18:40 UTC

[jira] [Updated] (MNG-5964) Corrupt artifact from stale repository makes build fail, even though correct artifact is available

     [ https://issues.apache.org/jira/browse/MNG-5964?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Christian Schulte updated MNG-5964:
-----------------------------------
    Priority: Minor  (was: Critical)

> Corrupt artifact from stale repository makes build fail, even though correct artifact is available
> --------------------------------------------------------------------------------------------------
>
>                 Key: MNG-5964
>                 URL: https://issues.apache.org/jira/browse/MNG-5964
>             Project: Maven
>          Issue Type: Bug
>          Components: Artifacts and Repositories
>    Affects Versions: 3.2.1
>            Reporter: Hendy Irawan
>            Priority: Minor
>
> This POM (https://repo1.maven.org/maven2/com/hp/hpl/jena/jena/2.6.4/jena-2.6.4.pom) includes an external repository which is: http://openjena.org/repo
> Unfortunately, that repo is now a parking page. Which makes builds problematic.
> {code}
> [INFO] Downloading: https://repository-soluvas.forge.cloudbees.com/release/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [INFO] Downloading: http://repo.cloudbees.com/content/groups/public/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [INFO] Downloaded: http://repo.cloudbees.com/content/groups/public/com/hp/hpl/jena/iri/0.8/iri-0.8.pom (6 KB at 568.1 KB/sec)
> [INFO] Downloading: http://nexus.bippo.co.id/nexus/content/groups/public/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [INFO] Downloading: http://jasperreports.sourceforge.net/maven2/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [INFO] Downloading: http://jaspersoft.artifactoryonline.com/jaspersoft/third-party-ce-artifacts/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [INFO] Downloading: http://morphia.googlecode.com/svn/mavenrepo/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [INFO] Downloading: http://repo.typesafe.com/typesafe/releases/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [INFO] Downloading: http://m2.neo4j.org/content/repositories/releases/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [INFO] Downloading: http://repo.spring.io/milestone/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [INFO] Downloading: http://openjena.org/repo/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [WARNING] Checksum validation failed, expected <!DOCTYPE but is e88206ec93de9f9b6b3259b07aa32e8e00cb90d3 for http://openjena.org/repo/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [WARNING] Checksum validation failed, expected <!DOCTYPE but is f173aa41f57e9b1d170e42cf6b6f3be5a8882168 for http://openjena.org/repo/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [INFO] Downloaded: http://openjena.org/repo/com/hp/hpl/jena/iri/0.8/iri-0.8.pom (21 KB at 22.3 KB/sec)
> [INFO] Downloading: http://openjena.org/repo-dev/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [WARNING] Checksum validation failed, expected <!DOCTYPE but is 893c64b2141598ad999c3540c5f0ff24c38ce7ce for http://openjena.org/repo-dev/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [WARNING] Checksum validation failed, expected <!DOCTYPE but is a2a942560bf2e1838cf48f9adc7042443e5adb3b for http://openjena.org/repo-dev/com/hp/hpl/jena/iri/0.8/iri-0.8.pom
> [INFO] Downloaded: http://openjena.org/repo-dev/com/hp/hpl/jena/iri/0.8/iri-0.8.pom (21 KB at 26.7 KB/sec)
> [WARNING] The POM for com.hp.hpl.jena:iri:jar:0.8 is invalid, transitive dependencies (if any) will not be available, enable debug logging for more details
> {code}
> Exact same thing also happens for the JARs.
> Please notice that the correct POMs and JARs are available from the other repository (repo.cloudbees.com proxy), but Maven ignores that and continues to use the corrupt artifacts, which causes:
> {code}
> [INFO] --- maven-compiler-plugin:3.3:compile (default-compile) @ id.co.bippo.cart ---
> [INFO] Changes detected - recompiling the module!
> [INFO] Compiling 82 source files to /scratch/jenkins/workspace/bippo-commerce/cart/target/classes
> [ERROR] error reading /scratch/jenkins/workspace/bippo-commerce/.repository/com/hp/hpl/jena/iri/0.8/iri-0.8.jar; error in opening zip file
> [ERROR] error reading /scratch/jenkins/workspace/bippo-commerce/.repository/com/ibm/icu/icu4j/3.4.4/icu4j-3.4.4.jar; error in opening zip file
> [ERROR] error reading /scratch/jenkins/workspace/bippo-commerce/.repository/org/slf4j/slf4j-log4j12/1.7.12/slf4j-log4j12-1.7.12.jar; error in opening zip file
> [ERROR] error reading /scratch/jenkins/workspace/bippo-commerce/.repository/log4j/log4j/1.2.13/log4j-1.2.13.jar; error in opening zip file
> [ERROR] error reading /scratch/jenkins/workspace/bippo-commerce/.repository/com/hp/hpl/jena/iri/0.8/iri-0.8.jar; error in opening zip file
> [ERROR] error reading /scratch/jenkins/workspace/bippo-commerce/.repository/com/ibm/icu/icu4j/3.4.4/icu4j-3.4.4.jar; error in opening zip file
> [ERROR] error reading /scratch/jenkins/workspace/bippo-commerce/.repository/org/slf4j/slf4j-log4j12/1.7.12/slf4j-log4j12-1.7.12.jar; error in opening zip file
> [ERROR] error reading /scratch/jenkins/workspace/bippo-commerce/.repository/log4j/log4j/1.2.13/log4j-1.2.13.jar; error in opening zip file
> {code}
> which makes the build fail.
> Please:
> 1. Ignore artifacts from invalid repos when there are correct artifacts from other repo
> 2. Have a way to blacklist repos globally, preferably using ~/.m2/settings.xml



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)