From max.magee at singlewire.com Thu May 16 12:07:36 2019 From: max.magee at singlewire.com (Max Magee) Date: Thu, 16 May 2019 11:07:36 -0500 Subject: [resteasy-dev] Pom/Bom dependency issue Message-ID: Hi All, I'm attempting to upgrade from an older version of resteasy-jaxb-provider (3.0.6) to 4.0.0.Final due to some dependency conflicts on a larger project that got resteasy-jackson2-provider, several com.fasterxml.jackson.core dependency version bumps and jackson-databind version bumps for unrelated reasons. My question is about the maven packaging/pom configuration. I am using a the maven-ant-tasks plugin from Apache (but I see the same issue/warning messages resolving dependencies from maven central through the mvn command line directly). The problem with the ant task may be three-fold: The ant-maven task errors out when it can't read the poms (this is probably mostly a *me/us *problem with our tooling). Secondly, it looks like some of the pom configuration in the resteasy/jboss projects is possibly too complicated for it or possibly even misconfigured (the errors I see in both maven and ant tasks are related to not finding the parent-pom for the project). Finally, the third issue I noticed may be a regression in maven 3.6.1 that causes it not to follow redirects. That's a lot to parse, but let me break it down into pieces to see if somebody may have an idea for a better way to resolve this issue. 1.) When upgrading to 4.0.0.Final (after fixing two or three differences due to functionality changes, getting everything compiling), I am getting the following errors when pulling it from the repo: [artifact:dependencies] Downloading: org/glassfish/jaxb/jaxb-runtime/2.3.1/jaxb-runtime-2.3.1.pom from repository singlewire.public at http://nexus.singlewire.lan:8081/nexus/content/groups/public/ [artifact:dependencies] Transferring 8K from singlewire.public [artifact:dependencies] Downloading: com/sun/xml/bind/jaxb-bom-ext/2.3.1/jaxb-bom-ext-2.3.1.pom from repository releases.java.net at http://maven.java.net/content/repositories/releases/ [artifact:dependencies] Transferring 0K from releases.java.net [artifact:dependencies] [WARNING] *** CHECKSUM FAILED - Checksum failed on download: local = '073af964da9bb8a3b83c9c9dfc3568f1e12a9479'; remote = ' [artifact:dependencies] 301' - RETRYING [artifact:dependencies] Downloading: com/sun/xml/bind/jaxb-bom-ext/2.3.1/jaxb-bom-ext-2.3.1.pom from repository releases.java.net at http://maven.java.net/content/repositories/releases/ [artifact:dependencies] Transferring 0K from releases.java.net [artifact:dependencies] [WARNING] *** CHECKSUM FAILED - Checksum failed on download: local = '073af964da9bb8a3b83c9c9dfc3568f1e12a9479'; remote = '<html> [artifact:dependencies] <head><title>301' - IGNORING *[artifact:dependencies] An error has occurred while processing the Maven artifact tasks.* *[artifact:dependencies] Diagnosis:* *[artifact:dependencies]* *[artifact:dependencies] Unable to resolve artifact: Unable to get dependency information: Unable to read the metadata file for artifact 'org.glassfish.jaxb:jaxb-runtime:jar': Cannot find parent: com.sun.xml.bind:jaxb-bom-ext for project: com.sun.xml.bind.mvn:jaxb-parent:pom:null for project com.sun.xml.bind.mvn:jaxb-parent:pom:null* *[artifact:dependencies] org.glassfish.jaxb:jaxb-runtime:jar:2.3.1* [artifact:dependencies] [artifact:dependencies] from the specified remote repositories: [artifact:dependencies] singlewire.mirror ( http://nexus:8081/nexus/content/groups/public/), [artifact:dependencies] central (http://repo1.maven.org/maven2), [artifact:dependencies] singlewire.public ( http://nexus.singlewire.lan:8081/nexus/content/groups/public/) [artifact:dependencies] [artifact:dependencies] Path to dependency: [artifact:dependencies] 1) my.project:war:12.9.1-SNAPSHOT [artifact:dependencies] 2) org.jboss.resteasy:resteasy-jaxb-provider:jar:4.0.0.Final 2.) When I inspect the contents of the repo it's crashing on, jaxb-bom-ext, this is the content of ~/.m2/repository/com/sun/xml/bind/jaxb-bom-ext/2.3.1/jaxb-bom-ext-2.3.1.pom: <html> <head><title>301 Moved Permanently

301 Moved Permanently

nginx/1.12.1 3.) When I investigate our nexus repo and directly download the file, it seems to contain the appropriate content, as does the repo at maven.java.net : https://maven.java.net/content/repositories/releases/com/sun/xml/bind/jaxb-bom-ext/2.3.1/jaxb-bom-ext-2.3.1.pom