apache / apache/maven-project-info-reports-plugin

[MPIR-456] fixed snapshot versions are ignored and latest snapshot is used instead

Open
#582 3 comments 0 reactions 0 assignees View on GitHub
bug priority:critical
Dominant language
Java
Stars
29
Forks
41
Avg merge
4h 17m
Merged PRs (30d)
3

Description

**[Gabriel Wolf](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=wolf2323)** opened **[MPIR-456](https://issues.apache.org/jira/browse/MPIR-456?redirect=false)** and commented

We use fixed versions of snapshots in your pom, so for example we use '1.20.4-R0.1-20240205.114523-90' instead of '1.20.4-R0.1-SNAPSHOT'. Normally this is not an issue when executing for example 'mvn verify' but when we run 'mvn site' instead of the explicit used snapshot version the latest snapshot version is downloaded and used.

Normally this do not cause big issues, but currently we have an API breaking change in the snapshot version and we want to stick to the old version.

---

**Affects:** 3.5.0

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the reported difference between `mvn verify` and `mvn site` with a fixed timestamped snapshot version in the POM. Trace how the site execution resolves that dependency, and consider the issue done when it consistently uses the declared fixed snapshot rather than the latest snapshot, including for versions with breaking API changes.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.