apache / apache/maven-shade-plugin

[MSHADE-372] Shade plugin dependencies not resolvable from snapshot repository

Open
#384 1 comment 0 reactions 0 assignees View on GitHub
bug priority:major
Dominant language
Java
Stars
188
Forks
103
Avg merge
16h 39m
Merged PRs (30d)
4

Description

**[Michael Heuer](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=heuermh)** opened **[MSHADE-372](https://issues.apache.org/jira/browse/MSHADE-372?redirect=false)** and commented

Given

```xml



org.apache.maven.plugins
maven-shade-plugin


org.bdgenomics.adam
adam-shade-spark2_${scala.version.prefix}
${adam.version}


```

With a snapshot version (e.g. 0.32.0-SNAPSHOT) resolution of this dependency appears to be looking in the wrong snapshot repository

```
[ERROR] Failed to execute goal org.apache.maven.plugins:maven-shade-plugin:3.2.0:shade (default) on project cannoli-assembly-spark2_2.12: Execution default of goal org.apache.maven.plugins:maven-shade-plugin:3.2.0:shade failed: Plugin org.apache.maven.plugins:maven-shade-plugin:3.2.0 or one of its dependencies could not be resolved: Failure to find org.bdgenomics.adam:adam-shade-spark2_2.12:jar:0.32.0-SNAPSHOT in https://repository.apache.org/snapshots was cached in the local repository, resolution will not be reattempted until the update interval of apache.snapshots has elapsed or updates are forced -> [Help 1]
```

org.bdgenomics.adam:adam-shade-spark2_${scala.version.prefix}:0.32.0-SNAPSHOT is in fact present in the Sonatype snapshots repository

https://oss.sonatype.org/content/repositories/snapshots/org/bdgenomics/adam/adam-shade-spark2_2.12/0.32.0-SNAPSHOT/

This snapshot repository is included in our parent pom via oss-parent

```xml

org.sonatype.oss
oss-parent
9

```

---

**Affects:** 3.2.0

Contributor guide

No contributing guide indexed for this repository

Research direction

Reproduce the maven-shade-plugin:3.2.0:shade failure with the XML plugin dependency example and a 0.32.0-SNAPSHOT version. Inspect how the parent POM's oss-parent snapshot repository is considered for plugin dependencies; done means the dependency resolves from the Sonatype snapshots repository rather than the wrong snapshot repository.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.