dependabot / dependabot/dependabot-core

Wrong test jar looked up for infinispan protostream

Open
#14,844 1 comment 0 reactions 0 assignees View on GitHub
L: java:maven L: javascript T: bug 🐞
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Package ecosystem

Maven

### Package manager version

_No response_

### Language version

_No response_

### Manifest location and content before the Dependabot update

_No response_

### dependabot.yml content

https://github.com/apache/camel/blob/main/.github/dependabot.yml

### Updated dependency

_No response_

### What you expected to see, versus what you actually saw

there are several 404 because it is searching for a test jar like protostream-6.0.6.test-jar but what is available is [protostream-6.0.6-tests.jar](https://repo1.maven.org/maven2/org/infinispan/protostream/protostream/6.0.6/protostream-6.0.6-tests.jar)

and with version 5.x: protostream-5.0.15.Final.test-jar but waht is available is [protostream-5.0.15.Final-tests.jar](https://repo1.maven.org/maven2/org/infinispan/protostream/protostream/5.0.15.Final/protostream-5.0.15.Final-tests.jar)

it consequently 1'20" just to do a bunch of 404

### Native package manager behavior

_No response_

### Images of the diff or a link to the PR, issue, or logs

```
2026-04-16T07:07:05.7067526Z updater | 2026/04/16 07:07:05 INFO Checking if org.infinispan.protostream:protostream 6.0.2 needs updating
2026-04-16T07:07:05.8794483Z proxy | 2026/04/16 07:07:05 [536] GET https://repo1.maven.org:443/maven2/org/apache/apache/37/apache-37.pom
2026-04-16T07:07:05.8796314Z 2026/04/16 07:07:05 [536] 200 https://repo1.maven.org:443/maven2/org/apache/apache/37/apache-37.pom (cached)
2026-04-16T07:07:05.9964072Z proxy | 2026/04/16 07:07:05 [538] GET https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/maven-metadata.xml
2026-04-16T07:07:06.0116455Z proxy | 2026/04/16 07:07:06 [538] 200 https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/maven-metadata.xml
2026-04-16T07:07:06.1283167Z proxy | 2026/04/16 07:07:06 [540] GET https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream
2026-04-16T07:07:06.2376775Z proxy | 2026/04/16 07:07:06 [540] 302 https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream
2026-04-16T07:07:06.3344514Z proxy | 2026/04/16 07:07:06 [542] GET https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/
2026-04-16T07:07:06.3508796Z proxy | 2026/04/16 07:07:06 [542] 200 https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/
2026-04-16T07:07:06.3879809Z updater | 2026/04/16 07:07:06 INFO Filtered out 71 pre-release versions
2026-04-16T07:07:06.3934811Z updater | 2026/04/16 07:07:06 INFO Filtered out 20 non-2 classifier versions
2026-04-16T07:07:06.4803714Z proxy | 2026/04/16 07:07:06 [544] HEAD https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/15.0.13.Final/protostream-15.0.13.Final.test-jar
2026-04-16T07:07:06.6404483Z proxy | 2026/04/16 07:07:06 [544] 404 https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/15.0.13.Final/protostream-15.0.13.Final.test-jar
2026-04-16T07:07:06.6918202Z proxy | 2026/04/16 07:07:06 Posting metrics to remote API endpoint
2026-04-16T07:07:06.7312487Z proxy | 2026/04/16 07:07:06 [546] HEAD https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/6.0.6/protostream-6.0.6.test-jar
2026-04-16T07:07:06.7322096Z proxy | 2026/04/16 07:07:06 Successfully posted metrics data via api client
2026-04-16T07:07:06.8703744Z proxy | 2026/04/16 07:07:06 [546] 404 https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/6.0.6/protostream-6.0.6.test-jar
2026-04-16T07:07:06.9674738Z proxy | 2026/04/16 07:07:06 [548] HEAD https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/6.0.5/protostream-6.0.5.test-jar
2026-04-16T07:07:07.1128373Z proxy | 2026/04/16 07:07:07 [548] 404 https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/6.0.5/protostream-6.0.5.test-jar
2026-04-16T07:07:07.2113635Z proxy | 2026/04/16 07:07:07 [550] HEAD https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/6.0.4/protostream-6.0.4.test-jar
2026-04-16T07:07:07.3526568Z proxy | 2026/04/16 07:07:07 [550] 404 https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/6.0.4/protostream-6.0.4.test-jar
2026-04-16T07:07:07.4483075Z proxy | 2026/04/16 07:07:07 [552] HEAD https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/6.0.3/protostream-6.0.3.test-jar
2026-04-16T07:07:07.6011106Z proxy | 2026/04/16 07:07:07 [552] 404 https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/6.0.3/protostream-6.0.3.test-jar
```

```
2026-04-16T07:07:08.4275108Z proxy | 2026/04/16 07:07:08 [560] HEAD https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/5.0.15.Final/protostream-5.0.15.Final.test-jar
2026-04-16T07:07:08.5485441Z proxy | 2026/04/16 07:07:08 [560] 404 https://repo1.maven.org:443/maven2/org/infinispan/protostream/protostream/5.0.15.Final/protostream-5.0.15.Final.test-jar
```

### Smallest manifest that reproduces the issue

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with the .github/dependabot.yml configuration and the Maven update logs showing requests for protostream-*.test-jar. Trace how the Maven updater derives test-jar filenames and compare them with the linked Maven Central artifacts ending in -tests.jar. Done means the updater finds the available test artifacts without the repeated 404 lookups.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, ruby
Domain
tooling
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
50/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.