This Bugzilla instance is deprecated, and most Eclipse projects now use GitHub or Eclipse GitLab. Please see the deprecation plan for details.
Bug 430078 - A new artifact deployed in Maven Central (org.eclipse.core:runtime:jar:3.9.100-v20131218-1515) has a missing dependency (org.eclipse.equinox:app:jar:1.0.0)
Summary: A new artifact deployed in Maven Central (org.eclipse.core:runtime:jar:3.9.10...
Status: VERIFIED FIXED
Alias: None
Product: Platform
Classification: Eclipse Project
Component: Runtime (show other bugs)
Version: 4.3   Edit
Hardware: PC All
: P3 critical (vote)
Target Milestone: 4.4 M7   Edit
Assignee: platform-runtime-inbox CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-03-11 05:56 EDT by Arnaud Heritier CLA
Modified: 2014-04-29 08:45 EDT (History)
4 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Arnaud Heritier CLA 2014-03-11 05:56:13 EDT
2 days ago a project at eclipse published a new artifact org.eclipse.core:runtime:jar:3.9.100-v20131218-1515 in Maven central
http://central.maven.org/maven2/org/eclipse/core/runtime/3.9.100-v20131218-1515/runtime-3.9.100-v20131218-1515.pom
Unlike its previous version (http://central.maven.org/maven2/org/eclipse/core/runtime/3.9.0-v20130326-1255/runtime-3.9.0-v20130326-1255.pom) it isn't using a range for its dependency (org.eclipse.equinox:app) but a fixed version (1.0.0) not available in central.

<dependency>
  <groupId>org.eclipse.equinox</groupId>
  <artifactId>app</artifactId>
- <version>[1.0.0,2.0.0)</version>
+ <version>1.0.0</version>
  <optional>false</optional>
</dependency>

Due to this change many builds are broken all over the world (I found several people complaining on twitter too).

Please help us to have quickly a fix in Maven central.
Comment 1 Pascal Rapicault CLA 2014-03-11 05:58:08 EDT
Is there a way to tell who / how this project got there? http://repo.eclipse.org does not contain anything by that name.
Comment 2 Arnaud Heritier CLA 2014-03-11 06:11:59 EDT
I don't see how to find it ourselves. We need to ask to sonatype if its not coming from your foundation. I will open an issue in https://issues.sonatype.org/browse/MVNCENTRAL to ask them to tell us where it is coming from
Comment 3 Arnaud Heritier CLA 2014-03-11 06:14:38 EDT
Reported here : https://issues.sonatype.org/browse/MVNCENTRAL-431
Let see what they say ...
Comment 4 Thomas Watson CLA 2014-03-11 08:35:33 EDT
Moving to platform->runtime where org.eclipse.core.runtime is, but I have the same questions as Pascal.
Comment 5 Arnaud Heritier CLA 2014-03-11 09:46:09 EDT
Guys,

  Joel from Sonatype replied to me : https://issues.sonatype.org/browse/MVNCENTRAL-431?focusedCommentId=213261&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-213261

  It seems to be a third party upload from Pieter Martin as the uploader <pieter.martin@gmail.com>. Perhaps you know him in the eclipse community ?

  Could you contact him to understand his need and find a solution ? I can do it if you prefer but I really don't know these artifacts and won't be able to debate a lot about why he needed to do it (and why he shouldn't have done this).

Arnaud
Comment 6 Pascal Rapicault CLA 2014-03-11 11:23:21 EDT
I'll reach out to Pieter to see what are his needs.
However even knowing what his needs are (which are probably "I just want artifacts to be central"), the same old discussion of who is going to do the work to put the artifacts in central on a regular basis is going to come back and haunt us.
Comment 7 Pieter Martin CLA 2014-03-12 03:40:28 EDT
Hi,

I have uploaded the runtime.jar with the dependency changed as indicated. It is waiting for sonatype 3rd party upload approval.

I generated the original jars by running mvn eclipse:to-maven on a eclipse kepler sr2 installation. It is from there that the pom's dependency versions come.

Indeed "I just want artifacts to be central", and am not involved with eclipse foundation nor with the projects whos artifacts I upload. 

My own requirements are for the eclipse uml and ocl projects.

Thanks
Pieter
Comment 9 Arnaud Heritier CLA 2014-03-12 10:03:44 EDT
Sonatype just updated the POM ? :(
Nobody will see the update due to maven behavior to never update released artifacts.
In my case I know it thus I'll do the necessary cleanup but for others ...
Comment 10 Pascal Rapicault CLA 2014-03-15 21:08:45 EDT
Pieter, thanks for the quick turnaround on this issue.

> Indeed "I just want artifacts to be central", and am not involved with
> eclipse foundation nor with the projects whos artifacts I upload. 
  Would you be interested in doing the same work but from the Eclipse Foundation infrastructure? This would not be any different than what you are doing now but it would be done from the Eclipse Foundation machines so we would have official Foundation artifacts in Central.
Comment 11 Pascal Rapicault CLA 2014-03-15 21:09:08 EDT
(In reply to Arnaud Heritier from comment #9)
> Sonatype just updated the POM ? :(
> Nobody will see the update due to maven behavior to never update released
> artifacts.
> In my case I know it thus I'll do the necessary cleanup but for others ...
   Bah that's weird... :(
Comment 12 Pascal Rapicault CLA 2014-03-15 21:10:00 EDT
closing
Comment 13 Paul Webster CLA 2014-04-29 08:45:00 EDT
In maven central.
PW