Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.

If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!

Issues using Proget as a Maven Mirror



  • I am having issues using Proget as a maven mirror for a string-boot project.

    This is the problem path.

    Create a maven feed and add a connector to http://central.maven.org/maven2/

    Go to add package from the feed and select the central.maven.org feed and enter the group id of

    org.jboss.shrinkwrap.descriptors

    and a artifact id of

    shrinkwrap-descriptors-bom

    Click pull artifact and all of the pulls fail for all of the versions.

    Attemping a maven build results in

    [ERROR] Failed to execute goal on project counterservice: Could not resolve dependencies for project <project>:jar:0.0.1-SNAPSHOT: Failed to colle
    ct dependencies at org.springframework.boot:spring-boot-starter-web:jar:2.0.4.RELEASE -> org.hibernate.validator:hibernate-validator:jar:6.0.11.Final: Failed to read artifact desc
    riptor for org.hibernate.validator:hibernate-validator:jar:6.0.11.Final: Could not find artifact org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-bom:pom:2.0.0-alpha-8 in c
    entral-proxy (https://<my proget server>/maven2/maven-mirror/) -> [Help 1]

    If I delete my settigs file and go directly to http://central.maven.org/maven2/ instead of trying to mirror the build succeeds.

    For whatever reason Proget cannot cache org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-bom:pom:2.0.0-alpha-8 and this is causing issues.

    Since all packages used by my company need to be approved and monitored for CVE findings we have to use proget as a mirror.

    Any clues here would be useful.

    Thanks.

    Product: ProGet
    Version: 5.1.10


  • inedo-engineer

    Hello Jeremy,

    It seems that the Maven feed code in ProGet is incorrectly identifying all prerelease Maven package versions as snapshot versions.

    I've filed this as PG-1380.


Log in to reply
 

Inedo Website HomeSupport HomeCode of ConductForums GuideDocumentation