Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.
If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!
ProGet can't work with maven with nonstandard version
-
ProGet: 25.0.9 with PostgreSQL
Maven work as mirror, link to https://repo1.maven.org/maven2
Invalid Versions: not block
Nonstandard Files: not block
Vulnerabilities Rules: all not blockingArtifacts likes: http://127.0.0.1:8080/feeds/MavenMirror/io.r2dbc/r2dbc-bom/Arabba-SR13 can view meta info
Download pom file like: http://127.0.0.1:8080/maven2/MavenMirror/io/r2dbc/r2dbc-bom/Arabba-SR13/r2dbc-bom-Arabba-SR13.pom will response
Request finished HTTP/1.1 GET http://127.0.0.1:8080/maven2/MavenMirror/io/r2dbc/r2dbc-bom/Arabba-SR13/r2dbc-bom-Arabba-SR13.pom - 302 0 - 3.3826ms
will redirect to http://127.0.0.1:8080/maven2/MavenMirror/io/r2dbc/r2dbc-bom/Arabba-SR13/r2dbc-bom-Arabba-SR13.pom/ , this url pom file treated as directory, download fail, block build
-
Hi @shijiyong_6709 ,
This is a known limitation; when we implemented our Maven2 feed, we followed the 20+ year old Maven rule that "versions begin with numbers, artifacts begin with letters". Unfortunately there are some "ancient artifacts" and "broken versions" that don't follow this rule.
Since ProGet is not just a "dumb file server", knowing whether
Arabba-SR13is a version or artifact is important - and it's a nontrivial effort to address these "bad" artifacts. We will consider doing that in the future but it doesn't seem to impact a lot of artifactsa nd hasn't been a priorityThanks,
Steve
