[ 
https://issues.apache.org/jira/browse/MENFORCER-413?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17574611#comment-17574611
 ] 

Patrick Schmidt commented on MENFORCER-413:
-------------------------------------------

I seem to have the same issue, using version 3.0.0 or 3.1.0. The 
requireUpperBoundDeps rule failes with 
{code:java}
Could not build dependency tree Could not collect dependencies: <project I'm 
trying to build>{code}
which on its own isn't very helpful. But after turning on debug logging I got a 
stacktrace which contained this as the root cause:

 
{code:java}
Caused by: org.apache.maven.wagon.authorization.AuthorizationException: 
authentication failed for 
https://repo.spring.io/libs-release/org/springframework/roo/org.springframework.roo.annotations/1.2.3.RELEASE/org.springframework.roo.annotations-1.2.3.RELEASE.pom,
 status: 401 Unauthorized {code}
The spring-data-commons already mentioned in another comment is part of my 
(visible) transitive dependencies. But querydsl-apt and 
org.springframework.roo.annotations are not. So while there seems to be 
something amiss deep in those dependencies, the requireUpperBoundDeps rule 
shouldn't be affected by something that doesn't affect the normal build, if at 
all possible.

 

I also tried this with the latest SNAPSHOT build (3.1.1-20220731.194358-22), 
but with the same result.

 

> Upgrading from 3.0.0-M3 to 3.0.0 causes strange errors about Spring Roo
> -----------------------------------------------------------------------
>
>                 Key: MENFORCER-413
>                 URL: https://issues.apache.org/jira/browse/MENFORCER-413
>             Project: Maven Enforcer Plugin
>          Issue Type: Bug
>          Components: Plugin
>    Affects Versions: 3.0.0
>            Reporter: Matt Raible
>            Priority: Major
>             Fix For: wontfix-candidate
>
>
> In a fresh JHipster project, I get a strange error from the Maven enforcer 
> plugin about Spring Roo dependencies.
>  
> [INFO] — maven-enforcer-plugin:3.0.0:enforce (enforce-dependencyConvergence) 
> @ lapp-li —
> [WARNING] The POM for org.apache.logging.log4j:log4j-api-java9:zip:2.14.1 is 
> missing, no dependency information available
> Downloading from spring-libs-snapshot: 
> [https://repo.spring.io/libs-snapshot/org/springframework/roo/org.springframework.roo.annotations/1.2.3.RELEASE/org.springframework.roo.annotations-1.2.3.RELEASE.pom]
> Downloading from spring-libs-release: 
> [https://repo.spring.io/libs-release/org/springframework/roo/org.springframework.roo.annotations/1.2.3.RELEASE/org.springframework.roo.annotations-1.2.3.RELEASE.pom]
>  
> If I run {{{}mvn dependency:tree | grep roo{}}}, there are no results. 
>  
> According to the issue below, reverting to -M3 solves the problem.
>  
> [https://github.com/jhipster/generator-jhipster/issues/16318]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to