giacgbj opened a new issue, #671: URL: https://github.com/apache/maven-changes-plugin/issues/671
### Affected version 3.0.0-M3 ### Bug description Any build that runs a goal of the plugin, even goals that send no mail such as `changes:changes-validate` or `changes:changes-check`, logs this warning: ``` [WARNING] Ignoring checksum policy 'ignore' contributed by repository codehaus.snapshots (http://snapshots.repository.codehaus.org) declared by a remote artifact descriptor: it would downgrade the checksum policy 'warn' of the mirror serving it; set aether.remoteRepositoryManager.rawRepositoryChecksumPolicyDowngrade=true to restore the legacy weakest-wins merge ``` The repository is declared by the parent POMs of the direct dependency `geronimo-javamail_1.4_mail`: ``` org.apache.maven.plugins:maven-changes-plugin:3.0.0-M3 └─ org.apache.geronimo.javamail:geronimo-javamail_1.4_mail:1.8.4 (direct dependency) parent: org.apache.geronimo.javamail:geronimo-javamail_1.4:1.8.4 parent: org.apache.geronimo.genesis:genesis-java5-flava:2.0 parent: org.apache.geronimo.genesis:genesis-default-flava:2.0 parent: org.apache.geronimo.genesis:genesis:2.0 ``` `org.apache.geronimo.genesis:genesis:2.0` declares `codehaus.snapshots` (`http://snapshots.repository.codehaus.org`, shut down long ago) both as a repository and as a plugin repository, with `<checksumPolicy>ignore</checksumPolicy>`. Maven 3.10 refuses to let this transitive repository lower the checksum policy of the mirror that serves it, and logs the warning above. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
