Bug 1886844 - sonatype-oss-parent orphaned
Summary: sonatype-oss-parent orphaned
Alias: None
Product: Fedora
Classification: Fedora
Component: findbugs
Version: rawhide
Hardware: Unspecified
OS: Unspecified
Target Milestone: ---
Assignee: Richard Fearn
QA Contact: Fedora Extras Quality Assurance
Depends On:
TreeView+ depends on / blocked
Reported: 2020-10-09 14:04 UTC by Stuart D Gathman
Modified: 2020-10-11 14:09 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Last Closed: 2020-10-11 14:09:08 UTC
Type: Bug

Attachments (Terms of Use)

Description Stuart D Gathman 2020-10-09 14:04:57 UTC
Description of problem:
openas2 stopped building on rawhide when sonatype-oss-parent was orphaned

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. build openas2-2.10.0-5

Actual results:
Cannot obtain artifact oss-parent

[ERROR] Failed to execute goal on project openas2-server: Could not resolve dependencies for project net.sf.openas2:openas2-server:jar:2.10.0: Failed to collect dependencies at com.google.code.findbugs:findbugs:jar:3.0.1: Failed to read artifact descriptor for com.google.code.findbugs:findbugs:jar:3.0.1: Cannot access central (https://repo.maven.apache.org/maven2) in offline mode and the artifact org.sonatype.oss:oss-parent:pom:7 has not been downloaded from it before. -> [Help 1]

Expected results:

Additional info:
oss-parent was a dependency of findbugs.  I removed findbugs from the build process, and added jsr-305 as a direct dependency for openas2-2.10.0-6

sonatype-oss-parent is a sort of dummy package, and a %pom_set_parent in %prep replaced it for openas2.

Should be simple to fix for findbugs in rawhide.

Comment 1 Richard Fearn 2020-10-11 13:15:30 UTC
> oss-parent was a dependency of findbugs.

Ah yes - it's the parent of com.google.code.findbugs:findbugs in the POM. (That POM isn't used for building FindBugs though - it's just to help other projects that depend on FindBugs.)

> I removed findbugs from the build process, and added jsr-305 as a direct dependency for openas2-2.10.0-6

I think it should stay that way. As far as I can tell, OpenAS2 doesn't need FindBugs - it just depends on FindBugs to pull in the jsr-305 dependency, as OpenAS2 uses the Nonnull and Nullable annotations from jsr-305.

I wonder if it's worth creating an issue (https://github.com/OpenAS2/OpenAs2App/issues) as you have pretty much proved that OpenAS2 only needs to depend on jsr-305.

Comment 2 Richard Fearn 2020-10-11 13:23:40 UTC
The openas2 sources file still contains old versions 2.6.2 and 2.6.3 - they can be removed to stop it downloading those versions when the SRPM is built: https://src.fedoraproject.org/rpms/openas2/pull-request/1

Comment 3 Richard Fearn 2020-10-11 13:27:40 UTC
Link for my benefit: https://fedoraproject.org/wiki/Changes/Deprecate_Sonatype_OSS_Parent

Comment 4 Richard Fearn 2020-10-11 14:09:08 UTC
oss-parent dependency fixed in findbugs-3.0.1-24.fc34 (https://koji.fedoraproject.org/koji/buildinfo?buildID=1623419)

Note You need to log in before you can comment on or make changes to this bug.