Hide Forgot
Description of problem: openas2 stopped building on rawhide when sonatype-oss-parent was orphaned Version-Release number of selected component (if applicable): findbugs-3.0.1-23.fc33.noarch How reproducible: Steps to Reproduce: 1. build openas2-2.10.0-5 2. 3. Actual results: Cannot obtain artifact oss-parent [ERROR] Failed to execute goal on project openas2-server: Could not resolve dependencies for project net.sf.openas2:openas2-server:jar:2.10.0: Failed to collect dependencies at com.google.code.findbugs:findbugs:jar:3.0.1: Failed to read artifact descriptor for com.google.code.findbugs:findbugs:jar:3.0.1: Cannot access central (https://repo.maven.apache.org/maven2) in offline mode and the artifact org.sonatype.oss:oss-parent:pom:7 has not been downloaded from it before. -> [Help 1] Expected results: Additional info: oss-parent was a dependency of findbugs. I removed findbugs from the build process, and added jsr-305 as a direct dependency for openas2-2.10.0-6 sonatype-oss-parent is a sort of dummy package, and a %pom_set_parent in %prep replaced it for openas2. Should be simple to fix for findbugs in rawhide.
> oss-parent was a dependency of findbugs. Ah yes - it's the parent of com.google.code.findbugs:findbugs in the POM. (That POM isn't used for building FindBugs though - it's just to help other projects that depend on FindBugs.) > I removed findbugs from the build process, and added jsr-305 as a direct dependency for openas2-2.10.0-6 I think it should stay that way. As far as I can tell, OpenAS2 doesn't need FindBugs - it just depends on FindBugs to pull in the jsr-305 dependency, as OpenAS2 uses the Nonnull and Nullable annotations from jsr-305. I wonder if it's worth creating an issue (https://github.com/OpenAS2/OpenAs2App/issues) as you have pretty much proved that OpenAS2 only needs to depend on jsr-305.
The openas2 sources file still contains old versions 2.6.2 and 2.6.3 - they can be removed to stop it downloading those versions when the SRPM is built: https://src.fedoraproject.org/rpms/openas2/pull-request/1
Link for my benefit: https://fedoraproject.org/wiki/Changes/Deprecate_Sonatype_OSS_Parent
oss-parent dependency fixed in findbugs-3.0.1-24.fc34 (https://koji.fedoraproject.org/koji/buildinfo?buildID=1623419)