Enforcing Maven 3.9 as minimum, would you be ok?

aaime-geosolutions · February 24, 2025, 11:28am

Hi all,
we have this PR suggesting to enforce Maven 3.9 as a minimum:

github.com/geoserver/geoserver

Enforce Maven 3.9+ for improved plugin version resolution

geoserver:main ← groldan:enforce_minimum_maven_version_and_matching_plugins

opened 04:32AM - 11 Feb 25 UTC

groldan

+44 -1

Enforcing Maven 3.9+ ensures consistent plugin version resolution across all env…ironments. Different Maven versions may resolve plugin versions differently due to changes in: - Default lifecycle plugin mappings (e.g., maven-compiler-plugin, maven-surefire-plugin) - Dependency resolution behavior for both plugins and their transitive dependencies - Compatibility improvements and bug fixes in newer Maven versions By standardizing the required Maven version, we can ensure: - Plugins work correctly with the expected Maven features - Consistent builds in both developer machines and CI/CD environments - Easier decision-making regarding which plugin versions to use for compatibility and stability This change will prevent unexpected build failures or inconsistencies caused by older Maven versions and will help identify the best plugin versions to use that are fully compatible with Maven 3.9+. --- Note this doesn't change any plugin version, but helps in resolving which plugins versions to eventually upgrade to in a consistent way. As an example, check out the output of the following command in `main`: ```shell mvn versions:display-plugin-updates -Prelease | grep "\->" | sort -u | grep -Ev "beta|-M|jetty" [INFO] com.diffplug.spotless:spotless-maven-plugin ...... 2.43.0 -> 2.44.2 [INFO] com.github.ekryd.sortpom:sortpom-maven-plugin ..... 2.15.0 -> 4.0.0 [INFO] com.github.spotbugs:spotbugs-maven-plugin ..... 4.7.3.4 -> 3.1.12.2 [INFO] com.github.spotbugs:spotbugs-maven-plugin ...... 4.7.3.4 -> 4.8.3.1 [INFO] com.github.spotbugs:spotbugs-maven-plugin ...... 4.7.3.4 -> 4.8.6.6 [INFO] com.github.spotbugs:spotbugs-maven-plugin ........ 4.7.3.4 -> 3.1.1 [INFO] com.github.spotbugs:spotbugs-maven-plugin ........ 4.7.3.4 -> 4.4.2 [INFO] com.ruleoftech:markdown-page-generator-plugin ...... 2.4.0 -> 2.4.2 [INFO] maven-antrun-plugin ................................ 3.1.0 -> 3.0.0 [INFO] maven-antrun-plugin .................................. 3.1.0 -> 1.2 [INFO] maven-antrun-plugin .................................. 3.1.0 -> 1.3 [INFO] maven-antrun-plugin .................................. 3.1.0 -> 1.6 [INFO] maven-antrun-plugin .................................. 3.1.0 -> 1.7 [INFO] maven-antrun-plugin .................................. 3.1.0 -> 1.8 [INFO] maven-assembly-plugin .............................. 3.2.0 -> 3.3.0 [INFO] maven-assembly-plugin .............................. 3.2.0 -> 3.6.0 [INFO] maven-assembly-plugin .............................. 3.2.0 -> 3.7.1 [INFO] maven-assembly-plugin .............................. 3.7.1 -> 3.3.0 [INFO] maven-assembly-plugin .............................. 3.7.1 -> 3.6.0 [INFO] maven-assembly-plugin ................................ 3.2.0 -> 2.2 [INFO] maven-assembly-plugin ................................ 3.2.0 -> 2.6 [INFO] maven-assembly-plugin ................................ 3.7.1 -> 2.2 [INFO] maven-assembly-plugin ................................ 3.7.1 -> 2.6 [INFO] maven-checkstyle-plugin ............................ 3.1.1 -> 3.1.2 [INFO] maven-checkstyle-plugin ............................ 3.1.1 -> 3.3.1 [INFO] maven-checkstyle-plugin ............................ 3.1.1 -> 3.6.0 [INFO] maven-checkstyle-plugin ............................. 3.1.1 -> 2.17 [INFO] maven-checkstyle-plugin .............................. 3.1.1 -> 2.1 [INFO] maven-checkstyle-plugin .............................. 3.1.1 -> 2.8 [INFO] maven-compiler-plugin ............................ 3.10.1 -> 3.12.1 [INFO] maven-compiler-plugin ............................ 3.10.1 -> 3.13.0 [INFO] maven-compiler-plugin ............................. 3.10.1 -> 2.0.2 [INFO] maven-compiler-plugin ............................. 3.10.1 -> 3.8.1 [INFO] maven-compiler-plugin ............................... 3.10.1 -> 3.2 [INFO] maven-compiler-plugin ............................... 3.10.1 -> 3.3 [INFO] maven-dependency-plugin ............................ 3.3.0 -> 3.1.2 [INFO] maven-dependency-plugin ............................ 3.3.0 -> 3.6.1 [INFO] maven-dependency-plugin ............................ 3.3.0 -> 3.8.1 [INFO] maven-dependency-plugin ............................. 3.3.0 -> 2.10 [INFO] maven-dependency-plugin .............................. 3.3.0 -> 2.2 [INFO] maven-dependency-plugin .............................. 3.3.0 -> 2.8 [INFO] maven-eclipse-plugin .................................. 2.10 -> 2.8 [INFO] maven-eclipse-plugin .................................. 2.10 -> 2.9 [INFO] maven-enforcer-plugin .............................. 3.0.0 -> 3.4.1 [INFO] maven-enforcer-plugin .............................. 3.0.0 -> 3.5.0 [INFO] maven-jar-plugin ................................... 3.0.2 -> 3.2.0 [INFO] maven-jar-plugin ................................... 3.0.2 -> 3.2.2 [INFO] maven-jar-plugin ................................... 3.0.2 -> 3.3.0 [INFO] maven-jar-plugin ................................... 3.0.2 -> 3.4.2 [INFO] maven-jar-plugin ..................................... 2.4 -> 3.2.0 [INFO] maven-jar-plugin ..................................... 2.4 -> 3.2.2 [INFO] maven-jar-plugin ..................................... 2.4 -> 3.3.0 [INFO] maven-jar-plugin ..................................... 2.4 -> 3.4.2 [INFO] maven-jar-plugin ..................................... 3.0.2 -> 2.1 [INFO] maven-jar-plugin ..................................... 3.0.2 -> 2.5 [INFO] maven-jar-plugin ..................................... 3.0.2 -> 2.6 [INFO] maven-jar-plugin ....................................... 2.4 -> 2.1 [INFO] maven-jar-plugin ....................................... 2.4 -> 2.5 [INFO] maven-jar-plugin ....................................... 2.4 -> 2.6 [INFO] maven-javadoc-plugin ............................. 2.10.3 -> 2.10.4 [INFO] maven-javadoc-plugin ............................. 2.10.3 -> 3.11.2 [INFO] maven-javadoc-plugin .............................. 2.10.3 -> 2.8.1 [INFO] maven-javadoc-plugin .............................. 2.10.3 -> 3.3.2 [INFO] maven-javadoc-plugin .............................. 2.10.3 -> 3.6.3 [INFO] maven-javadoc-plugin ................................ 2.10.3 -> 2.2 [INFO] maven-javadoc-plugin ................................ 2.10.3 -> 2.3 [INFO] maven-javadoc-plugin ................................ 2.10.3 -> 2.4 [INFO] maven-jxr-plugin ..................................... 2.1 -> 3.0.0 [INFO] maven-jxr-plugin ..................................... 2.1 -> 3.1.1 [INFO] maven-jxr-plugin ..................................... 2.1 -> 3.3.2 [INFO] maven-jxr-plugin ..................................... 2.1 -> 3.6.0 [INFO] maven-jxr-plugin ....................................... 2.1 -> 2.2 [INFO] maven-jxr-plugin ....................................... 2.1 -> 2.4 [INFO] maven-jxr-plugin ....................................... 2.1 -> 2.5 [INFO] maven-pmd-plugin ................................. 3.24.0 -> 3.14.0 [INFO] maven-pmd-plugin ................................. 3.24.0 -> 3.15.0 [INFO] maven-pmd-plugin ................................. 3.24.0 -> 3.16.0 [INFO] maven-pmd-plugin ................................. 3.24.0 -> 3.22.0 [INFO] maven-pmd-plugin ................................. 3.24.0 -> 3.26.0 [INFO] maven-pmd-plugin .................................... 3.24.0 -> 2.2 [INFO] maven-pmd-plugin .................................... 3.24.0 -> 2.6 [INFO] maven-pmd-plugin .................................... 3.24.0 -> 3.8 [INFO] maven-project-info-reports-plugin .................... 2.4 -> 2.0.1 [INFO] maven-project-info-reports-plugin .................... 2.4 -> 2.1.2 [INFO] maven-project-info-reports-plugin .................... 2.4 -> 3.2.2 [INFO] maven-project-info-reports-plugin .................... 2.4 -> 3.5.0 [INFO] maven-project-info-reports-plugin .................... 2.4 -> 3.8.0 [INFO] maven-project-info-reports-plugin ...................... 2.4 -> 2.2 [INFO] maven-project-info-reports-plugin ...................... 2.4 -> 2.6 [INFO] maven-project-info-reports-plugin ...................... 2.4 -> 2.9 [INFO] maven-resources-plugin ............................. 3.3.0 -> 3.1.0 [INFO] maven-resources-plugin ............................. 3.3.0 -> 3.2.0 [INFO] maven-resources-plugin ............................. 3.3.0 -> 3.3.1 [INFO] maven-resources-plugin ............................... 2.4 -> 3.1.0 [INFO] maven-resources-plugin ............................... 2.4 -> 3.2.0 [INFO] maven-resources-plugin ............................... 2.4 -> 3.3.1 [INFO] maven-resources-plugin ............................... 3.3.0 -> 2.6 [INFO] maven-resources-plugin ............................... 3.3.0 -> 2.7 [INFO] maven-resources-plugin ................................. 2.4 -> 2.6 [INFO] maven-resources-plugin ................................. 2.4 -> 2.7 [INFO] maven-site-plugin ................................... 3.0 -> 3.11.0 [INFO] maven-site-plugin .................................... 3.0 -> 2.0.1 [INFO] maven-site-plugin .................................... 3.0 -> 2.1.1 [INFO] maven-site-plugin .................................... 3.0 -> 3.7.1 [INFO] maven-site-plugin .................................... 3.0 -> 3.9.0 [INFO] maven-source-plugin ................................ 2.2.1 -> 2.0.4 [INFO] maven-source-plugin ................................ 2.2.1 -> 2.1.2 [INFO] maven-source-plugin ................................ 2.2.1 -> 3.2.1 [INFO] maven-source-plugin ................................ 2.2.1 -> 3.3.1 [INFO] maven-source-plugin .................................. 2.2.1 -> 2.3 [INFO] maven-source-plugin .................................. 2.2.1 -> 2.4 [INFO] maven-surefire-plugin ............................. 2.22.2 -> 2.4.3 [INFO] maven-surefire-plugin ............................. 2.22.2 -> 3.2.5 [INFO] maven-surefire-plugin ............................. 2.22.2 -> 3.5.2 [INFO] maven-surefire-plugin .............................. 2.22.2 -> 2.17 [INFO] maven-surefire-report-plugin ....................... 2.12 -> 2.22.2 [INFO] maven-surefire-report-plugin ........................ 2.12 -> 2.4.3 [INFO] maven-surefire-report-plugin ........................ 2.12 -> 2.7.1 [INFO] maven-surefire-report-plugin ........................ 2.12 -> 3.2.5 [INFO] maven-surefire-report-plugin ........................ 2.12 -> 3.5.2 [INFO] maven-surefire-report-plugin ......................... 2.12 -> 2.17 [INFO] maven-war-plugin ................................... 3.4.0 -> 2.0.2 [INFO] maven-war-plugin ................................... 3.4.0 -> 3.3.1 [INFO] maven-war-plugin ................................... 3.4.0 -> 3.3.2 [INFO] maven-war-plugin ..................................... 3.4.0 -> 2.4 [INFO] maven-war-plugin ..................................... 3.4.0 -> 2.6 [INFO] org.codehaus.mojo:build-helper-maven-plugin ........ 3.0.0 -> 3.3.0 [INFO] org.codehaus.mojo:build-helper-maven-plugin ........ 3.0.0 -> 3.4.0 [INFO] org.codehaus.mojo:build-helper-maven-plugin ........ 3.0.0 -> 3.6.0 [INFO] org.codehaus.mojo:build-helper-maven-plugin ......... 3.0.0 -> 1.12 [INFO] org.codehaus.mojo:build-helper-maven-plugin .......... 3.0.0 -> 1.5 [INFO] org.codehaus.mojo:build-helper-maven-plugin .......... 3.0.0 -> 1.9 [INFO] org.codehaus.mojo:findbugs-maven-plugin ............ 2.4.0 -> 1.0.0 [INFO] org.codehaus.mojo:findbugs-maven-plugin ............ 2.4.0 -> 2.3.1 [INFO] org.codehaus.mojo:findbugs-maven-plugin ............ 2.4.0 -> 2.3.3 [INFO] org.codehaus.mojo:findbugs-maven-plugin ............ 2.4.0 -> 2.5.5 [INFO] org.codehaus.mojo:findbugs-maven-plugin ............ 2.4.0 -> 3.0.5 [INFO] org.codehaus.mojo:findbugs-maven-plugin .............. 2.4.0 -> 1.2 [INFO] org.codehaus.mojo:findbugs-maven-plugin .............. 2.4.0 -> 2.1 [INFO] org.codehaus.mojo:javacc-maven-plugin ................ 2.3 -> 3.0.1 [INFO] org.codehaus.mojo:javacc-maven-plugin ................ 2.3 -> 3.1.0 [INFO] org.codehaus.mojo:javacc-maven-plugin .................. 2.3 -> 2.5 [INFO] org.codehaus.mojo:taglist-maven-plugin ............... 2.4 -> 3.0.0 [INFO] org.codehaus.mojo:taglist-maven-plugin ............... 2.4 -> 3.2.1 [INFO] org.codehaus.mojo:taglist-maven-plugin ................. 2.4 -> 2.2 [INFO] org.jacoco:jacoco-maven-plugin ........ 0.8.6 -> 0.6.3.201306030806 [INFO] org.jacoco:jacoco-maven-plugin .................... 0.8.6 -> 0.8.12 [INFO] org.jacoco:jacoco-maven-plugin ..................... 0.8.6 -> 0.8.2 [INFO] org.owasp:dependency-check-maven .................. 7.1.1 -> 10.0.4 [INFO] org.owasp:dependency-check-maven .................. 7.1.1 -> 12.0.2 [INFO] org.owasp:dependency-check-maven ................... 7.1.1 -> 5.0.0 ``` versus after this change: ```shell mvn versions:display-plugin-updates -Prelease | grep "\->" | sort -u | grep -Ev "beta|-M|jetty" [INFO] com.diffplug.spotless:spotless-maven-plugin ...... 2.43.0 -> 2.44.2 [INFO] com.github.ekryd.sortpom:sortpom-maven-plugin ..... 2.15.0 -> 4.0.0 [INFO] com.github.spotbugs:spotbugs-maven-plugin ...... 4.7.3.4 -> 4.8.6.6 [INFO] com.ruleoftech:markdown-page-generator-plugin ...... 2.4.0 -> 2.4.2 [INFO] maven-assembly-plugin .............................. 3.2.0 -> 3.7.1 [INFO] maven-checkstyle-plugin ............................ 3.1.1 -> 3.6.0 [INFO] maven-compiler-plugin ............................ 3.10.1 -> 3.13.0 [INFO] maven-dependency-plugin ............................ 3.3.0 -> 3.8.1 [INFO] maven-jar-plugin ................................... 3.0.2 -> 3.4.2 [INFO] maven-jar-plugin ..................................... 2.4 -> 3.4.2 [INFO] maven-javadoc-plugin ............................. 2.10.3 -> 3.11.2 [INFO] maven-jxr-plugin ..................................... 2.1 -> 3.6.0 [INFO] maven-pmd-plugin ................................. 3.24.0 -> 3.26.0 [INFO] maven-project-info-reports-plugin .................... 2.4 -> 3.8.0 [INFO] maven-resources-plugin ............................. 3.3.0 -> 3.3.1 [INFO] maven-resources-plugin ............................... 2.4 -> 3.3.1 [INFO] maven-source-plugin ................................ 2.2.1 -> 3.3.1 [INFO] maven-surefire-plugin ............................. 2.22.2 -> 3.5.2 [INFO] maven-surefire-report-plugin ........................ 2.12 -> 3.5.2 [INFO] org.codehaus.mojo:build-helper-maven-plugin ........ 3.0.0 -> 3.6.0 [INFO] org.codehaus.mojo:findbugs-maven-plugin ............ 2.4.0 -> 3.0.5 [INFO] org.codehaus.mojo:javacc-maven-plugin ................ 2.3 -> 3.1.0 [INFO] org.codehaus.mojo:taglist-maven-plugin ............... 2.4 -> 3.2.1 [INFO] org.jacoco:jacoco-maven-plugin .................... 0.8.6 -> 0.8.12 [INFO] org.owasp:dependency-check-maven .................. 7.1.1 -> 12.0.2 ``` # Checklist - [x] I have read the [contribution guidelines](https://github.com/geoserver/geoserver/blob/main/CONTRIBUTING.md). - [x] I have sent a [Contribution Licence Agreement](https://docs.geoserver.org/latest/en/developer/policies/committing.html) (not required for small changes, e.g., fixing typos in documentation). - [ ] First PR targets the `main` branch (backports managed later; ignore for branch specific issues). - [x] All the build checks are green ([see automated QA checks](https://docs.geoserver.org/latest/en/developer/qa-guide/index.html)). For core and extension modules: - [ ] New unit tests have been added covering the changes. - [ ] [Documentation](https://github.com/geoserver/geoserver/tree/main/doc/en/user/source) has been updated (if change is visible to end users). - [ ] The [REST API docs](https://github.com/geoserver/geoserver/tree/main/doc/en/api/1.0.0) have been updated (when changing configuration objects or the REST controllers). - [ ] There is an issue in the [GeoServer Jira](https://osgeo-org.atlassian.net/browse/GEOS/summary) (except for changes that do not affect administrators or end users in any way). - [ ] Commit message(s) must be in the form ``[GEOS-XYZWV] Title of the Jira ticket``. - [ ] Bug fixes and small new features are presented as a single commit. - [x] Each commit has a single objective (if there are multiple commits, each has a separate JIRA ticket describing its goal).

Mark checked the build, it’s fine, we are using 3.9.8, I’ve checked internally, half of devs are on 3.9+, the other half is using older versions but it does not seem a problem to update.

I would like to gather a bit more feedback… would it be ok for you to require Maven 3.9 as a minimum?

Cheers
Andrea

ianturton · February 24, 2025, 11:51am

Currently ubuntu 24.04 is providing 3.8.7 so it would be mildly inconvenient for ubuntu users.

Ian

groldan · February 24, 2025, 10:38pm

Please check the PR’s comment about the rationale.

Basically, for truly stable builds across environments, we need to specify the maven plugin versions. Otherwise,
the plugins will be picked up based on the maven version in use.
Since we’re not specifying a maven version we get multiple possible plugin versions, and several of the following maven errors:

mvn versions:display-plugin-updates -Prelease

[WARNING] Project does not define minimum Maven version required for build
[INFO] Plugins require minimum Maven version of: 3.0
[INFO]
[ERROR] Project does not define required minimum version of Maven.
[ERROR] Update the pom.xml to contain maven-enforcer-plugin to
[ERROR] force the Maven version which is needed to build this project.
[ERROR] See [https://maven.apache.org/enforcer/enforcer-rules/requireMavenVersion.html](https://maven.apache.org/enforcer/enforcer-rules/requireMavenVersion.html)
[ERROR] Using the minimum version of Maven: 3.0
[INFO]
[INFO] Require Maven 2.0.2 to use the following plugin updates:
[INFO] maven-checkstyle-plugin .............................. 3.1.1 -> 2.1
[INFO]
[INFO] Require Maven 2.0.6 to use the following plugin updates:
[INFO] maven-checkstyle-plugin .............................. 3.1.1 -> 2.8
[INFO]
[INFO] Require Maven 2.2.1 to use the following plugin updates:
[INFO] maven-checkstyle-plugin ............................. 3.1.1 -> 2.17
[INFO]
[INFO] Require Maven 3.0 to use the following plugin updates:
[INFO] maven-checkstyle-plugin ............................ 3.1.1 -> 3.1.2
[INFO]
[INFO] Require Maven 3.2.5 to use the following plugin updates:
[INFO] maven-checkstyle-plugin ............................ 3.1.1 -> 3.3.1
[INFO]
[INFO] Require Maven 3.6.3 to use the following plugin updates:

[INFO] maven-checkstyle-plugin ............................ 3.1.1 -> 3.6.0

But if we specify the maven version to use we get sane and reproducible recommendations:

[INFO] --- versions:2.18.0:display-plugin-updates (default-cli) @ gs-gwc ---
[INFO]
[INFO] The following plugin updates are available:
[INFO] org.jacoco:jacoco-maven-plugin .................... 0.8.6 -> 0.8.12
[INFO]
[INFO] All plugins have a version specified.
[INFO]
[INFO] Project requires minimum Maven version for build of: 3.9
[INFO] Plugins require minimum Maven version of: 3.0
[INFO]
[INFO] No plugins require a newer version of Maven than specified by the pom.

If ubuntu 24.04 is providing 3.8.7, that depends on how it’s installed. I use sdkman (e.g. sdk insta, not apt-get),
but in any case, an alternative would be to include the maven wrapper[1] so nobody needs maven preinstalled
and we always use the required version.

Do you think that’d be worth it in order to have a predictable toolset across environments?

[1] https://maven.apache.org/wrapper/
camptocamp

aaime-geosolutions · February 25, 2025, 8:28am

I honestly don’t care all that much… because I value solving real problems (that we have plenty of), rather than potential ones. But I’m not bothered either, as long as it does not negatively affect other devs and users.

On one side of the scale we have an inconvenience for those that need to upgrade Maven. It seems a small one (if it’s not for anyone reading, please let us know) but also a real one affecting, to my count so far, 4 people, including Ian,
On the other scale we have a “more predictable build”. A worth theoretical goal, but was there a practical trigger? Did you take action because someone with an old version of Maven reported build misbehaviors to you?

As a community we should strive for balance and shared decisions. Thinking out loud, how much predictability we lose if the build requires 3.8+, what would be te practical consequences of having this more relaxed check? (so far we’ve seen a comparison between not requiring a version at all, and requiring 3.9+, right?)

Cheers
Andrea

ianturton · February 25, 2025, 10:42am

I can confirm it is a pretty minor inconvenience - it took about 5 minutes to clean up and install a new version of maven

Ian

groldan · February 25, 2025, 2:00pm

I honestly don’t care that much either. But I do a little.
IIRC I was making sure dependency versions between geoserver and geoserver cloud were aligned and also wondered about the plugin versions. Then
I discovered the amount of errors and warnings presented by maven. This seemed worrisome:

[ERROR] Project does not define required minimum version of Maven.
[ERROR] Update the pom.xml to contain maven-enforcer-plugin to
[ERROR] force the Maven version which is needed to build this project.

So I did a little research and indeed it looks like defining a minimum maven version should be considered good practice.
It reminded me of all the trouble we went through by having incompatible versions of the same dependencies across cog and gwc,
and thought plugins can cause trouble too.

I’ve now asked a deepsearch AI about this, won’t paste its answer here cause it’s large, but you can read it here: https://gist.github.com/groldan/0727ada1be4c3512a83b3f3d30d420dc

To me, it boils down to whether we agree it’d be good practice and we want to implement it.

Cheers,

On Tue, Feb 25, 2025 at 5:33 AM Andrea Aime via OSGeo Discourse <noreply@discourse.osgeo.org> wrote:

aaime-geosolutions
February 25

groldan:

Do you think that’d be worth it in order to have a predictable toolset across environments?

I honestly don’t care all that much… because I value solving real problems (that we have plenty of), rather than potential ones. But I’m not bothered either, as long as it does not negatively affect other devs and users.

On one side of the scale we have an inconvenience for those that need to upgrade Maven. It seems a small one (if it’s not for anyone reading, please let us know) but also a real one affecting, to my count so far, 4 people, including Ian,
On the other scale we have a “more predictable build”. A worth theoretical goal, but was there a practical trigger? Did you take action because someone with an old version of Maven reported build misbehaviors to you?

As a community we should strive for balance and shared decisions. Thinking out loud, how much predictability we lose if the build requires 3.8+, what would be te practical consequences of having this more relaxed check? (so far we’ve seen a comparison between not requiring a version at all, and requiring 3.9+, right?)

Cheers
Andrea

Visit Topic or reply to this email to respond.

To unsubscribe from these emails, click here.

sikeoka · February 25, 2025, 4:21pm

There currently doesn’t appear to be any difference in the plugin versions when requiring Maven 3.8 or 3.9. According to the Maven command provided previously in this thread, maven-assembly-plugin is actually the only Maven plugin that GeoServer uses without specifying a plugin version in the root POM although there is a version specified only for community modules.

jive · February 25, 2025, 9:21pm

Oh nice catch, we should specify maven-assembly-plugin version (as it has changed across versions and broken releases before).

groldan · February 26, 2025, 10:10pm

Hi,

Thanks Pete for finding out using 3.8 and 3.9 as minimum recommends the same upgrades. I’ve verified it and
updated the pull request to require 3.8 instead of 3.9 as agreed on at the last PSC meeting.

Cheers,