[maven-4.0.x] Do not include invalid transitive repositories (#11357) by gnodet · Pull Request #11362 · apache/maven (original) (raw)

Skip to content

Navigation Menu

Sign in

Appearance settings

• • AI CODE CREATION
    * GitHub CopilotWrite better code with AI
    * GitHub Copilot appDirect agents from issue to merge
    * MCP RegistryNewIntegrate external tools
  • DEVELOPER WORKFLOWS
    * ActionsAutomate any workflow
    * CodespacesInstant dev environments
    * IssuesPlan and track work
    * Code ReviewManage code changes
  • APPLICATION SECURITY
    * GitHub Advanced SecurityFind and fix vulnerabilities
    * Code securitySecure your code as you build
    * Secret protectionStop leaks before they start
  • EXPLORE
    * Why GitHub
    * Documentation
    * Blog
    * Changelog
    * Marketplace

View all features

• • BY COMPANY SIZE
    * Enterprises
    * Small and medium teams
    * Startups
    * Nonprofits
  • BY USE CASE
    * App Modernization
    * DevSecOps
    * DevOps
    * CI/CD
    * View all use cases
  • BY INDUSTRY
    * Healthcare
    * Financial services
    * Manufacturing
    * Government
    * View all industries

View all solutions

• • EXPLORE BY TOPIC
    * AI
    * Software Development
    * DevOps
    * Security
    * View all topics
  • EXPLORE BY TYPE
    * Customer stories
    * Events & webinars
    * Ebooks & reports
    * Business insights
    * GitHub Skills
  • SUPPORT & SERVICES
    * Documentation
    * Customer support
    * Community forum
    * Trust center
    * Partners

View all resources

• • COMMUNITY
    * GitHub SponsorsFund open source developers
  • PROGRAMS
    * Security Lab
    * Maintainer Community
    * Accelerator
    * GitHub Stars
    * Archive Program
  • REPOSITORIES
    * Topics
    * Trending
    * Collections
• • ENTERPRISE SOLUTIONS
    * Enterprise platformAI-powered developer platform
  • AVAILABLE ADD-ONS
    * GitHub Advanced SecurityEnterprise-grade security features
    * Copilot for BusinessEnterprise-grade AI features
    * Premium SupportEnterprise-grade 24/7 support
• Pricing

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Sign in

Sign up

Appearance settings

apache / maven Public

• Notifications You must be signed in to change notification settings

• Fork2.9k

• Star 5.1k

• Code

• Issues 614

• Pull requests 93

• Actions

• Security and quality

• Insights

Additional navigation options

Merged

gnodet

merged 2 commits into

apache:maven-4.0.xfrom

gnodet:backport/maven-4.0.x/pr-11357

Oct 30, 2025

ConversationCommits (2)ChecksFiles changed

Merged

[maven-4.0.x] Do not include invalid transitive repositories (#11357)#11362

gnodet

merged 2 commits into

apache:maven-4.0.xfrom

gnodet:backport/maven-4.0.x/pr-11357

Conversation

gnodet commented

Oct 30, 2025

Copy link Copy Markdown

Contributor

Backport

This will backport the following commits from master to maven-4.0.x:

• Do not include invalid transitive repositories (#11357)

Questions ?

Please refer to the Backport tool documentation

`[Do not include invalid transitive repositories (](/apache/maven/pull/11362/commits/c31cdd4c17b0307c51a480a3ef3f3e7a2e3c1657 "Do not include invalid transitive repositories (#11357)

For build POMs, the repositories are validated and cannot contain uninterpolated expressions. We need to ignore repositories containing such invalid URLs from dependencies. Fixes #11356

(cherry picked from commit 39bd4b78a22afdf4b6c0077ef923d24e0de4b306)")apache#11357[)](/apache/maven/pull/11362/commits/c31cdd4c17b0307c51a480a3ef3f3e7a2e3c1657 "Do not include invalid transitive repositories (#11357)

For build POMs, the repositories are validated and cannot contain uninterpolated expressions. We need to ignore repositories containing such invalid URLs from dependencies. Fixes #11356

(cherry picked from commit 39bd4b78a22afdf4b6c0077ef923d24e0de4b306)") `

[c31cdd4](/apache/maven/pull/11362/commits/c31cdd4c17b0307c51a480a3ef3f3e7a2e3c1657)

For build POMs, the repositories are validated and cannot contain uninterpolated expressions. We need to ignore repositories containing such invalid URLs from dependencies. Fixes apache#11356

(cherry picked from commit 39bd4b7)

gnodet mentioned this pull request

Oct 30, 2025

Do not include invalid transitive repositories#11357

Merged

gnodet added bug

Something isn't working

backport mvn40 labels

Oct 30, 2025

[Fix IT](/apache/maven/pull/11362/commits/0f8beb0180c874155d2c45fcb196e17d92fcc349 "Fix IT")

[0f8beb0](/apache/maven/pull/11362/commits/0f8beb0180c874155d2c45fcb196e17d92fcc349)

gnodet merged commit d00927a into apache:maven-4.0.x

Oct 30, 2025

37 of 38 checks passed

github-actions Bot added this to the 4.0.0 milestone

Oct 30, 2025

github-actions Bot assigned gnodet

Oct 30, 2025

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.Learn more about bidirectional Unicode characters

[ Show hidden characters]({{ revealButtonHref }})

Sign up for free to join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

No reviews

Assignees

gnodet

Labels

backport bug

Something isn't working

mvn40

Projects

None yet

Milestone

4.0.0

Development

Successfully merging this pull request may close these issues.

1 participant