From 7fc81a98c450d964d88aa235ccd1c28dea7a9a70 Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 14 Oct 2026 06:17:12 +0000 Subject: [PATCH] ci: Pin Maven to 3.9.16 for builds The ubuntu-latest runner image 20261004.327.1 upgraded Maven from 3.9.16 to 3.10.0. Since then, pre-release bundles fail Maven Central validation, even for a commit that previously validated. Download and verify Maven 3.9.16 instead of using the image's version, and log `mvn -v`. Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_01Y7YD8x9feha2ydTUBbQyBv --- .../actions/build-test-pack-deploy/action.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/.github/actions/build-test-pack-deploy/action.yml b/.github/actions/build-test-pack-deploy/action.yml index 222f238..90cf614 100644 --- a/.github/actions/build-test-pack-deploy/action.yml +++ b/.github/actions/build-test-pack-deploy/action.yml @@ -34,6 +34,24 @@ runs: server-username: MAVEN_CENTRAL_USERNAME server-password: MAVEN_CENTRAL_PASSWORD + # Pin Maven instead of using the runner image's version. Bundles built with Maven 3.10.0 + # (ubuntu-latest image 20261004.327.1) fail Maven Central validation. + - name: Setup Maven + shell: bash + env: + MAVEN_VERSION: "3.9.16" + MAVEN_SHA512: "831a8591fe20c8243b1dbe7d71e3244f31d1665b0804b2e825e38cbbe5ce0cafb8338851f90780735568773e0a6cd07bbec107cda0b896b008b861075358b6f6" + run: | + ARCHIVE="$RUNNER_TEMP/apache-maven-$MAVEN_VERSION-bin.tar.gz" + curl -fsSL --retry 3 -o "$ARCHIVE" "https://archive.apache.org/dist/maven/maven-3/$MAVEN_VERSION/binaries/apache-maven-$MAVEN_VERSION-bin.tar.gz" + echo "$MAVEN_SHA512 $ARCHIVE" | sha512sum -c - + tar -xzf "$ARCHIVE" -C "$RUNNER_TEMP" + echo "$RUNNER_TEMP/apache-maven-$MAVEN_VERSION/bin" >> "$GITHUB_PATH" + + - name: Show Maven version + shell: bash + run: mvn -v + - name: Compute version id: version shell: bash