Maven 3.8.1 update causes warning
See original GitHub issueMaven was recently updated from 3.6.3 to 3.8.1 to address a security vulnerability. As a result, this warning now comes up on startup…
2021-04-04 19:02:43,763 WARN [io.qua.boo.res.mav.BootstrapMavenContext] (main) Settings problem encountered at /Users/francois/Libraries/Java/apache-maven/conf/settings.xml, line 164, column 16: org.apache.maven.settings.io.SettingsParseException: Unrecognised tag: 'blocked' (position: START_TAG seen ...</url>\r\n <blocked>... @164:16)
at org.apache.maven.settings.io.DefaultSettingsReader.read(DefaultSettingsReader.java:87)
at org.apache.maven.settings.building.DefaultSettingsBuilder.readSettings(DefaultSettingsBuilder.java:182)
at org.apache.maven.settings.building.DefaultSettingsBuilder.build(DefaultSettingsBuilder.java:104)
at io.quarkus.bootstrap.resolver.maven.BootstrapMavenContext.getEffectiveSettings(BootstrapMavenContext.java:252)
at io.quarkus.bootstrap.resolver.maven.BootstrapMavenContext.isOffline(BootstrapMavenContext.java:218)
at io.quarkus.bootstrap.resolver.maven.BootstrapMavenContext.newRepositorySystem(BootstrapMavenContext.java:648)
at io.quarkus.bootstrap.resolver.maven.BootstrapMavenContext.getRepositorySystem(BootstrapMavenContext.java:223)
at io.quarkus.bootstrap.resolver.maven.MavenArtifactResolver.<init>(MavenArtifactResolver.java:125)
at io.quarkus.bootstrap.BootstrapAppModelFactory.getAppModelResolver(BootstrapAppModelFactory.java:192)
at io.quarkus.bootstrap.BootstrapAppModelFactory.resolveAppModel(BootstrapAppModelFactory.java:305)
at io.quarkus.bootstrap.app.QuarkusBootstrap.bootstrap(QuarkusBootstrap.java:163)
at io.quarkus.deployment.dev.DevModeMain.start(DevModeMain.java:143)
at io.quarkus.deployment.dev.DevModeMain.main(DevModeMain.java:63)
Caused by: org.codehaus.plexus.util.xml.pull.XmlPullParserException: Unrecognised tag: 'blocked' (position: START_TAG seen ...</url>\r\n <blocked>... @164:16)
at org.apache.maven.settings.io.xpp3.SettingsXpp3Reader.checkUnknownElement(SettingsXpp3Reader.java:149)
at org.apache.maven.settings.io.xpp3.SettingsXpp3Reader.parseMirror(SettingsXpp3Reader.java:920)
at org.apache.maven.settings.io.xpp3.SettingsXpp3Reader.parseSettings(SettingsXpp3Reader.java:1416)
at org.apache.maven.settings.io.xpp3.SettingsXpp3Reader.read(SettingsXpp3Reader.java:1544)
at org.apache.maven.settings.io.xpp3.SettingsXpp3Reader.read(SettingsXpp3Reader.java:566)
at org.apache.maven.settings.io.xpp3.SettingsXpp3Reader.read(SettingsXpp3Reader.java:595)
at org.apache.maven.settings.io.DefaultSettingsReader.read(DefaultSettingsReader.java:83)
... 12 more
Quarkus 1.12.1 Java 16
Issue Analytics
- State:
- Created 2 years ago
- Comments:6 (3 by maintainers)
Top Results From Across the Web
Release Notes – Maven 3.8.1
The Apache Maven team would like to announce the release of Maven 3.8.1. ... This makes downloads via such repository a target for...
Read more >Why You Should Upgrade to Maven Version 3.8.1 Today or ...
If you are still running on an old Maven version like 3.6.3 or below, you need to upgrade to version 3.8.1 because of...
Read more >How to disable maven blocking external HTTP repositories?
I found a solution to do this by inspecting the commit in the Maven git repository that is responsible for the default HTTP...
Read more >Blocked mirror for repositories error when building from ...
Causes. Maven 3.8.1 removes support for accessing Maven repositories over HTTP for security reasons. See Maven Release Notes - CVE-2021-26291 ...
Read more >Why you should upgrade to Maven version 3.8.1 - Snyk
If you are still running on an old Maven version like 3.6.3 or below you definitely need to upgrade to version 3.8.1 because...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
I ran into this locally as well and all I had to do was comment out the
block in my
/path/to/maven/conf/settings.xml
file.@srisatya1197 Thanks for your offer (really appreciated!) but I have already started to work on this in general, including an update of the Quarkus CI. See also this discussion I have just started: https://groups.google.com/g/quarkus-dev/c/A-cm9pvviiE
/cc @aloubyansky