Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-31467

Clean up obsolete Maven profiles/repositories from root POM

    XMLWordPrintable

    Details

    • Type: Clean up
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2023.x, 2021.30
    • Component/s: CI/CD

      Description

      A lot of profiles and related repositories are irrelevant in the root POM, let's clean them up.
      Typically, the qa, qapriv, nightly profiles.
      The related repositories are not only unused but are slowing down the dependency check made by Dependabot, for security or version updates (see NXP-31424):

      updater | INFO <job_527809191>   version-update:semver-major - from .github/dependabot.yaml
        proxy | 2022/11/30 05:11:15 [711] GET http://mavenin.nuxeo.com/nexus/content/repositories/nightly-staging/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
        proxy | 2022/11/30 05:11:35 [711] No response from server
        proxy | 2022/11/30 05:11:35 [712] GET http://mavenin.nuxeo.com/nexus/content/repositories/nightly-staging/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
        proxy | 2022/11/30 05:11:55 [712] No response from server
        proxy | 2022/11/30 05:11:55 [713] GET http://mavenin.nuxeo.com/nexus/content/repositories/nightly-staging/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
        proxy | 2022/11/30 05:12:15 [713] No response from server
        proxy | 2022/11/30 05:12:15 [714] GET http://mavenin.nuxeo.com/nexus/content/repositories/nightly-staging/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
        proxy | 2022/11/30 05:12:35 [714] No response from server
        proxy | 2022/11/30 05:12:36 [716] GET https://packages.nuxeo.com:443/repository/maven-internal/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
        proxy | 2022/11/30 05:12:36 [716] 401 https://packages.nuxeo.com:443/repository/maven-internal/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
        proxy | 2022/11/30 05:12:36 [718] GET https://packages.nuxeo.com:443/repository/maven-private/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
        proxy | 2022/11/30 05:12:36 [718] 401 https://packages.nuxeo.com:443/repository/maven-private/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
        proxy | 2022/11/30 05:12:36 [720] GET https://mavenpriv.nuxeo.com:443/nexus/content/repositories/releases/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
        proxy | 2022/11/30 05:12:56 [722] GET https://mavenpriv.nuxeo.com:443/nexus/content/repositories/releases/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
        proxy | 2022/11/30 05:13:16 [724] GET https://mavenpriv.nuxeo.com:443/nexus/content/repositories/releases/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
        proxy | 2022/11/30 05:13:36 [726] GET https://mavenpriv.nuxeo.com:443/nexus/content/repositories/releases/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
      

      which ends up by timing out:

      updater | time="2022-11-19T23:10:03Z" level=info msg="task complete" container_id=job-519111216-updater exit_code=137 job_id=519111216 step=updater
        updater | time="2022-11-19T23:10:03Z" level=warning msg="timeout running job" error="waiting for updater: waiting for container: context deadline exceeded" job_id=519111216
      

      Also see https://github.com/dependabot/dependabot-core/issues/2416.

      Not sure why the repositories under non active profiles are checked.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: