Skip to content

Conversation

@tisoft
Copy link
Contributor

@tisoft tisoft commented Jan 7, 2022

Newer Maven versions (at least 3.6.3 is affected) use a org.apache.maven.model.merge.ModelMerger$MergingList, if a plugin is defined inside pluginManagement and additionally defines custom dependencies. This class is not serializable, which will fail the PluginFingerprint.

This change replaces the dependency list with an ArrayList before serialization and sets it back to the original list afterwards.

You can try the demonstrator test without the fix commit, to validate the error.

Fixes: #1073

@tisoft tisoft force-pushed the fix_fingerprint_with_deps branch from c2df929 to a1de999 Compare January 7, 2022 10:50
@nedtwigg nedtwigg requested a review from lutovich January 7, 2022 18:22
@lutovich
Copy link
Contributor

lutovich commented Jan 8, 2022

Thanks for this fix! I will review it today or tomorrow. Tbh, this error is unexpected because org.apache.maven.model.Plugin implements Serializable. Perhaps this is a bug in the newer Maven version?

Copy link
Contributor

@lutovich lutovich left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, I added two comments. Thanks for discovering and fixing this problem!

I also created a Jira for Maven https://issues.apache.org/jira/browse/MNG-7386.

@lutovich lutovich merged commit eba1c59 into diffplug:main Jan 10, 2022
@nedtwigg
Copy link
Member

Published in 2.19.2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

java.io.NotSerializableException with upToDateChecking enabled

3 participants