gnodet opened a new pull request, #12092: URL: https://github.com/apache/maven/pull/12092
## Summary - Downgrade plexus-classworlds from 2.11.0 to 2.9.0 to fix all integration test failures on ubuntu-latest ## Root Cause Classworlds 2.11.0 introduced a bug in `ConfigurationParser.loadGlob()` ([commit 4f4cfe64](https://github.com/codehaus-plexus/plexus-classworlds/commit/4f4cfe64d1)) where an automated code cleanup incorrectly changed `&&` to `||` in the glob file filter. This causes `load maven-*.jar` in `m2.conf` to match **all** `.jar` files instead of only those starting with `maven-`. On Linux ext4, `File.listFiles()` returns non-deterministic ordering (inode hash order). After a recent GitHub Actions runner image update (`ubuntu24/20260513.135`), `org.eclipse.sisu.plexus-1.0.0.jar` loads before `maven-embedder-4.0.0-SNAPSHOT.jar`, causing Sisu's `PlexusXmlBeanConverter` (without XmlNode handling) to win the class collision. This breaks lifecycle configuration injection for any component using `XmlNode` fields (e.g., `LifecycleMojo.configuration`). This is the root cause of all 5 backport PR failures (#12071, #12070, #12073, #12077, #12079) — they are all innocent bystanders. Upstream fix: https://github.com/codehaus-plexus/plexus-classworlds/pull/147 Once classworlds ships a fix (2.11.1+), we can upgrade again. _Claude Code on behalf of Guillaume Nodet_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
