karan-rastogi opened a new issue, #736: URL: https://github.com/apache/maven-checkstyle-plugin/issues/736
### Affected version type 3.6.0 ### Bug description **Problem** With `maven-checkstyle-plugin:3.6.0` on Maven 3.9+, a build with `-X` prints a warning for the EOL `jvnet-nexus-releases` repository (`https://maven.java.net/content/repositories/releases/`): ``` [WARNING] Could not transfer metadata /.meta/prefixes.txt from/to jvnet-nexus-releases (...): (certificate_unknown) PKIX path building failed ``` Reported in checkstyle/checkstyle#22016, with a failing build here: https://github.com/uhafner/codingstyle/actions/runs/40278986084/job/121427827330?pr=2029#step:5:180 **Cause** The published `maven-checkstyle-plugin-3.6.0.pom` has a profile active on JDK 9+ that adds `javax.xml.bind:jaxb-api:2.3.1`. Its parent POMs (`jaxb-api-parent`, then `jvnet-parent-5`) declare `jvnet-nexus-releases`. I checked with a test project depending on the plugin: `mvn dependency:tree "-Dincludes=*:jaxb-api" -Dverbose` shows `jaxb-api` coming directly from the plugin. **Already fixed on master** #164 removed this dependency (`784b5ba`). It is not in the 3.6.0 tag. **Question** I see the 3.6.1 milestone is 100% complete (0 open, 87 closed, no due date) and includes #164. Could 3.6.1 be released? It would remove this warning for users on JDK 9+. Thank you! Earliest version I know has the issue: 3.6.0. I'm new to open source, so please correct me if I got anything wrong. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
