Skip to content

Conversation

gemelen
Copy link
Contributor

@gemelen gemelen commented Oct 13, 2025

Why are the changes needed?

This PR updates the sbt-pom-reader plugin from version 2.4.0 to 2.5.0 in project/plugins.sbt.

What changes were proposed in this pull request?

The current build uses sbt-pom-reader 2.4.0, which hardcodes the Maven Central URL as http://repo.maven.apache.org/maven2. Our environment enforces HTTPS-only outbound connections, causing dependency resolution failures with that version.
Upstream PR(https://github.com/sbt/sbt-pom-reader/pull/81/files#diff-c2afee6a87a7bc518d0b31ecefaf824499b310218016b5865825dd6ef1eb216e) updates the plugin to use the secure https://repo.maven.apache.org/maven2 endpoint. This change is published in sbt-pom-reader 2.5.0.

Does this PR introduce any user-facing change?

No.

How was this patch tested?

Existing test suites.

Was this patch authored or co-authored using generative AI tooling?

No.

Upgrade the sbt-pom-reader SBT plugin to the latest to date release,
made per request by Yuming Wang <yumwang@apache.org>.

The request is centered on a switch to HTTPS only for accessing Maven
Central, the release brings that fix.

Besides that, the release brings upgrade for the Maven libraries (3.8.x
to 3.9.x, resolver 1.7.x to 1.9.x).
@github-actions github-actions bot added the BUILD label Oct 13, 2025
@wangyum
Copy link
Member

wangyum commented Oct 13, 2025

@gemelen
Copy link
Contributor Author

gemelen commented Oct 13, 2025

@wangyum as far as I can tell, I enabled it. I could not find a way to rerun though.

@wangyum
Copy link
Member

wangyum commented Oct 14, 2025

Run this step:
image

@wangyum
Copy link
Member

wangyum commented Oct 14, 2025

Please also file a Jira ticket: https://issues.apache.org/jira/browse/SPARK

Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Upgrade sbt-pom-reader plugin to incorporate latest release changes (including HTTPS-only access to Maven Central and Maven library upgrades).

  • Bumps sbt-pom-reader from 2.4.0 to 2.5.0.
  • No functional/user-facing code changes beyond build configuration.

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@wangyum wangyum changed the title [BUILD] Upgrade POM to SBT plugin [SPARK-53936][BUILD] Upgrade sbt-pom-reader from 2.4.0 to 2.5.0 Oct 16, 2025
@wangyum
Copy link
Member

wangyum commented Oct 16, 2025

I have tested it myself, this upgrade is works.
image

@wangyum wangyum closed this in ea71991 Oct 16, 2025
@wangyum
Copy link
Member

wangyum commented Oct 16, 2025

LGTM. Merged to master.

@dongjoon-hyun
Copy link
Member

Thank you, @gemelen and @wangyum .

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants