feat(maven): add Maven/pom.xml ecosystem support (#61)

* feat(maven): add Maven/pom.xml ecosystem support

Add deps-maven crate implementing Maven Central registry integration
with pom.xml SAX parsing via quick-xml. Supports dependencies,
dependencyManagement, and build plugins with byte-accurate position
tracking. Registered as feature-gated ecosystem in deps-lsp.

* docs: add Maven ecosystem to CHANGELOG and README files

Author: bug-ops

CHANGELOG.md

@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+- **Maven ecosystem support** — New `deps-maven` crate with pom.xml parsing and Maven Central integration
+  - SAX parser via quick-xml with byte-accurate position tracking
+  - Parses `<dependencies>`, `<dependencyManagement>`, and `<build><plugins>` sections
+  - Maven Central Solr API client for version lookup and package search
+  - Maven version comparison with prerelease qualifier detection (alpha, beta, RC, SNAPSHOT)
+  - `groupId:artifactId` as canonical package identifier
+  - Feature-gated registration in deps-lsp (`maven`)
+
 ## [0.7.0] - 2026-02-16
 
 ### Added

Cargo.lock

@@ -22,6 +22,7 @@ deps-pypi = { version = "0.7.0", path = "crates/deps-pypi" }
 deps-go = { version = "0.7.0", path = "crates/deps-go" }
 deps-bundler = { version = "0.7.0", path = "crates/deps-bundler" }
 deps-dart = { version = "0.7.0", path = "crates/deps-dart" }
+deps-maven = { version = "0.7.0", path = "crates/deps-maven" }
 deps-lsp = { version = "0.7.0", path = "crates/deps-lsp" }
 futures = "0.3"
 insta = "1"
@@ -45,6 +46,7 @@ tower-lsp-server = "0.23"
 tracing = "0.1"
 tracing-subscriber = "0.3"
 urlencoding = "2.1"
+quick-xml = "0.39"
 yaml-rust2 = "0.11"
 zed_extension_api = "0.7"
 

Cargo.toml

@@ -47,9 +47,10 @@ deps-lsp is optimized for responsiveness:
 | Go Modules | `go.mod` | ✅ Supported |
 | Ruby/Bundler | `Gemfile` | ✅ Supported |
 | Dart/Pub | `pubspec.yaml` | ✅ Supported |
+| Maven | `pom.xml` | ✅ Supported |
 
 > [!NOTE]
-> PyPI support includes PEP 621, PEP 735 (dependency-groups), and Poetry formats. Go support includes require, replace, and exclude directives with pseudo-version handling. Bundler support includes git, path, and GitHub sources plus pessimistic version requirements (`~>`). Dart support includes hosted, git, path, and SDK dependency sources with caret version semantics.
+> PyPI support includes PEP 621, PEP 735 (dependency-groups), and Poetry formats. Go support includes require, replace, and exclude directives with pseudo-version handling. Bundler support includes git, path, and GitHub sources plus pessimistic version requirements (`~>`). Dart support includes hosted, git, path, and SDK dependency sources with caret version semantics. Maven support covers `dependencies`, `dependencyManagement`, and `build/plugins` sections with Maven qualifier-aware version comparison.
 
 ## Installation
 
@@ -113,6 +114,7 @@ cargo install deps-lsp --no-default-features --features "pypi"
 | `go` | go.mod | ✅ |
 | `bundler` | Ruby (Bundler/Gemfile) | ✅ |
 | `dart` | pubspec.yaml | ✅ |
+| `maven` | pom.xml | ✅ |
 
 ## Usage
 
@@ -291,6 +293,7 @@ deps-lsp/
 │   ├── deps-go/        # go.mod parser + proxy.golang.org
 │   ├── deps-bundler/   # Gemfile parser + rubygems.org registry
 │   ├── deps-dart/      # pubspec.yaml parser + pub.dev registry
+│   ├── deps-maven/     # pom.xml parser + Maven Central registry
 │   ├── deps-lsp/       # Main LSP server
 │   └── deps-zed/       # Zed extension (WASM)
 ├── .config/            # nextest configuration

README.md

@@ -21,13 +21,14 @@ name = "deps_lsp"
 path = "src/lib.rs"
 
 [features]
-default = ["cargo", "npm", "pypi", "go", "bundler", "dart"]
+default = ["cargo", "npm", "pypi", "go", "bundler", "dart", "maven"]
 cargo = ["dep:deps-cargo"]
 npm = ["dep:deps-npm"]
 pypi = ["dep:deps-pypi"]
 go = ["dep:deps-go"]
 bundler = ["dep:deps-bundler"]
 dart = ["dep:deps-dart"]
+maven = ["dep:deps-maven"]
 
 [dependencies]
 # Internal crates
@@ -38,6 +39,7 @@ deps-pypi = { workspace = true, optional = true }
 deps-go = { workspace = true, optional = true }
 deps-bundler = { workspace = true, optional = true }
 deps-dart = { workspace = true, optional = true }
+deps-maven = { workspace = true, optional = true }
 
 # External dependencies
 dashmap = { workspace = true }

crates/deps-lsp/Cargo.toml

@@ -9,7 +9,7 @@ Language Server Protocol implementation for dependency management.
 
 ## Features
 
-- **Multi-ecosystem** — Cargo.toml, package.json, pyproject.toml, go.mod
+- **Multi-ecosystem** — Cargo.toml, package.json, pyproject.toml, go.mod, Gemfile, pubspec.yaml, pom.xml
 - **Inlay Hints** — Show latest versions inline
 - **Hover Info** — Package descriptions and version lists
 - **Code Actions** — Quick fixes to update dependencies

crates/deps-lsp/README.md

@@ -124,6 +124,21 @@ ecosystem!(
     ]
 );
 
+ecosystem!(
+    "maven",
+    deps_maven,
+    MavenEcosystem,
+    [
+        MavenDependency,
+        MavenParseResult,
+        MavenVersion,
+        MavenFormatter,
+        ArtifactInfo,
+        MavenCentralRegistry,
+        parse_pom_xml,
+    ]
+);
+
 /// Registers all enabled ecosystems.
 pub fn register_ecosystems(registry: &EcosystemRegistry, cache: Arc<HttpCache>) {
     register!("cargo", CargoEcosystem, registry, &cache);
@@ -132,6 +147,7 @@ pub fn register_ecosystems(registry: &EcosystemRegistry, cache: Arc<HttpCache>)
     register!("go", GoEcosystem, registry, &cache);
     register!("bundler", BundlerEcosystem, registry, &cache);
     register!("dart", DartEcosystem, registry, &cache);
+    register!("maven", MavenEcosystem, registry, &cache);
 }
 
 #[cfg(test)]
@@ -156,5 +172,7 @@ mod tests {
         assert!(registry.get("bundler").is_some());
         #[cfg(feature = "dart")]
         assert!(registry.get("dart").is_some());
+        #[cfg(feature = "maven")]
+        assert!(registry.get("maven").is_some());
     }
 }

crates/deps-lsp/src/lib.rs

@@ -0,0 +1,31 @@
+[package]
+name = "deps-maven"
+version.workspace = true
+edition.workspace = true
+rust-version.workspace = true
+authors.workspace = true
+license.workspace = true
+repository.workspace = true
+description = "pom.xml support for deps-lsp"
+publish = true
+
+[lints]
+workspace = true
+
+[dependencies]
+deps-core = { workspace = true }
+async-trait = { workspace = true }
+quick-xml = { workspace = true }
+serde = { workspace = true, features = ["derive"] }
+serde_json = { workspace = true }
+thiserror = { workspace = true }
+tokio = { workspace = true }
+tower-lsp-server = { workspace = true }
+tracing = { workspace = true }
+urlencoding = { workspace = true }
+
+[dev-dependencies]
+insta = { workspace = true, features = ["json"] }
+tempfile = { workspace = true }
+tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }
+tokio-test = { workspace = true }

crates/deps-maven/Cargo.toml

@@ -0,0 +1,85 @@
+# deps-maven
+
+[![Crates.io](https://img.shields.io/crates/v/deps-maven)](https://crates.io/crates/deps-maven)
+[![docs.rs](https://img.shields.io/docsrs/deps-maven)](https://docs.rs/deps-maven)
+[![codecov](https://codecov.io/gh/bug-ops/deps-lsp/graph/badge.svg?token=S71PTINTGQ&flag=deps-maven)](https://codecov.io/gh/bug-ops/deps-lsp)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](../../LICENSE)
+
+pom.xml support for deps-lsp.
+
+This crate provides Maven/JVM ecosystem support for the deps-lsp server, including pom.xml parsing, dependency extraction, and Maven Central registry integration.
+
+## Features
+
+- **XML Parsing** — Parse `pom.xml` with byte-accurate position tracking using `quick-xml` SAX reader
+- **Dependency Sections** — Handle `<dependencies>`, `<dependencyManagement>`, and `<build><plugins>` blocks
+- **Maven Central Registry** — Solr API client for version lookups and artifact search
+- **Version Comparison** — Maven version qualifier support (`alpha`, `beta`, `RC`, `SNAPSHOT`, `GA`)
+- **Property Resolution** — Resolve `${property}` placeholders defined in `<properties>`
+- **Scope Handling** — Recognise `compile`, `test`, `provided`, `runtime`, and `import` scopes
+- **Ecosystem Trait** — Implements `deps_core::Ecosystem` trait
+
+## Usage
+
+```toml
+[dependencies]
+deps-maven = "0.7"
+```
+
+```rust
+use deps_maven::{parse_pom_xml, MavenCentralRegistry};
+
+let result = parse_pom_xml(content, &uri)?;
+let registry = MavenCentralRegistry::new(cache);
+let versions = registry.get_versions_typed("org.springframework:spring-core").await?;
+```
+
+## Supported pom.xml Syntax
+
+```xml
+<project>
+  <properties>
+    <spring.version>6.1.0</spring.version>
+  </properties>
+
+  <dependencies>
+    <dependency>
+      <groupId>org.springframework</groupId>
+      <artifactId>spring-core</artifactId>
+      <version>6.1.0</version>
+    </dependency>
+    <dependency>
+      <groupId>junit</groupId>
+      <artifactId>junit</artifactId>
+      <version>4.13.2</version>
+      <scope>test</scope>
+    </dependency>
+  </dependencies>
+
+  <dependencyManagement>
+    <dependencies>
+      <dependency>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-dependencies</artifactId>
+        <version>3.2.0</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+    </dependencies>
+  </dependencyManagement>
+
+  <build>
+    <plugins>
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-compiler-plugin</artifactId>
+        <version>3.12.1</version>
+      </plugin>
+    </plugins>
+  </build>
+</project>
+```
+
+## License
+
+[MIT](../../LICENSE)