Skip to content

Comments

fix(bom): skip deployment of bom-generator-plugin#7440

Merged
manusa merged 1 commit intofabric8io:mainfrom
manusa:fix/skip-bom-generator-plugin-deploy
Feb 17, 2026
Merged

fix(bom): skip deployment of bom-generator-plugin#7440
manusa merged 1 commit intofabric8io:mainfrom
manusa:fix/skip-bom-generator-plugin-deploy

Conversation

@manusa
Copy link
Member

@manusa manusa commented Feb 17, 2026

Summary

  • Add maven.deploy.skip=true to bom-generator-plugin to prevent it from being deployed to Maven Central

Problem

The snapshot release workflow continues to fail with checksum validation errors when publishing:

Failed to retrieve remote metadata io.fabric8:bom-generator-plugin:7.6-SNAPSHOT/maven-metadata.xml: 
Checksum validation failed, expected '8914f5d7fff2c1ca91e88185342de9e256814776' (REMOTE_EXTERNAL) 
but is actually 'f5e49553ae6c846e188481994cfcaadc1938c5bc'

Failing run: https://github.com/fabric8io/kubernetes-client/actions/runs/22090965078

Root Cause

PR #7439 excluded bom-generator-plugin from the generated BOMs, but the plugin itself was still being deployed. During the ~50 minute build:

  1. bom-generator-plugin gets deployed early in the build
  2. Later, when kubernetes-client-bom-with-deps is published, the central-publishing-maven-plugin tries to verify metadata for all artifacts
  3. Due to Sonatype Central replication delays or concurrent access, the checksum for bom-generator-plugin's maven-metadata.xml doesn't match

Solution

Add <maven.deploy.skip>true</maven.deploy.skip> to bom-generator-plugin/pom.xml. This is the standard pattern used by other internal modules:

  • extensions/tekton/examples
  • platforms/karaf/itests
  • chaos-tests

The bom-generator-plugin is an internal build tool and doesn't need to be published to Maven Central.

Test plan

  • Re-run snapshot release workflow to confirm the issue is resolved

🤖 Generated with Claude Code

The bom-generator-plugin is an internal build tool that should not be
published to Maven Central. During snapshot releases, the plugin was
being deployed early in the build, causing checksum validation failures
when later modules tried to resolve its metadata due to Sonatype Central
replication delays.

This complements commit 5552acd which excluded the plugin from generated
BOMs. That fix prevented the plugin from appearing as a BOM dependency,
but didn't prevent the plugin itself from being deployed.

Adding maven.deploy.skip=true follows the same pattern used by other
internal modules (tekton/examples, karaf/itests, chaos-tests).

Fixes: https://github.com/fabric8io/kubernetes-client/actions/runs/22090965078

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@manusa manusa added this to the 7.6.0 milestone Feb 17, 2026 — with automated-tasks
@manusa manusa merged commit 710427d into fabric8io:main Feb 17, 2026
18 of 19 checks passed
@manusa manusa deleted the fix/skip-bom-generator-plugin-deploy branch February 17, 2026 11:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant