Maven download unspecified jar file in pom

Question

I am using maven as project dependency management tool. I have project where I put xml file in maven with specific version but I downloaded the older version also.

Here I want to download spring-core 5.0.8 via this:

<dependency>
        <groupId>org.springframework</groupId>
        <artifactId>spring-core</artifactId>
        <version>5.0.8.RELEASE</version>
</dependency>

It also downloads the 3.0.6.RELEASE version of spring-core. How to skip this dependency? , this is my old pom, this also downloads the 3.0.6.

here is my pom.xml

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
<modelVersion>4.0.0</modelVersion>
<groupId>com.guru.gurusahakari</groupId>
<artifactId>gurusahakari</artifactId>
<packaging>war</packaging>
<version>0.0.1-SNAPSHOT</version>
<url>http://maven.apache.org</url>



<properties>
    <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    <tomee.version>2.0.0-SNAPSHOT</tomee.version>
    <version.shrinkwrap.resolver>2.0.0</version.shrinkwrap.resolver>
    <javaassist.version>3.21.0-GA</javaassist.version>
</properties>

<repositories>
    <repository>
        <id>apache-m2-snapshot</id>
        <name>Apache Snapshot Repository</name>
        <url>https://repository.apache.org/content/groups/snapshots</url>
    </repository>
</repositories>


<build>
    <sourceDirectory>src</sourceDirectory>
    <!-- <finalName>gurusahakari</finalName> -->
    <defaultGoal>install</defaultGoal>

    <plugins>
        <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-dependency-plugin</artifactId>
            <version>2.1</version>
            <executions>
                <execution>
                    <id>copy-test-libs</id>
                    <phase>process-test-resources</phase>
                    <configuration>
                        <artifactItems>
                            <artifactItem>
                                <groupId>javax.servlet</groupId>
                                <artifactId>jstl</artifactId>
                                <version>1.2</version>
                            </artifactItem>
                            <artifactItem>
                                <groupId>taglibs</groupId>
                                <artifactId>standard</artifactId>
                                <version>1.1.2</version>
                            </artifactItem>
                        </artifactItems>
                        <outputDirectory>
                            ${project.build.directory}/test-libs
                        </outputDirectory>
                        <stripVersion>true</stripVersion>
                    </configuration>
                    <goals>
                        <goal>copy</goal>
                    </goals>
                </execution>
            </executions>
        </plugin>
        <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-surefire-plugin</artifactId>
            <version>2.17</version>
            <configuration>
                <reuseForks>false</reuseForks> <!-- otherwise openejb embedded and tomee embedded shares the same context 
                    and EJBContainer is broken -->
            </configuration>
        </plugin>
        <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-compiler-plugin</artifactId>
            <version>3.8.0</version>
            <configuration>
                <source>1.8</source>
                <target>1.8</target>
            </configuration>
        </plugin>
        <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-eclipse-plugin</artifactId>
            <version>2.9</version>
            <configuration>
                <configuration>
                    <wtpapplicationxml>true</wtpapplicationxml>
                    <wtpversion>2.0</wtpversion>
                </configuration>
            </configuration>
        </plugin>

        <plugin>
            <groupId>org.apache.aries.blueprint</groupId>
            <artifactId>blueprint-maven-plugin</artifactId>
            <version>1.4.0</version>
            <configuration>
                <scanPaths>
                    <scanPath>org.opendaylight</scanPath>
                </scanPaths>
            </configuration>
            <dependencies>
                <dependency>
                    <!-- https://stackoverflow.com/questions/38825386/blueprint-maven-plugin-runtimeexception -->
                    <groupId>org.apache.xbean</groupId>
                    <artifactId>xbean-finder-shaded</artifactId>
                    <version>4.5</version>
                </dependency>
            </dependencies>
            <executions>
                <execution>
                    <goals>
                        <goal>blueprint-generate</goal>
                    </goals>
                </execution>
            </executions>
        </plugin>

        <plugin>
            <groupId>org.apache.openejb.maven</groupId>
            <artifactId>tomee-maven-plugin</artifactId>
            <version>2.0.0-SNAPSHOT</version>
            <configuration>
                <tomeeClassifier>plus</tomeeClassifier>
                <args>-Xmx512m -XX:PermSize=256m</args>
            </configuration>
        </plugin>
    </plugins>
</build>

<dependencies>
    <dependency>
        <groupId>org.codehaus.jackson</groupId>
        <artifactId>jackson-mapper-asl</artifactId>
        <version>1.9.7</version>
    </dependency>
    <dependency>
        <groupId>org.codehaus.jackson</groupId>
        <artifactId>jackson-core-asl</artifactId>
        <version>1.9.7</version>
    </dependency>

    <dependency>
        <groupId>junit</groupId>
        <artifactId>junit</artifactId>
        <version>3.8.1</version>
        <scope>test</scope>
    </dependency>


    <!-- validation jar -->
    <!-- https://mvnrepository.com/artifact/javax.validation/validation-api -->
    <dependency>
        <groupId>javax.validation</groupId>
        <artifactId>validation-api</artifactId>
        <version>2.0.1.Final</version>
    </dependency>


    <dependency>
        <groupId>org.hibernate</groupId>
        <artifactId>hibernate-validator</artifactId>
        <version>4.0.2.GA</version>
    </dependency>

    <!-- https://mvnrepository.com/artifact/org.apache.bval/bval-jsr303 -->
    <dependency>
        <groupId>org.apache.bval</groupId>
        <artifactId>bval-jsr303</artifactId>
        <version>0.5</version>
    </dependency>


    <!-- https://mvnrepository.com/artifact/org.springframework.session/spring-session -->
    <dependency>
        <groupId>org.springframework.session</groupId>
        <artifactId>spring-session</artifactId>
        <version>1.0.0.RELEASE</version>
    </dependency>


    <!-- https://mvnrepository.com/artifact/org.springframework/spring-context-support -->
    <dependency>
        <groupId>org.springframework</groupId>
        <artifactId>spring-context-support</artifactId>
        <version>4.3.8.RELEASE</version>
    </dependency>

    <!-- https://mvnrepository.com/artifact/net.sf.jasperreports/jasperreports -->
    <dependency>
        <groupId>net.sf.jasperreports</groupId>
        <artifactId>jasperreports</artifactId>
        <version>6.1.0</version>
    </dependency>

    <!-- https://mvnrepository.com/artifact/org.springframework/spring-webmvc -->
    <dependency>
        <groupId>org.springframework</groupId>
        <artifactId>spring-webmvc</artifactId>
        <version>4.3.8.RELEASE</version>
    </dependency>

    <!-- https://mvnrepository.com/artifact/org.springframework/spring-core -->
    <dependency>
        <groupId>org.springframework</groupId>
        <artifactId>spring-core</artifactId>
        <version>4.3.8.RELEASE</version>
    </dependency>


    <!-- https://mvnrepository.com/artifact/javax.servlet/javax.servlet-api -->
    <dependency>
        <groupId>javax.servlet</groupId>
        <artifactId>javax.servlet-api</artifactId>
        <version>4.0.1</version>
        <scope>provided</scope>
    </dependency>

    <!-- https://mvnrepository.com/artifact/commons-codec/commons-codec -->
    <dependency>
        <groupId>commons-codec</groupId>
        <artifactId>commons-codec</artifactId>
        <version>1.9</version>
    </dependency>

    <!-- https://mvnrepository.com/artifact/com.sun.xml.messaging.saaj/saaj-impl -->
    <dependency>
        <groupId>com.sun.xml.messaging.saaj</groupId>
        <artifactId>saaj-impl</artifactId>
        <version>1.3.18</version>
    </dependency>

    <dependency>
        <groupId>org.slf4j</groupId>
        <artifactId>slf4j-log4j12</artifactId>
        <version>1.7.11</version>
    </dependency>
    <dependency>
        <groupId>log4j</groupId>
        <artifactId>log4j</artifactId>
        <version>1.2.17</version>
    </dependency>
    <dependency>
        <groupId>javax.servlet</groupId>
        <artifactId>jstl</artifactId>
        <version>1.2</version>
    </dependency>

    <!-- jackson data biending -->
    <dependency>
        <groupId>com.fasterxml.jackson.core</groupId>
        <artifactId>jackson-databind</artifactId>
        <version>2.5.0</version>
    </dependency>
    <dependency>
        <groupId>com.fasterxml.jackson.core</groupId>
        <artifactId>jackson-annotations</artifactId>
        <version>2.5.0</version>
    </dependency>
    <dependency>
        <groupId>com.fasterxml.jackson.core</groupId>
        <artifactId>jackson-core</artifactId>
        <version>2.5.0</version>
    </dependency>

    <!-- Apache Commons FileUpload -->
    <dependency>
        <groupId>commons-fileupload</groupId>
        <artifactId>commons-fileupload</artifactId>
        <version>1.3.1</version>
    </dependency>

    <!-- Apache Commons IO -->
    <dependency>
        <groupId>commons-io</groupId>
        <artifactId>commons-io</artifactId>
        <version>2.4</version>
    </dependency>


    <dependency>
        <groupId>junit</groupId>
        <artifactId>junit</artifactId>
        <version>3.8.1</version>
        <scope>test</scope>
    </dependency>

    <!-- https://mvnrepository.com/artifact/org.json/json -->
    <dependency>
        <groupId>org.json</groupId>
        <artifactId>json</artifactId>
        <version>20160810</version>
    </dependency>
</dependencies>

here is the result of mvn dependency:tree -Dverbose -Dincludes=spring-core.

[INFO] Scanning for projects...
[WARNING] 
[WARNING] Some problems were encountered while building the effective model for com.guru.gurusahakari:gurusahakari:war:0.0.1-SNAPSHOT
[WARNING] 'dependencies.dependency.(groupId:artifactId:type:classifier)' must be unique: junit:junit:jar -> duplicate declaration of version 3.8.1 @ line 284, column 15
[WARNING]  
[WARNING] It is highly recommended to fix these problems because they threaten the stability of your build.
 [WARNING] 
 [WARNING] For this reason, future Maven versions might no longer support building such malformed projects.
 [WARNING] 
  [INFO]                                                                         
   [INFO] ------------------------------------------------------------------------
   [INFO] Building gurusahakari 0.0.1-SNAPSHOT
   [INFO] ------------------------------------------------------------------------
    [INFO] 
   [INFO] --- maven-dependency-plugin:2.1:tree (default-cli) @ gurusahakari ---
     [INFO] ------------------------------------------------------------------------
   [INFO] BUILD SUCCESS
   [INFO] ------------------------------------------------------------------------
   [INFO] Total time: 5.987 s
   [INFO] Finished at: 2018-08-15T09:59:09+05:45
    [INFO] Final Memory: 11M/158M
    [INFO] ------------------------------------------------------------------------

apparently, yes i was confuse too. May be other process trigger the download — parlad, Aug 06 '18 at 09:45
Which version is showing as used when you run `mvn dependency:tree` — Daniel Scott, Aug 08 '18 at 22:25
@DanielScott Here is my dependency tree. https://stackoverflow.com/questions/51692397/tomee-caused-by-java-lang-runtimeexception-at-org-apache-xbean-asm5-methodvi . Also it show jar:4.3.7.RELEASE:compile — parlad, Aug 12 '18 at 04:59
parlad I created a pom.xml with the content above, but since I don't have any other project file I added the plugin configuration below to avoid web.xml complain. But after that I couldn't reproduce: org.apache.maven.plugins maven-war-plugin 3.2.2 — Alessandro Oliveira, Aug 15 '18 at 20:09

score 5 · Answer 1 · edited Aug 23 '18 at 04:37

5

In order to be more assertive I would need to take a look at your pom.xml.

But there is an oficial way to deal with situations like this. Just add a tag like the following in your pom:

<!-- Your actual dependencies -->
<dependencies>
   <dependency>
      <groupId>org.springframework</groupId>
      <artifactId>spring-core</artifactId>
   </dependency>
</dependencies>

<!-- Constraints you put on your direct and transitive dependencies -->
<dependencyManagement>
   <dependencies>
      <dependency>
         <groupId>org.springframework</groupId>
         <artifactId>spring-core</artifactId>
         <version>5.0.8.RELEASE</version>
      </dependency>
   </dependencies>
</dependencyManagement>

This will override the dependencies to use this specific version.

edited Aug 23 '18 at 04:37

Vlastimil Ovčáčík

2,799
27
29

answered Aug 09 '18 at 00:44

Alessandro Oliveira

2,126
2
17
24

now , there is no jar file inside maven . Do you knew what cause this? – parlad Aug 12 '18 at 04:58
and error all over the project. it is not accepting autowire and controller etc annotations. – parlad Aug 12 '18 at 06:03
looks like dependency inside , `` can not be imported. It gives the error while moving into ``. – parlad Aug 12 '18 at 06:06
Dear Parlad, I forgot to include the correct tag dependencyManagement -> dependencies -> dependency. the problem you are facing is probably because you have one or more dependencies that have dependency in different versions of spring. the best aproach would be to rebuild all dependencies using the same version of spring. you might also try the mvn dependency:tree that prints all dependency hierarchy. – Alessandro Oliveira Aug 13 '18 at 17:19
i already put that way , here pom does not give any error but , the jar file seems empty and case error all over the projec – parlad Aug 15 '18 at 04:13
If you share your pom.xml I can try to help you sort this out. – Alessandro Oliveira Aug 15 '18 at 08:19
@Alesandro, i have updated the question. Can you please suggest. – parlad Aug 15 '18 at 09:21
@parladneupane dependencies in `` does not constitute actual dependency on the artifact. That means you have to include the dependency in both **a)** your `` list and **b)** ``. – Vlastimil Ovčáčík Aug 22 '18 at 20:48

user1373164 · Answer 2 · 2018-08-15T08:15:01.003

2

I guess you need to understand why the 3.0.6 version of spring-core is getting pulled down.

Possibly, there is some transitive dependency on it - see if you can find it with:
mvn dependency:tree -Dverbose -Dincludes=spring-core

once you have found it, you can use Dependency Exclusions to prevent it from being downloaded, see this:
Dependency Exclusions

for example:

<dependency>
    <groupId>org.xyz</groupId>
    <artifactId>xyz</artifactId>
    <version>${xyz.version}</version>
    <exclusions>
        <exclusion>
            <groupId>org.springframework</groupId>
            <artifactId>spring-core</artifactId>
        </exclusion>
    </exclusions>
</dependency>

where xyz is the artifact with the transitive dependency on the old spring version.

edited Aug 15 '18 at 08:15

answered Aug 14 '18 at 15:00

user1373164

428
4
14

should i suppose to add false here for spring core 4.3.8? – parlad Aug 15 '18 at 04:26
not sure you need that, see the example I put in the post - did you find a transitive dependency on 3.0.6 ? – user1373164 Aug 15 '18 at 08:13
not , actually . i posted mvn dependency:tree -Dverbose -Dincludes=spring-cor result. I did not see any specific. – parlad Aug 15 '18 at 09:19

dgofactory · Answer 3 · 2018-08-14T15:00:07.960

0

The easy way you can solve these kind of problems is to use a graphical tool like eclipse.(i.e)

Open the project with Eclipse for java.
Select the pom.xml.

Open the tap of dependency management.

Filter, analyze and inspect the dependencies don't apply

Remove the dependencies you don't want.

It will save you lot of google searches and time.

edited Aug 14 '18 at 15:00

answered Aug 13 '18 at 16:18

dgofactory

348
5
13

score 0 · Answer 4 · edited Sep 21 '18 at 05:48

I had gotten this error multiple times during development. I fixed it by downloading the jar and adding externally, which are described below.

Steps:

you search "*.jar maven dependency" on google or directly head over to maven dependency website and search for the jar ( replace * with your required jar name )
Download the jar from maven dependency
Right Click project and click on properties
Select "Java Build Path" on the left, and then the "Libraries" tab. Now, click the "Add External JARS..." button
Locate and select the jar files that you downloaded, and then click "Open"
Finally, click "OK" to close the dialog box. You will know that everything went ok if, when you open your project folder, you see an item called "Referenced Libraries", and upon expanding this item, you see your jar files listed.

BHARATHWAJ · Answer 5 · 2018-08-22T05:21:01.723

0

Try like this
<!-- https://mvnrepository.com/artifact/org.springframework/spring-core -->
     <dependency>
        <groupId>org.springframework</groupId>
        <artifactId>spring-core</artifactId>
        <version>5.0.8.RELEASE</version>
    </dependency>
it should work fine

edited Aug 22 '18 at 05:21

answered Aug 21 '18 at 09:00

BHARATHWAJ

39
1
10

be specific with version and also it should be the latest one will solve most of the problems – BHARATHWAJ Aug 21 '18 at 09:04
He can't remove something that doesn't exist. – Aniruddha Kalburgi Aug 21 '18 at 12:56

score 0 · Answer 6 · answered Aug 23 '18 at 06:31

I had some weird situations with Maven similar to this and I solved it deleting the repository folder (%user-folder%/.m2/repository) and perform a clean install again. Sometimes previous versions of the your project artifacts with wrong or outdated pom.xml files can result in unwanted behaviours with maven dependency resolution.

If you are using an IDE like IntelliJ IDEA (maybe Eclipse works like this as well) keep in mind that it maintains its own artifacts cache. So you also could try to do a clean install from command prompt to discard things.

Maven download unspecified jar file in pom

6 Answers6