Child pages
  • Plugin migration to Maven3 dependencies
Skip to end of metadata
Go to start of metadata

The Apache Maven team announced a while ago to stop supporting Maven2.

Now it is time for the plugins to follow. This pages describes the topics on what to do to make plugin Maven3+ compliant.

  1. Set the Maven prerequisite and dependencies to 3.0, which might cause one or more of the following issues:
    1. Unknown dependencies in the pom.xml, e.g. the maven-project artifact doesn't exist anymore: its content is now part of maven-core 
    2. CNFE. Some classes have been moved to maven-compat. You could add it temporarily to get it all working again, later you'll get the instructions how to get rid of it.
  2. Set both the maven.compiler.source and properties to 1.6
  3. If the project depends on maven-plugin-testing-harness, use version 2.1, since newer versions depend on newer version of Maven dependencies. Ensure to exclude the maven-2.x dependencies which don't exist anymore, e.g. maven-project
  4. Remove maven-compat (or give it the test-scope if it is required by the maven-plugin-testing-harness)
    Maven compat mainly contains business logic which has been moved to Aether. However, we need to support the implementations of both Sonatype (M3.0.x) and Eclipse (M3.1+). The shared component maven-artifact-transfer can select the proper implementation.
  5. Transitive dependencies may still refer to Maven-2.x artifacts, even if they don't exist for Maven 3.x any more: ensure these are excluded. You can enforce this by adding the requireSameVersions enforcer rule to your project.
  6. Reporting plugins should include org.apache.maven.reporting:maven-reporting-api:3.0

There is a report generated daily with plugins prerequisites.

The following plugins already use successfully without maven-compat and with maven-artifact-transfer:

Maven Shared Components needed to be upgraded:

  • maven-shared-utils (3.0.0) (tick)
  • maven-archiver (3.0.0) (tick)
  • maven-filtering (3.0.0) (tick)
  • maven-jarsigner (3.0.0)...(maven-shared-uitls (tick)
  • maven-common-artifact-filters (maven-shared-utils (tick))..
  • maven-mapping (3.0.0) (tick)
  • maven-artifact-transfer (3.0.0) (error) (maven-common-artifact-filters (tick)).
  • maven-shared-io (3.0.0) (tick)
  • file-management (3.0.0) (tick) (maven-shared-io (tick))
  • maven-repository-builder (error) (maven-shared-utils (tick) maven-common-artifact-filters (tick))
  • more of them?

Known plugins still to do (there are probably more):

  • (error) maven-surefire-plugin
  • (error) maven-ejb-plugin (uses maven-archiver (tick), maven-filtering (tick))
  • (tick) maven-rar-plugin (uses maven-archiver (tick), maven-filtering (tick))
  • (tick) maven-resources-plugin (uses maven-filtering (tick))
  • (error) maven-war-plugin (maven-archiver 3.0.0 (tick), maven-filtering 3.0.0 (tick), maven-mapping 3.0.0 (tick))...
  • (error) maven-ear-plugin (maven-archiver 3.0.0 (tick), maven-filtering 3.0.0 (tick))...
  • (error) maven-jarsigner-plugin (maven-shared-uitls 3.0.0 (tick), maven-jarsigner 3.0.0)..
    (error) maven-toolchains-plugin
  • (error) maven-assembly-plugin (maven-archiver (tick) maven-filtering (tick), maven-common-artifacts-filter (tick) maven-repository-builder (error), maven-shared-io (tick), file-management (tick), )
  • (error) maven-verifier-plugin (works so far so good. JUnit should be updated)...
  • more of them?

The plugins which have been lifted to 3.0.0‚

  • maven-clean-plugin (tick) (has been released as 3.0.0).
  • maven-acr-plugin (tick) (has been release as 3.0.0).
  • maven-source-plugin (tick) (has been released as 3.0.0).


  1. Rename package to (matching the groupId, not conflicting with maven-core org.apache.maven.plugin package)
  2. Resolve reflection usage, meant to call Maven3 specific code when available.
  3. Remove deprecated parameters, methods, goals, classes
  4. Remove unnecessary overloaded methods. Some methods have been extended with arguments to stay backwards compatible. Time to clean this up (if the number of arguments is still uncertain, use a Request/Result object containing the argument objects, so the method signature will stay the same).


Stuff that may have changed

Testcases with this code: 

 container = new DefaultPlexusContainer();
container.initialize(); // This statement can be removed for 3.0
container.start(); // This statement can be removed for 3.0


Intermittently (and while upgrading) you may find code like this:

metadataSource = (ArtifactMetadataSource) lookup( ArtifactMetadataSource.ROLE );

While you are still working with maven-compat, you can fix this by switching to lookup by type;

metadataSource = (ArtifactMetadataSource) lookup( ArtifactMetadataSource.class);


 Deprecation mappings


Some adaptions necessary, some reflection to stay compatible with 2 Aether versions. See for sample

org.apache.maven.repository.RepositorySystem (however, there's only one implementation: LegacyRepositorySystem, 
which is again part of maven-compat AND reuses ArtifactFactory)
Depending on what you want to do next with the Artifact, you could use TransferUtils.toArtifactCoordinate() instead. 


Improved separation of dependencies and artifacts

It won't be possible any more to get the dependencies based on an artifact, since an artifact is basically a reference to a file with a coordinate. Instead you must use a dependency, plugin, extension or other model entity to resolve the dependencies. See  for a matrix.

  • No labels