From ef2a4fcd19a826b9a2adf89ec346f09598447d95 Mon Sep 17 00:00:00 2001
From: alexander-komarov-ibm <alexander.komarov@ibm.com>
Date: Wed, 9 Apr 2025 11:07:26 -0400
Subject: [PATCH] Enforce deploy install plugin versions for checksums

---
 pom.xml | 18 +++++++++++++++---
 1 file changed, 15 insertions(+), 3 deletions(-)

diff --git a/pom.xml b/pom.xml
index ab389ed..b2e1435 100644
--- a/pom.xml
+++ b/pom.xml
@@ -94,6 +94,7 @@
     <java.test.version>${java.build.version}</java.test.version>
     <java.test.vendor>${java.build.vendor}</java.test.vendor>
     <maven-javadoc-plugin.version>3.11.2</maven-javadoc-plugin.version>
+    <deploy-plugin.version>3.1.4</deploy-plugin.version>
     <surefire-plugin.version>3.5.2</surefire-plugin.version>
     <failsafe-plugin.version>3.5.2</failsafe-plugin.version>
     <findbugs-plugin.version>3.0.5</findbugs-plugin.version>
@@ -199,14 +200,14 @@
                       <username>{{ARTIFACTORY_DEPLOY_USERNAME}}</username>
                       <password>{{ARTIFACTORY_DEPLOY_PASSWORD}}</password>
                       <excludePatterns>${artifactory-deploy-exclude-patterns}</excludePatterns>
-								      <includePatterns>${artifactory-deploy-include-patterns}</includePatterns> 
+                      <includePatterns>${artifactory-deploy-include-patterns}</includePatterns>
                       <repoKey>${artifactory-repokey-releases}</repoKey>
                       <snapshotRepoKey>${artifactory-repokey-snapshots}</snapshotRepoKey>
 
                       <publishArtifacts>true</publishArtifacts>
                       <publishBuildInfo>true</publishBuildInfo>
 
-                      <filterExcludedArtifactsFromBuild>${artifactory-deploy-filter-excluded}</filterExcludedArtifactsFromBuild> 
+                      <filterExcludedArtifactsFromBuild>${artifactory-deploy-filter-excluded}</filterExcludedArtifactsFromBuild>
                       <!-- If true build information published to Artifactory will include
 								implicit project as well as build-time dependencies -->
                       <recordAllDependencies>true</recordAllDependencies>
@@ -252,7 +253,7 @@
             <plugin>
               <groupId>org.apache.maven.plugins</groupId>
               <artifactId>maven-deploy-plugin</artifactId>
-              <version>3.0.0</version>
+              <version>${deploy-plugin.version}</version>
               <configuration>
                 <skip>${skipDeploy}</skip>
               </configuration>
@@ -477,6 +478,17 @@
           <artifactId>findbugs-maven-plugin</artifactId>
           <version>${findbugs-plugin.version}</version>
         </plugin>
+        <!-- enforce recent versions, otherwise artifactory plugin pulls in old ones -->
+        <plugin>
+          <groupId>org.apache.maven.plugins</groupId>
+          <artifactId>maven-deploy-plugin</artifactId>
+          <version>${deploy-plugin.version}</version>
+        </plugin>
+        <plugin>
+          <groupId>org.apache.maven.plugins</groupId>
+          <artifactId>maven-install-plugin</artifactId>
+          <version>${deploy-plugin.version}</version>
+        </plugin>
       </plugins>
     </pluginManagement>