Maven Central artifacts are being downloaded from repo.jenkins-ci.org

[MarkEWaite]

Service(s)

Artifactory

Summary

Artifacts that should be retrieved from Apache Maven Central are instead being retrieved from the Artifactory repository provided to Jenkins by JFrog. That creates unexpected load on the Artifactory repository and risks that JFrog will have unexpected bandwidth costs for our Artifactory instance

Reproduction steps

From a machine that has already built an earlier version of Jenkins:

1. Retrieve the most recent Jenkins core source code with git clone https://github.com/jenkinsci/jenkins.git
2. Run a build of Jenkins core with mvn clean -DskipTests verify and watch the output

I saw the following artifacts downloaded from repo.jenkins-ci.org that I believe should be retrieved from Apache Maven Central:

• https://repo.jenkins-ci.org/public/org/junit/junit-bom/5.11.3/junit-bom-5.11.3.pom
• https://repo.jenkins-ci.org/public/org/junit/vintage/junit-vintage-engine/5.11.3/junit-vintage-engine-5.11.3.jar
• https://repo.jenkins-ci.org/public/org/apache/maven/surefire/surefire/3.5.2/surefire-3.5.2.pom
• https://repo.jenkins-ci.org/public/org/junit/platform/junit-platform-commons/1.11.3/junit-platform-commons-1.11.3.pom
• https://repo.jenkins-ci.org/public/org/eclipse/jetty/jetty-util/12.0.15/jetty-util-12.0.15.jar

A few items were downloaded from Apache Maven Central like:

• https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-surefire-plugin/3.5.2/maven-surefire-plugin-3.5.2.pom