如何阻止maven-release-plugin使用旧版本的maven-gpg-plugin

Question

How can I configure the maven-release-plugin to use version 1.6 of the maven-gpg-plugin in my pom.xml ?

When I run mvn release:prepare , the maven-release-plugin (version 2.5.3) is executing a sub-process that uses a very old version of the maven-gpg-plugin (1.1):

$ mvn release:prepare
...
[INFO] --- maven-release-plugin:2.5.3:prepare (default-cli) @ heroku-sdk-parent ---
...
[INFO] Executing goals 'clean verify'...
...
    [INFO] --- maven-gpg-plugin:1.1:sign (sign-artifacts) @ heroku-sdk-parent ---

Eventually this gives me an error because the maven-gpg-plugin:1.1 doesn't work with the gpg 2.2.4 on my machine. Nothing I've tried has worked.

You can find the actual project I'm working with here:

https://github.com/heroku/heroku-maven-plugin

You can reproduce with:

$ git clone https://github.com/heroku/heroku-maven-plugin
$ cd heroku-maven-plugin
$ ./mvnw release:prepare -DdryRun

Answer 1

The problem was my use of a deprecated oss-parent pom from Sonatype .

<parent>
  <groupId>org.sonatype.oss</groupId>
  <artifactId>oss-parent</artifactId>
  <version>9</version>
</parent>

I removed this, and my build started working.