Bug#906343: carrotsearch-randomizedtesting: FTBFS in buster/sid (Could not resolve dependencies for project com.carrotsearch.randomizedtesting:junit4-ant:jar:2.1.17)

[Santiago Vila]

Package: src:carrotsearch-randomizedtesting
Version: 2.1.17-1
Severity: serious
Tags: ftbfs

Dear maintainer:

I tried to build this package in buster but it failed:

--------------------------------------------------------------------------------
[...]
 debian/rules build-indep
dh build-indep --buildsystem=maven
   dh_update_autotools_config -i -O--buildsystem=maven
   dh_auto_configure -i -O--buildsystem=maven
	mh_patchpoms -plibcarrotsearch-randomizedtesting-java --debian-build --keep-pom-version --maven-repo=/<<PKGBUILDDIR>>/debian/maven-repo
   dh_auto_build -i -O--buildsystem=maven
	/usr/lib/jvm/default-java/bin/java -noverify -cp /usr/share/maven/boot/plexus-classworlds-2.x.jar -Dmaven.home=/usr/share/maven -Dmaven.multiModuleProjectDirectory=/<<PKGBUILDDIR>> -Dclassworlds.conf=/etc/maven/m2-debian.conf -Dproperties.file.manual=/<<PKGBUILDDIR>>/debian/maven.properties org.codehaus.plexus.classworlds.launcher.Launcher -s/etc/maven/settings-debian.xml -Ddebian.dir=/<<PKGBUILDDIR>>/debian -Dmaven.repo.local=/<<PKGBUILDDIR>>/debian/maven-repo --batch-mode package -DskipTests -Dnotimestamp=true -Dlocale=en_US
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by com.google.inject.internal.cglib.core.$ReflectUtils$1 (file:/usr/share/maven/lib/guice.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int,java.security.ProtectionDomain)
WARNING: Please consider reporting this to the maintainers of com.google.inject.internal.cglib.core.$ReflectUtils$1
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
[INFO] Scanning for projects...
[WARNING] The project com.carrotsearch.randomizedtesting:randomizedtesting-parent:pom:2.1.17 uses prerequisites which is only intended for maven-plugin projects but not for non maven-plugin projects. For such purposes you should use the maven-enforcer-plugin. See https://maven.apache.org/enforcer/enforcer-rules/requireMavenVersion.html

[... snipped ...]

[INFO] /<<PKGBUILDDIR>>/randomized-runner/src/main/java/com/carrotsearch/randomizedtesting/RandomizedRunner.java: Some input files use unchecked or unsafe operations.
[INFO] /<<PKGBUILDDIR>>/randomized-runner/src/main/java/com/carrotsearch/randomizedtesting/RandomizedRunner.java: Recompile with -Xlint:unchecked for details.
[INFO] 
[INFO] --- maven-bundle-plugin:3.5.0:manifest (bundle-manifest) @ randomizedtesting-runner ---
[INFO] 
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ randomizedtesting-runner ---
[INFO] Not copying test resources
[INFO] 
[INFO] --- maven-compiler-plugin:3.8.0:testCompile (default-testCompile) @ randomizedtesting-runner ---
[INFO] Not compiling test sources
[INFO] 
[INFO] --- maven-surefire-plugin:2.21.0:test (default-test) @ randomizedtesting-runner ---
[INFO] Tests are skipped.
[INFO] 
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ randomizedtesting-runner ---
[INFO] Building jar: /<<PKGBUILDDIR>>/randomized-runner/target/randomizedtesting-runner-2.1.17.jar
[INFO] 
[INFO] -----------< com.carrotsearch.randomizedtesting:junit4-ant >------------
[INFO] Building RandomizedTesting JUnit4 ANT Task 2.1.17                  [3/3]
[INFO] --------------------------------[ jar ]---------------------------------
[WARNING] The POM for stax:stax-api:jar:debian is missing, no dependency information available
[WARNING] The POM for stax:stax:jar:debian is missing, no dependency information available
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO] 
[INFO] RandomizedTesting Parent POM 2.1.17 ................ SUCCESS [  0.002 s]
[INFO] RandomizedTesting Randomized Runner ................ SUCCESS [  5.782 s]
[INFO] RandomizedTesting JUnit4 ANT Task 2.1.17 ........... FAILURE [  0.055 s]
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 6.086 s
[INFO] Finished at: 2018-08-15T06:30:39Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal on project junit4-ant: Could not resolve dependencies for project com.carrotsearch.randomizedtesting:junit4-ant:jar:2.1.17: The following artifacts could not be resolved: stax:stax-api:jar:debian, stax:stax:jar:debian: Cannot access central (https://repo.maven.apache.org/maven2) in offline mode and the artifact stax:stax-api:jar:debian has not been downloaded from it before. -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/DependencyResolutionException
[ERROR] 
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :junit4-ant
dh_auto_build: /usr/lib/jvm/default-java/bin/java -noverify -cp /usr/share/maven/boot/plexus-classworlds-2.x.jar -Dmaven.home=/usr/share/maven -Dmaven.multiModuleProjectDirectory=/<<PKGBUILDDIR>> -Dclassworlds.conf=/etc/maven/m2-debian.conf -Dproperties.file.manual=/<<PKGBUILDDIR>>/debian/maven.properties org.codehaus.plexus.classworlds.launcher.Launcher -s/etc/maven/settings-debian.xml -Ddebian.dir=/<<PKGBUILDDIR>>/debian -Dmaven.repo.local=/<<PKGBUILDDIR>>/debian/maven-repo --batch-mode package -DskipTests -Dnotimestamp=true -Dlocale=en_US returned exit code 1
make: *** [debian/rules:4: build-indep] Error 1
dpkg-buildpackage: error: debian/rules build-indep subprocess returned exit status 2
--------------------------------------------------------------------------------

The build was made with "dpkg-buildpackage -A" in my autobuilder.
Most probably, it also fails here in reproducible builds:

https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/carrotsearch-randomizedtesting.html

where you can get a full build log if you need it.

If this is really a bug in one of the build-depends, please use reassign and affects,
so that this is still visible in the BTS web page for this package.

Thanks.