kie-issues#1750: Try Maven Central before hitting repository.apache.org

[raboof]

Part of apache/incubator-kie-issues#1750

GitHub Actions builds are hitting the rule from
https://infra.apache.org/infra-ban.html that disallows excessive 404's on repository.apache.org, causing them to get banned.

This change should make various builds check Maven Central before checking repository.apache.org, which hopefully should help.

[tiagobento]

If I'm not mistaken, even though apache.snapshots is listed first, it has releases disabled, so I thought Maven only tries to download from it when it finds a dependency with a SNAPSHOT version. Following this logic, and because our 1st party dependencies (drools,jbpm,kogito) are the only ones with a SNAPSHOT version, we're not overloading the apache.snapshots repository with 404 requests for all other 3rd party dependencies... That's at least my theory 😅

Do you see it differently or do you have any logs/material that could help us get a more assertive assessment on this issue?

In any case, thanks for the PR and proactively helping us figure it out!

[raboof]

Yes, that's definitely true for packages/dev-deployment-kogito-quarkus-blank-app/pom.xml, packages/maven-base/settings.xml and packages/stunner-editors/pom.xml - I guess I may have gotten a bit carried away :)

The changes to the generated poms and to packages/sonataflow-image-common/resources/modules/kogito-maven/common/maven/settings.xml may still be (more) relevant, though?

[tiagobento]

Most likely yes! @ricardozanini or @wmedvede might know more assertively. Let's wait for their assessment on this matter... Thanks @raboof!