Maven does not have a way of to achieve what you are asking for. Even if you set specific versions for your direct dependencies, which you should, your transitive dependencies can easily be unintentionally changed due to a seemingly unrelated change. For example, adding a dependency on a new library can give you an older … Read more
You don’t have to downgrade Maven. What happens here is that since 3.8.1, Maven comes with a default configuration to block all HTTP (insecure) repositories. The best way would be to upgrade your repositories and make them secure (HTTPS). However, you can tell Maven to allow downloading from your insecure repository by adding this mirror … Read more
The local Maven repo tracks where artifacts originally came from using a file named “_maven.repositories” in the artifact directory. After removing it, the build worked. This answer fixed the problem for me.