From d1421f8f8cfa2fc43158c8a255b1a190acef1e19 Mon Sep 17 00:00:00 2001
From: Shai Almog <67850168+shai-almog@users.noreply.github.com>
Date: Wed, 5 Aug 2026 15:31:45 +0700
Subject: [PATCH] Point generated projects at the Codename One R2 repository

Phase two of the Maven Central migration. Codename One releases are moving to
the repository at https://repo.codenameone.com/maven2, and from August 28 new
versions stop being published to Central. A project generated before that date
resolves fine today and then silently stops seeing new releases, so the three
scaffolding paths now declare the repository up front.

Both lists are declared in each root pom. Maven resolves ordinary dependencies
through the repositories list and build plugins through the pluginRepositories
list, so a project holding only the first downloads codenameone-core and still
fails to find a newer codenameone-maven-plugin -- which reads as a corrupt
install rather than a missing repository.

Snapshots stay disabled on the new repository: it serves releases only, and
enabling them would send every local 8.0-SNAPSHOT lookup over the network.

The three scaffolds are covered:

  - cn1app-archetype  -- mvn archetype:generate / cn1:generate-app-project
  - cn1lib-archetype  -- library projects, which had no repository block at all
  - common.zip        -- the Initializr root pom (start.codenameone.com)

Losing any one of them is invisible at generation time, because Central still
serves every already-published version, so validate_generated_repositories.py
gates all three in the existing scaffolding-parity workflow, and the initializr
matrix test asserts it on the generated root pom.

Not included: resolving the archetype ITSELF still goes through Central, so
`archetype:generate` will need -DarchetypeRepository (or the R2
archetype-catalog) once Central publication stops. That belongs with the
phase-three cutover.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .github/workflows/scaffolding-parity.yml      |  15 +-
 .../resources/archetype-resources/pom.xml     |  30 +++-
 .../resources/archetype-resources/pom.xml     |  31 +++++
 .../validate_generated_repositories.py        | 128 ++++++++++++++++++
 .../common/src/main/resources/common.zip      | Bin 251279 -> 251573 bytes
 .../model/GeneratorModelMatrixTest.java       |  27 ++++
 6 files changed, 227 insertions(+), 4 deletions(-)
 create mode 100644 maven/integration-tests/validate_generated_repositories.py

diff --git a/.github/workflows/scaffolding-parity.yml b/.github/workflows/scaffolding-parity.yml
index 75724c17a1f..8b4240785ba 100644
--- a/.github/workflows/scaffolding-parity.yml
+++ b/.github/workflows/scaffolding-parity.yml
@@ -9,26 +9,37 @@ name: Scaffolding artifact integrity
 # android.onDeviceDebug, ...) were added to the archetype but never to the initializr's
 # common.zip, so they were silently missing from initializr projects.
 #
-# The check only needs python3 + unzip, so it runs fast and is path-gated to the two
+# It also guards the Codename One repository declaration in the three generated root
+# POMs. Dropping it is invisible at generation time -- Maven Central still serves every
+# already-published version -- and only surfaces after the migration cutover, as newly
+# generated projects that cannot see new releases.
+#
+# The check only needs python3 + unzip, so it runs fast and is path-gated to the
 # templates and the test harness itself.
 on:
   pull_request:
     branches: [ master ]
     paths:
       - 'maven/cn1app-archetype/src/main/resources/archetype-resources/common/codenameone_settings.properties'
+      - 'maven/cn1app-archetype/src/main/resources/archetype-resources/pom.xml'
+      - 'maven/cn1lib-archetype/src/main/resources/archetype-resources/pom.xml'
       - 'scripts/initializr/common/src/main/resources/common.zip'
       - 'maven/integration-tests/scaffolding-settings-parity-test.sh'
       - 'maven/integration-tests/normalize_cn1_settings.py'
       - 'maven/integration-tests/validate_initializr_pom_coordinates.py'
+      - 'maven/integration-tests/validate_generated_repositories.py'
       - '.github/workflows/scaffolding-parity.yml'
   push:
     branches: [ master ]
     paths:
       - 'maven/cn1app-archetype/src/main/resources/archetype-resources/common/codenameone_settings.properties'
+      - 'maven/cn1app-archetype/src/main/resources/archetype-resources/pom.xml'
+      - 'maven/cn1lib-archetype/src/main/resources/archetype-resources/pom.xml'
       - 'scripts/initializr/common/src/main/resources/common.zip'
       - 'maven/integration-tests/scaffolding-settings-parity-test.sh'
       - 'maven/integration-tests/normalize_cn1_settings.py'
       - 'maven/integration-tests/validate_initializr_pom_coordinates.py'
+      - 'maven/integration-tests/validate_generated_repositories.py'
       - '.github/workflows/scaffolding-parity.yml'
 
 concurrency:
@@ -43,5 +54,7 @@ jobs:
       - uses: actions/checkout@v6
       - name: Validate Initializr embedded Maven coordinates
         run: python3 maven/integration-tests/validate_initializr_pom_coordinates.py
+      - name: Validate Codename One repository is declared by every scaffold
+        run: python3 maven/integration-tests/validate_generated_repositories.py
       - name: Compare archetype vs initializr codenameone_settings.properties
         run: bash maven/integration-tests/scaffolding-settings-parity-test.sh
diff --git a/maven/cn1app-archetype/src/main/resources/archetype-resources/pom.xml b/maven/cn1app-archetype/src/main/resources/archetype-resources/pom.xml
index dc25455e180..c659deb855e 100644
--- a/maven/cn1app-archetype/src/main/resources/archetype-resources/pom.xml
+++ b/maven/cn1app-archetype/src/main/resources/archetype-resources/pom.xml
@@ -138,12 +138,36 @@
     </build>
     
 			
+    <!--
+        Codename One publishes its releases to the Codename One repository. Both lists
+        below are needed: Maven resolves ordinary dependencies through the repositories
+        list and build plugins through the pluginRepositories list, so a project that
+        declared only the first could download the framework and still fail to find a
+        newer codenameone-maven-plugin.
+    -->
     <repositories>
-
-
+        <repository>
+            <id>codenameone</id>
+            <url>https://repo.codenameone.com/maven2</url>
+            <releases>
+                <enabled>true</enabled>
+            </releases>
+            <snapshots>
+                <enabled>false</enabled>
+            </snapshots>
+        </repository>
     </repositories>
     <pluginRepositories>
-
+        <pluginRepository>
+            <id>codenameone-plugins</id>
+            <url>https://repo.codenameone.com/maven2</url>
+            <releases>
+                <enabled>true</enabled>
+            </releases>
+            <snapshots>
+                <enabled>false</enabled>
+            </snapshots>
+        </pluginRepository>
     </pluginRepositories>
     <profiles>
         <profile>
diff --git a/maven/cn1lib-archetype/src/main/resources/archetype-resources/pom.xml b/maven/cn1lib-archetype/src/main/resources/archetype-resources/pom.xml
index 094a899d493..48c8c146d32 100644
--- a/maven/cn1lib-archetype/src/main/resources/archetype-resources/pom.xml
+++ b/maven/cn1lib-archetype/src/main/resources/archetype-resources/pom.xml
@@ -225,6 +225,37 @@
         </plugins>
     </build>
 
+    <!--
+        Codename One publishes its releases to the Codename One repository. Both lists
+        below are needed: Maven resolves ordinary dependencies through the repositories
+        list and build plugins through the pluginRepositories list, so a project that
+        declared only the first could download the framework and still fail to find a
+        newer codenameone-maven-plugin.
+    -->
+    <repositories>
+        <repository>
+            <id>codenameone</id>
+            <url>https://repo.codenameone.com/maven2</url>
+            <releases>
+                <enabled>true</enabled>
+            </releases>
+            <snapshots>
+                <enabled>false</enabled>
+            </snapshots>
+        </repository>
+    </repositories>
+    <pluginRepositories>
+        <pluginRepository>
+            <id>codenameone-plugins</id>
+            <url>https://repo.codenameone.com/maven2</url>
+            <releases>
+                <enabled>true</enabled>
+            </releases>
+            <snapshots>
+                <enabled>false</enabled>
+            </snapshots>
+        </pluginRepository>
+    </pluginRepositories>
 
     <!-- The sign-artifacts profile is used for signing artifacts when you deploy to Maven
         central.  In order for this to work, you also need to add the following to your
diff --git a/maven/integration-tests/validate_generated_repositories.py b/maven/integration-tests/validate_generated_repositories.py
new file mode 100644
index 00000000000..ff48f2ad9cb
--- /dev/null
+++ b/maven/integration-tests/validate_generated_repositories.py
@@ -0,0 +1,128 @@
+#!/usr/bin/env python3
+#
+# Copyright (c) 2026, Codename One and/or its affiliates. All rights reserved.
+# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
+#
+# This code is free software; you can redistribute it and/or modify it
+# under the terms of the GNU General Public License version 2 only, as
+# published by the Free Software Foundation.  Codename One designates this
+# particular file as subject to the "Classpath" exception as provided
+# by Oracle in the LICENSE file that accompanied this code.
+#
+# This code is distributed in the hope that it will be useful, but WITHOUT
+# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+# FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
+# version 2 for more details (a copy is included in the LICENSE file that
+# accompanied this code).
+#
+# You should have received a copy of the GNU General Public License version
+# 2 along with this work; if not, write to the Free Software Foundation,
+# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+#
+# Please contact Codename One through http://www.codenameone.com/ if you
+# need additional information or have any questions.
+
+"""Guard that every project-scaffolding path declares the Codename One repository.
+
+Codename One releases are moving off Maven Central to the repository at
+https://repo.codenameone.com/maven2. A generated project that does not declare it
+resolves normally today -- Central still has every published version -- and then
+silently stops seeing new releases after the cutover. The failure is therefore
+invisible at generation time, which is exactly why it needs a build-time gate.
+
+Both lists are checked because Maven resolves ordinary dependencies through
+<repositories> and build plugins through <pluginRepositories>. A project holding only
+the first can download codenameone-core and still fail to find a newer
+codenameone-maven-plugin, which reads as a corrupt install rather than a missing
+repository.
+
+The three scaffolds must agree; they are the only ways a user gets a new project:
+
+  1. cn1app-archetype  -- mvn archetype:generate / cn1:generate-app-project
+  2. cn1lib-archetype  -- library projects
+  3. common.zip        -- the Initializr root pom (start.codenameone.com)
+"""
+
+from pathlib import Path
+import sys
+import xml.etree.ElementTree as ET
+import zipfile
+
+
+MAVEN_NS = "http://maven.apache.org/POM/4.0.0"
+NS = {"m": MAVEN_NS}
+REPOSITORY_URL = "https://repo.codenameone.com/maven2"
+
+# (container element, child element) for the two independent resolution paths.
+REQUIRED_LISTS = (
+    ("repositories", "repository"),
+    ("pluginRepositories", "pluginRepository"),
+)
+
+APP_ARCHETYPE_POM = "maven/cn1app-archetype/src/main/resources/archetype-resources/pom.xml"
+LIB_ARCHETYPE_POM = "maven/cn1lib-archetype/src/main/resources/archetype-resources/pom.xml"
+INITIALIZR_ZIP = "scripts/initializr/common/src/main/resources/common.zip"
+INITIALIZR_ZIP_POM = "pom.xml"
+
+
+def fail(message):
+    print("ERROR: " + message, file=sys.stderr)
+    raise SystemExit(1)
+
+
+def child_text(element, name):
+    child = element.find("m:" + name, NS)
+    if child is None or child.text is None:
+        return None
+    return child.text.strip()
+
+
+def validate_pom(label, data):
+    try:
+        project = ET.fromstring(data)
+    except ET.ParseError as error:
+        fail(label + " is not valid XML: " + str(error))
+
+    for list_name, entry_name in REQUIRED_LISTS:
+        container = project.find("m:" + list_name, NS)
+        if container is None:
+            fail(label + " has no <" + list_name + ">; generated projects stop seeing "
+                 + "Codename One releases once publication to Maven Central ends")
+
+        matches = [entry for entry in container.findall("m:" + entry_name, NS)
+                   if child_text(entry, "url") == REPOSITORY_URL]
+        if not matches:
+            fail(label + " does not declare " + REPOSITORY_URL + " in <" + list_name + ">")
+
+        for entry in matches:
+            releases = entry.find("m:releases", NS)
+            if releases is not None and child_text(releases, "enabled") == "false":
+                fail(label + " declares " + REPOSITORY_URL + " in <" + list_name
+                     + "> with releases disabled, so no release can resolve from it")
+
+
+def main():
+    repo_root = Path(__file__).resolve().parents[2]
+
+    for relative_path in (APP_ARCHETYPE_POM, LIB_ARCHETYPE_POM):
+        pom_path = repo_root / relative_path
+        if not pom_path.is_file():
+            fail("archetype POM not found: " + str(pom_path))
+        validate_pom(relative_path, pom_path.read_bytes())
+
+    archive_path = repo_root / INITIALIZR_ZIP
+    if not archive_path.is_file():
+        fail("Initializr artifact not found: " + str(archive_path))
+    with zipfile.ZipFile(str(archive_path), "r") as archive:
+        try:
+            data = archive.read(INITIALIZR_ZIP_POM)
+        except KeyError:
+            fail(INITIALIZR_ZIP + " is missing " + INITIALIZR_ZIP_POM)
+        validate_pom(INITIALIZR_ZIP + "!" + INITIALIZR_ZIP_POM, data)
+
+    print("All project scaffolds declare " + REPOSITORY_URL
+          + " for both dependencies and plugins.")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/scripts/initializr/common/src/main/resources/common.zip b/scripts/initializr/common/src/main/resources/common.zip
index 02083fd978bfbb7c4e88d6f6bb2c76582d6aca48..f0a1891e4bccb8c40e456517638462b84f9eb838 100644
GIT binary patch
delta 2366
zcmZWq2{hDe8~^*imc}qtk}Z`aL?K~jaxIA#WDBFF2sfh`Mz+L+%91Hdc`>*nOV-3C
zsjOvh%rusg>wY11MMNZudq;J?bME)O=REH@&+mPo<@dbrIlmhv64hlA_k@M$5@AB*
zw|}Z$mk>sf8}bMuf+!$<RG(cTKIe`(U=Z-jCz|&mz6FM05dpz@0R$05_-lwnqRQ(_
zMsUhqub`n`)n|#Abu#ioaZEj-k(aSq_se^y4&G*O->B>)68~)h*I{^&5-u-nXQ&zT
z1YeI2Q4Oovg(pSvEa~wzxyv3@GvhavuBTUm=01E|m|;GDbjVRHRG@ZiyT;t$^X9bo
zT2@CM3MO&m-(nBuW!$;5qiwv)gCpvn8FQ9RnCkPsReI8(KDw@MdG5DS&Y1`I^4wLb
za+E|)<PYQoJ>}@!X&pG9t3%t+=CU!{Am}3Ix<$&F%O3d}m;N5hqGvy-)nIs~Qto<?
zmr0g1lFGdT&z7xf`c=i1Rauqi9Ax!!YnyVI8>%jAh!>_734}y_xz4G7Y-ITLJS{uF
z%UIqe{Ls7DrMzU%)X)2g6wj-?p_kTDtbi7Etb@VkWX<DcU!F$gF|}MTHqj0Xd||xT
zi1vJ=A(CS<Xks*%+fTo4WNnl(Ca}m%7s8J?OvI18XbZ$yyHT@_uPaX75PNMzr<Qdj
zV~v(t41R3<@km$nDcV8lf;U;3zJX0uw&z@kN2MIrg<}tCZYJ19X<eAjwmi!g^fJs=
z6Tbago<<8YmpfWnH9DtQ5P5CLxaN>uz}KOR17@maboNKm*RcV5g_(L|Vesp*(?&%h
z3=_*&#tp3w#E>f;dRi}b$3Kubd0{H8tf<YyWzR`vmwxq_8&(6>C;Co{lG{dG9vIKn
z#$8i7%+b|jF{VfhhVP^YK9vZq*GXI=R7`631uVTXbKco%!l*$)lOFpAhHBbxQKf{+
zovPda#6G%9>{x(SG`%ZBtzptmt~;vZnrEn@M%{&nSZ!(VN^;NEf$i>@HqP&z4V~{V
zzD*M)h%j3iPkoDz)W<e#_nEI^Vazs_xrr0fu+_y^+#Z#c4f~GHd}=VMjJV;FSzbf_
zU9pFEX}!JqvT?sl!n}k>`Gh*YP5P|jue!AN3VXtD>%T&#4n)wUo)MPRe05Zd`<-pE
zq~--(-F=45)4RWfE4_}co@^&wB{EDS>n`n#6jk+U%6B?;;_XE$v0}nvaQlGOUyW;z
zj$?x3pY$bt6z5?#<65k>MpOtgDdz`YO+0IR;utnH%lO@Y#oS1k`BgLXL6Cij0$t-N
z)@35^=Ehlb3s><)`jFC0^Jd~SWgK_aL1vPxuhwv?@j}W1)sse?!jYaFs3a>9BYrVu
zKEx{rYcMvQ3Qky|>{GE|U<ALeUA(&EaC3qRZF{Vt_S%G-$bnfGHM3}HGV)<1xZX9x
ztEpI2tRp|IBDBn=w_-jnb9f;^ZHxK3$@rwscNq!s4>k02=_XAfmClu@I5#;>Xm4Gq
zX_PcaT-)1y>~_{5Z77avQ*0Q_$@=ZSk=*0H&@;z<2wO*IjQyq)uRWra%Xd*Xo^}ct
z9d+7|-*-MXeurL4`!sRybWHVhnC{2no<^?uyCOF^i+N`LP|z9sL2a{fa-V(o-0cp3
zA%#M#5chzc*7PH%seT!<MS7UUEi?VGSmwD56z(+D77;QQXmLw<oAxnzw{5mVh<{ER
z%vml(E3$WI7F!dn4bmM6Ik){Vq{P-DFUFm4amR<p8eZ{OdEuY$9T-uTP7J83*kbp(
zg(uqhrsqE4tb>hfWWXV;Q4V+FmILfYePrHwn9J5Q(x1sB7pADXdJ>y9VBF-RcV}qK
z-L0bp`UUxW*wQ@JCT3M1#tq&YEJs$l10+v14*CgWE}tz>h{sIn7qT`5##PlR^+Y*d
z*vd{!kR7{lu)RM+gFzN={Xp^2PkgTOX<ntUmHc9{!C3Fj7u>D+@{N01!?@qHo_3OL
z{wT2%Tuc9~em_rTDxclA*E?-xrcj7`U(5SfyIV71Nuww1PVUd++Bbu?RN=`?;#H5P
zPnKqJW;NybvP`ce``&HZm$4~JafpA0qAX^|ryR-B$?kb&Ndv1JVv#9}Hfs#l&o9Lp
zd!0Ab5o7emppne1<kAo&Rf5kAG4mY@Iet|f!cn^y+QZVWRgR4@Y^ql7UVV0dl~o-*
z_)3g>j0m~Apysc;!=@IOstuh+NTKmpr7Xjb%9AKp&dgUY!yGq^aeVK8I)=NsgJFM&
zPyUVlV88rkfDZlBfLye*XpFO{0N>CWXHmecH~D{|ky#ZIgs&(_UgS5vs{B`Wgnr1*
z|40th<^cs*#0EIj5(^J@fIX-`7KV2K0$M2xYde5GIw%WgJAe@?CI=%r!DeXJ3Di-G
z?~XHitOUO71ZL>95~$b(_Mx>U@I)6d2QwuCsU-q3u#pGkAghg^Ubz&$>jGLL=A{A%
zg&F|wJqOAV+YWFd>&ky1O&wq>9Ov>8gP({A2dKb{t9RUgB1!FF3tZ_0lCZs#pERu;
zu3_`bcb7wJHqb%$SHLJX*o)d$!&)|<OHehOVgn+GxCtO51?+(K-TdYq(;>Z^&y1c9
zA9RC#pe!B0$7w(YN^pQG`Z^urIeZkC0pQVeumLhSKphzW@D$<8RZl$=Ks*yD!fjlB
zgnK5m;sO&iH4`Rsf$o|p7C?6S1o^_5PO#}aBQ&1{7r6kBa#>LKIUu6TEa?9n=%U+l
z;2pk?ZOsRWo396rO7Vc-=YZq!>3z(HiacP5ZZ3di9<V^23t#~cn4$><@I4Rc<Eje)
z;_VjX7T`{!_?`bgQU!_cA7FKpL_U~2F8bGv@2L}e08U^W4)=hK@CXMeNGkp-M7|iZ
zdVn-EDgt8g&u9GiQ|#sU;`9>^D+1!swwF))W-$!w1zM<PEiCH=y5PtY09~5-FDBXt
r)G@3UfSjZF28OJ*B?b4k0V%N`byoYrw?qFvASG&wLlAO1;2-=0EcO`c

delta 1979
zcmZuxdo<MR8vf1i3%hZMkZEFEcDjsQa)}Y;mdg;4Bpc;c#%;1)lFG#Flay`8;3Kyh
z<2o9OA&DcTTxN0`l%t_CId(3)2%YFmd!Mz=Kj-__`^U4Mwchu6o_DR6dvD8c>@BsD
z5;Sw#OP?){AvjeD1Q9ADh!lb#=cy68@e$zyuT#`<Q@O;2nn}F$lE21Y`<vU6m`q;W
z7IjK;?4#zIG^2(*2bQJ#q1xv(p++VBL3YP|`8$bQQ`Axng(^E$Y2MpNd2|ow#i0TJ
zczw;b;~D!8S*Tw5$A-?T>6fg|QpLtww9w=;92a}Td%cW3#2J-%2dCS7b;Y0YzP^68
z3+<q!Q`0r)26yIZfV^(H&iu^er2dzcH<#0-rSbY4qv^eq#HTJ<N<}xbLc@j_`57s4
zPT3^?Gf^7p_T4+I-&hCT`ZibK^1(-CIY`ndn@RlEm+7IXv5(>=lG~>3of9?eOxupj
zzI`;LDk|h0Nk={1yb>eWwEH<#f8+C7=+|e{u`0ZliT>GxW=BRC?ut>vGCbD6zrq>=
z4KtF+TG}#h8;|u4)RIN18jb@0w$)@StnBKq<J+%dMEfK-mU&htF(qB;!Ww?}*Xv(9
zmeLBQJt{NbjE)9l<2v|e&7DH;ELt12u6Z$sPkC--PjaRZj`m(oTynxrIV)cbyXjlF
zzf`NavU>Mca#HIWQ!>Rxv5iYU#K<S_mnBOmbYDHUcEczA8SC@TbZ^!t{f|E3QdN$b
zL=)jMbo`}#_2d?z(P`OqEqBzeMN4lw#Xs*PuCsRYl9V&IWF<EoL{BgYv@bJ-HY@(I
z7S~Ladh3p*lFJsky5pUmI%WNVxbiMZX75p-VMfdyOZs3HonZFv_Sn>PTGSL}T@D|A
zdiECQK*mVsv^w3`I=$n!23<9Yi#OUOkN<mC1z&{sDXT0<Cir-|HU(d>e&3h>xKMfY
z^<YZ*xLn}fYrh-M-Hb5!tU$v$sj{Vd5BT~Xb16Ub;Ni%a3%7f;!-UB#5*a7?*|YEZ
zN!8uWQ5p@e;|gYW5e|QQul4(tnx{<(<3?e{ISCHV+t<LUFjLRNw^|z5EK-A4Oa8!h
zkG*FTn4V-%bR_Z}&wEXYU{F!z?&W6a)^_FH4npD7ipkg3cZ*NG;?B}^Iv94$c9$n~
z+l!fHlgt#NZbPd{;n?Sr<;?KiS?{kiVv_H@Sv<efhaS_DVsl?UEm1)=&9OdmE>QF~
znB8=tsq56iZ!9%BZ+*LqdBUC#&(v)GNb@A_>%12~DDP$c$aiP@1ozY5b0W_>G<C_Y
z4~z7qz0Q4{s&kI)n$rq<NOKr*3hH=aQD0eZ^B|ZKzWT_2$<@k|AFA-f=N~_+QnP-c
z9O+C}hz``m?Ul`BWoJFNYsFeLGz*v0_A*Vio%(kwU2ZSSwmqTTwcDU;VKc+BUVTjI
z(od}?g0fB=xsR72cI7`U2oAZr)%Hcjd`vK^NMonwXqPC@`HY59FVkt>yp~I$>qhHt
zZ`pj(_=hs<t((A;2~A~_AwNORVZF`<QS!|d8<KfU>a1&ZW|8nG<AsS=E7JJY#fURA
zccR@7|9WY8hy7fXa=vnIfcIoC`N+H=Fo_n?Q<_`*_=>ckBkrI`H+w!CZ(qH9z)twG
zU^X#)mVI6incx3PpR$K`H$gLKfJQT$5An02+U)*g$Ji@bT&j#sz(Ug~W68s$ro+ya
znlVuk7;s&A*RZyHz=c<a3ZCydiu;_k9%Ciq$}NtciJd27TGiRp+8M_dxaaVp_nNm_
zUEC$n>z8^XuF--qFguZ*F3MX?P*o_hvI~^Bd}<x5;5}{jWPH!CwaUdoc;Vz&;X!lL
z=(ta5^Rs&OsF%Ux<;j<q=+}arU)ysz6`gf7$_BSugW%XQ*ZA{8<E1r1BltuM{xo{}
zqlgA4^8lWHRyyUZG)7!#<5_8t->Uil4y*XKA{cS8lD=+25Ln#<euREKKo&iOg^@kL
z5Dmn_k{)1&vT#t?158jJ4o0ytN>Ha45YdhQg2-NAgp#)Z#fSkGcJu-gYF`C6dVwwW
zN)-kP^^fz94u(gEz%CsA`_w<595QFc{vTW14b)*(A0U9YRTwB+jln_D5WqvubFrdr
zY$(G6`lu-z9_9fPsZAUVLZL=O-EN?V5;>5=10-;QgMn9TFnD;UPpm?g4+!WD4%FoX
zTeOV>WB9-THLisfd|-^))I%X(>@cJrD!u>*(en)G_5!$XcE|-tAT=U_3U#`HCUor=
z&yLE4uU`Ojv^W>4^aCq&Fc+Tg7h@z33j4t}Sl2I3!{ATgh^pj6;sCG*C-MQjS^#h`
zZ2;`~+x2{a1jJIpgLI=q;8Y(_f&Uy3caABB9|pjF6c$6ZL2+j7#n5|DtY)DY!a;GW
zN_QadJATN5*dbtwzF|SzAz%UIO93=51BAbfRu74dl1pLV5U@rQOQGDbcva=4&~X?X
zLOB&Mby(bDyaIL&14~q<68<0nWYn<|dI*3MdaV-P6^MgXdkBXF;*l2ZaPtUoLo+*}
j&j=u?Yd-@>I3+SRUhkNbgyi?VnTbD97C~Ia41)XzM*w$0

diff --git a/scripts/initializr/common/src/test/java/com/codename1/initializr/model/GeneratorModelMatrixTest.java b/scripts/initializr/common/src/test/java/com/codename1/initializr/model/GeneratorModelMatrixTest.java
index 5e37ef3f29c..485b5e7292f 100644
--- a/scripts/initializr/common/src/test/java/com/codename1/initializr/model/GeneratorModelMatrixTest.java
+++ b/scripts/initializr/common/src/test/java/com/codename1/initializr/model/GeneratorModelMatrixTest.java
@@ -208,6 +208,32 @@ private void validateClaudeSkillBundled() throws Exception {
         String rootPom = getText(entries, "pom.xml");
         assertContains(rootPom, "<id>win</id>",
                 "Java 17 root pom should retain the win32 module activation profile");
+        assertCodenameOneRepository(rootPom, "Java 17");
+    }
+
+    /**
+     * Codename One releases are moving off Maven Central to repo.codenameone.com, so a
+     * generated project must declare that repository. Losing it is invisible at
+     * generation time -- Central still serves every already-published version -- and
+     * only surfaces after the cutover, as a project that never sees a new release.
+     *
+     * Both lists are asserted because Maven resolves dependencies through
+     * &lt;repositories&gt; and build plugins through &lt;pluginRepositories&gt;: a
+     * project holding only the first downloads codenameone-core and still fails to find
+     * a newer codenameone-maven-plugin.
+     */
+    private void assertCodenameOneRepository(String rootPom, String label) {
+        int repositories = rootPom.indexOf("<repositories>");
+        int pluginRepositories = rootPom.indexOf("<pluginRepositories>");
+        assertTrue(repositories >= 0, label + " root pom should declare <repositories>");
+        assertTrue(pluginRepositories > repositories,
+                label + " root pom should declare <pluginRepositories> after <repositories>");
+        assertContains(rootPom.substring(repositories, pluginRepositories),
+                "https://repo.codenameone.com/maven2",
+                label + " root pom should resolve dependencies from the Codename One repository");
+        assertContains(rootPom.substring(pluginRepositories),
+                "https://repo.codenameone.com/maven2",
+                label + " root pom should resolve plugins from the Codename One repository");
     }
 
     private void validateLegacyJava8Generation() throws Exception {
@@ -248,6 +274,7 @@ private void validateLegacyJava8Generation() throws Exception {
         String rootPom = getText(entries, "pom.xml");
         assertContains(rootPom, "<id>win</id>",
                 "Java 8 root pom should retain the win32 module activation profile");
+        assertCodenameOneRepository(rootPom, "Java 8");
     }
 
     private void validateCoordinateGuardRejectsBrokenArtifacts() throws Exception {