From ef9a3080de508e05d7edeab4d075f5cc59da9493 Mon Sep 17 00:00:00 2001
From: Hongda Jiang <hongdaj@google.com>
Date: Fri, 23 Oct 2026 15:30:02 +0000
Subject: [PATCH 1/2] build(deps): pin native-maven-plugin and override
 download-maven-plugin plexus dependency for Airlock

---
 google-auth-library-java/appengine/pom.xml          |  1 +
 google-auth-library-java/credentials/pom.xml        |  1 +
 .../native-image-shared-config/pom.xml              |  5 +++++
 java-showcase/gapic-showcase/pom.xml                | 13 +++++++++++++
 java-spanner/google-cloud-spanner/pom.xml           |  1 +
 sdk-platform-java/gapic-generator-java/pom.xml      | 13 +++++++++++++
 6 files changed, 34 insertions(+)

diff --git a/google-auth-library-java/appengine/pom.xml b/google-auth-library-java/appengine/pom.xml
index fa12daf5c86a..0c46c50180f2 100644
--- a/google-auth-library-java/appengine/pom.xml
+++ b/google-auth-library-java/appengine/pom.xml
@@ -45,6 +45,7 @@
       <plugin>
         <groupId>org.graalvm.buildtools</groupId>
         <artifactId>native-maven-plugin</artifactId>
+        <version>${native-maven-plugin.version}</version>
         <configuration>
           <skipNativeTests>true</skipNativeTests>
         </configuration>
diff --git a/google-auth-library-java/credentials/pom.xml b/google-auth-library-java/credentials/pom.xml
index 1f54c665be86..cd13cb74b2a4 100644
--- a/google-auth-library-java/credentials/pom.xml
+++ b/google-auth-library-java/credentials/pom.xml
@@ -25,6 +25,7 @@
       <plugin>
         <groupId>org.graalvm.buildtools</groupId>
         <artifactId>native-maven-plugin</artifactId>
+        <version>${native-maven-plugin.version}</version>
         <configuration>
           <skipNativeTests>true</skipNativeTests>
         </configuration>
diff --git a/java-shared-config/native-image-shared-config/pom.xml b/java-shared-config/native-image-shared-config/pom.xml
index fd4c5e251df9..939fa0019603 100644
--- a/java-shared-config/native-image-shared-config/pom.xml
+++ b/java-shared-config/native-image-shared-config/pom.xml
@@ -101,6 +101,11 @@
           <artifactId>maven-deploy-plugin</artifactId>
           <version>3.1.4</version>
         </plugin>
+        <plugin>
+          <groupId>org.graalvm.buildtools</groupId>
+          <artifactId>native-maven-plugin</artifactId>
+          <version>${native-maven-plugin.version}</version>
+        </plugin>
       </plugins>
     </pluginManagement>
     <plugins>
diff --git a/java-showcase/gapic-showcase/pom.xml b/java-showcase/gapic-showcase/pom.xml
index dacff71ad3d1..43903a551e9d 100644
--- a/java-showcase/gapic-showcase/pom.xml
+++ b/java-showcase/gapic-showcase/pom.xml
@@ -56,6 +56,19 @@
         <groupId>com.googlecode.maven-download-plugin</groupId>
         <artifactId>download-maven-plugin</artifactId>
         <version>1.6.8</version>
+        <dependencies>
+          <dependency>
+            <groupId>org.codehaus.plexus</groupId>
+            <artifactId>plexus-container-default</artifactId>
+            <version>1.0-alpha-9-stable-1</version>
+            <exclusions>
+              <exclusion>
+                <groupId>*</groupId>
+                <artifactId>*</artifactId>
+              </exclusion>
+            </exclusions>
+          </dependency>
+        </dependencies>
         <executions>
           <execution>
             <id>download-compliance-suite</id>
diff --git a/java-spanner/google-cloud-spanner/pom.xml b/java-spanner/google-cloud-spanner/pom.xml
index f6cdc05cbf07..734a6d4cae81 100644
--- a/java-spanner/google-cloud-spanner/pom.xml
+++ b/java-spanner/google-cloud-spanner/pom.xml
@@ -127,6 +127,7 @@
       <plugin>
         <groupId>org.graalvm.buildtools</groupId>
         <artifactId>native-maven-plugin</artifactId>
+        <version>${native-maven-plugin.version}</version>
         <configuration>
           <buildArgs combine.children="append">
             <buildArg>-Dspanner.testenv.config.class=${spanner.testenv.config.class}</buildArg>
diff --git a/sdk-platform-java/gapic-generator-java/pom.xml b/sdk-platform-java/gapic-generator-java/pom.xml
index af6aabe009dc..2f0bdf665963 100644
--- a/sdk-platform-java/gapic-generator-java/pom.xml
+++ b/sdk-platform-java/gapic-generator-java/pom.xml
@@ -125,6 +125,19 @@
         <groupId>com.googlecode.maven-download-plugin</groupId>
         <artifactId>download-maven-plugin</artifactId>
         <version>1.6.8</version>
+        <dependencies>
+          <dependency>
+            <groupId>org.codehaus.plexus</groupId>
+            <artifactId>plexus-container-default</artifactId>
+            <version>1.0-alpha-9-stable-1</version>
+            <exclusions>
+              <exclusion>
+                <groupId>*</groupId>
+                <artifactId>*</artifactId>
+              </exclusion>
+            </exclusions>
+          </dependency>
+        </dependencies>
         <executions>
           <execution>
             <id>download-metadata-proto</id>

From f07965da9c5a1ea5d4fc50edd2b465174ca146f4 Mon Sep 17 00:00:00 2001
From: Hongda Jiang <hongdaj@google.com>
Date: Fri, 23 Oct 2026 18:39:19 +0000
Subject: [PATCH 2/2] build(deps): override download-maven-plugin plexus
 dependency in frozen showcase copies

Apply the same plexus-container-default 1.0-alpha-9-stable-1 override to
sdk-platform-java/java-showcase-3.21.0 and java-showcase-3.25.8. The
showcase.yaml workflow builds both copies with mvn verify, so they also
resolve plexus-container-default 1.0-alpha-8 through download-maven-plugin
1.6.8.
---
 .../java-showcase-3.21.0/gapic-showcase/pom.xml     | 13 +++++++++++++
 .../java-showcase-3.25.8/gapic-showcase/pom.xml     | 13 +++++++++++++
 2 files changed, 26 insertions(+)

diff --git a/sdk-platform-java/java-showcase-3.21.0/gapic-showcase/pom.xml b/sdk-platform-java/java-showcase-3.21.0/gapic-showcase/pom.xml
index 5a0021f50262..394688fe18cc 100644
--- a/sdk-platform-java/java-showcase-3.21.0/gapic-showcase/pom.xml
+++ b/sdk-platform-java/java-showcase-3.21.0/gapic-showcase/pom.xml
@@ -48,6 +48,19 @@
         <groupId>com.googlecode.maven-download-plugin</groupId>
         <artifactId>download-maven-plugin</artifactId>
         <version>1.6.8</version>
+        <dependencies>
+          <dependency>
+            <groupId>org.codehaus.plexus</groupId>
+            <artifactId>plexus-container-default</artifactId>
+            <version>1.0-alpha-9-stable-1</version>
+            <exclusions>
+              <exclusion>
+                <groupId>*</groupId>
+                <artifactId>*</artifactId>
+              </exclusion>
+            </exclusions>
+          </dependency>
+        </dependencies>
         <executions>
           <execution>
             <id>download-compliance-suite</id>
diff --git a/sdk-platform-java/java-showcase-3.25.8/gapic-showcase/pom.xml b/sdk-platform-java/java-showcase-3.25.8/gapic-showcase/pom.xml
index 4de9528508de..c3af73360e02 100644
--- a/sdk-platform-java/java-showcase-3.25.8/gapic-showcase/pom.xml
+++ b/sdk-platform-java/java-showcase-3.25.8/gapic-showcase/pom.xml
@@ -56,6 +56,19 @@
         <groupId>com.googlecode.maven-download-plugin</groupId>
         <artifactId>download-maven-plugin</artifactId>
         <version>1.6.8</version>
+        <dependencies>
+          <dependency>
+            <groupId>org.codehaus.plexus</groupId>
+            <artifactId>plexus-container-default</artifactId>
+            <version>1.0-alpha-9-stable-1</version>
+            <exclusions>
+              <exclusion>
+                <groupId>*</groupId>
+                <artifactId>*</artifactId>
+              </exclusion>
+            </exclusions>
+          </dependency>
+        </dependencies>
         <executions>
           <execution>
             <id>download-compliance-suite</id>