From 850a0b486a58b9946af2bfacd55882ca165a2f40 Mon Sep 17 00:00:00 2001
From: Sutou Kouhei <kou@clear-code.com>
Date: Sat, 24 Oct 2026 08:47:45 +0900
Subject: [PATCH] fix(dev/release): pin surefire version for Java JAR
 verification

Debian's Maven package patches the default surefire version to 2.17,
which doesn't support the JUnit Platform. As a result, no tests in
VerifyReleaseCandidateTest were run and the verification passed
without checking anything.

Pin maven-surefire-plugin to 3.5.2, the same version used by java/,
and enable failIfNoTests so that the verification fails if no tests
are run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 dev/release/verify/java/pom.xml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/dev/release/verify/java/pom.xml b/dev/release/verify/java/pom.xml
index eef3ae12aa..759911dcce 100644
--- a/dev/release/verify/java/pom.xml
+++ b/dev/release/verify/java/pom.xml
@@ -93,6 +93,23 @@
     </dependency>
   </dependencies>
 
+  <build>
+    <pluginManagement>
+      <plugins>
+        <!-- Pin the version: some distributions (e.g. Debian) patch Maven's
+             default to surefire 2.17, which can't run JUnit 5 tests. -->
+        <plugin>
+          <groupId>org.apache.maven.plugins</groupId>
+          <artifactId>maven-surefire-plugin</artifactId>
+          <version>3.5.2</version>
+          <configuration>
+            <failIfNoTests>true</failIfNoTests>
+          </configuration>
+        </plugin>
+      </plugins>
+    </pluginManagement>
+  </build>
+
   <profiles>
     <profile>
       <id>java-25+</id>