versions-maven-plugin:2.9.0:display-plugin-updates hangs

[kwin]

The plugin hangs during goal versions-maven-plugin:2.9.0:display-plugin-updates
This didn't happen with older versions.
You can reproduce by executing it on project https://github.com/adobe/aem-core-wcm-components (or just the module "bundles/core").

Debug log is exposing

[INFO] --- versions-maven-plugin:2.9.0:display-plugin-updates (default-cli) @ core.wcm.components.core ---
[DEBUG] Using mirror nexus (https://repo.int.netcentric.biz/nexus/content/groups/public/) for jvnet-nexus-snapshots (https://maven.java.net/content/repositories/snapshots).
[DEBUG] Using mirror nexus (https://repo.int.netcentric.biz/nexus/content/groups/public/) for apache.snapshots (http://people.apache.org/maven-snapshot-repository).
[DEBUG] Dependency collection stats {ConflictMarker.analyzeTime=504052, ConflictMarker.markTime=228893, ConflictMarker.nodeCount=396, ConflictIdSorter.graphTime=352695, ConflictIdSorter.topsortTime=64380, ConflictIdSorter.conflictIdCount=90, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=2555720, ConflictResolver.conflictItemCount=171, DefaultDependencyCollector.collectTime=270589005, DefaultDependencyCollector.transformTime=3756496}
[DEBUG] org.codehaus.mojo:versions-maven-plugin:jar:2.9.0
[DEBUG]    org.apache.maven.reporting:maven-reporting-api:jar:3.0:compile
[DEBUG]    org.apache.maven.reporting:maven-reporting-impl:jar:3.0.0:compile
[DEBUG]       org.apache.maven:maven-core:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-settings:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-settings-builder:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-repository-metadata:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-model-builder:jar:3.0:compile
[DEBUG]          org.apache.maven:maven-aether-provider:jar:3.0:runtime
[DEBUG]          org.sonatype.aether:aether-impl:jar:1.7:compile
[DEBUG]             org.sonatype.aether:aether-spi:jar:1.7:compile
[DEBUG]          org.sonatype.aether:aether-api:jar:1.7:compile
[DEBUG]          org.sonatype.aether:aether-util:jar:1.7:compile
[DEBUG]          org.sonatype.sisu:sisu-inject-plexus:jar:1.4.2:compile
[DEBUG]             org.sonatype.sisu:sisu-inject-bean:jar:1.4.2:compile
[DEBUG]                org.sonatype.sisu:sisu-guice:jar:noaop:2.1.7:compile
[DEBUG]          org.codehaus.plexus:plexus-interpolation:jar:1.14:compile
[DEBUG]          org.codehaus.plexus:plexus-classworlds:jar:2.2.3:compile
[DEBUG]          org.sonatype.plexus:plexus-sec-dispatcher:jar:1.3:compile
[DEBUG]             org.sonatype.plexus:plexus-cipher:jar:1.4:compile
[DEBUG]       org.apache.maven:maven-plugin-api:jar:3.8.4:compile (version managed from default)
[DEBUG]       org.apache.maven.shared:maven-shared-utils:jar:3.2.0:compile
[DEBUG]       org.apache.maven.doxia:doxia-decoration-model:jar:1.7.4:compile
[DEBUG]    org.apache.maven.shared:maven-common-artifact-filters:jar:3.2.0:compile
[DEBUG]       org.apache.maven:maven-artifact:jar:3.1.1:compile
[DEBUG]       org.apache.maven:maven-model:jar:3.1.1:compile
[DEBUG]       commons-io:commons-io:jar:2.6:compile
[DEBUG]       org.eclipse.aether:aether-api:jar:0.9.0.M2:compile
[DEBUG]       org.eclipse.aether:aether-util:jar:0.9.0.M2:compile
[DEBUG]       org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.0.0.M5:compile
[DEBUG]          javax.enterprise:cdi-api:jar:1.0:compile
[DEBUG]             javax.annotation:jsr250-api:jar:1.0:compile
[DEBUG]             javax.inject:javax.inject:jar:1:compile
[DEBUG]          com.google.guava:guava:jar:10.0.1:compile
[DEBUG]             com.google.code.findbugs:jsr305:jar:1.3.9:compile
[DEBUG]          org.sonatype.sisu:sisu-guice:jar:no_aop:3.1.0:compile
[DEBUG]             aopalliance:aopalliance:jar:1.0:compile
[DEBUG]          org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.0.0.M5:compile
[DEBUG]    org.apache.maven.wagon:wagon-file:jar:3.4.3:compile
[DEBUG]       org.apache.maven.wagon:wagon-provider-api:jar:3.4.3:compile
[DEBUG]    org.apache.maven.doxia:doxia-core:jar:1.11.1:compile
[DEBUG]       org.apache.maven.doxia:doxia-logging-api:jar:1.11.1:compile
[DEBUG]       org.codehaus.plexus:plexus-container-default:jar:2.1.0:compile
[DEBUG]          org.apache.xbean:xbean-reflect:jar:3.7:compile
[DEBUG]          com.google.collections:google-collections:jar:1.0:compile
[DEBUG]       org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile
[DEBUG]       org.apache.commons:commons-text:jar:1.3:compile
[DEBUG]       org.apache.httpcomponents:httpclient:jar:4.5.13:compile
[DEBUG]          commons-logging:commons-logging:jar:1.2:compile
[DEBUG]          commons-codec:commons-codec:jar:1.11:compile
[DEBUG]       org.apache.httpcomponents:httpcore:jar:4.4.14:compile
[DEBUG]    org.apache.maven.doxia:doxia-sink-api:jar:1.11.1:compile
[DEBUG]    org.apache.maven.doxia:doxia-site-renderer:jar:1.11.1:compile
[DEBUG]       org.apache.maven.doxia:doxia-skin-model:jar:1.11.1:compile
[DEBUG]       org.apache.maven.doxia:doxia-module-xhtml:jar:1.11.1:compile
[DEBUG]       org.apache.maven.doxia:doxia-module-xhtml5:jar:1.11.1:compile
[DEBUG]       org.codehaus.plexus:plexus-i18n:jar:1.0-beta-10:compile
[DEBUG]       org.codehaus.plexus:plexus-velocity:jar:1.2:compile
[DEBUG]       org.apache.velocity:velocity:jar:1.7:compile
[DEBUG]          commons-lang:commons-lang:jar:2.4:compile
[DEBUG]       org.apache.velocity:velocity-tools:jar:2.0:compile
[DEBUG]          commons-beanutils:commons-beanutils:jar:1.7.0:compile
[DEBUG]          commons-digester:commons-digester:jar:1.8:compile
[DEBUG]          commons-chain:commons-chain:jar:1.1:compile
[DEBUG]          dom4j:dom4j:jar:1.1:compile
[DEBUG]          oro:oro:jar:2.0.8:compile
[DEBUG]       commons-collections:commons-collections:jar:3.2.2:compile
[DEBUG]    org.codehaus.plexus:plexus-utils:jar:3.4.1:compile
[DEBUG]    org.codehaus.plexus:plexus-interactivity-api:jar:1.1:compile
[DEBUG]    com.fasterxml.woodstox:woodstox-core:jar:6.2.8:compile
[DEBUG]       org.codehaus.woodstox:stax2-api:jar:4.2.1:compile
[DEBUG]    org.apache.commons:commons-lang3:jar:3.12.0:compile
[DEBUG] Created new class realm plugin>org.codehaus.mojo:versions-maven-plugin:2.9.0
[DEBUG] Importing foreign packages into class realm plugin>org.codehaus.mojo:versions-maven-plugin:2.9.0
[DEBUG]   Imported:  < project>com.adobe.cq:core.wcm.components.core:2.17.15-SNAPSHOT
[DEBUG] Populating class realm plugin>org.codehaus.mojo:versions-maven-plugin:2.9.0
[DEBUG]   Included: org.codehaus.mojo:versions-maven-plugin:jar:2.9.0
[DEBUG]   Included: org.apache.maven.reporting:maven-reporting-api:jar:3.0
[DEBUG]   Included: org.apache.maven.reporting:maven-reporting-impl:jar:3.0.0
[DEBUG]   Included: org.sonatype.aether:aether-util:jar:1.7
[DEBUG]   Included: org.sonatype.sisu:sisu-inject-bean:jar:1.4.2
[DEBUG]   Included: org.sonatype.sisu:sisu-guice:jar:noaop:2.1.7
[DEBUG]   Included: org.codehaus.plexus:plexus-interpolation:jar:1.14
[DEBUG]   Included: org.sonatype.plexus:plexus-sec-dispatcher:jar:1.3
[DEBUG]   Included: org.sonatype.plexus:plexus-cipher:jar:1.4
[DEBUG]   Included: org.apache.maven.shared:maven-shared-utils:jar:3.2.0
[DEBUG]   Included: org.apache.maven.doxia:doxia-decoration-model:jar:1.7.4
[DEBUG]   Included: org.apache.maven.shared:maven-common-artifact-filters:jar:3.2.0
[DEBUG]   Included: commons-io:commons-io:jar:2.6
[DEBUG]   Included: org.eclipse.aether:aether-util:jar:0.9.0.M2
[DEBUG]   Included: javax.enterprise:cdi-api:jar:1.0
[DEBUG]   Included: javax.annotation:jsr250-api:jar:1.0
[DEBUG]   Included: com.google.guava:guava:jar:10.0.1
[DEBUG]   Included: com.google.code.findbugs:jsr305:jar:1.3.9
[DEBUG]   Included: org.sonatype.sisu:sisu-guice:jar:no_aop:3.1.0
[DEBUG]   Included: aopalliance:aopalliance:jar:1.0
[DEBUG]   Included: org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.0.0.M5
[DEBUG]   Included: org.apache.maven.wagon:wagon-file:jar:3.4.3
[DEBUG]   Included: org.apache.maven.doxia:doxia-core:jar:1.11.1
[DEBUG]   Included: org.apache.maven.doxia:doxia-logging-api:jar:1.11.1
[DEBUG]   Included: org.apache.xbean:xbean-reflect:jar:3.7
[DEBUG]   Included: com.google.collections:google-collections:jar:1.0
[DEBUG]   Included: org.codehaus.plexus:plexus-component-annotations:jar:2.1.0
[DEBUG]   Included: org.apache.commons:commons-text:jar:1.3
[DEBUG]   Included: org.apache.httpcomponents:httpclient:jar:4.5.13
[DEBUG]   Included: commons-logging:commons-logging:jar:1.2
[DEBUG]   Included: commons-codec:commons-codec:jar:1.11
[DEBUG]   Included: org.apache.httpcomponents:httpcore:jar:4.4.14
[DEBUG]   Included: org.apache.maven.doxia:doxia-sink-api:jar:1.11.1
[DEBUG]   Included: org.apache.maven.doxia:doxia-site-renderer:jar:1.11.1
[DEBUG]   Included: org.apache.maven.doxia:doxia-skin-model:jar:1.11.1
[DEBUG]   Included: org.apache.maven.doxia:doxia-module-xhtml:jar:1.11.1
[DEBUG]   Included: org.apache.maven.doxia:doxia-module-xhtml5:jar:1.11.1
[DEBUG]   Included: org.codehaus.plexus:plexus-i18n:jar:1.0-beta-10
[DEBUG]   Included: org.codehaus.plexus:plexus-velocity:jar:1.2
[DEBUG]   Included: org.apache.velocity:velocity:jar:1.7
[DEBUG]   Included: commons-lang:commons-lang:jar:2.4
[DEBUG]   Included: org.apache.velocity:velocity-tools:jar:2.0
[DEBUG]   Included: commons-beanutils:commons-beanutils:jar:1.7.0
[DEBUG]   Included: commons-digester:commons-digester:jar:1.8
[DEBUG]   Included: commons-chain:commons-chain:jar:1.1
[DEBUG]   Included: dom4j:dom4j:jar:1.1
[DEBUG]   Included: oro:oro:jar:2.0.8
[DEBUG]   Included: commons-collections:commons-collections:jar:3.2.2
[DEBUG]   Included: org.codehaus.plexus:plexus-utils:jar:3.4.1
[DEBUG]   Included: org.codehaus.plexus:plexus-interactivity-api:jar:1.1
[DEBUG]   Included: com.fasterxml.woodstox:woodstox-core:jar:6.2.8
[DEBUG]   Included: org.codehaus.woodstox:stax2-api:jar:4.2.1
[DEBUG]   Included: org.apache.commons:commons-lang3:jar:3.12.0
[DEBUG] Configuring mojo org.codehaus.mojo:versions-maven-plugin:2.9.0:display-plugin-updates from plugin realm ClassRealm[plugin>org.codehaus.mojo:versions-maven-plugin:2.9.0, parent: jdk.internal.loader.ClassLoaders$AppClassLoader@277050dc]
[DEBUG] Configuring mojo 'org.codehaus.mojo:versions-maven-plugin:2.9.0:display-plugin-updates' with basic configurator -->
[DEBUG]   (f) allowSnapshots = false
[DEBUG]   (f) generateBackupPoms = true
[DEBUG]   (f) localRepository =       id: local
      url: file:///Users/konradwindszus/.m2/repository/
   layout: default
snapshots: [enabled => true, update => always]
 releases: [enabled => true, update => always]
   blocked: false

[DEBUG]   (f) logOutput = true
[DEBUG]   (s) project = MavenProject: com.adobe.cq:core.wcm.components.core:2.17.15-SNAPSHOT @ /Users/konradwindszus/git/aem-core-wcm-components/bundles/core/pom.xml
[DEBUG]   (f) reactorProjects = [MavenProject: com.adobe.cq:core.wcm.components.core:2.17.15-SNAPSHOT @ /Users/konradwindszus/git/aem-core-wcm-components/bundles/core/pom.xml]
[DEBUG]   (f) remoteArtifactRepositories = [      id: nexus
      url: https://repo.int.netcentric.biz/nexus/content/groups/public/
   layout: default
snapshots: [enabled => true, update => daily]
 releases: [enabled => true, update => daily]
   blocked: false
]
[DEBUG]   (f) remotePluginRepositories = [      id: nexus
      url: https://repo.int.netcentric.biz/nexus/content/groups/public/
   layout: default
snapshots: [enabled => true, update => daily]
 releases: [enabled => true, update => daily]
   blocked: false
]
[DEBUG]   (f) serverId = serverId
[DEBUG]   (f) session = org.apache.maven.execution.MavenSession@5a2ae1ab
[DEBUG]   (f) settings = org.apache.maven.execution.SettingsAdapter@2bec068b
[DEBUG] -- end configuration --
[DEBUG] Using Maven 3.x strategy to determine superpom defined plugins
[DEBUG] Looking up lifecycle mappings for packaging bundle from ClassRealm[plugin>org.codehaus.mojo:versions-maven-plugin:2.9.0, parent: jdk.internal.loader.ClassLoaders$AppClassLoader@277050dc]
[DEBUG] superPom plugins = {org.apache.maven.plugins:maven-clean-plugin=2.5, org.apache.maven.plugins:maven-resources-plugin=null, org.apache.felix:maven-bundle-plugin=null, org.apache.maven.plugins:maven-compiler-plugin=null, org.apache.maven.plugins:maven-surefire-plugin=null, org.apache.maven.plugins:maven-install-plugin=null, org.apache.maven.plugins:maven-deploy-plugin=null, org.apache.maven.plugins:maven-site-plugin=3.3, org.apache.maven.plugins:maven-antrun-plugin=1.3, org.apache.maven.plugins:maven-assembly-plugin=2.2-beta-5, org.apache.maven.plugins:maven-dependency-plugin=2.8, org.apache.maven.plugins:maven-release-plugin=2.5.3, org.apache.maven.plugins:maven-source-plugin=null, org.apache.maven.plugins:maven-javadoc-plugin=null}
[DEBUG] Processing parent: com.adobe.cq:core.wcm.components.parent:2.17.15-SNAPSHOT -> /Users/konradwindszus/git/aem-core-wcm-components/parent/pom.xml
[DEBUG] Building list of project plugins...
[DEBUG] Original model:
<?xml version="1.0" encoding="UTF-8"?>
<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd" xmlns="http://maven.apache.org/POM/4.0.0"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <modelVersion>4.0.0</modelVersion>
  <parent>
    <groupId>com.adobe.cq</groupId>
    <artifactId>core.wcm.components.parent</artifactId>
    <version>2.17.15-SNAPSHOT</version>
    <relativePath>../../parent/pom.xml</relativePath>
  </parent>
  <artifactId>core.wcm.components.core</artifactId>
  <version>2.17.15-SNAPSHOT</version>
  <packaging>bundle</packaging>
  <name>Adobe Experience Manager Core WCM Components Core Bundle</name>
  <properties>
    <jacoco.data.file>${project.build.directory}/jacoco.exec</jacoco.data.file>
  </properties>
  <dependencies>
    <dependency>
      <groupId>javax.servlet</groupId>
      <artifactId>javax.servlet-api</artifactId>
    </dependency>
    <dependency>
      <groupId>javax.servlet.jsp</groupId>
      <artifactId>jsp-api</artifactId>
    </dependency>
    <dependency>
      <groupId>javax.jcr</groupId>
      <artifactId>jcr</artifactId>
    </dependency>
    <dependency>
      <groupId>org.osgi</groupId>
      <artifactId>osgi.core</artifactId>
    </dependency>
    <dependency>
      <groupId>org.osgi</groupId>
      <artifactId>osgi.cmpn</artifactId>
    </dependency>
    <dependency>
      <groupId>org.osgi</groupId>
      <artifactId>osgi.annotation</artifactId>
    </dependency>
    <dependency>
      <groupId>org.jetbrains</groupId>
      <artifactId>annotations</artifactId>
    </dependency>
    <dependency>
      <groupId>org.apache.geronimo.specs</groupId>
      <artifactId>geronimo-atinject_1.0_spec</artifactId>
    </dependency>
    <dependency>
      <groupId>org.apache.commons</groupId>
      <artifactId>commons-lang3</artifactId>
    </dependency>
    <dependency>
      <groupId>commons-codec</groupId>
      <artifactId>commons-codec</artifactId>
    </dependency>
    <dependency>
      <groupId>commons-io</groupId>
      <artifactId>commons-io</artifactId>
    </dependency>
    <dependency>
      <groupId>commons-collections</groupId>
      <artifactId>commons-collections</artifactId>
    </dependency>
    <dependency>
      <groupId>org.slf4j</groupId>
      <artifactId>slf4j-api</artifactId>
    </dependency>
    <dependency>
      <groupId>org.slf4j</groupId>
      <artifactId>slf4j-nop</artifactId>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>org.apache.jackrabbit</groupId>
      <artifactId>jackrabbit-jcr-commons</artifactId>
    </dependency>
    <dependency>
      <groupId>org.apache.sling</groupId>
      <artifactId>org.apache.sling.commons.osgi</artifactId>
    </dependency>
    <dependency>
      <groupId>org.apache.sling</groupId>
      <artifactId>org.apache.sling.commons.johnzon</artifactId>
    </dependency>
    <dependency>
      <groupId>com.fasterxml.jackson.core</groupId>
      <artifactId>jackson-annotations</artifactId>
    </dependency>
    <dependency>
      <groupId>com.fasterxml.jackson.core</groupId>
      <artifactId>jackson-databind</artifactId>
    </dependency>
    <dependency>
      <groupId>com.fasterxml.jackson.core</groupId>
      <artifactId>jackson-core</artifactId>
    </dependency>
    <dependency>
      <groupId>javax.xml.bind</groupId>
      <artifactId>jaxb-api</artifactId>
    </dependency>
    <dependency>
      <groupId>javax.annotation</groupId>
      <artifactId>javax.annotation-api</artifactId>
    </dependency>
    <dependency>
      <groupId>com.adobe.cq.dam</groupId>
      <artifactId>cq-dam-cfm-api</artifactId>
    </dependency>
    <dependency>
      <groupId>org.apache.httpcomponents</groupId>
      <artifactId>httpclient-osgi</artifactId>
    </dependency>
    <dependency>
      <groupId>com.adobe.cq.wcm</groupId>
      <artifactId>com.adobe.aem.wcm.seo</artifactId>
      <scope>provided</scope>
    </dependency>
    <dependency>
      <groupId>${project.groupId}</groupId>
      <artifactId>core.wcm.components.junit.core</artifactId>
      <version>${project.version}</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>org.apache.sling</groupId>
      <artifactId>org.apache.sling.api</artifactId>
      <version>2.22.0</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>org.apache.sling</groupId>
      <artifactId>org.apache.sling.models.impl</artifactId>
      <version>1.4.10</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>org.apache.sling</groupId>
      <artifactId>org.apache.sling.testing.caconfig-mock-plugin</artifactId>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>io.wcm</groupId>
      <artifactId>io.wcm.testing.aem-mock.junit5</artifactId>
    </dependency>
    <dependency>
      <groupId>org.apache.sling</groupId>
      <artifactId>org.apache.sling.servlet-helpers</artifactId>
    </dependency>
    <dependency>
      <groupId>org.apache.sling</groupId>
      <artifactId>org.apache.sling.i18n</artifactId>
    </dependency>
    <dependency>
      <groupId>org.apache.commons</groupId>
      <artifactId>commons-imaging</artifactId>
      <version>1.0-R1534292</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>org.apache.commons</groupId>
      <artifactId>commons-collections4</artifactId>
      <version>4.1</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>com.google.guava</groupId>
      <artifactId>guava</artifactId>
      <version>20.0</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>org.junit.jupiter</groupId>
      <artifactId>junit-jupiter-api</artifactId>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>org.junit.jupiter</groupId>
      <artifactId>junit-jupiter-params</artifactId>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>org.junit.jupiter</groupId>
      <artifactId>junit-jupiter-engine</artifactId>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>org.mockito</groupId>
      <artifactId>mockito-core</artifactId>
    </dependency>
    <dependency>
      <groupId>org.mockito</groupId>
      <artifactId>mockito-junit-jupiter</artifactId>
    </dependency>
    <dependency>
      <groupId>org.hamcrest</groupId>
      <artifactId>hamcrest-all</artifactId>
    </dependency>
    <dependency>
      <groupId>org.javassist</groupId>
      <artifactId>javassist</artifactId>
    </dependency>
    <dependency>
      <groupId>org.junit.platform</groupId>
      <artifactId>junit-platform-commons</artifactId>
      <version>1.5.2</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>com.github.tomakehurst</groupId>
      <artifactId>wiremock-standalone</artifactId>
      <version>2.27.2</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>com.sun.xml.bind</groupId>
      <artifactId>jaxb-core</artifactId>
      <version>2.2.11</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>com.sun.xml.bind</groupId>
      <artifactId>jaxb-impl</artifactId>
      <version>2.2.11</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>com.day.commons</groupId>
      <artifactId>day-commons-gfx</artifactId>
      <version>2.1.50</version>
      <scope>test</scope>
      <optional>true</optional>
    </dependency>
    <dependency>
      <groupId>org.apache.sling</groupId>
      <artifactId>org.apache.sling.testing.hamcrest</artifactId>
      <version>1.0.2</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>com.adobe.aem</groupId>
      <artifactId>uber-jar</artifactId>
    </dependency>
  </dependencies>
  <build>
    <plugins>
      <plugin>
        <groupId>org.apache.felix</groupId>
        <artifactId>maven-bundle-plugin</artifactId>
        <extensions>true</extensions>
        <executions>
          <execution>
            <id>scr-metadata</id>
            <goals>
              <goal>manifest</goal>
            </goals>
            <configuration>
              <supportIncrementalBuild>true</supportIncrementalBuild>
            </configuration>
          </execution>
        </executions>
        <dependencies>
          <dependency>
            <groupId>org.apache.sling</groupId>
            <artifactId>org.apache.sling.bnd.models</artifactId>
            <version>1.0.0</version>
          </dependency>
          <dependency>
            <groupId>org.apache.sling</groupId>
            <artifactId>org.apache.sling.caconfig.bnd-plugin</artifactId>
            <version>1.0.2</version>
          </dependency>
        </dependencies>
        <configuration>
          <exportScr>true</exportScr>
          <instructions>
            <_plugin>org.apache.sling.bnd.models.ModelsScannerPlugin,

                            org.apache.sling.caconfig.bndplugin.ConfigurationClassScannerPlugin</_plugin>
            <_dsannotations>*</_dsannotations>
            <_metatypeannotations>*</_metatypeannotations>
            <Import-Package>com.adobe.cq.commerce.*;resolution:=optional,
                            com.adobe.aem.wcm.seo.*;resolution:=optional,
                            javax.annotation;version=0.0.0,
                            com.day.cq.dam.api;version="[1.24,2.0)",
                            *</Import-Package>
          </instructions>
        </configuration>
      </plugin>
      <plugin>
        <groupId>com.github.spotbugs</groupId>
        <artifactId>spotbugs-maven-plugin</artifactId>
      </plugin>
    </plugins>
  </build>
  <profiles>
    <profile>
      <id>runCodeCoverageCheck</id>
      <activation>
        <activeByDefault>true</activeByDefault>
      </activation>
      <build>
        <plugins>
          <plugin>
            <groupId>org.jacoco</groupId>
            <artifactId>jacoco-maven-plugin</artifactId>
            <version>0.8.3</version>
            <executions>
              <execution>
                <id>default-instrument</id>
                <goals>
                  <goal>instrument</goal>
                </goals>
              </execution>
              <execution>
                <id>default-restore-instrumented-classes</id>
                <goals>
                  <goal>restore-instrumented-classes</goal>
                </goals>
              </execution>
              <execution>
                <id>check-coverage</id>
                <goals>
                  <goal>check</goal>
                </goals>
                <configuration>
                  <haltOnFailure>true</haltOnFailure>
                  <dataFile>/Users/konradwindszus/git/aem-core-wcm-components/bundles/core/target/jacoco.exec</dataFile>
                  <rules>
                    <rule>
                      <element>BUNDLE</element>
                      <limits>
                        <limit>
                          <counter>INSTRUCTION</counter>
                          <value>COVEREDRATIO</value>
                          <minimum>0.80</minimum>
                        </limit>
                      </limits>
                    </rule>
                    <rule>
                      <element>CLASS</element>
                      <limits>
                        <limit>
                          <counter>INSTRUCTION</counter>
                          <value>COVEREDRATIO</value>
                          <minimum>0.80</minimum>
                        </limit>
                      </limits>
                    </rule>
                  </rules>
                  <excludes>
                    <exclude>com/adobe/cq/wcm/core/components/internal/models/v1/SocialMediaHelperImpl$WebsiteMetadata$Type.class</exclude>
                    <exclude>com/adobe/cq/wcm/core/components/internal/servlets/AdaptiveImageServlet$Source.class</exclude>
                  </excludes>
                </configuration>
              </execution>
              <execution>
                <id>report</id>
                <phase>prepare-package</phase>
                <goals>
                  <goal>report</goal>
                </goals>
                <configuration>
                  <dataFile>/Users/konradwindszus/git/aem-core-wcm-components/bundles/core/target/jacoco.exec</dataFile>
                </configuration>
              </execution>
            </executions>
          </plugin>
          <plugin>
            <artifactId>maven-surefire-plugin</artifactId>
            <version>2.22.2</version>
            <executions>
              <execution>
                <id>default-test</id>
                <phase>test</phase>
                <goals>
                  <goal>test</goal>
                </goals>
                <configuration>
                  <systemPropertyVariables>
                    <jacoco-agent.destfile>/Users/konradwindszus/git/aem-core-wcm-components/bundles/core/target/jacoco.exec</jacoco-agent.destfile>
                  </systemPropertyVariables>
                  <argLine>-Xmx1024m</argLine>
                  <useSystemClassLoader>false</useSystemClassLoader>
                </configuration>
              </execution>
            </executions>
            <configuration>
              <systemPropertyVariables>
                <jacoco-agent.destfile>/Users/konradwindszus/git/aem-core-wcm-components/bundles/core/target/jacoco.exec</jacoco-agent.destfile>
              </systemPropertyVariables>
              <argLine>-Xmx1024m</argLine>
              <useSystemClassLoader>false</useSystemClassLoader>
            </configuration>
          </plugin>
        </plugins>
      </build>
      <dependencies>
        <dependency>
          <groupId>org.jacoco</groupId>
          <artifactId>org.jacoco.agent</artifactId>
          <version>0.8.3</version>
          <classifier>runtime</classifier>
          <scope>test</scope>
        </dependency>
      </dependencies>
    </profile>
    <profile>
      <id>ignoreCodeCoverageCheck</id>
      <activation>
        <property>
          <name>env.USE_SPROUT_BUILD_PROFILE</name>
          <value>true</value>
        </property>
      </activation>
      <build>
        <plugins>
          <plugin>
            <groupId>org.jacoco</groupId>
            <artifactId>jacoco-maven-plugin</artifactId>
          </plugin>
          <plugin>
            <artifactId>maven-surefire-plugin</artifactId>
          </plugin>
        </plugins>
      </build>
    </profile>
    <profile>
      <id>autoInstallPackage</id>
      <activation />
      <build>
        <plugins>
          <plugin>
            <groupId>org.apache.sling</groupId>
            <artifactId>maven-sling-plugin</artifactId>
            <executions>
              <execution>
                <id>install-bundle</id>
                <goals>
                  <goal>install</goal>
                </goals>
              </execution>
            </executions>
            <configuration>
              <slingUrl>http://${aem.host}:${aem.port}${aem.contextPath}/system/console</slingUrl>
              <failOnError>true</failOnError>
            </configuration>
          </plugin>
        </plugins>
      </build>
    </profile>
    <profile>
      <id>autoInstallPackagePublish</id>
      <activation />
      <build>
        <plugins>
          <plugin>
            <groupId>org.apache.sling</groupId>
            <artifactId>maven-sling-plugin</artifactId>
            <executions>
              <execution>
                <id>install-bundle</id>
                <goals>
                  <goal>install</goal>
                </goals>
              </execution>
            </executions>
            <configuration>
              <slingUrl>http://${aem.publish.host}:${aem.publish.port}/system/console</slingUrl>
              <failOnError>true</failOnError>
            </configuration>
          </plugin>
        </plugins>
      </build>
    </profile>
    <profile>
      <id>release</id>
      <activation />
      <build>
        <plugins>
          <plugin>
            <artifactId>maven-javadoc-plugin</artifactId>
            <executions>
              <execution>
                <id>attach-javadocs</id>
                <goals>
                  <goal>jar</goal>
                </goals>
              </execution>
            </executions>
          </plugin>
          <plugin>
            <artifactId>maven-source-plugin</artifactId>
            <executions>
              <execution>
                <id>attach-sources</id>
                <goals>
                  <goal>jar-no-fork</goal>
                </goals>
              </execution>
            </executions>
          </plugin>
        </plugins>
      </build>
    </profile>
  </profiles>
</project>

[DEBUG] super-pom version map
    org.apache.maven.plugins:maven-clean-plugin:2.5
    org.apache.maven.plugins:maven-resources-plugin:null
    org.apache.felix:maven-bundle-plugin:null
    org.apache.maven.plugins:maven-compiler-plugin:null
    org.apache.maven.plugins:maven-surefire-plugin:null
    org.apache.maven.plugins:maven-install-plugin:null
    org.apache.maven.plugins:maven-deploy-plugin:null
    org.apache.maven.plugins:maven-site-plugin:3.3
    org.apache.maven.plugins:maven-antrun-plugin:1.3
    org.apache.maven.plugins:maven-assembly-plugin:2.2-beta-5
    org.apache.maven.plugins:maven-dependency-plugin:2.8
    org.apache.maven.plugins:maven-release-plugin:2.5.3
    org.apache.maven.plugins:maven-source-plugin:null
    org.apache.maven.plugins:maven-javadoc-plugin:null
[DEBUG] parent version map
    com.github.eirslett:frontend-maven-plugin:1.11.3
    org.apache.rat:apache-rat-plugin:0.12
    org.apache.maven.plugins:maven-release-plugin:2.5.1
    com.day.jcr.vault:content-package-maven-plugin:1.0.4
    org.codehaus.mojo:build-helper-maven-plugin:1.9.1
    org.apache.maven.plugins:maven-source-plugin:3.0.1
    org.apache.maven.plugins:maven-javadoc-plugin:3.2.0
    org.apache.maven.plugins:maven-resources-plugin:2.7
    org.apache.sling:htl-maven-plugin:1.3.4-1.4.0
    com.github.spotbugs:spotbugs-maven-plugin:4.0.4
    org.apache.maven.plugins:maven-compiler-plugin:3.8.0
    org.apache.maven.plugins:maven-surefire-plugin:2.22.2
    org.apache.maven.plugins:maven-clean-plugin:3.1.0
    org.apache.maven.plugins:maven-failsafe-plugin:2.18.1
    org.apache.jackrabbit:filevault-package-maven-plugin:1.1.6
    org.apache.maven.plugins:maven-install-plugin:2.5.2
    org.apache.felix:maven-bundle-plugin:4.2.1
    org.apache.sling:maven-sling-plugin:2.1.0
    org.apache.maven.plugins:maven-deploy-plugin:2.8.2
    org.apache.maven.plugins:maven-scm-plugin:1.11.2
    org.jacoco:jacoco-maven-plugin:0.8.3
    org.apache.maven.plugins:maven-enforcer-plugin:3.0.0-M3
[DEBUG] aggregate version map
    com.github.eirslett:frontend-maven-plugin:1.11.3
    org.apache.rat:apache-rat-plugin:0.12
    org.apache.maven.plugins:maven-release-plugin:2.5.1
    com.day.jcr.vault:content-package-maven-plugin:1.0.4
    org.codehaus.mojo:build-helper-maven-plugin:1.9.1
    org.apache.maven.plugins:maven-site-plugin:3.3
    org.apache.maven.plugins:maven-source-plugin:3.0.1
    com.github.spotbugs:spotbugs-maven-plugin:4.0.4
    org.apache.maven.plugins:maven-antrun-plugin:1.3
    org.apache.maven.plugins:maven-compiler-plugin:3.8.0
    org.apache.maven.plugins:maven-surefire-plugin:2.22.2
    org.apache.maven.plugins:maven-failsafe-plugin:2.18.1
    org.apache.maven.plugins:maven-install-plugin:2.5.2
    org.apache.felix:maven-bundle-plugin:4.2.1
    org.apache.sling:maven-sling-plugin:2.1.0
    org.apache.maven.plugins:maven-deploy-plugin:2.8.2
    org.apache.maven.plugins:maven-scm-plugin:1.11.2
    org.apache.maven.plugins:maven-enforcer-plugin:3.0.0-M3
    org.apache.maven.plugins:maven-javadoc-plugin:3.2.0
    org.apache.maven.plugins:maven-resources-plugin:2.7
    org.apache.maven.plugins:maven-assembly-plugin:2.2-beta-5
    org.apache.sling:htl-maven-plugin:1.3.4-1.4.0
    org.apache.maven.plugins:maven-clean-plugin:3.1.0
    org.apache.jackrabbit:filevault-package-maven-plugin:1.1.6
    org.apache.maven.plugins:maven-dependency-plugin:2.8
    org.jacoco:jacoco-maven-plugin:0.8.3
[DEBUG] final aggregate version map
    com.github.eirslett:frontend-maven-plugin:1.11.3
    org.apache.rat:apache-rat-plugin:0.12
    org.apache.maven.plugins:maven-release-plugin:2.5.1
    com.day.jcr.vault:content-package-maven-plugin:1.0.4
    org.codehaus.mojo:build-helper-maven-plugin:1.9.1
    org.apache.maven.plugins:maven-site-plugin:3.3
    org.apache.maven.plugins:maven-source-plugin:3.0.1
    com.github.spotbugs:spotbugs-maven-plugin:4.0.4
    org.apache.maven.plugins:maven-antrun-plugin:1.3
    org.apache.maven.plugins:maven-compiler-plugin:3.8.0
    org.apache.maven.plugins:maven-surefire-plugin:2.22.2
    org.apache.maven.plugins:maven-failsafe-plugin:2.18.1
    org.apache.maven.plugins:maven-install-plugin:2.5.2
    org.apache.felix:maven-bundle-plugin:4.2.1
    org.apache.sling:maven-sling-plugin:2.1.0
    org.apache.maven.plugins:maven-deploy-plugin:2.8.2
    org.apache.maven.plugins:maven-scm-plugin:1.11.2
    org.apache.maven.plugins:maven-enforcer-plugin:3.0.0-M3
    org.apache.maven.plugins:maven-javadoc-plugin:3.2.0
    org.apache.maven.plugins:maven-resources-plugin:2.7
    org.apache.maven.plugins:maven-assembly-plugin:2.2-beta-5
    org.apache.sling:htl-maven-plugin:1.3.4-1.4.0
    org.apache.maven.plugins:maven-clean-plugin:3.1.0
    org.apache.jackrabbit:filevault-package-maven-plugin:1.1.6
    org.apache.maven.plugins:maven-dependency-plugin:2.8
    org.jacoco:jacoco-maven-plugin:0.8.3

And then hangs.

[kwin]

It seems to hang in line https://github.com/mojohaus/versions-maven-plugin/blob/8bb0dc2ef17cfafdbc9dcbc93e2561fedfc996b2/src/main/java/org/codehaus/mojo/versions/DisplayPluginUpdatesMojo.java#L1484 while calling ModelInterpolator.interpolate(...). The stack trace looks like this:

Thread [main] (Suspended)	
	StringSearchModelInterpolator$InterpolateObjectAction.traverseObjectWithParents(Class<?>, Object) line: 313	
	StringSearchModelInterpolator$InterpolateObjectAction.run() line: 140	
	StringSearchModelInterpolator$InterpolateObjectAction.run() line: 107	
	AccessController.doPrivileged(PrivilegedAction<T>) line: not available [native method]	
	StringSearchModelInterpolator.interpolateObject(Object, Model, File, ProjectBuilderConfiguration, boolean) line: 86	
	StringSearchModelInterpolator.interpolate(Model, File, ProjectBuilderConfiguration, boolean) line: 68	
	DisplayPluginUpdatesMojo.getProjectPlugins(Map<String,String>, Map<String,String>, Map<String,String>, Map<String,String>, Set<String>) line: 1484	
	DisplayPluginUpdatesMojo.execute() line: 380	
	DefaultBuildPluginManager.executeMojo(MavenSession, MojoExecution) line: 137	
	MojoExecutor.execute(MavenSession, MojoExecution, ProjectIndex, DependencyContext) line: 210	
	MojoExecutor.execute(MavenSession, MojoExecution, ProjectIndex, DependencyContext, PhaseRecorder) line: 156	
	MojoExecutor.execute(MavenSession, List<MojoExecution>, ProjectIndex) line: 148	
	LifecycleModuleBuilder.buildProject(MavenSession, MavenSession, ReactorContext, MavenProject, TaskSegment) line: 117	
	LifecycleModuleBuilder.buildProject(MavenSession, ReactorContext, MavenProject, TaskSegment) line: 81	
	SingleThreadedBuilder.build(MavenSession, ReactorContext, ProjectBuildList, List<TaskSegment>, ReactorBuildStatus) line: 56	
	LifecycleStarter.execute(MavenSession) line: 128	
	DefaultMaven.doExecute(MavenExecutionRequest, MavenSession, MavenExecutionResult, DefaultRepositorySystemSession) line: 305	
	DefaultMaven.doExecute(MavenExecutionRequest) line: 192	
	DefaultMaven.execute(MavenExecutionRequest) line: 105	
	MavenCli.execute(CliRequest) line: 972	
	MavenCli.doMain(CliRequest) line: 293	
	MavenCli.main(String[], ClassWorld) line: 196	
	NativeMethodAccessorImpl.invoke0(Method, Object, Object[]) line: not available [native method]	
	NativeMethodAccessorImpl.invoke(Object, Object[]) line: 62	
	DelegatingMethodAccessorImpl.invoke(Object, Object[]) line: 43	
	Method.invoke(Object, Object...) line: 566	
	Launcher.launchEnhanced(String[]) line: 282	
	Launcher.launch(String[]) line: 225	
	Launcher.mainWithExitCode(String[]) line: 406	
	Launcher.main(String[]) line: 347	

[stefanseifert]

i can reproduce the problem with this project - strange.
tested a couple of other projects, worked there without problems.

[stefanseifert]

the current code is using a deprecated ModelInterpolator from maven-compat.

in #549 i tried to switch to a newer, non-deprecated version with a slightly different signature. i'm not 100% sure if it does the same thing, but it solves the hanging problems, and the ITs seem to run fine as well.

@kwin can you cross-check?

[kwin]

@stefanseifert I tested with some projects and it looks good to me. I am not familiar with the Maven API you use either, so I can just guess from the results that it is doing the right thing.