From 0b944a29a73d517a7017864812358406cc038c65 Mon Sep 17 00:00:00 2001
From: Anthony Stirling <anthony@stirlingpdf.com>
Date: Wed, 3 Jun 2026 09:10:08 +0100
Subject: [PATCH] Prefer Maven Central over jboss/shibboleth mirrors for
 resilience

---
 build.gradle | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/build.gradle b/build.gradle
index 3f78bc635..b131f1bd5 100644
--- a/build.gradle
+++ b/build.gradle
@@ -185,9 +185,14 @@ subprojects {
                 allowInsecureProtocol = true
             }
         }
+        // Maven Central first: it hosts the vast majority of artifacts, so Gradle
+        // never has to consult the slower/less-reliable mirrors below for them.
+        // shibboleth + jboss remain as fallbacks for the few artifacts only they
+        // serve (Gradle falls through on a 404). Keeping them ahead of Central
+        // meant a jboss outage (503) aborted resolution of common deps.
+        mavenCentral()
         maven { url = "https://build.shibboleth.net/maven/releases" }
         maven { url = "https://repository.jboss.org/" }
-        mavenCentral()
     }
 
     configurations.configureEach {
@@ -583,8 +588,9 @@ repositories {
             allowInsecureProtocol = true
         }
     }
-    maven { url = "https://build.shibboleth.net/maven/releases" }
+    // Maven Central first (see note in the subprojects repositories block above).
     mavenCentral()
+    maven { url = "https://build.shibboleth.net/maven/releases" }
 }
 
 dependencies {