fix: add -U flag to force Maven SNAPSHOT updates

Without -U, Maven uses cached SNAPSHOTs from the CircleCI cache without checking for newer versions. This caused builds to use stale SNAPSHOT dependencies even after new SNAPSHOTs were published.
fix: correct step order — docker login must precede supplemental push
2026-03-27 15:50:40 -05:00 · 2026-03-27 10:32:34 -05:00
2 changed files with 2 additions and 1 deletions
@@ -61,6 +61,7 @@ steps:
  - run_trivy_image:
      image_tag: << parameters.registry >>/<< parameters.image_name >>:${DOCKER_TAG}
  - save_trivy_cache
+  - docker_push_ghcr
  - build_push_supplemental:
      supplemental_images: << parameters.supplemental_images >>
      image_name: << parameters.image_name >>
@@ -71,4 +72,3 @@ steps:
      health_db: << parameters.health_db >>
      health_migrations: << parameters.health_migrations >>
      health_smoke_paths: << parameters.health_smoke_paths >>
-  - docker_push_ghcr
@@ -18,6 +18,7 @@ munitor_check_tool java -version
 echo "Running Maven build..."

 mvn clean install \
+  -U \
  -DskipTests \
  --batch-mode \
  --fail-at-end \