WARNING: A restricted method in java.lang.System has been called V2 (regression)

[jandufek]

Affected version

3.9.11

Bug description

This should be fixed in #10391, but actually, it is not. It still shows the same problem with Java 25 and Apache Maven 3.9.11

./mvnw clean install -DskipTests
WARNING: A restricted method in java.lang.System has been called
WARNING: java.lang.System::load has been called by org.fusesource.jansi.internal.JansiLoader in an unnamed module (file:/Users/honza/.m2/wrapper/dists/apache-maven-3.9.11-bin/86516310/apache-maven-3.9.11/lib/jansi-2.4.2.jar)
WARNING: Use --enable-native-access=ALL-UNNAMED to avoid a warning for callers in this module
WARNING: Restricted methods will be blocked in a future release unless native access is enabled

WARNING: A terminally deprecated method in sun.misc.Unsafe has been called
WARNING: sun.misc.Unsafe::staticFieldBase has been called by com.google.inject.internal.aop.HiddenClassDefiner (file:/Users/honza/.m2/wrapper/dists/apache-maven-3.9.11-bin/86516310/apache-maven-3.9.11/lib/guice-5.1.0-classes.jar)
WARNING: Please consider reporting this to the maintainers of class com.google.inject.internal.aop.HiddenClassDefiner
WARNING: sun.misc.Unsafe::staticFieldBase will be removed in a future release

Affects:: 3.9.11

[cstamas]

We have two warnings:

• native related (the refd issue [MNG-8248] WARNING: A restricted method in java.lang.System has been called #10391) fixed in 3.9.10+ with eeddfa2
• guice related fixed but unreleased yet (will be 3.9.12) with 1f97959

Second, it seems maven-wrapper (the standard one) does not have this fix. Which type of wrapper exactly you use? Can you try only-script?

[cstamas]

All in all, I cannot reproduce this with 3.9.11 (only the Guice one can, but as I said, it is not yet released):

[cstamas@angeleyes ~]$ mvn -v
Apache Maven 3.9.11 (3e54c93a704957b63ee3494413a2b544fd3d825b)
Maven home: /home/cstamas/.sdkman/candidates/maven/current
Java version: 25, vendor: Eclipse Adoptium, runtime: /home/cstamas/.sdkman/candidates/java/25-tem
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "6.16.12-200.fc42.x86_64", arch: "amd64", family: "unix"
[cstamas@angeleyes ~]$ mvn foo
WARNING: A terminally deprecated method in sun.misc.Unsafe has been called
WARNING: sun.misc.Unsafe::staticFieldBase has been called by com.google.inject.internal.aop.HiddenClassDefiner (file:/home/cstamas/.sdkman/candidates/maven/current/lib/guice-5.1.0-classes.jar)
WARNING: Please consider reporting this to the maintainers of class com.google.inject.internal.aop.HiddenClassDefiner
WARNING: sun.misc.Unsafe::staticFieldBase will be removed in a future release
[INFO] Scanning for projects...
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  0.039 s
[INFO] Finished at: 2025-10-17T20:04:37+02:00
[INFO] ------------------------------------------------------------------------
[ERROR] The goal you specified requires a project to execute but there is no POM in this directory (/home/cstamas). Please verify you invoked Maven from the correct directory. -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MissingProjectException
[cstamas@angeleyes ~]$ 

[cstamas]

Cannot reproduce with script-only (default) wrapper either (only the Guice):

[cstamas@angeleyes mimir (cache-purge)]$ ./mvnw -V verify -N
Apache Maven 3.9.11 (3e54c93a704957b63ee3494413a2b544fd3d825b)
Maven home: /home/cstamas/.m2/wrapper/dists/apache-maven-3.9.11/a2d47e15
Java version: 25, vendor: Eclipse Adoptium, runtime: /home/cstamas/.sdkman/candidates/java/25-tem
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "6.16.12-200.fc42.x86_64", arch: "amd64", family: "unix"
WARNING: A terminally deprecated method in sun.misc.Unsafe has been called
WARNING: sun.misc.Unsafe::staticFieldBase has been called by com.google.inject.internal.aop.HiddenClassDefiner (file:/home/cstamas/.m2/wrapper/dists/apache-maven-3.9.11/a2d47e15/lib/guice-5.1.0-classes.jar)
WARNING: Please consider reporting this to the maintainers of class com.google.inject.internal.aop.HiddenClassDefiner
WARNING: sun.misc.Unsafe::staticFieldBase will be removed in a future release
[INFO] Scanning for projects...
[INFO] Njord 0.8.4 session created
[INFO] 
[INFO] ------------------< eu.maveniverse.maven.mimir:mimir >------------------
[INFO] Building eu.maveniverse.maven.mimir:mimir 0.10.1-SNAPSHOT
[INFO]   from pom.xml
[INFO] --------------------------------[ pom ]---------------------------------
[INFO] 
[INFO] --- enforcer:3.6.2:enforce (enforce-environment) @ mimir ---
[INFO] Rule 0: org.apache.maven.enforcer.rules.version.RequireMavenVersion passed
[INFO] Rule 1: org.apache.maven.enforcer.rules.version.RequireJavaVersion passed
[INFO] 
[INFO] --- antrun:3.1.0:run (default) @ mimir ---
[INFO] Executing tasks
[INFO] Executed tasks
[INFO] 
[INFO] --- spotless:3.0.0:check (check) @ mimir ---
[INFO] Spotless.Pom is keeping 1 files clean - 0 needs changes to be clean, 0 were already clean, 1 were skipped because caching determined they were already clean
[INFO] 
[INFO] --- sisu:0.9.0.M4:main-index (index-project) @ mimir ---
[INFO] 
[INFO] --- sisu:0.9.0.M4:test-index (index-project) @ mimir ---
[INFO] 
[INFO] --- modernizer:3.2.0:modernizer (modernizer) @ mimir ---
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  0.565 s
[INFO] Finished at: 2025-10-17T20:11:25+02:00
[INFO] ------------------------------------------------------------------------
[INFO] Njord session closed
[cstamas@angeleyes mimir (cache-purge)]$ 

[jandufek]

Thanks @cstamas !
guice problem - acknowledged, thanks
jansi problem - It is undoubtedly a problem with the Maven wrapper. When running Maven directly, I am not able to reproduce it. But unlike your environment, I still have it even though I am running it in the script-only mode.

This is on my Mac:

WARNING: java.lang.System::load has been called by org.fusesource.jansi.internal.JansiLoader in an unnamed module (file:/Users/honza/.m2/wrapper/dists/apache-maven-3.9.11-bin/86516310/apache-maven-3.9.11/lib/jansi-2.4.2.jar)
WARNING: Use --enable-native-access=ALL-UNNAMED to avoid a warning for callers in this module
WARNING: Restricted methods will be blocked in a future release unless native access is enabled

Apache Maven 3.9.11 (3e54c93a704957b63ee3494413a2b544fd3d825b)
Maven home: /Users/honza/.m2/wrapper/dists/apache-maven-3.9.11-bin/86516310/apache-maven-3.9.11
Java version: 25, vendor: Oracle Corporation, runtime: /opt/jdk-25.jdk/Contents/Home
Default locale: cs_CZ, platform encoding: UTF-8
OS name: "mac os x", version: "15.6.1", arch: "aarch64", family: "mac"
WARNING: A terminally deprecated method in sun.misc.Unsafe has been called
WARNING: sun.misc.Unsafe::staticFieldBase has been called by com.google.inject.internal.aop.HiddenClassDefiner (file:/Users/honza/.m2/wrapper/dists/apache-maven-3.9.11-bin/86516310/apache-maven-3.9.11/lib/guice-5.1.0-classes.jar)
WARNING: Please consider reporting this to the maintainers of class com.google.inject.internal.aop.HiddenClassDefiner
WARNING: sun.misc.Unsafe::staticFieldBase will be removed in a future release

This is on the GitLab pipeline,

WARNING: A restricted method in java.lang.System has been called
WARNING: java.lang.System::load has been called by org.fusesource.jansi.internal.JansiLoader in an unnamed module (file:/root/.m2/wrapper/dists/apache-maven-3.9.11-bin/86516310/apache-maven-3.9.11/lib/jansi-2.4.2.jar)
WARNING: Use --enable-native-access=ALL-UNNAMED to avoid a warning for callers in this module
WARNING: Restricted methods will be blocked in a future release unless native access is enabled
Apache Maven 3.9.11 (3e54c93a704957b63ee3494413a2b544fd3d825b)
Maven home: /root/.m2/wrapper/dists/apache-maven-3.9.11-bin/86516310/apache-maven-3.9.11
Java version: 25, vendor: Amazon.com Inc., runtime: /usr/lib/jvm/java-25-amazon-corretto
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "5.15.0-152-generic", arch: "amd64", family: "unix"
WARNING: A terminally deprecated method in sun.misc.Unsafe has been called
WARNING: sun.misc.Unsafe::staticFieldBase has been called by com.google.inject.internal.aop.HiddenClassDefiner (file:/root/.m2/wrapper/dists/apache-maven-3.9.11-bin/86516310/apache-maven-3.9.11/lib/guice-5.1.0-classes.jar)
WARNING: Please consider reporting this to the maintainers of class com.google.inject.internal.aop.HiddenClassDefiner
WARNING: sun.misc.Unsafe::staticFieldBase will be removed in a future release

It might be a problem with the Java vendor, or maybe the wrapper change. Can you @cstamas share with me, please, which version of the wrapper you used?
Anyway, it is not a problem with the Maven itself, so closing the issue.

Thanks @cstamas !

[cstamas]

@jandufek I use wrapper version 3.3.4 + type "only script"