[build] Upgrade Maven to Latest Supported Version

[rionmonster]

Search before asking

• I searched in the issues and found nothing similar.

Description

While working on another unrelated issue, I encountered the following error when attempting to build Fluss using the existing ./mvnw clean package -DskipTests command:

./mvnw clean package -DskipTests
Error: Failed to validate Maven distribution SHA-256, your Maven distribution might be compromised.
If you updated your Maven version, you need to update the specified distributionSha256Sum property.

After digging into it a bit deeper, it seems that the existing version referenced within the maven-wrapper.properties file has reached EOF as detailed in the Maven releases documentation:

Maven 3.8.9 and before has now reached its end of life and is no longer supported in any way. New plugin releases will require Maven 3.9.0 or later. The following information is made available for reference.

We may want to consider upgrading to the latest 3.9.x release to ensure that a supported version of Maven is being used for the project.

Willingness to contribute

• I'm willing to submit a PR!

[leekeiabstraction]

Hmm, we know that the validation error stemmed from invalid command provided to shasum on MacOS. Fixing that might be a more straightforward path.

Maven version 3.8.6 is actually also enforced by Flink. Would this change introduce challenges in existing build systems that build both Flink and Fluss?

[rionmonster]

@leekeiabstraction

Hmm, we know that the validation error stemmed from invalid command provided to shasum on MacOS. Fixing that might be a more straightforward path.

Maven version 3.8.6 is actually also enforced by Flink. Would this change introduce challenges in existing build systems that build both Flink and Fluss?

I agree that the shashum fix proposed in #1966 is absolutely a step in the right direction to at least ensure we have the appropriate integrity checks in place. It's probably worth keeping the Fluss version in line with Flink as well. Just thought it was worth mentioning that 3.8.6 is no longer supported. A quick search of the Apache JIRA doesn't seem to have any plans that immediately jump out for upgrading Maven proper (from 3.8.6), so I suppose we can close this ticket as well.