Add full support for SNAPSHOT packages in Maven

[jeffwidman]

Is there an existing issue for this?

• I have searched the existing issues

Feature description

While debugging a support escalation an engineer noticed that we don't properly update SNAPSHOT dependencies in Maven repos.

The root cause of this is that the dependency is specified with just a version, but to actually retrieve the dependency from the registry we must parse the maven-metadata.xml for the registry and find the "latest" timestamp for the given snapshot version.

We must also build a URL using this timestamp in the filename so that we can successfully download the artifact.

Tasks:

• Add maven-metadata.xml parsing logic to retrieve full version specification for SNAPSHOT dependencies
• Alter URL construction logic to include the full version spec

[jeffwidman]

Related (but not a dupe):

• Dependabot use snapshots repositories for checking released versions #5947

[github-actions]

👋 This issue has been marked as stale because it has been open for 2 years with no activity. You can comment on the issue to hold stalebot off for a while, or do nothing. If you do nothing, this issue will be closed eventually by the stalebot. Please see CONTRIBUTING.md for more policy details.