feat: add content filter for snapshot repo

plugins/edc-build/src/main/java/org/eclipse/edc/plugins/edcbuild/conventions/RepositoriesConvention.java

@@ -9,25 +9,32 @@
  *
  *  Contributors:
  *       Microsoft Corporation - initial API and implementation
+ *       Think-it GmbH - restrict snapshots repository to snapshot artifacts
  *
  */
 
 package org.eclipse.edc.plugins.edcbuild.conventions;
 
 import org.gradle.api.Project;
+import org.gradle.api.artifacts.repositories.MavenRepositoryContentDescriptor;
 
 import java.net.URI;
 
 /**
- * Sets default maven repositories for a project
+ * Sets default maven repositories for a project.
+ * The snapshots repository is restricted to snapshot artifacts only, to avoid looking up every release dependency
+ * on it, which leads to rate limiting (HTTP 429) and to the repository being disabled for the rest of the build.
  */
 class RepositoriesConvention implements EdcConvention {
 
     @Override
     public void apply(Project target) {
         var handler = target.getRepositories();
         handler.mavenLocal();
-        handler.maven(r -> r.setUrl(URI.create(Repositories.SNAPSHOT_REPO_URL)));
         handler.mavenCentral();
+        handler.maven(r -> {
+            r.setUrl(URI.create(Repositories.SNAPSHOT_REPO_URL));
+            r.mavenContent(MavenRepositoryContentDescriptor::snapshotsOnly);
+        });
     }
 }

plugins/edc-build/src/test/java/org/eclipse/edc/plugins/edcbuild/conventions/RepositoriesConventionTest.java

@@ -0,0 +1,45 @@
+/*
+ *  Copyright (c) 2026 Think-it GmbH
+ *
+ *  This program and the accompanying materials are made available under the
+ *  terms of the Apache License, Version 2.0 which is available at
+ *  https://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  SPDX-License-Identifier: Apache-2.0
+ *
+ *  Contributors:
+ *       Think-it GmbH - initial API and implementation
+ *
+ */
+
+package org.eclipse.edc.plugins.edcbuild.conventions;
+
+import org.gradle.api.Project;
+import org.gradle.api.artifacts.repositories.MavenArtifactRepository;
+import org.gradle.testfixtures.ProjectBuilder;
+import org.junit.jupiter.api.Test;
+
+import java.net.URI;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+class RepositoriesConventionTest {
+
+    private final Project project = ProjectBuilder.builder().build();
+    private final RepositoriesConvention convention = new RepositoriesConvention();
+
+    @Test
+    void shouldDeclareMavenCentralBeforeSnapshotsRepository() {
+        convention.apply(project);
+
+        var urls = project.getRepositories().withType(MavenArtifactRepository.class).stream()
+                .map(MavenArtifactRepository::getUrl)
+                .map(URI::toString)
+                .toList();
+
+        assertThat(urls).hasSize(3);
+        assertThat(urls.get(0)).startsWith("file:");
+        assertThat(urls.get(1)).isEqualTo("https://repo.maven.apache.org/maven2/");
+        assertThat(urls.get(2)).isEqualTo(Repositories.SNAPSHOT_REPO_URL);
+    }
+}