This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-release-plugin.git
The following commit(s) were added to refs/heads/master by this push:
new addb121 fix: add `@since` tags to SLSA models
addb121 is described below
commit addb121a3acb4fe9841b3df36633b4edd7b735ae
Author: Piotr P. Karwasz <[email protected]>
AuthorDate: Tue May 5 17:03:25 2026 +0200
fix: add `@since` tags to SLSA models
---
pom.xml | 2 +-
.../org/apache/commons/release/plugin/slsa/v1_2/BuildDefinition.java | 1 +
.../java/org/apache/commons/release/plugin/slsa/v1_2/BuildMetadata.java | 1 +
src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Builder.java | 1 +
.../java/org/apache/commons/release/plugin/slsa/v1_2/DsseEnvelope.java | 1 +
.../java/org/apache/commons/release/plugin/slsa/v1_2/Provenance.java | 1 +
.../org/apache/commons/release/plugin/slsa/v1_2/ResourceDescriptor.java | 1 +
.../java/org/apache/commons/release/plugin/slsa/v1_2/RunDetails.java | 1 +
.../java/org/apache/commons/release/plugin/slsa/v1_2/Signature.java | 1 +
.../java/org/apache/commons/release/plugin/slsa/v1_2/Statement.java | 1 +
10 files changed, 10 insertions(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 23b1da9..3f6bb75 100644
--- a/pom.xml
+++ b/pom.xml
@@ -26,7 +26,7 @@
</parent>
<artifactId>commons-release-plugin</artifactId>
<packaging>maven-plugin</packaging>
- <version>1.9.3-SNAPSHOT</version>
+ <version>1.10.0-SNAPSHOT</version>
<name>Apache Commons Release Plugin</name>
<description>
Apache Maven Mojo for Apache Commons Release tasks.
diff --git
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/BuildDefinition.java
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/BuildDefinition.java
index 43bcb94..25cf6cf 100644
---
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/BuildDefinition.java
+++
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/BuildDefinition.java
@@ -30,6 +30,7 @@ import com.fasterxml.jackson.annotation.JsonProperty;
* {@link Provenance} record.</p>
*
* @see <a href="https://slsa.dev/spec/v1.2">SLSA v1.2 Specification</a>
+ * @since 1.10.0
*/
public class BuildDefinition {
diff --git
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/BuildMetadata.java
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/BuildMetadata.java
index 595e0f7..b3407f2 100644
---
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/BuildMetadata.java
+++
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/BuildMetadata.java
@@ -27,6 +27,7 @@ import com.fasterxml.jackson.annotation.JsonProperty;
* Metadata about a build invocation: its identifier and start and finish
timestamps.
*
* @see <a href="https://slsa.dev/spec/v1.2">SLSA v1.2 Specification</a>
+ * @since 1.10.0
*/
@JsonInclude(JsonInclude.Include.NON_NULL)
public class BuildMetadata {
diff --git
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Builder.java
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Builder.java
index 508d622..460fcc3 100644
--- a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Builder.java
+++ b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Builder.java
@@ -28,6 +28,7 @@ import com.fasterxml.jackson.annotation.JsonProperty;
* Entity that executed the build and is trusted to have correctly performed
the operation and populated the provenance.
*
* @see <a href="https://slsa.dev/spec/v1.2">SLSA v1.2 Specification</a>
+ * @since 1.10.0
*/
public class Builder {
diff --git
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/DsseEnvelope.java
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/DsseEnvelope.java
index e68e575..14ffc43 100644
---
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/DsseEnvelope.java
+++
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/DsseEnvelope.java
@@ -26,6 +26,7 @@ import com.fasterxml.jackson.annotation.JsonProperty;
* DSSE (Dead Simple Signing Envelope) that wraps a signed in-toto statement
payload.
*
* @see <a
href="https://github.com/secure-systems-lab/dsse/blob/v1.0.2/envelope.md">DSSE
Envelope specification</a>
+ * @since 1.10.0
*/
public class DsseEnvelope {
diff --git
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Provenance.java
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Provenance.java
index 6002dce..5fa6b88 100644
--- a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Provenance.java
+++ b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Provenance.java
@@ -28,6 +28,7 @@ import com.fasterxml.jackson.annotation.JsonProperty;
* used as the {@code predicate} field of an in-toto {@link Statement}.</p>
*
* @see <a href="https://slsa.dev/spec/v1.2">SLSA v1.2 Specification</a>
+ * @since 1.10.0
*/
@JsonInclude(JsonInclude.Include.NON_NULL)
public class Provenance {
diff --git
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/ResourceDescriptor.java
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/ResourceDescriptor.java
index cb3510e..c681b91 100644
---
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/ResourceDescriptor.java
+++
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/ResourceDescriptor.java
@@ -28,6 +28,7 @@ import com.fasterxml.jackson.annotation.JsonProperty;
* <p>Used to represent inputs to, outputs from, or byproducts of the build
process.</p>
*
* @see <a href="https://slsa.dev/spec/v1.2">SLSA v1.2 Specification</a>
+ * @since 1.10.0
*/
@JsonInclude(JsonInclude.Include.NON_NULL)
public class ResourceDescriptor {
diff --git
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/RunDetails.java
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/RunDetails.java
index da14aef..c8e373f 100644
--- a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/RunDetails.java
+++ b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/RunDetails.java
@@ -26,6 +26,7 @@ import com.fasterxml.jackson.annotation.JsonProperty;
* Details about the build invocation: the builder identity, execution
metadata, and any byproduct artifacts.
*
* @see <a href="https://slsa.dev/spec/v1.2">SLSA v1.2 Specification</a>
+ * @since 1.10.0
*/
@JsonInclude(JsonInclude.Include.NON_NULL)
public class RunDetails {
diff --git
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Signature.java
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Signature.java
index 77e7698..99554fd 100644
--- a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Signature.java
+++ b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Signature.java
@@ -26,6 +26,7 @@ import com.fasterxml.jackson.annotation.JsonProperty;
* A single cryptographic signature within a DSSE envelope.
*
* @see <a
href="https://github.com/secure-systems-lab/dsse/blob/v1.0.2/envelope.md">DSSE
Envelope specification</a>
+ * @since 1.10.0
*/
@JsonInclude(JsonInclude.Include.NON_NULL)
public class Signature {
diff --git
a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Statement.java
b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Statement.java
index 1d779c6..581fe03 100644
--- a/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Statement.java
+++ b/src/main/java/org/apache/commons/release/plugin/slsa/v1_2/Statement.java
@@ -25,6 +25,7 @@ import com.fasterxml.jackson.annotation.JsonProperty;
* In-toto v1 attestation envelope that binds a set of subject artifacts to an
SLSA provenance predicate.
*
* @see <a
href="https://github.com/in-toto/attestation/blob/main/spec/v1/statement.md">in-toto
Statement v1</a>
+ * @since 1.10.0
*/
public class Statement {