This is an automated email from the ASF dual-hosted git repository.
gnodet pushed a commit to branch maven-4.0.x
in repository https://gitbox.apache.org/repos/asf/maven.git
The following commit(s) were added to refs/heads/maven-4.0.x by this push:
new d0f944829c Document deprecation rationale for Artifact version
constants (#11584) (#12290)
d0f944829c is described below
commit d0f944829c3181b738cd350975cd6fbd716c11dd
Author: Guillaume Nodet <[email protected]>
AuthorDate: Wed Jun 17 16:18:49 2026 +0200
Document deprecation rationale for Artifact version constants (#11584)
(#12290)
* Document deprecation rationale for Artifact version constants
* Refine deprecation guidance for Artifact version constants
* docs: use non-alpha since version for Language API deprecation
* docs: mention supply chain risk in RELEASE version deprecation
* docs: clarify security risk of LATEST version in deprecation note
* docs: format @deprecated Javadoc for RELEASE/LATEST constants
* docs: align RELEASE deprecation comment formatting with LATEST
* Remove unrelated Language.java changes
* delete potential
Co-authored-by: Anukalp Pandey
<[email protected]>
---
.../src/main/java/org/apache/maven/artifact/Artifact.java | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git
a/compat/maven-artifact/src/main/java/org/apache/maven/artifact/Artifact.java
b/compat/maven-artifact/src/main/java/org/apache/maven/artifact/Artifact.java
index bbbdc14d82..7d4e62d5b0 100644
---
a/compat/maven-artifact/src/main/java/org/apache/maven/artifact/Artifact.java
+++
b/compat/maven-artifact/src/main/java/org/apache/maven/artifact/Artifact.java
@@ -37,9 +37,19 @@
*/
public interface Artifact extends Comparable<Artifact> {
+ /**
+ * @deprecated The use of the {@code RELEASE} version is discouraged
because it results
+ * in non-reproducible builds and exposes projects to supply chain attacks.
+ * Use explicit versions instead.
+ */
@Deprecated(since = "4.0.0")
String RELEASE_VERSION = "RELEASE";
+ /**
+ * @deprecated The use of the {@code LATEST} version is discouraged
because it results
+ * in non-reproducible builds and exposes projects to supply chain attacks.
+ * Use explicit versions instead.
+ */
@Deprecated(since = "4.0.0")
String LATEST_VERSION = "LATEST";
