Herve Boutemy created MARTIFACT-25:
--------------------------------------
Summary: add pom.xml to the output files being verified
Key: MARTIFACT-25
URL: https://issues.apache.org/jira/browse/MARTIFACT-25
Project: Maven Artifact Plugin
Issue Type: Improvement
Components: artifact:buildinfo, artifact:compare
Affects Versions: 3.1.0
Reporter: Herve Boutemy
Fix For: 3.2.0
pom.xml fingerprint is not checked until now: this is a bad idea for multiple
reasons:
- depending on release manager OS, pom.xml deployed to remote repository may be
different from rebuilder output, even if they use the same Git repository and
commit
- in the future, with Maven 4 differentiating build and consumer POMs, output
pom.xml is consumer POM, may be different from pom.xml in Git (with more
differences than just newlines)
- for consistency with buildinfo from other build tools, because the purely
generate their pom.xml then absolutely consider it as an output to be checked
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
