[
https://issues.apache.org/jira/browse/MNG-8491?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17910295#comment-17910295
]
Guillaume Nodet commented on MNG-8491:
--------------------------------------
Well, I'm saying that if the maven-compiler-plugin does not enable annotation
processors by default, we don't suffer from any implicit configuration.
Maybe we *should* also make sure that maven compiler plugin only considers
direct dependencies and not transitive ones ?
I'm quite confident we can find something which is slightly more easy than
having to list the processors explicitly in the m-compiler-p config, while not
suffering from possible malicious processors in transitive dependencies.
> Make DIIndexProcessor opt-in
> ----------------------------
>
> Key: MNG-8491
> URL: https://issues.apache.org/jira/browse/MNG-8491
> Project: Maven
> Issue Type: Improvement
> Components: API
> Affects Versions: 4.0.0-rc-2
> Reporter: Konrad Windszus
> Priority: Blocker
>
> Currently the DIIndexProcessor is automatically registered in
> https://github.com/apache/maven/blob/master/api/maven-api-di/src/main/resources/META-INF/services/javax.annotation.processing.Processor.
> This should be removed as it may lead to surprising effects and is no longer
> recommended by Oracle. Also since Java 22+ implicit annotation processors are
> no longer considered (https://bugs.openjdk.org/browse/JDK-8306819) and need
> to be explicitly configured.
> To streamline the behaviour for consumers among all supported Java versions
> we should get rid of automatic annotation processor registration and document
> how to opt-in.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
