[
https://issues.apache.org/jira/browse/MNG-8527?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Guillaume Nodet updated MNG-8527:
---------------------------------
Fix Version/s: 4.0.0-rc-3
> Re-enable consumer POM
> ----------------------
>
> Key: MNG-8527
> URL: https://issues.apache.org/jira/browse/MNG-8527
> Project: Maven
> Issue Type: Task
> Affects Versions: 4.0.0-rc-2
> Reporter: Guillaume Nodet
> Assignee: Guillaume Nodet
> Priority: Major
> Fix For: 4.0.0-rc-3
>
>
> The consumer POM has been disabled in RC-2 (see MNG-8393) for 4.0.0 models.
> I think it needs to be enabled again.
> But there are a few things to fix:
> * some properties (including CI-friendly) may leak through from consumer to
> dependency POM (see MNG-8523)
> * the consumer pom flattens and inline all properties, which may be a problem
> if the property can be modified by a profile (javafx use case)
> * the flattening process also makes all poms much more heavy as they usually
> convey lots of (previously inherited) data such as managed dependencies.
> For the leak, this happens if the property is not actually defined as a
> property in the pom. It may come from a Maven user property. In such case,
> the property value won't be in the installed POM (when not using consumer
> POM), which means it can be modified by a user property from the requesting
> POM.
> This is also related to profile activation, which may be activated or
> deactivated using user or system properties (including OS data which can be
> overridden from CLI).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
