slachiewicz opened a new pull request, #12954: URL: https://github.com/apache/maven/pull/12954
Three fixes in `maven-core` and `maven-compat`. - **Relocation coordinates on the legacy metadata path.** Relocation coordinates read from resolved project metadata are validated before use, matching the check already applied in the resolver provider. - **Credential scope.** Server credentials are scoped to the origin (protocol, host and port) of a repository or mirror the operator declared for that same server id. Ids with no declared origin keep the previous behaviour and emit a warning naming the target origin; `maven.repository.credentialScope=strict` refuses them instead. Defaults to `origin`. - **Server id matching.** `DefaultWagonManager` matched settings server ids case-insensitively while the rest of the code matches exactly; it now matches exactly. Each change is a separate commit. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
