gnodet opened a new pull request, #13030:
URL: https://github.com/apache/maven/pull/13030
The restricted property interpolation introduced in 03c947d820 prevents
user, system and environment properties from being resolved in models built at
`VALIDATION_LEVEL_MINIMAL` (dependency, parent and BOM-import POMs). While the
intent was to prevent property leaking from the requesting build into
transitive POMs, it breaks `systemPath` resolution.
System-scoped dependencies in repository-resolved models use properties like
`${test.home}`, `${env.JAVA_HOME}`, etc. to construct absolute paths to local
JARs, and those must be interpolated against the build session. Leaving them
unresolved causes the absolute-path validation on `systemPath` to fail.
This breaks **all** integration tests across every platform (ubuntu,
windows, macOS) and JDK (8, 25, 26):
- `MavenIT0085TransitiveSystemScopeTest`
- `MavenITmng3586SystemScopePluginDependencyTest`
- `MavenITmng4379TransitiveSystemPathInterpolatedWithEnvVarTest`
- `MavenITmng4590ImportedPomUsesSystemAndUserPropertiesTest`
This commit reverts only the interpolation restriction while **keeping** the
profile activation restrictions from that commit (no file/property-based
profile activation and no repository injection from profiles in external
models), which are the meaningful security hardening.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
