elharo opened a new issue, #241:
URL: https://github.com/apache/maven-artifact-plugin/issues/241

   The `fail` flag in `CheckBuildPlanMojo.execute()` is overwritten at the end, 
defeating the fail-fast check for non-reproducible plugins.
   
   In `CheckBuildPlanMojo.java`:
   - `fail` is set to `true` when a `fail:` (line 145) or too-old plugin (line 
158) is found.
   - Line 173 then unconditionally clobbers it:
   
   ```java
   fail = checkVersionRangeInDependencies();
   ```
   
   If the execution plan contains a non-reproducible plugin but the module has 
no version-range dependencies, the build will **not** fail even with 
`check.failOnNonReproducible=true`, silently ignoring the plugin issue.
   
   Suggested fix: `fail = fail || checkVersionRangeInDependencies();`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to