pzygielo commented on PR #1024: URL: https://github.com/apache/maven-enforcer/pull/1024#issuecomment-5645037605
I'm confused for following reasons: - as also noted in https://github.com/apache/maven-enforcer/issues/916#issuecomment-3146433534 - `project.getReportArtifacts()` - returns plugins w/o version if there is none specified in `<reporting>` section (exactly this causes s4u/pgpverify-maven-plugin#720 to use `RELEASE`/the latest, which is not the same as the one used in `<pluginManagement>`) - [Configuring_Reporting_Plugins](https://maven.apache.org/guides/mini/guide-configuring-plugins.html#Configuring_Reporting_Plugins) says to provide explicit version in `<reporting>` - the actual behavior of Maven itself is indeed to: > Maven allows the reporting plugin version to be resolved from <build><pluginManagement> when it is not specified in <reporting>. Can you link to some documentation that support: > Maven allows the reporting plugin version to be resolved from <build><pluginManagement> when it is not specified in <reporting> ? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
