Re: [VOTE] Release Maven PMD Plugin version 3.26.0
Am 2024-10-25 um 18:00 schrieb Michael Osipov: Hi, NOTE: Read the details on this release here: https://cwiki.apache.org/ confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack we solved 3 issues: https://issues.apache.org/jira/secure/ReleaseNote.jspa? projectId=12317621&version=12355202 There are still a couple of issues left in JIRA: https://issues.apache.org/jira/issues/? jql=project%20%3D%20MPMD%20AND%20resolution%20%3D%20Unresolved Staging repo: https://repository.apache.org/content/repositories/maven-2237/ https://repository.apache.org/content/repositories/maven-2237/org/ apache/maven/plugins/maven-pmd-plugin/3.26.0/maven-pmd-plugin-3.26.0- source-release.zip Source release checksum(s): maven-pmd-plugin-3.26.0-source-release.zip sha512: fc8c9af31ff0f690bdc50a3f2fba4ca2f0b770c9924ad64e8803dc21be4008e037e49d37038843b594012cf2ecf01e1b857d9e6d228287bf962b771595b95c7b Staging site: https://maven.apache.org/plugins-archives/maven-pmd-plugin-LATEST/ Guide to testing staged releases: https://maven.apache.org/guides/development/guide-testing-releases.html Vote open for 72 hours. +1 - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [DISCUSS] Project member emeritus policy change
Hi, in general +1...but... I would enhance the description (rules) a bit...because if someone is doing some bug reporting/reviewing issues etc. that is participating as well...in the general idea of contributing... Kind regards Karl Heinz Marbaise On 22.10.24 18:17, Tamás Cservenák wrote: Howdy, I would like to propose a project policy change (followed by implementation) regarding "emeritus" status of PMCs and members. Proposal: 1) IF a PMC member is inactive for 24 months (did NOT participate in any VOTE [by casting binding vote] OR did not create any commit that ended up in the project), he should be automatically moved to "emeritus PMC" status. 2) IF a committer is inactive for 24 months (did NOT participate in any VOTE [by casting vote] OR did not create and/or review any commit that ended up in the project), he should be automatically moved to "emeritus committer" status. Reasoning: Currently if interested party checks ASF report about Maven project on https://projects.apache.org/committee.html?maven , the presented data is skewed, if not even false, about "who" (and more importantly "how many") user is working on a project. This can lead to some unpleasant misunderstandings as well (from "why is my PR not reviewed yet" to many others). Moreover, this same (wrong) number may in fact lessen potential contributors, make them turn away and choose another, less supported project to join. Finally, I think we should shrink the circle of "admin" powered users to those we are almost certain are around us and involved. Project already has "emeritus" roles for both, PMCs and committers AFAIK (correct me if I am wrong). WDYT? Thanks T - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [DISCUSS] Enable GitHub issues and GitHub discussions
Hi, +1 from that... also Github Discussions is a good point... because otherwise the discussions often end up in JIRA Issues... Kind regards Karl Heinz Marbaise On 22.10.24 16:52, Guillaume Nodet wrote: I'd like to start discussing opening (and eventually slowly switching) from JIRA to GitHub issues. JIRA is a bit of a pain to use, even though we have some automatic links done with PRs and such. Accounts need to be authorized to maintain the number of external accounts low enough within the ASF, whereas this would only require a GitHub account. Release notes can be published on GitHub very easily, so the only thing is that we have the whole history and list of opened issues, but I just see new issues being created on GitHub and handling both sources for some time, gradually moving to GitHub issues only. I also think we could benefit from GitHub discussions. Those can be backed by the mailing list very easily (just by configuration) and that would be easier to link to issues, PRs and more integrated into GitHub, with markdown support, etc See https://github.com/apache/opendal/discussions/5211 for example. Thoughts ? - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Release Maven PMD Plugin version 3.26.0
Hi, +1 from me Kind regards Karl Heinz Marbaise On 25.10.24 18:00, Michael Osipov wrote: Hi, NOTE: Read the details on this release here: https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack we solved 3 issues: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317621&version=12355202 There are still a couple of issues left in JIRA: https://issues.apache.org/jira/issues/?jql=project%20%3D%20MPMD%20AND%20resolution%20%3D%20Unresolved Staging repo: https://repository.apache.org/content/repositories/maven-2237/ https://repository.apache.org/content/repositories/maven-2237/org/apache/maven/plugins/maven-pmd-plugin/3.26.0/maven-pmd-plugin-3.26.0-source-release.zip Source release checksum(s): maven-pmd-plugin-3.26.0-source-release.zip sha512: fc8c9af31ff0f690bdc50a3f2fba4ca2f0b770c9924ad64e8803dc21be4008e037e49d37038843b594012cf2ecf01e1b857d9e6d228287bf962b771595b95c7b Staging site: https://maven.apache.org/plugins-archives/maven-pmd-plugin-LATEST/ Guide to testing staged releases: https://maven.apache.org/guides/development/guide-testing-releases.html Vote open for 72 hours. [ ] +1 [ ] +0 [ ] -1 - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
[VOTE] Release Apache Maven Artifact Plugin version 3.5.3
Hi, We solved 3 issues: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12324322&version=12355188&styleName=Text Staging repo: https://repository.apache.org/content/repositories/maven-2238/ https://repository.apache.org/content/repositories/maven-2238/org/apache/maven/plugins/maven-artifact-plugin/3.5.3/maven-artifact-plugin-3.5.3-source-release.zip Source release checksum(s): maven-artifact-plugin-3.5.3-source-release.zip sha512: e6bc517b90497daa7db7664821163fed2da96408cd4918680be91cc204daa0663ebf173c6f7f99be55a619d24de637b83fc47e8b17fc0d52397713b16c4a6649% Staging site: https://maven.apache.org/plugins-archives/maven-artifact-plugin-LATEST/ Guide to testing staged releases: https://maven.apache.org/guides/development/guide-testing-releases.html Vote open for at least 72 hours. [ ] +1 [ ] +0 [ ] -1 - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
[PR] Bump org.apache.maven.plugins:maven-dependency-plugin from 3.8.0 to 3.8.1 [maven-hocon-extension]
dependabot[bot] opened a new pull request, #13: URL: https://github.com/apache/maven-hocon-extension/pull/13 Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.8.0 to 3.8.1. Commits https://github.com/apache/maven-dependency-plugin/commit/954e44a6f6bdb9f827cef95cff8a9509f86a7ed2";>954e44a [maven-release-plugin] prepare release maven-dependency-plugin-3.8.1 https://github.com/apache/maven-dependency-plugin/commit/842075d72d371459450db3a854b013a0a946c23d";>842075d Bump org.apache.maven.reporting:maven-reporting-impl https://github.com/apache/maven-dependency-plugin/commit/7e1aadcd74bc9b48b96d3c3f9e450d69f7552894";>7e1aadc Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0 https://github.com/apache/maven-dependency-plugin/commit/188531ca74cbb80225d4d470c99039ee2dbc8911";>188531c Fix SCM tag https://github.com/apache/maven-dependency-plugin/commit/361058e3c235f0524d91efa006b1b2f2d59efbe8";>361058e Bump jettyVersion from 9.4.55.v20240627 to 9.4.56.v20240826 https://github.com/apache/maven-dependency-plugin/commit/38ab10076724a01ed7e51d1a665019b1e0b67fff";>38ab100 Bump org.codehaus.plexus:plexus-io from 3.5.0 to 3.5.1 https://github.com/apache/maven-dependency-plugin/commit/cbac4a785843953cb8408b0eb75b16ad38d5574d";>cbac4a7 Bump commons-io:commons-io from 2.16.1 to 2.17.0 https://github.com/apache/maven-dependency-plugin/commit/b19b7e027085fb215f8f510d7bef8033ecbd4d48";>b19b7e0 [MDEP-930] Make test robust against platform default character sets (https://redirect.github.com/apache/maven-dependency-plugin/issues/448";>#448) https://github.com/apache/maven-dependency-plugin/commit/e347ef7298c9064be7f0774a4e00f94d7d407fcc";>e347ef7 Delete obsolete commented code for issue that was won't fixed 10 years ago (#... https://github.com/apache/maven-dependency-plugin/commit/7b137a17cc71b001e79992b755471a3fbb9702c8";>7b137a1 [MDEP-946] Add analyze exclusions to list of goals Additional commits viewable in https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.8.0...maven-dependency-plugin-3.8.1";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Release Maven PMD Plugin version 3.26.0
+1 We have release notes https://maven.apache.org/plugins-archives/maven-pmd-plugin-LATEST/releasenotes.html should be maintained or removed :-) On Fri, 25 Oct 2024 at 18:00, Michael Osipov wrote: > > Hi, > > NOTE: Read the details on this release here: > https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack > > we solved 3 issues: > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317621&version=12355202 > > There are still a couple of issues left in JIRA: > https://issues.apache.org/jira/issues/?jql=project%20%3D%20MPMD%20AND%20resolution%20%3D%20Unresolved > > Staging repo: > https://repository.apache.org/content/repositories/maven-2237/ > https://repository.apache.org/content/repositories/maven-2237/org/apache/maven/plugins/maven-pmd-plugin/3.26.0/maven-pmd-plugin-3.26.0-source-release.zip > > Source release checksum(s): > maven-pmd-plugin-3.26.0-source-release.zip > sha512: > fc8c9af31ff0f690bdc50a3f2fba4ca2f0b770c9924ad64e8803dc21be4008e037e49d37038843b594012cf2ecf01e1b857d9e6d228287bf962b771595b95c7b > > Staging site: > https://maven.apache.org/plugins-archives/maven-pmd-plugin-LATEST/ > > Guide to testing staged releases: > https://maven.apache.org/guides/development/guide-testing-releases.html > > Vote open for 72 hours. > > [ ] +1 > [ ] +0 > [ ] -1 > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > -- Sławomir Jaranowski - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Release Maven PMD Plugin version 3.26.0
+1 (non binding) Tested with PMD itself... Am 25.10.24 um 18:00 schrieb Michael Osipov: Hi, NOTE: Read the details on this release here: https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack we solved 3 issues: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317621&version=12355202 There are still a couple of issues left in JIRA: https://issues.apache.org/jira/issues/?jql=project%20%3D%20MPMD%20AND%20resolution%20%3D%20Unresolved Staging repo: https://repository.apache.org/content/repositories/maven-2237/ https://repository.apache.org/content/repositories/maven-2237/org/apache/maven/plugins/maven-pmd-plugin/3.26.0/maven-pmd-plugin-3.26.0-source-release.zip Source release checksum(s): maven-pmd-plugin-3.26.0-source-release.zip sha512: fc8c9af31ff0f690bdc50a3f2fba4ca2f0b770c9924ad64e8803dc21be4008e037e49d37038843b594012cf2ecf01e1b857d9e6d228287bf962b771595b95c7b Staging site: https://maven.apache.org/plugins-archives/maven-pmd-plugin-LATEST/ Guide to testing staged releases: https://maven.apache.org/guides/development/guide-testing-releases.html Vote open for 72 hours. [ ] +1 [ ] +0 [ ] -1 - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Release Maven PMD Plugin version 3.26.0
We have release notes https://maven.apache.org/plugins-archives/maven-pmd-plugin-LATEST/releasenotes.html should be maintained or removed :-) I'll take care of this after the release is done... Am 27.10.24 um 09:58 schrieb Slawomir Jaranowski: +1 We have release notes https://maven.apache.org/plugins-archives/maven-pmd-plugin-LATEST/releasenotes.html should be maintained or removed :-) On Fri, 25 Oct 2024 at 18:00, Michael Osipov wrote: Hi, NOTE: Read the details on this release here: https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack we solved 3 issues: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317621&version=12355202 There are still a couple of issues left in JIRA: https://issues.apache.org/jira/issues/?jql=project%20%3D%20MPMD%20AND%20resolution%20%3D%20Unresolved Staging repo: https://repository.apache.org/content/repositories/maven-2237/ https://repository.apache.org/content/repositories/maven-2237/org/apache/maven/plugins/maven-pmd-plugin/3.26.0/maven-pmd-plugin-3.26.0-source-release.zip Source release checksum(s): maven-pmd-plugin-3.26.0-source-release.zip sha512: fc8c9af31ff0f690bdc50a3f2fba4ca2f0b770c9924ad64e8803dc21be4008e037e49d37038843b594012cf2ecf01e1b857d9e6d228287bf962b771595b95c7b Staging site: https://maven.apache.org/plugins-archives/maven-pmd-plugin-LATEST/ Guide to testing staged releases: https://maven.apache.org/guides/development/guide-testing-releases.html Vote open for 72 hours. [ ] +1 [ ] +0 [ ] -1 - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Release Apache Maven Archetype version 3.3.1
+1 Reproducible Builds ok: reference build done with JDK 21 on *nix (and Maven 3) Regards, Hervé On 2024/10/25 06:17:45 Slawomir Jaranowski wrote: > Hi, > > We solved 13 issues: > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317122&version=12355155 > > There are still a couple of issues left in JIRA: > https://issues.apache.org/jira/issues/?jql=project%20%3D%20ARCHETYPE%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC > > Staging repo: > https://repository.apache.org/content/repositories/maven-2235/ > https://repository.apache.org/content/repositories/maven-2235/org/apache/maven/archetype/maven-archetype/3.3.1/maven-archetype-3.3.1-source-release.zip > > Source release checksum(s): > maven-archetype-3.3.1-source-release.zip - SHA-512 : > 301623c8edb02866755989d6626c4e9f718ba850ef552b3c739ff22557765245c6016ff6a7802528ffdb762f9cfee096a289b35af6f7e8413ca9ba9c8e07563a > > Staging site: > https://maven.apache.org/archetype-archives/archetype-LATEST/ > > Guide to testing staged releases: > https://maven.apache.org/guides/development/guide-testing-releases.html > > Vote open for at least 72 hours. > > [ ] +1 > [ ] +0 > [ ] -1 > > -- > Sławomir Jaranowski > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > > - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Release Maven PMD Plugin version 3.26.0
+1 Reproducible Build ok: reference build done with JDK 8 on Windows Regards, Hervé On 2024/10/25 16:00:21 Michael Osipov wrote: > Hi, > > NOTE: Read the details on this release here: > https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack > > we solved 3 issues: > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317621&version=12355202 > > There are still a couple of issues left in JIRA: > https://issues.apache.org/jira/issues/?jql=project%20%3D%20MPMD%20AND%20resolution%20%3D%20Unresolved > > Staging repo: > https://repository.apache.org/content/repositories/maven-2237/ > https://repository.apache.org/content/repositories/maven-2237/org/apache/maven/plugins/maven-pmd-plugin/3.26.0/maven-pmd-plugin-3.26.0-source-release.zip > > Source release checksum(s): > maven-pmd-plugin-3.26.0-source-release.zip > sha512: > fc8c9af31ff0f690bdc50a3f2fba4ca2f0b770c9924ad64e8803dc21be4008e037e49d37038843b594012cf2ecf01e1b857d9e6d228287bf962b771595b95c7b > > Staging site: > https://maven.apache.org/plugins-archives/maven-pmd-plugin-LATEST/ > > Guide to testing staged releases: > https://maven.apache.org/guides/development/guide-testing-releases.html > > Vote open for 72 hours. > > [ ] +1 > [ ] +0 > [ ] -1 > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > > - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [DISCUSS] Enable GitHub issues and GitHub discussions
On 10/24/24 11:10 AM, Giovanni van der Schelde wrote: ...snip... 0 / -1 While I'm not most familiar with ticket management on bigger open source projects on GitHub, I can imagine it might be a bit more tricky to relate issues like you can with tools like Jira. Features like 'related to', 'duplicate off', 'depends on' are harder to track. You might need to use the 'Projects' feature for that, but that seems somewhat limited. You'd have to scroll through an issue to notice other issues or PR's reference a specific (especially older) issue you are working on. GitLab supports this level of issue management. 🙂 Sorry, just a HUGE fan of GitLab and a contributor to its Maven support. (Apologies to Giovanni, I sent my reply to you and not the list.) -- Timothy Stone = Some call me ... Tim. Husband, Father, Blogger, OSS, Architect, Wargamer, Home Brewer, and 🤓 Find me on GitLab | GitHub | Linked In | MeWe | GnuPG OpenPGP_signature.asc Description: OpenPGP digital signature
Re: [DISCUSS] Enable GitHub issues and GitHub discussions
On 10/22/24 2:44 PM, Delany wrote: There was mention of GitHub's terms of service. Its not the only game in town though - what about Gitlab or even Gitea? I'm sure they'd appreciate being able to host project code like Maven. Just a thought. +1 I'm a HUGE fan of GitLab (and "Notable Hero" having contributed to GitLab's work on pipeline vulnerability scanning for Maven). GitLab Ultimate is free to OSS projects as well. I don't work for GitLab, but lest this reply become a sales pitch for GitLab, I'll only add that GitLab can mirror to GitHub very easily. (see down thread). I also find that the platform has many features of JIRA for project milestones, sprints, labels, and much more, including an integrated robust CI/CD platform (and tooling projects like To Be Continuous). Thanks! Tim -- Timothy Stone = Some call me ... Tim. Husband, Father, Blogger, OSS, Architect, Wargamer, Home Brewer, and 🤓 Find me on GitLab | GitHub | Linked In | MeWe | GnuPG OpenPGP_signature.asc Description: OpenPGP digital signature