Re: Maven Extension

2025-02-16 Thread Adrian Tarau 

Hello,

Release 0.8.3 is out, mainly to fix Apache Foundation Trademark Policy 
violations (thanks Sylwester). The new project name is Talos 
. I hope I'm good now and no 
lawyer is coming after me ;)


I'm gonna stop spamming the mailing lists on this subject, please follow 
the project on GitHub.


Thanks.

On 2/11/2025 8:19 AM, Adrian Tarau wrote:

Hello,

Release 0.8.2 is out. Outside a few bugs fixes, the HTML report 
 
is the biggest addition.


I think I reached the point there the extension does everything I 
wanted to have. There is one more feature missing (persisting trend 
data in S3) needed for CI/CD  since reporting is serverless but I will 
add that in next release. For devs interested to see historic data for 
their builds there is no need for external storage since trend data is 
stored locally under ~/.cache/microfalx/maven.


Thanks.

Re: [VOTE] Release Apache Maven Clean Plugin version 4.0.0-beta-2

2025-02-16 Thread Sylwester Lachiewicz 
+1

niedz., 16 lut 2025, 17:05 użytkownik Jermaine Hua 
napisał:

> +1
>
>
> Slawomir Jaranowski 于2025年2月16日 周日02:41写道：
>
> > Hi,
> >
> > NOTE: This plugin is a Maven 4 plugin and requires Maven 4.x to run.
> >
> > We solved 25 issues:
> > https://github.com/apache/maven-clean-plugin/milestone/1?closed=1
> >
> > There is still one issues left in JIRA:
> > https://github.com/apache/maven-clean-plugin/issues
> >
> > There is still one issues left in JIRA:
> >
> >
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MCLEAN%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC
> >
> > Changes since the last release:
> >
> >
> https://github.com/apache/maven-clean-plugin/compare/maven-clean-plugin-4.0.0-beta-1...maven-clean-plugin-4.0.0-beta-2
> >
> > Staging repo:
> > https://repository.apache.org/content/repositories/maven-2265/
> >
> >
> https://repository.apache.org/content/repositories/maven-2265/org/apache/maven/plugins/maven-clean-plugin/4.0.0-beta-2/maven-clean-plugin-4.0.0-beta-2-source-release.zip
> >
> > Source release checksum(s):
> > maven-clean-plugin-4.0.0-beta-2-source-release.zip - SHA-512 :
> >
> >
> 1af2fb395c4ae2d3bf0eac33a5ce9dc47e71d9118c15628ea595a15eb776319feb6a275b81e779f10ede911301860a73130f9ba50a6778d4978b97d6db9f3533
> >
> > Staging site:
> > https://maven.apache.org/plugins-archives/maven-clean-plugin-LATEST-4.x/
> >
> > Guide to testing staged releases:
> > https://maven.apache.org/guides/development/guide-testing-releases.html
> >
> > Vote open for at least 72 hours.
> >
> > [ ] +1
> > [ ] +0
> > [ ] -1
> >
> > --
> > Sławomir Jaranowski
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > For additional commands, e-mail: dev-h...@maven.apache.org
> >
> >
>

Re: [VOTE] Release Apache Maven Clean Plugin version 3.4.1

2025-02-16 Thread Sylwester Lachiewicz 
+1

niedz., 16 lut 2025, 17:06 użytkownik Jermaine Hua 
napisał:

> +1
>
> Slawomir Jaranowski 于2025年2月16日 周日03:01写道：
>
> > Hi,
> >
> > We solved 15 issues:
> > https://github.com/apache/maven-clean-plugin/milestone/2?closed=1
> >
> > There is still one issues left in JIRA:
> > https://github.com/apache/maven-clean-plugin/issues
> >
> > There is still one issues left in JIRA:
> >
> >
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MCLEAN%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC
> >
> > Changes since the last release:
> >
> >
> https://github.com/apache/maven-clean-plugin/compare/maven-clean-plugin-3.4.0...maven-clean-plugin-3.4.1
> >
> > Staging repo:
> > https://repository.apache.org/content/repositories/maven-2266/
> >
> >
> https://repository.apache.org/content/repositories/maven-2266/org/apache/maven/plugins/maven-clean-plugin/3.4.1/maven-clean-plugin-3.4.1-source-release.zip
> >
> > Source release checksum(s):
> > maven-clean-plugin-3.4.1-source-release.zip - SHA-512 :
> >
> >
> 993c11eb1e84e5892a28fdd47ab95bb8fc023fe489f352ed07aa1bbc0fa555a12ca6310a595d46f47dfddf2b68ee7b957b2327bc742e9ae1f45cf65cc643e8cb
> >
> > Staging site:
> > https://maven.apache.org/plugins-archives/maven-clean-plugin-LATEST/
> >
> > Guide to testing staged releases:
> > https://maven.apache.org/guides/development/guide-testing-releases.html
> >
> > Vote open for at least 72 hours.
> >
> > [ ] +1
> > [ ] +0
> > [ ] -1
> >
> > --
> > Sławomir Jaranowski
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > For additional commands, e-mail: dev-h...@maven.apache.org
> >
> >
>

Re: Supply Chain Attacks and Insider Threats

2025-02-16 Thread Guillaume Nodet 
Le dim. 9 févr. 2025 à 20:43, Slawomir Jaranowski 
a écrit :

> On Sun, 9 Feb 2025 at 13:34, Elliotte Rusty Harold 
> wrote:
> >
> > On Sun, Feb 9, 2025 at 8:00 AM Slawomir Jaranowski
> >  wrote:
> >
> > > We have a simple statistic
> > >
> https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dist-tool/job/master/site/dist-tool-committers-stats.html
> > >
> > > To remove somebody we need a procedure for it.
> >
> > Great. I'm glad we already have the information we need. I see 72
> > committers and maybe 20% of those have been active in the last few
> > years. I'm not sure what the technical procedure for removing
> > committer privileges is. I don't have admin access on the github or
> > svn repos. However as policy I propose:
>
> As I know we don't manage access rights separately for each service.
> We can manage assignments to LDAP groups https://whimsy.apache.org/public/
> by whimsy service.
>
> >
> > 1. Once a year, shortly after January 1, an admin manually removes
> > committership from anyone who hasn't committed in the previous 4
> > years. For instance, right now we would revoke commitership from
> > anyone whose last commit was in 2020 or earlier. The size of the task
> > doesn't feel worth automating.
> >
> > 2. If a former committer notices they no longer have permissions and
> > wants them back to do some work, they just have to ask here on dev@
> > and they will be regranted. They don't have to prove themselves worthy
> > of committer privileges again. They've already done that.
> >
> > 3. Other privileges like issue filing and PMC voting remain in effect
> > as these aren't especially risky.
> >
> > There might be other permissions like the ability to push to the
> > website or control the mailing lists we should also lock down. I don't
> > know exactly how that works, but if anyone does please speak up.
> >
> > To be clear, we're not banning anyone. We're simply being cautious
> > about active permissions given the risk of compromised old accounts.
> > With 72 committers some of whom haven't been heard from in over ten
> > years, it's likely some of these accounts are effectively defunct.
> > It's even possible some developers are deceased.
> >
>
> Generally I agree - but we should start separate thread for discussion,
> and finally finish by VOTE.
>

Sounds good to me.  And we don't need a vote per committer, just listing
the names in a single vote should be sufficient. If there's any problem
with one of them, we cancel the vote, remove the ones that want to remain
active or whatever the reason is, and restart one.

At the same time (though, that's a slightly different discussion), I think
we should also make PMC members that have not sent a single email or commit
in 4 years, become emeritus.  And the same applies, they can be reinstated
with a simple demand.


>
> > --
> > Elliotte Rusty Harold
> > elh...@ibiblio.org
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > For additional commands, e-mail: dev-h...@maven.apache.org
> >
>
>
> --
> Sławomir Jaranowski
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>

-- 

Guillaume Nodet

Re: [VOTE] Release Apache Maven Clean Plugin version 3.4.1

2025-02-16 Thread Guillaume Nodet 
+1

Le sam. 15 févr. 2025 à 20:00, Slawomir Jaranowski 
a écrit :

> Hi,
>
> We solved 15 issues:
> https://github.com/apache/maven-clean-plugin/milestone/2?closed=1
>
> There is still one issues left in JIRA:
> https://github.com/apache/maven-clean-plugin/issues
>
> There is still one issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MCLEAN%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC
>
> Changes since the last release:
>
> https://github.com/apache/maven-clean-plugin/compare/maven-clean-plugin-3.4.0...maven-clean-plugin-3.4.1
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-2266/
>
> https://repository.apache.org/content/repositories/maven-2266/org/apache/maven/plugins/maven-clean-plugin/3.4.1/maven-clean-plugin-3.4.1-source-release.zip
>
> Source release checksum(s):
> maven-clean-plugin-3.4.1-source-release.zip - SHA-512 :
>
> 993c11eb1e84e5892a28fdd47ab95bb8fc023fe489f352ed07aa1bbc0fa555a12ca6310a595d46f47dfddf2b68ee7b957b2327bc742e9ae1f45cf65cc643e8cb
>
> Staging site:
> https://maven.apache.org/plugins-archives/maven-clean-plugin-LATEST/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for at least 72 hours.
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> --
> Sławomir Jaranowski
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>

-- 

Guillaume Nodet

Re: [VOTE] Release Apache Maven Clean Plugin version 4.0.0-beta-2

2025-02-16 Thread Guillaume Nodet 
+1

Le sam. 15 févr. 2025 à 19:41, Slawomir Jaranowski 
a écrit :

> Hi,
>
> NOTE: This plugin is a Maven 4 plugin and requires Maven 4.x to run.
>
> We solved 25 issues:
> https://github.com/apache/maven-clean-plugin/milestone/1?closed=1
>
> There is still one issues left in JIRA:
> https://github.com/apache/maven-clean-plugin/issues
>
> There is still one issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MCLEAN%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC
>
> Changes since the last release:
>
> https://github.com/apache/maven-clean-plugin/compare/maven-clean-plugin-4.0.0-beta-1...maven-clean-plugin-4.0.0-beta-2
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-2265/
>
> https://repository.apache.org/content/repositories/maven-2265/org/apache/maven/plugins/maven-clean-plugin/4.0.0-beta-2/maven-clean-plugin-4.0.0-beta-2-source-release.zip
>
> Source release checksum(s):
> maven-clean-plugin-4.0.0-beta-2-source-release.zip - SHA-512 :
>
> 1af2fb395c4ae2d3bf0eac33a5ce9dc47e71d9118c15628ea595a15eb776319feb6a275b81e779f10ede911301860a73130f9ba50a6778d4978b97d6db9f3533
>
> Staging site:
> https://maven.apache.org/plugins-archives/maven-clean-plugin-LATEST-4.x/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for at least 72 hours.
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> --
> Sławomir Jaranowski
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>

-- 

Guillaume Nodet

Re: [VOTE] Release Apache Maven Clean Plugin version 3.4.1

2025-02-16 Thread Jermaine Hua 
+1

Slawomir Jaranowski 于2025年2月16日 周日03:01写道：

> Hi,
>
> We solved 15 issues:
> https://github.com/apache/maven-clean-plugin/milestone/2?closed=1
>
> There is still one issues left in JIRA:
> https://github.com/apache/maven-clean-plugin/issues
>
> There is still one issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MCLEAN%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC
>
> Changes since the last release:
>
> https://github.com/apache/maven-clean-plugin/compare/maven-clean-plugin-3.4.0...maven-clean-plugin-3.4.1
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-2266/
>
> https://repository.apache.org/content/repositories/maven-2266/org/apache/maven/plugins/maven-clean-plugin/3.4.1/maven-clean-plugin-3.4.1-source-release.zip
>
> Source release checksum(s):
> maven-clean-plugin-3.4.1-source-release.zip - SHA-512 :
>
> 993c11eb1e84e5892a28fdd47ab95bb8fc023fe489f352ed07aa1bbc0fa555a12ca6310a595d46f47dfddf2b68ee7b957b2327bc742e9ae1f45cf65cc643e8cb
>
> Staging site:
> https://maven.apache.org/plugins-archives/maven-clean-plugin-LATEST/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for at least 72 hours.
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> --
> Sławomir Jaranowski
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>

Re: [VOTE] Release Apache Maven Clean Plugin version 4.0.0-beta-2

2025-02-16 Thread Jermaine Hua 
+1


Slawomir Jaranowski 于2025年2月16日 周日02:41写道：

> Hi,
>
> NOTE: This plugin is a Maven 4 plugin and requires Maven 4.x to run.
>
> We solved 25 issues:
> https://github.com/apache/maven-clean-plugin/milestone/1?closed=1
>
> There is still one issues left in JIRA:
> https://github.com/apache/maven-clean-plugin/issues
>
> There is still one issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MCLEAN%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC
>
> Changes since the last release:
>
> https://github.com/apache/maven-clean-plugin/compare/maven-clean-plugin-4.0.0-beta-1...maven-clean-plugin-4.0.0-beta-2
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-2265/
>
> https://repository.apache.org/content/repositories/maven-2265/org/apache/maven/plugins/maven-clean-plugin/4.0.0-beta-2/maven-clean-plugin-4.0.0-beta-2-source-release.zip
>
> Source release checksum(s):
> maven-clean-plugin-4.0.0-beta-2-source-release.zip - SHA-512 :
>
> 1af2fb395c4ae2d3bf0eac33a5ce9dc47e71d9118c15628ea595a15eb776319feb6a275b81e779f10ede911301860a73130f9ba50a6778d4978b97d6db9f3533
>
> Staging site:
> https://maven.apache.org/plugins-archives/maven-clean-plugin-LATEST-4.x/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for at least 72 hours.
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> --
> Sławomir Jaranowski
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>