[GitHub] [maven-doxia] michael-o commented on pull request #104: [DOXIA-590] implement hidden rows

2022-06-12 Thread GitBox


michael-o commented on PR #104:
URL: https://github.com/apache/maven-doxia/pull/104#issuecomment-1153090792

   > > I don't see handling for onSection.
   > 
   > Please explain. I see no issues with the way onSection is coded (unless 
the concern is that onSection does nothing if the level is greater than 5).
   
   See here: 
https://github.com/apache/maven-doxia/blob/8ef6a26a35946385ad55193a63e0180a5d5320ec/doxia-core/src/main/java/org/apache/maven/doxia/sink/impl/XhtmlBaseSink.java#L472-L484


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (DOXIA-590) Either provided element class or default class gets ignored

2022-06-12 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/DOXIA-590?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553224#comment-17553224
 ] 

ASF GitHub Bot commented on DOXIA-590:
--

michael-o commented on PR #104:
URL: https://github.com/apache/maven-doxia/pull/104#issuecomment-1153090792

   > > I don't see handling for onSection.
   > 
   > Please explain. I see no issues with the way onSection is coded (unless 
the concern is that onSection does nothing if the level is greater than 5).
   
   See here: 
https://github.com/apache/maven-doxia/blob/8ef6a26a35946385ad55193a63e0180a5d5320ec/doxia-core/src/main/java/org/apache/maven/doxia/sink/impl/XhtmlBaseSink.java#L472-L484




> Either provided element class or default class gets ignored
> ---
>
> Key: DOXIA-590
> URL: https://issues.apache.org/jira/browse/DOXIA-590
> Project: Maven Doxia
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 1.8
>Reporter: Fred Eckertson
>Assignee: Michael Osipov
>Priority: Major
> Fix For: 2.0.0-M3, 1.11.2
>
> Attachments: image-2022-05-18-21-57-40-619.png
>
>
> The following construct is somewhat common in doxia-core
> att.addAttribute( Attribute.CLASS, "a" );
> The documentation says that basic attributes (including CLASS) are supported. 
> However in cases like this either that "a" or the CLASS that was provided in 
> the attributes parameter will be ignored. The correct way to do this is to 
> append the provided CLASS to "a " if a CLASS attribute was provided.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Created] (DOXIA-658) Upgrade test dependencies

2022-06-12 Thread Michael Osipov (Jira)
Michael Osipov created DOXIA-658:


 Summary: Upgrade test dependencies
 Key: DOXIA-658
 URL: https://issues.apache.org/jira/browse/DOXIA-658
 Project: Maven Doxia
  Issue Type: Dependency upgrade
Reporter: Michael Osipov
Assignee: Michael Osipov
 Fix For: 2.0.0-M3


* hamcrest core to 2.2
* Guice to 4.2.3



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Created] (DOXIA-659) Upgrade Parent to 36

2022-06-12 Thread Michael Osipov (Jira)
Michael Osipov created DOXIA-659:


 Summary: Upgrade Parent to 36
 Key: DOXIA-659
 URL: https://issues.apache.org/jira/browse/DOXIA-659
 Project: Maven Doxia
  Issue Type: Dependency upgrade
Reporter: Michael Osipov
Assignee: Michael Osipov
 Fix For: 2.0.0-M3






--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Closed] (DOXIA-659) Upgrade Parent to 36

2022-06-12 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/DOXIA-659?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov closed DOXIA-659.

Resolution: Fixed

Fixed with 
[9be64968af83dee44352916998a8e54a6c3ee03b|https://gitbox.apache.org/repos/asf?p=maven-doxia.git;a=commit;h=9be64968af83dee44352916998a8e54a6c3ee03b].

> Upgrade Parent to 36
> 
>
> Key: DOXIA-659
> URL: https://issues.apache.org/jira/browse/DOXIA-659
> Project: Maven Doxia
>  Issue Type: Dependency upgrade
>Reporter: Michael Osipov
>Assignee: Michael Osipov
>Priority: Major
> Fix For: 2.0.0-M3
>
>




--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Closed] (DOXIA-658) Upgrade test dependencies

2022-06-12 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/DOXIA-658?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov closed DOXIA-658.

Resolution: Fixed

Fixed with 
[6538b6e2c1757700ca9628ac22c7febb7c53135c|https://gitbox.apache.org/repos/asf?p=maven-doxia.git;a=commit;h=6538b6e2c1757700ca9628ac22c7febb7c53135c].

> Upgrade test dependencies
> -
>
> Key: DOXIA-658
> URL: https://issues.apache.org/jira/browse/DOXIA-658
> Project: Maven Doxia
>  Issue Type: Dependency upgrade
>Reporter: Michael Osipov
>Assignee: Michael Osipov
>Priority: Major
> Fix For: 2.0.0-M3
>
>
> * hamcrest core to 2.2
> * Guice to 4.2.3



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Created] (DOXIASITETOOLS-260) Upgrade dependencies

2022-06-12 Thread Michael Osipov (Jira)
Michael Osipov created DOXIASITETOOLS-260:
-

 Summary: Upgrade dependencies
 Key: DOXIASITETOOLS-260
 URL: https://issues.apache.org/jira/browse/DOXIASITETOOLS-260
 Project: Maven Doxia Sitetools
  Issue Type: Dependency upgrade
Reporter: Michael Osipov
Assignee: Michael Osipov
 Fix For: 2.0.0-M3


* SLF4J to 1.7.36
* Guice to 4.2.3
* Plexus Utils to 3.4.2



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (MNG-7496) DefaultArtifactDescriptorReader.loadPom() should query the MavenWorkspaceReader first

2022-06-12 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553231#comment-17553231
 ] 

Michael Osipov commented on MNG-7496:
-

Interesting, why not...Do you have some code ready?

> DefaultArtifactDescriptorReader.loadPom() should query the 
> MavenWorkspaceReader first
> -
>
> Key: MNG-7496
> URL: https://issues.apache.org/jira/browse/MNG-7496
> Project: Maven
>  Issue Type: Improvement
>Affects Versions: 3.8.6
>Reporter: Christoph Läubrich
>Priority: Major
>
> Now WorkspaceReaders work in extensions and while I develop a basic 
> implementation in Tycho I noticed that I get asked for a pom, but not for the 
> model first.
> The reason is that DefaultArtifactDescriptorReader.loadPom() do not query the 
> workspace reader but always resolves the pom artifact and then reads the pom 
> file. But afterwards, it do query the maven reader and use the model there.
> I don't know if there is an need to download the pom always (but not use 
> it...), at least in my case it requires me to write the model to disk (with 
> possibly incomplete content as I only get the pom artifact, but not the 
> actual artifact the model is searched for) to make maven happy or I'll get 
> nasty:
> [WARNING] The POM for ... is missing, no dependency information available
> My idea would be, to simply first as the WSR for the model and if it is 
> present do not perform any actions or, at least ask the WSR first before fail 
> and issue a warning...



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (MNG-7316) MavenProject.getAttachedArtifacts() regression with 3.8.1

2022-06-12 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7316?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553234#comment-17553234
 ] 

Michael Osipov commented on MNG-7316:
-

FYI: Maven 3.8.6 has been released yesterday and it is going very like the last 
relase on the 3.8.x line.

> MavenProject.getAttachedArtifacts() regression with 3.8.1
> -
>
> Key: MNG-7316
> URL: https://issues.apache.org/jira/browse/MNG-7316
> Project: Maven
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 3.8.2, 3.8.3
>Reporter: Gary D. Gregory
>Priority: Critical
> Fix For: waiting-for-feedback, wontfix-candidate
>
>
> The method {{MavenProject.getAttachedArtifacts()}} as of 3.8.2 breaks 
> releasing components for us at Apache Commons using our Maven Release plugin 
> because the list returned is now immutable, we now get an exception when 
> calling {{remove()}} on the collection returned by the API; see 
> [https://github.com/apache/commons-release-plugin/blob/master/src/main/java/org/apache/commons/release/plugin/mojos/CommonsDistributionDetachmentMojo.java#L137]
> This worked fine in 3.8.1, may you please change it back for 3.8.4?
> We cannot use Maven 3.8.2 and 3.8.3 to release our components.
> ([~michael-o]: Ironically, I discovered this trying to create a release 
> candidate for Apache Commons CLI.)
> The exception in 3.8.3:
> {quote}Caused by: java.lang.UnsupportedOperationException
>  at java.util.Collections$UnmodifiableCollection.remove 
> (Collections.java:1060)
>  at 
> org.apache.commons.release.plugin.mojos.CommonsDistributionDetachmentMojo.execute
>  (CommonsDistributionDetachmentMojo.java:136)
>  at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo 
> (DefaultBuildPluginManager.java:137)
> {quote}
>  



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Closed] (DOXIASITETOOLS-260) Upgrade dependencies

2022-06-12 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/DOXIASITETOOLS-260?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov closed DOXIASITETOOLS-260.
-
Resolution: Fixed

Fixed with 
[6d8167e30620eb5a683c3115b72c45152d971ad6|https://gitbox.apache.org/repos/asf?p=maven-doxia-sitetools.git;a=commit;h=6d8167e30620eb5a683c3115b72c45152d971ad6].

> Upgrade dependencies
> 
>
> Key: DOXIASITETOOLS-260
> URL: https://issues.apache.org/jira/browse/DOXIASITETOOLS-260
> Project: Maven Doxia Sitetools
>  Issue Type: Dependency upgrade
>Reporter: Michael Osipov
>Assignee: Michael Osipov
>Priority: Major
> Fix For: 2.0.0-M3
>
>
> * SLF4J to 1.7.36
> * Guice to 4.2.3
> * Plexus Utils to 3.4.2



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Assigned] (MDEPLOY-293) Maven deploy fails with 401 Unauthorized when using £ in password

2022-06-12 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/MDEPLOY-293?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov reassigned MDEPLOY-293:
--

Assignee: Michael Osipov

> Maven deploy fails with 401 Unauthorized when using £ in password
> -
>
> Key: MDEPLOY-293
> URL: https://issues.apache.org/jira/browse/MDEPLOY-293
> Project: Maven Deploy Plugin
>  Issue Type: Bug
>Reporter: Nélson Cunha
>Assignee: Michael Osipov
>Priority: Major
> Fix For: waiting-for-feedback, wontfix-candidate
>
> Attachments: image-2022-06-08-20-06-39-388.png, 
> image-2022-06-08-20-09-57-536.png, image-2022-06-09-16-52-04-876.png, 
> image-2022-06-09-16-52-19-905.png, image-2022-06-09-17-01-18-568.png
>
>
> Hello.
> I'm using Apache Maven 3.6.3 and maven-deploy-plugin 2.8.2 on Oracle's Java 
> version 1.8.0_321 and I'm currently receiving the 401  Unauthorized error 
> when deploying an artifact to Sonatype Nexus:
> {noformat}
> [ERROR] Failed to execute goal 
> org.apache.maven.plugins:maven-deploy-plugin:2.8.2:deploy (default-deploy) on 
> project XXX: Failed to deploy artifacts: Could not transfer artifact 
> XXX:XXX:pom:4.0.0-20220608.184337-1 from/to nexus-snapshots 
> (http://.../repository/maven-snapshots/): Transfer failed for 
> http://...-4.0.0-20220608.184337-1.pom 401 Unauthorized -> [Help 1]{noformat}
>  
> This error showed up after I changed my password with a leading {{£}} 
> character.
>  
> Using Wireshark to capture the HTTP packages exchanged between the maven 
> client and the nexus repository, I see 3 interactions:
>  # unauthenticated GET request for a maven-metadata.xml file, followed by a 
> 401 response
>  # authenticated GET request for the same maven-metadata.xml file, followed 
> by a 404 response
>  # authenticated PUT request for the pom file, followed by a 401 response
>  
> Now, analyzing the headers for the second and third request I noticed the 
> base64 on the Authentication header is not the same.
>  * 2nd request: GET metadata
> !image-2022-06-08-20-06-39-388.png!
>  
>  * 3rd request PUT pom
> !image-2022-06-08-20-09-57-536.png!
>  
> The decoded base64 with the username:password, shows that, as expected, the 
> request that received a 404 holds the right password, but on the other hand, 
> the PUT request that got a 401 has a password with a {{?}} for the {{{}£{}}}. 
>  
> All the servers on my {{settings.xml}} hold the same user/password and I have 
> tried with the passwords encoded and in plain text.
>  
>  
> Further tests with base64 encoding and decoding showed that the "wrong" 
> password is the actual password but encoded from an ANSI code page where the 
> password accepted by Nexus is encoded from utf8.
>  
> I noticed the 401 responses don't specify the encoding on the 
> {{WWW-Authenticate}} header, which should clear up which encoding to use, but 
> still for some reason the two requests are apparently using different 
> encodings.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Updated] (MDEPLOY-293) Maven deploy fails with 401 Unauthorized when using £ in password

2022-06-12 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/MDEPLOY-293?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov updated MDEPLOY-293:
---
Fix Version/s: (was: wontfix-candidate)

> Maven deploy fails with 401 Unauthorized when using £ in password
> -
>
> Key: MDEPLOY-293
> URL: https://issues.apache.org/jira/browse/MDEPLOY-293
> Project: Maven Deploy Plugin
>  Issue Type: Bug
>Reporter: Nélson Cunha
>Assignee: Michael Osipov
>Priority: Major
> Fix For: waiting-for-feedback
>
> Attachments: image-2022-06-08-20-06-39-388.png, 
> image-2022-06-08-20-09-57-536.png, image-2022-06-09-16-52-04-876.png, 
> image-2022-06-09-16-52-19-905.png, image-2022-06-09-17-01-18-568.png
>
>
> Hello.
> I'm using Apache Maven 3.6.3 and maven-deploy-plugin 2.8.2 on Oracle's Java 
> version 1.8.0_321 and I'm currently receiving the 401  Unauthorized error 
> when deploying an artifact to Sonatype Nexus:
> {noformat}
> [ERROR] Failed to execute goal 
> org.apache.maven.plugins:maven-deploy-plugin:2.8.2:deploy (default-deploy) on 
> project XXX: Failed to deploy artifacts: Could not transfer artifact 
> XXX:XXX:pom:4.0.0-20220608.184337-1 from/to nexus-snapshots 
> (http://.../repository/maven-snapshots/): Transfer failed for 
> http://...-4.0.0-20220608.184337-1.pom 401 Unauthorized -> [Help 1]{noformat}
>  
> This error showed up after I changed my password with a leading {{£}} 
> character.
>  
> Using Wireshark to capture the HTTP packages exchanged between the maven 
> client and the nexus repository, I see 3 interactions:
>  # unauthenticated GET request for a maven-metadata.xml file, followed by a 
> 401 response
>  # authenticated GET request for the same maven-metadata.xml file, followed 
> by a 404 response
>  # authenticated PUT request for the pom file, followed by a 401 response
>  
> Now, analyzing the headers for the second and third request I noticed the 
> base64 on the Authentication header is not the same.
>  * 2nd request: GET metadata
> !image-2022-06-08-20-06-39-388.png!
>  
>  * 3rd request PUT pom
> !image-2022-06-08-20-09-57-536.png!
>  
> The decoded base64 with the username:password, shows that, as expected, the 
> request that received a 404 holds the right password, but on the other hand, 
> the PUT request that got a 401 has a password with a {{?}} for the {{{}£{}}}. 
>  
> All the servers on my {{settings.xml}} hold the same user/password and I have 
> tried with the passwords encoded and in plain text.
>  
>  
> Further tests with base64 encoding and decoding showed that the "wrong" 
> password is the actual password but encoded from an ANSI code page where the 
> password accepted by Nexus is encoded from utf8.
>  
> I noticed the 401 responses don't specify the encoding on the 
> {{WWW-Authenticate}} header, which should clear up which encoding to use, but 
> still for some reason the two requests are apparently using different 
> encodings.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (MNG-7496) DefaultArtifactDescriptorReader.loadPom() should query the MavenWorkspaceReader first

2022-06-12 Thread Jira


[ 
https://issues.apache.org/jira/browse/MNG-7496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553242#comment-17553242
 ] 

Christoph Läubrich commented on MNG-7496:
-

Not yet, just checked the source for now, first wanted to make sure I do not 
oversee something, but if you think its useful I can prepare a PR (for 3.9.x)

> DefaultArtifactDescriptorReader.loadPom() should query the 
> MavenWorkspaceReader first
> -
>
> Key: MNG-7496
> URL: https://issues.apache.org/jira/browse/MNG-7496
> Project: Maven
>  Issue Type: Improvement
>Affects Versions: 3.8.6
>Reporter: Christoph Läubrich
>Priority: Major
>
> Now WorkspaceReaders work in extensions and while I develop a basic 
> implementation in Tycho I noticed that I get asked for a pom, but not for the 
> model first.
> The reason is that DefaultArtifactDescriptorReader.loadPom() do not query the 
> workspace reader but always resolves the pom artifact and then reads the pom 
> file. But afterwards, it do query the maven reader and use the model there.
> I don't know if there is an need to download the pom always (but not use 
> it...), at least in my case it requires me to write the model to disk (with 
> possibly incomplete content as I only get the pom artifact, but not the 
> actual artifact the model is searched for) to make maven happy or I'll get 
> nasty:
> [WARNING] The POM for ... is missing, no dependency information available
> My idea would be, to simply first as the WSR for the model and if it is 
> present do not perform any actions or, at least ask the WSR first before fail 
> and issue a warning...



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [maven-doxia-sitetools] slawekjaranowski commented on a diff in pull request #47: [DOXIASITETOOLS-257] Require a skin if a site descriptor (site.xml) h…

2022-06-12 Thread GitBox


slawekjaranowski commented on code in PR #47:
URL: 
https://github.com/apache/maven-doxia-sitetools/pull/47#discussion_r895141437


##
doxia-integration-tools/src/main/resources/default-site.xml:
##
@@ -22,6 +22,11 @@ under the License.
   
 ${project.name}
   
+  
+org.apache.maven.skins
+maven-default-skin
+1.3
+  

Review Comment:
   What will be the result - if  project / module doesn't have site.xml but 
parent of project has with skin defined.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-surefire] olamy commented on pull request #479: changing depedencies and build plan to be able to use -T3 or mvnd and to be sure artifacts are available when running its use verifier

2022-06-12 Thread GitBox


olamy commented on PR #479:
URL: https://github.com/apache/maven-surefire/pull/479#issuecomment-1153112560

   > When I see the 
[commit](https://github.com/apache/maven-surefire/pull/479/commits/a8295bfebd4c067d4caa1323ae80ecfee42883ac),
 I have to say that this PR is a pure mess and disaster, the providers must not 
be touched in the ITs POM. The POM changes have nothing to do with any build 
speed up, it has nothing to do with `-T3`. It's a pure hack which affects 
functionality of the tests and it is very risky solution. As I said before in 
Slack or GH, the way how the build can be faster is to focus on the most slow 
IT classes and those are only few and those are Parameterized and they can be 
speed up as it was before (I deleted due to Maven Resolver) only the way that 
the Maven local repo would have all artifacts pre-loaded or the Resolver would 
be failsafe which is not now and so the concurrent ITs would fail the Resolver 
of course. Maiking the project build parallel would speed up the build in 5 min 
because all modules except the surefire-its are much faster in comparison to 
the ITs, so
  there is no reason to think about these "improvements". The penalty would 
wrong behavior of the tests, and that's worst!
   > 
   > Another story is embedded Maven. This was not stable solution for us some 
time ago because it shares system props and env is shared and the developer has 
no notion about while writing the test, and so there is the risc the IT however 
succeeds on Jenkins but fails in real environment. That's the reason why it was 
removed several years ago in the surefire-its/pom.xml.
   
   2 facts:
   
   1.  build plan
   
 - before this commits in master:
```
   ➜  maven-surefire git:(master) mvn clean install -pl :surefire-its -am
   [INFO] Scanning for projects...
   [INFO] 

   [INFO] Reactor Build Order:
   [INFO] 
   [INFO] Apache Maven Surefire  
[pom]
   [INFO] Maven Surefire Integration Tests   
[jar]
   ```
   
   - after this change:
   
   ```
   ➜  maven-surefire git:(multithread-build-possible) mvn clean install -pl 
:surefire-its -am
   [INFO] Scanning for projects...
   [INFO] 

   [INFO] Reactor Build Order:
   [INFO] 
   [INFO] Apache Maven Surefire  
[pom]
   [INFO] Surefire Shared Utils  
[jar]
   [INFO] SureFire Logger API
[jar]
   [INFO] SureFire API   
[jar]
   [INFO] Surefire Extensions API
[jar]
   [INFO] Surefire Extensions SPI
[jar]
   [INFO] SureFire Booter
[jar]
   [INFO] Maven Surefire Test-Grouping Support   
[jar]
   [INFO] SureFire Providers 
[pom]
   [INFO] Shared JUnit3 Provider Code
[jar]
   [INFO] Shared Java 5 Provider Base
[jar]
   [INFO] Shared JUnit4 Provider Code
[jar]
   [INFO] Shared JUnit48 Provider Code   
[jar]
   [INFO] SureFire JUnit Runner  
[jar]
   [INFO] SureFire JUnit4 Runner 
[jar]
   [INFO] Maven Surefire Common  
[jar]
   [INFO] SureFire JUnitCore Runner  
[jar]
   [INFO] SureFire JUnit Platform Runner 
[jar]
   [INFO] SureFire TestNG Utils  
[jar]
   [INFO] SureFire TestNG Runner 
[jar]
   [INFO] Surefire Report Parser 
[jar]
   [INFO] Maven Surefire Plugin 
[maven-plugin]
   [INFO] Maven Failsafe Plugin 
[maven-plugin]
   [INFO] Maven Surefire Report Plugin  
[maven-plugin]
   [INFO] Maven Surefire Integration Tests   
[jar]
   ```
   
   I tend to think the second build plan is more correct regarding to what the 
`surefire-its` wants to achieve.
   the goal is not really to use only parallel as it will provide only a bit 
shorter build time but hey it's still an improvement.
   
   2. use of verifier with auto mode:
   - without this any branch of the build is about 1h20minutes see 
https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/job/master/
   - with this change: 
htt

[GitHub] [maven-doxia-sitetools] michael-o commented on a diff in pull request #47: [DOXIASITETOOLS-257] Require a skin if a site descriptor (site.xml) h…

2022-06-12 Thread GitBox


michael-o commented on code in PR #47:
URL: 
https://github.com/apache/maven-doxia-sitetools/pull/47#discussion_r895142915


##
doxia-integration-tools/src/main/resources/default-site.xml:
##
@@ -22,6 +22,11 @@ under the License.
   
 ${project.name}
   
+  
+org.apache.maven.skins
+maven-default-skin
+1.3
+  

Review Comment:
   Inheritance will kick in. Default site will only be used if upto the root 
parent no site descriptor has been defined.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Created] (MGPG-86) NullPointerException when gpg executable cannot be found

2022-06-12 Thread Chas Honton (Jira)
Chas Honton created MGPG-86:
---

 Summary: NullPointerException when gpg executable cannot be found
 Key: MGPG-86
 URL: https://issues.apache.org/jira/browse/MGPG-86
 Project: Maven GPG Plugin
  Issue Type: Bug
Affects Versions: 3.0.1, 1.6, 1.5
 Environment: linux, macos
Reporter: Chas Honton



{noformat}
[ERROR] Failed to execute goal 
org.apache.maven.plugins:maven-gpg-plugin:3.0.1:sign (sign-artifacts) on 
project git-tag-maven-plugin: Execution sign-artifacts of goal 
org.apache.maven.plugins:maven-gpg-plugin:3.0.1:sign failed.: 
NullPointerException -> [Help 1]
org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal 
org.apache.maven.plugins:maven-gpg-plugin:3.0.1:sign (sign-artifacts) on 
project git-tag-maven-plugin: Execution sign-artifacts of goal 
org.apache.maven.plugins:maven-gpg-plugin:3.0.1:sign failed.
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute 
(MojoExecutor.java:306)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:211)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:165)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:157)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:121)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:81)
at 
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
 (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute 
(LifecycleStarter.java:127)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:294)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:960)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke 
(NativeMethodAccessorImpl.java:62)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke 
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:566)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced 
(Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch 
(Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode 
(Launcher.java:406)
at org.codehaus.plexus.classworlds.launcher.Launcher.main 
(Launcher.java:347)
Caused by: org.apache.maven.plugin.PluginExecutionException: Execution 
sign-artifacts of goal org.apache.maven.plugins:maven-gpg-plugin:3.0.1:sign 
failed.
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo 
(DefaultBuildPluginManager.java:148)
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute 
(MojoExecutor.java:301)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:211)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:165)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute 
(MojoExecutor.java:157)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:121)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
(LifecycleModuleBuilder.java:81)
at 
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
 (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute 
(LifecycleStarter.java:127)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:294)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:960)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke 
(NativeMethodAccessorImpl.java:62)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke 
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:566)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced 
(Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch 
(Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode 
(Launcher.java:406)
at org.codehaus.plexus.classworlds.launc

[GitHub] [maven-gpg-plugin] chonton opened a new pull request, #17: [MGPG-86] - Prevent NullPointerException when executable cannot be run

2022-06-12 Thread GitBox


chonton opened a new pull request, #17:
URL: https://github.com/apache/maven-gpg-plugin/pull/17

   I hereby declare this contribution to be licensed under the [Apache License 
Version 2.0, January 2004](http://www.apache.org/licenses/LICENSE-2.0)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Assigned] (MSHARED-1045) MSHARED-1024 breaks binary backwards compatibility

2022-06-12 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/MSHARED-1045?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov reassigned MSHARED-1045:
---

Assignee: (was: Michael Osipov)

> MSHARED-1024 breaks binary backwards compatibility
> --
>
> Key: MSHARED-1045
> URL: https://issues.apache.org/jira/browse/MSHARED-1045
> Project: Maven Shared Components
>  Issue Type: Bug
>Reporter: Andrei Silviu Dragnea
>Priority: Major
>
> [https://github.com/apache/maven-reporting-api/pull/2] breaks binary 
> backwards compatibility of interface `MavenReport`, because replacing 
> `org.codehaus.doxia.sink.Sink` with `org.apache.maven.doxia.sink.Sink` 
> changes the signature of method:
> {code:java}
> void generate( Sink sink, Locale locale ) throws MavenReportException;{code}
> So nothing compiled against version `3.0` of the `maven-reporting-api` works 
> with `3.1.0` anymore.
> I suggest either reverting this commit in a new release or updating the code 
> in a backwards-compatible manner with two mutually recursive default 
> implementations for both the old and new signature (this requires Java 8 
> support though):
>  
> {code:java}
> @Deprecated
> default void generate( org.codehaus.doxia.sink.Sink sink, Locale locale ) 
> throws MavenReportException {
> generate((Sink) sink, locale);
> }
> default void generate( Sink sink, Locale locale ) throws MavenReportException 
> {
> generate((org.codehaus.doxia.sink.Sink) sink, locale);
> } {code}
> The solution above can result in `ClassCastException`s though, because some 
> `org.apache.maven.doxia.sink.Sink` maybe do not implement 
> `org.codehaus.doxia.sink`. I do not know any way of safely evolving the type 
> of an input parameter for a method.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Assigned] (MPIR-419) Generating site reports for plugin results in NoSuchMethodError

2022-06-12 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/MPIR-419?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov reassigned MPIR-419:
---

Assignee: Michael Osipov

> Generating site reports for plugin results in NoSuchMethodError
> ---
>
> Key: MPIR-419
> URL: https://issues.apache.org/jira/browse/MPIR-419
> Project: Maven Project Info Reports Plugin
>  Issue Type: Bug
>Affects Versions: 3.3.0
> Environment: Maven 3.8.5
> JDK 8
> Windows 10
>Reporter: Brad Larrick
>Assignee: Michael Osipov
>Priority: Major
>
> When generating the site for a maven plugin I get the following:
> java.lang.NoSuchMethodError: org.apache.maven.doxia.sink.Sink.verbatim(Z)V
>     at org.apache.maven.reporting.AbstractMavenReportRenderer.verbatimText 
> (AbstractMavenReportRenderer.java:448)
>     at 
> org.apache.maven.plugin.plugin.PluginReport$PluginOverviewRenderer.renderUsageSection
>  (PluginReport.java:694)
>     at 
> org.apache.maven.plugin.plugin.PluginReport$PluginOverviewRenderer.renderBody 
> (PluginReport.java:616)
>     at org.apache.maven.reporting.AbstractMavenReportRenderer.render 
> (AbstractMavenReportRenderer.java:80)
>     at org.apache.maven.plugin.plugin.PluginReport.executeReport 
> (PluginReport.java:266)



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Created] (MSKINS-194) Prevent loading GitHub ribbons from AWS

2022-06-12 Thread Konrad Windszus (Jira)
Konrad Windszus created MSKINS-194:
--

 Summary: Prevent loading GitHub ribbons from AWS
 Key: MSKINS-194
 URL: https://issues.apache.org/jira/browse/MSKINS-194
 Project: Maven Skins
  Issue Type: Improvement
  Components: Fluido Skin
Affects Versions: fluido-1.11.0
Reporter: Konrad Windszus


The GitHub ribbons are loaded from an AWS S3 bucket 
(https://github.com/apache/maven-fluido-skin/blob/171292d7f70b78c449d602da2414815cdb8e4ffd/src/main/resources/META-INF/maven/site-macros.vm#L666).
 To prevent exposing information about the site visitor, those images should be 
loaded locally. Also this is necessary to be compliant with 
https://privacy.apache.org/policies/privacy-policy-public.html.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Updated] (MSHARED-1031) PatternIncludesArtifactFilter#include(Artifact)

2022-06-12 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/MSHARED-1031?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov updated MSHARED-1031:

Summary: PatternIncludesArtifactFilter#include(Artifact)  (was: 
PatternIncludesArtifactFilter#include( Artifact ) )

> PatternIncludesArtifactFilter#include(Artifact)
> ---
>
> Key: MSHARED-1031
> URL: https://issues.apache.org/jira/browse/MSHARED-1031
> Project: Maven Shared Components
>  Issue Type: Bug
>  Components: maven-common-artifact-filters
>Affects Versions: maven-common-artifact-filters-3.2.0
>Reporter: Tibor Digana
>Assignee: Michael Osipov
>Priority: Major
> Fix For: maven-common-artifact-filters-3.3.0
>
>
> In principle the call looks like this:
> {noformat}
> new 
> PatternIncludesArtifactFilter("org.surefire.dependency:dependent-artifact2:*:*:tests-jdk15").include("org.surefire.dependency:dependent-artifact2:jar:tests-jdk15:1.0"
>  with scope tests)
> {noformat}
> The problem is that PatternIncludesArtifactFilter uses the comparison via 
> {{!=}} on {{char[]}}, see more specifically {{tokens[3] != ANY}}, and next 
> issue is that PatternIncludesArtifactFilter expects wildcard on classifier 
> which is not very useful, see the comment {{we only accept 5 tokens if the 
> classifier = '*'}}.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Updated] (MASSEMBLY-959) Upgrade to Java 8, drop unused dependencies

2022-06-12 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/MASSEMBLY-959?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov updated MASSEMBLY-959:
-
Summary: Upgrade to Java 8, drop unused dependencies  (was: Update to 
Java8, drop unused dependencies)

> Upgrade to Java 8, drop unused dependencies
> ---
>
> Key: MASSEMBLY-959
> URL: https://issues.apache.org/jira/browse/MASSEMBLY-959
> Project: Maven Assembly Plugin
>  Issue Type: Task
>Reporter: Tamás Cservenák
>Assignee: Tamás Cservenák
>Priority: Major
> Fix For: 3.4.0
>
>




--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Updated] (MASSEMBLY-960) Upgrade Maven Filtering to 3.3.0

2022-06-12 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/MASSEMBLY-960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov updated MASSEMBLY-960:
-
Summary: Upgrade Maven Filtering to 3.3.0  (was: Update maven-filtering)

> Upgrade Maven Filtering to 3.3.0
> 
>
> Key: MASSEMBLY-960
> URL: https://issues.apache.org/jira/browse/MASSEMBLY-960
> Project: Maven Assembly Plugin
>  Issue Type: Task
>Reporter: Tamás Cservenák
>Assignee: Tamás Cservenák
>Priority: Major
> Fix For: 3.4.0
>
>
> Update maven-filtering to latest one after MSHARED-1080



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (MSKINS-194) Prevent loading GitHub ribbons from AWS

2022-06-12 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/MSKINS-194?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553321#comment-17553321
 ] 

Michael Osipov commented on MSKINS-194:
---

Shit, yet another rabbit hole. Do you have files available? Willling to merge a 
PR.

> Prevent loading GitHub ribbons from AWS
> ---
>
> Key: MSKINS-194
> URL: https://issues.apache.org/jira/browse/MSKINS-194
> Project: Maven Skins
>  Issue Type: Improvement
>  Components: Fluido Skin
>Affects Versions: fluido-1.11.0
>Reporter: Konrad Windszus
>Priority: Major
>
> The GitHub ribbons are loaded from an AWS S3 bucket 
> (https://github.com/apache/maven-fluido-skin/blob/171292d7f70b78c449d602da2414815cdb8e4ffd/src/main/resources/META-INF/maven/site-macros.vm#L666).
>  To prevent exposing information about the site visitor, those images should 
> be loaded locally. Also this is necessary to be compliant with 
> https://privacy.apache.org/policies/privacy-policy-public.html.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] (MSHARED-390) Add startSection method AbstractMavenReportRenderer where anchor != name

2022-06-12 Thread Michael Osipov (Jira)


[ https://issues.apache.org/jira/browse/MSHARED-390 ]


Michael Osipov deleted comment on MSHARED-390:


was (Author: hudson):
Build unstable in Jenkins: Maven » Maven TLP » maven-shade-plugin » master #41

See 
https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shade-plugin/job/master/41/

> Add startSection method AbstractMavenReportRenderer where anchor != name
> 
>
> Key: MSHARED-390
> URL: https://issues.apache.org/jira/browse/MSHARED-390
> Project: Maven Shared Components
>  Issue Type: New Feature
>  Components: maven-reporting-impl
>Affects Versions: maven-reporting-impl-2.3
>Reporter: Michael Osipov
>Priority: Minor
>
> Sometimes it is necessary to provide a custom anchor name instead of using 
> the text as an anchor. This could be a synthetic anchor or a 
> language-independent one.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (MSKINS-194) Prevent loading GitHub ribbons from AWS

2022-06-12 Thread Konrad Windszus (Jira)


[ 
https://issues.apache.org/jira/browse/MSKINS-194?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553332#comment-17553332
 ] 

Konrad Windszus commented on MSKINS-194:


Maybe one can switch to a CSS only solution: 
https://github.com/simonwhitaker/github-fork-ribbon-css. Less bytes to 
transfer, supports all colors, …

> Prevent loading GitHub ribbons from AWS
> ---
>
> Key: MSKINS-194
> URL: https://issues.apache.org/jira/browse/MSKINS-194
> Project: Maven Skins
>  Issue Type: Improvement
>  Components: Fluido Skin
>Affects Versions: fluido-1.11.0
>Reporter: Konrad Windszus
>Priority: Major
>
> The GitHub ribbons are loaded from an AWS S3 bucket 
> (https://github.com/apache/maven-fluido-skin/blob/171292d7f70b78c449d602da2414815cdb8e4ffd/src/main/resources/META-INF/maven/site-macros.vm#L666).
>  To prevent exposing information about the site visitor, those images should 
> be loaded locally. Also this is necessary to be compliant with 
> https://privacy.apache.org/policies/privacy-policy-public.html.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (MSHARED-390) Add startSection method AbstractMavenReportRenderer where anchor != name

2022-06-12 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/MSHARED-390?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553335#comment-17553335
 ] 

Michael Osipov commented on MSHARED-390:


Interesting point for HTML5: https://mathiasbynens.be/notes/html5-id-class. No 
escaping necessary anymore, but still necessary to have synthetic anchors 
instead of derived ones.

> Add startSection method AbstractMavenReportRenderer where anchor != name
> 
>
> Key: MSHARED-390
> URL: https://issues.apache.org/jira/browse/MSHARED-390
> Project: Maven Shared Components
>  Issue Type: New Feature
>  Components: maven-reporting-impl
>Affects Versions: maven-reporting-impl-2.3
>Reporter: Michael Osipov
>Priority: Minor
>
> Sometimes it is necessary to provide a custom anchor name instead of using 
> the text as an anchor. This could be a synthetic anchor or a 
> language-independent one.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (MSHARED-390) Add startSection method AbstractMavenReportRenderer where anchor != name

2022-06-12 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/MSHARED-390?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553337#comment-17553337
 ] 

Michael Osipov commented on MSHARED-390:


But since we do XHTML and not HTML, we must stick with XML semantics.

> Add startSection method AbstractMavenReportRenderer where anchor != name
> 
>
> Key: MSHARED-390
> URL: https://issues.apache.org/jira/browse/MSHARED-390
> Project: Maven Shared Components
>  Issue Type: New Feature
>  Components: maven-reporting-impl
>Affects Versions: maven-reporting-impl-2.3
>Reporter: Michael Osipov
>Priority: Minor
>
> Sometimes it is necessary to provide a custom anchor name instead of using 
> the text as an anchor. This could be a synthetic anchor or a 
> language-independent one.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [maven-assembly-plugin] michael-o commented on a diff in pull request #68: [MASSEMBLY-955] Fix the pattern bug.

2022-06-12 Thread GitBox


michael-o commented on code in PR #68:
URL: 
https://github.com/apache/maven-assembly-plugin/pull/68#discussion_r895231107


##
pom.xml:
##
@@ -143,7 +143,7 @@ under the License.
 
   org.apache.maven.shared
   maven-common-artifact-filters
-  3.2.0
+  3.2.1-SNAPSHOT

Review Comment:
   3.3.0



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MSKINS-194) Prevent loading GitHub ribbons from AWS

2022-06-12 Thread Slawomir Jaranowski (Jira)


[ 
https://issues.apache.org/jira/browse/MSKINS-194?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553341#comment-17553341
 ] 

Slawomir Jaranowski commented on MSKINS-194:


+1 for CSS solution

> Prevent loading GitHub ribbons from AWS
> ---
>
> Key: MSKINS-194
> URL: https://issues.apache.org/jira/browse/MSKINS-194
> Project: Maven Skins
>  Issue Type: Improvement
>  Components: Fluido Skin
>Affects Versions: fluido-1.11.0
>Reporter: Konrad Windszus
>Priority: Major
>
> The GitHub ribbons are loaded from an AWS S3 bucket 
> (https://github.com/apache/maven-fluido-skin/blob/171292d7f70b78c449d602da2414815cdb8e4ffd/src/main/resources/META-INF/maven/site-macros.vm#L666).
>  To prevent exposing information about the site visitor, those images should 
> be loaded locally. Also this is necessary to be compliant with 
> https://privacy.apache.org/policies/privacy-policy-public.html.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [maven-fluido-skin] michael-o commented on a diff in pull request #34: Mskins 191 dynamic library retrieval

2022-06-12 Thread GitBox


michael-o commented on code in PR #34:
URL: https://github.com/apache/maven-fluido-skin/pull/34#discussion_r895235760


##
pom.xml:
##
@@ -98,12 +98,14 @@ under the License.
   
 
   
-2.3.2
+4.2.2
+3.1.1
 1.11.2
 3.12.0
-3.3.0
+3.0.0

Review Comment:
   Unrelated, drop it



##
pom.xml:
##
@@ -98,12 +98,14 @@ under the License.
   
 
   
-2.3.2
+4.2.2
+3.1.1
 1.11.2
 3.12.0
-3.3.0
+3.0.0
 
2022-05-14T18:16:12Z
-4.2.2
+
+
${project.build.directory}/interim-minify/

Review Comment:
   typo: minifiy



##
src/site/site.xml:
##
@@ -38,6 +38,7 @@ under the License.
 apache/${project.artifactId}
 right
 gray
+true

Review Comment:
   Why?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-fluido-skin] stevecrox commented on a diff in pull request #34: Mskins 191 dynamic library retrieval

2022-06-12 Thread GitBox


stevecrox commented on code in PR #34:
URL: https://github.com/apache/maven-fluido-skin/pull/34#discussion_r895236923


##
src/site/site.xml:
##
@@ -38,6 +38,7 @@ under the License.
 apache/${project.artifactId}
 right
 gray
+true

Review Comment:
   Reverted, accidental



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-fluido-skin] stevecrox commented on pull request #34: Mskins 191 dynamic library retrieval

2022-06-12 Thread GitBox


stevecrox commented on PR #34:
URL: https://github.com/apache/maven-fluido-skin/pull/34#issuecomment-1153301311

   Pretty happy with how breadcrumbs, project version, and sidebar now look. 
This layout should translate across all versions of bootstrap. Resolves certain 
spacing issues causing some of the IT examples to have layout issues.
   
   I am happy with the topbar design its compatible with Bootstrap 3 -> 5, 
breadcrumb has a hardcoded background colour in 3 which is frustrating but 
looks that is fixed in 4 and I've laid this out to once we are on 5 it will 
just work. Submenu's from the topbar are still broken, need a bit more time to 
investigate.
   
   Prettify was broken, through sheer luck I've located the original Google 
Library and the only release in NPM Registry. Using this seems to have restored 
prettify but its listing line numbers in blocks of 5, probably some 
configuration option I need to figure out.
   
   mskins24_topbar seems to be the only IT layout which is broken, will go on 
the list


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-wrapper] dependabot[bot] opened a new pull request, #49: Bump mavenVersion from 3.1.0 to 3.8.6

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #49:
URL: https://github.com/apache/maven-wrapper/pull/49

   Bumps `mavenVersion` from 3.1.0 to 3.8.6.
   Updates `maven-core` from 3.1.0 to 3.8.6
   
   Release notes
   Sourced from https://github.com/apache/maven/releases";>maven-core's 
releases.
   
   3.8.5
   What's Changed
   
   [3.8.x][MNG-7156][MNG-7285] Add locking in MojoExecutor by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/628";>apache/maven#628
   [MNG-6326] Make the build fail if core extensions can not be loaded by 
https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/648";>apache/maven#648
   [3.8.x][MNG-7347] SessionScoped beans should be singletons for a given 
session by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/653";>apache/maven#653
   [3.8.x][MNG-7386] Make sure the ModelMerger$MergingList can be 
serialized by https://github.com/gnodet";>@​gnodet in 
https://github-redirect.dependabot.com/apache/maven/pull/656";>apache/maven#656
   [3.8.x][MNG-7349] Limit relocation warning message to direct 
dependencies only by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/657";>apache/maven#657
   [3.8.x][MNG-6727] Changed expression check to project.version and 
project.parent.version by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/670";>apache/maven#670
   [3.8.x][MNG-7395] - Support system-properties in extension.xml by https://github.com/laeubi";>@​laeubi in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   New Contributors
   
   https://github.com/laeubi";>@​laeubi made their 
first contribution in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   Full Changelog: https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5";>https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5
   3.8.4
   What's Changed
   
   [MNG-6302] logging the module count by https://github.com/rmannibucau";>@​rmannibucau in https://github-redirect.dependabot.com/apache/maven/pull/136";>apache/maven#136
   [MNG-6424] - Upgrade plexus-interpolation to 1.25 by https://github.com/shemic87";>@​shemic87 in https://github-redirect.dependabot.com/apache/maven/pull/172";>apache/maven#172
   Update Jenkins build to use Maven 3.5.4 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/179";>apache/maven#179
   [MNG-6473] Update Mockito to 2.21.0 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/181";>apache/maven#181
   MNG-6414 Add more Apache license headers to skip downloading license … 
by https://github.com/slachiewicz";>@​slachiewicz in 
https://github-redirect.dependabot.com/apache/maven/pull/167";>apache/maven#167
   [MNG-6479] Upgrade XMLUnit to 2.2.1 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/183";>apache/maven#183
   Fixed typo in exception logging by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/170";>apache/maven#170
   [MNG-6490] Maven fails reporting circular dependency when the depende… 
by https://github.com/slachiewicz";>@​slachiewicz in 
https://github-redirect.dependabot.com/apache/maven/pull/188";>apache/maven#188
   [MNG-6261] - using java File api to compare by https://github.com/fabcipriano";>@​fabcipriano in https://github-redirect.dependabot.com/apache/maven/pull/192";>apache/maven#192
   MNG-6529 - ProjectBuild.build(projectsList, ...) ignores 
request.isResolveDependencies() by https://github.com/mickaelistria";>@​mickaelistria in https://github-redirect.dependabot.com/apache/maven/pull/193";>apache/maven#193
   [MNG-6559] Fix mailing list URL by https://github.com/johnlinp";>@​johnlinp in https://github-redirect.dependabot.com/apache/maven/pull/230";>apache/maven#230
   [MNG-6611] Update animal-sniffer-maven-plugin to version 1.17 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/237";>apache/maven#237
   [MNG-6405] Fix basedir in MavenProject.deepCopy by https://github.com/jglick";>@​jglick in https://github-redirect.dependabot.com/apache/maven/pull/225";>apache/maven#225
   [MNG-6655] Add support for "release" qualifier by https://github.com/michael-o";>@​michael-o in https://github-redirect.dependabot.com/apache/maven/pull/249";>apache/maven#249
   Always deploy snapshot from master by https://github.com/mickaelistria";>@​mickaelistria in https://github-redirect.dependabot.com/apache/maven/pull/250";>apache/maven#250
   [MNG-6665] toolchain.xml file should support environment variables by https://github.com/MartinKanters";>@​MartinKanters in https://github-red

[GitHub] [maven-wrapper] dependabot[bot] opened a new pull request, #50: Bump plexus-archiver from 4.2.5 to 4.3.0

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #50:
URL: https://github.com/apache/maven-wrapper/pull/50

   Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) 
from 4.2.5 to 4.3.0.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases";>plexus-archiver's
 releases.
   
   Plexus Archiver 4.2.7
   🚀 New features and improvements
   
   Respect order of META-INF/ and META-INF/MANIFEST.MF entries in a JAR 
file (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/189";>#189)
 https://github.com/michael-o";>@​michael-o
   
   Plexus Archiver 4.2.6
   This release updates commons-compress to 1.21 which contains security 
fixed for https://github.com/advisories/GHSA-xqfj-vm6h-2x34";>CVE-2021-35517 https://github.com/advisories/GHSA-crv7-7245-f45f";>CVE-2021-35516 https://github.com/advisories/GHSA-7hfm-57qf-j43q";>CVE-2021-35515 https://github.com/advisories/GHSA-mc84-pj99-q6hh";>CVE-2021-36090
   This version requires Java 8 as minimum (commons-compress 1.21 
requires Java 8).
   🚀 New features and improvements
   
   FileInputStream, FileOutputStream, FileReader and FileWriter are no 
longer used (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/183";>#183)
 https://github.com/jorsol";>@​jorsol
   Code cleanup (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/172";>#172)
 https://github.com/olamy";>@​olamy
   
   📦 Dependency updates
   
   Bump plexus from 7 to 8 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/179";>#179)
 https://github.com/dependabot";>@​dependabot
   Bump plexus-utils from 3.3.0 to 3.4.1 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/181";>#181)
 https://github.com/dependabot";>@​dependabot
   Bump commons-compress from 1.20 to 1.21 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/177";>#177)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/88d132ad0cb904d1786c9a4ec4b8318ac66f3864";>88d132a
 [maven-release-plugin] prepare release plexus-archiver-4.3.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/e135a2b6671fa098b429bc28eb178af256326b79";>e135a2b
 Bump plexus from 8 to 10
   https://github.com/codehaus-plexus/plexus-archiver/commit/e8eecf29c068c20dca8a126a7c7d28a184e8e318";>e8eecf2
 switch build badge from Travis to GH
   https://github.com/codehaus-plexus/plexus-archiver/commit/d715d6437afbb75c913d0e8d76ef2e00b8a0e322";>d715d64
 Bump release-drafter/release-drafter from 5.19.0 to 5.20.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/50c5fc07ae7e84e7d9a33fe22e2e409ec6aa8a08";>50c5fc0
 Rename setTime method to setZipEntryTime
   https://github.com/codehaus-plexus/plexus-archiver/commit/ee2f99da1d8fc90b5a9c9722176c0c8b88ea";>ee2f99d
 Bump plexus-io from 3.2.0 to 3.3.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/c2a06d64b76458d12cc4e7fab9b9b82cbd686cf5";>c2a06d6
 Bump plexus-utils from 3.4.1 to 3.4.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/6d0cb3607a7c35e12ddaa9a133885caa777b177d";>6d0cb36
 remove old release tag value
   https://github.com/codehaus-plexus/plexus-archiver/commit/581e306276b780092b43cd5b9a230f9960fa27c2";>581e306
 Convert InputStreamSupplier to lambdas
   https://github.com/codehaus-plexus/plexus-archiver/commit/7eb5a660a9ccb2968ce4f172baaa949c72e87f87";>7eb5a66
 Delete codeql-analysis.yml
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.2.5...plexus-archiver-4.3.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver&package-manager=maven&previous-version=4.2.5&new-version=4.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close th

[GitHub] [maven-wrapper] dependabot[bot] commented on pull request #24: Bump plexus-archiver from 4.2.1 to 4.2.7

2022-06-12 Thread GitBox


dependabot[bot] commented on PR #24:
URL: https://github.com/apache/maven-wrapper/pull/24#issuecomment-1153371139

   Superseded by #50.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-wrapper] dependabot[bot] closed pull request #24: Bump plexus-archiver from 4.2.1 to 4.2.7

2022-06-12 Thread GitBox


dependabot[bot] closed pull request #24: Bump plexus-archiver from 4.2.1 to 
4.2.7
URL: https://github.com/apache/maven-wrapper/pull/24


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jar-plugin] dependabot[bot] opened a new pull request, #44: Bump mavenVersion from 3.1.0 to 3.8.6

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #44:
URL: https://github.com/apache/maven-jar-plugin/pull/44

   Bumps `mavenVersion` from 3.1.0 to 3.8.6.
   Updates `maven-plugin-api` from 3.1.0 to 3.8.6
   
   Release notes
   Sourced from https://github.com/apache/maven/releases";>maven-plugin-api's 
releases.
   
   3.8.5
   What's Changed
   
   [3.8.x][MNG-7156][MNG-7285] Add locking in MojoExecutor by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/628";>apache/maven#628
   [MNG-6326] Make the build fail if core extensions can not be loaded by 
https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/648";>apache/maven#648
   [3.8.x][MNG-7347] SessionScoped beans should be singletons for a given 
session by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/653";>apache/maven#653
   [3.8.x][MNG-7386] Make sure the ModelMerger$MergingList can be 
serialized by https://github.com/gnodet";>@​gnodet in 
https://github-redirect.dependabot.com/apache/maven/pull/656";>apache/maven#656
   [3.8.x][MNG-7349] Limit relocation warning message to direct 
dependencies only by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/657";>apache/maven#657
   [3.8.x][MNG-6727] Changed expression check to project.version and 
project.parent.version by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/670";>apache/maven#670
   [3.8.x][MNG-7395] - Support system-properties in extension.xml by https://github.com/laeubi";>@​laeubi in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   New Contributors
   
   https://github.com/laeubi";>@​laeubi made their 
first contribution in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   Full Changelog: https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5";>https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5
   3.8.4
   What's Changed
   
   [MNG-6302] logging the module count by https://github.com/rmannibucau";>@​rmannibucau in https://github-redirect.dependabot.com/apache/maven/pull/136";>apache/maven#136
   [MNG-6424] - Upgrade plexus-interpolation to 1.25 by https://github.com/shemic87";>@​shemic87 in https://github-redirect.dependabot.com/apache/maven/pull/172";>apache/maven#172
   Update Jenkins build to use Maven 3.5.4 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/179";>apache/maven#179
   [MNG-6473] Update Mockito to 2.21.0 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/181";>apache/maven#181
   MNG-6414 Add more Apache license headers to skip downloading license … 
by https://github.com/slachiewicz";>@​slachiewicz in 
https://github-redirect.dependabot.com/apache/maven/pull/167";>apache/maven#167
   [MNG-6479] Upgrade XMLUnit to 2.2.1 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/183";>apache/maven#183
   Fixed typo in exception logging by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/170";>apache/maven#170
   [MNG-6490] Maven fails reporting circular dependency when the depende… 
by https://github.com/slachiewicz";>@​slachiewicz in 
https://github-redirect.dependabot.com/apache/maven/pull/188";>apache/maven#188
   [MNG-6261] - using java File api to compare by https://github.com/fabcipriano";>@​fabcipriano in https://github-redirect.dependabot.com/apache/maven/pull/192";>apache/maven#192
   MNG-6529 - ProjectBuild.build(projectsList, ...) ignores 
request.isResolveDependencies() by https://github.com/mickaelistria";>@​mickaelistria in https://github-redirect.dependabot.com/apache/maven/pull/193";>apache/maven#193
   [MNG-6559] Fix mailing list URL by https://github.com/johnlinp";>@​johnlinp in https://github-redirect.dependabot.com/apache/maven/pull/230";>apache/maven#230
   [MNG-6611] Update animal-sniffer-maven-plugin to version 1.17 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/237";>apache/maven#237
   [MNG-6405] Fix basedir in MavenProject.deepCopy by https://github.com/jglick";>@​jglick in https://github-redirect.dependabot.com/apache/maven/pull/225";>apache/maven#225
   [MNG-6655] Add support for "release" qualifier by https://github.com/michael-o";>@​michael-o in https://github-redirect.dependabot.com/apache/maven/pull/249";>apache/maven#249
   Always deploy snapshot from master by https://github.com/mickaelistria";>@​mickaelistria in https://github-redirect.dependabot.com/apache/maven/pull/250";>apache/maven#250
   [MNG-6665] toolchain.xml file should support environment variables by https://github.com/MartinKanters";>@​MartinKanters in htt

[GitHub] [maven-archetype] olamy commented on pull request #96: Bump extra-enforcer-rules from 1.3 to 1.5.1

2022-06-12 Thread GitBox


olamy commented on PR #96:
URL: https://github.com/apache/maven-archetype/pull/96#issuecomment-1153416657

   @dependabot rebase


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-site-plugin] dependabot[bot] opened a new pull request, #84: Bump plexus-archiver from 4.2.7 to 4.3.0

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #84:
URL: https://github.com/apache/maven-site-plugin/pull/84

   Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) 
from 4.2.7 to 4.3.0.
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/88d132ad0cb904d1786c9a4ec4b8318ac66f3864";>88d132a
 [maven-release-plugin] prepare release plexus-archiver-4.3.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/e135a2b6671fa098b429bc28eb178af256326b79";>e135a2b
 Bump plexus from 8 to 10
   https://github.com/codehaus-plexus/plexus-archiver/commit/e8eecf29c068c20dca8a126a7c7d28a184e8e318";>e8eecf2
 switch build badge from Travis to GH
   https://github.com/codehaus-plexus/plexus-archiver/commit/d715d6437afbb75c913d0e8d76ef2e00b8a0e322";>d715d64
 Bump release-drafter/release-drafter from 5.19.0 to 5.20.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/50c5fc07ae7e84e7d9a33fe22e2e409ec6aa8a08";>50c5fc0
 Rename setTime method to setZipEntryTime
   https://github.com/codehaus-plexus/plexus-archiver/commit/ee2f99da1d8fc90b5a9c9722176c0c8b88ea";>ee2f99d
 Bump plexus-io from 3.2.0 to 3.3.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/c2a06d64b76458d12cc4e7fab9b9b82cbd686cf5";>c2a06d6
 Bump plexus-utils from 3.4.1 to 3.4.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/6d0cb3607a7c35e12ddaa9a133885caa777b177d";>6d0cb36
 remove old release tag value
   https://github.com/codehaus-plexus/plexus-archiver/commit/581e306276b780092b43cd5b9a230f9960fa27c2";>581e306
 Convert InputStreamSupplier to lambdas
   https://github.com/codehaus-plexus/plexus-archiver/commit/7eb5a660a9ccb2968ce4f172baaa949c72e87f87";>7eb5a66
 Delete codeql-analysis.yml
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.2.7...plexus-archiver-4.3.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver&package-manager=maven&previous-version=4.2.7&new-version=4.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-indexer] dependabot[bot] opened a new pull request, #217: Bump maven.version from 3.8.5 to 3.8.6

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #217:
URL: https://github.com/apache/maven-indexer/pull/217

   Bumps `maven.version` from 3.8.5 to 3.8.6.
   Updates `maven-model` from 3.8.5 to 3.8.6
   
   Commits
   
   https://github.com/apache/maven/commit/84538c9988a25aec085021c365c560670ad80f63";>84538c9
 [maven-release-plugin] prepare release maven-3.8.6
   https://github.com/apache/maven/commit/a2ad4f2f7b4c5be6c65191dbe721e35839f107ec";>a2ad4f2
 deploy master, 3.8.x and 3.9.x
   https://github.com/apache/maven/commit/9a8c4a464cdc2c5ea329a8340142892319173b5d";>9a8c4a4
 [MNG-7490] Upgrade Plexus Utils to 3.3.1
   https://github.com/apache/maven/commit/8b157e7b0e2eb89a704e42bfda641d460236645f";>8b157e7
 [MNG-7489] Upgrade JUnit to 4.13.2
   https://github.com/apache/maven/commit/afc0155a9aeb57027958ff9bac9bcd2ae928a38d";>afc0155
 [MNG-7488] Upgrade SLF4J to 1.7.36
   https://github.com/apache/maven/commit/5c0d6b9a11a74493391ca5c1a3e78a5dc7dc0354";>5c0d6b9
 [MNG-7476] Display a warning when an aggregator mojo is locking other mojos 
e...
   https://github.com/apache/maven/commit/0b79a9e64325f21659923fd01606b26d4c993b63";>0b79a9e
 [MNG-7487] Fix deadlock during forked lifecycle executions
   https://github.com/apache/maven/commit/88a03f8ea53242bdcd18657b2ef10806b151f475";>88a03f8
 [MNG-7486] Create a multiline message helper for boxed log messages
   https://github.com/apache/maven/commit/23cc8633983f04f243b15b02fc2e92e2807e009d";>23cc863
 [MNG-7448] Don't ignore bin/ otherwise bin/ in apache-maven module cannot be 
...
   https://github.com/apache/maven/commit/7ae663f73b287d07f561d28407fb401a4e7698d3";>7ae663f
 Revert "[MNG-7347] SessionScoped beans should be singletons for a given 
sessi...
   Additional commits viewable in https://github.com/apache/maven/compare/maven-3.8.5...maven-3.8.6";>compare
 view
   
   
   
   
   Updates `maven-model-builder` from 3.8.5 to 3.8.6
   
   Commits
   
   https://github.com/apache/maven/commit/84538c9988a25aec085021c365c560670ad80f63";>84538c9
 [maven-release-plugin] prepare release maven-3.8.6
   https://github.com/apache/maven/commit/a2ad4f2f7b4c5be6c65191dbe721e35839f107ec";>a2ad4f2
 deploy master, 3.8.x and 3.9.x
   https://github.com/apache/maven/commit/9a8c4a464cdc2c5ea329a8340142892319173b5d";>9a8c4a4
 [MNG-7490] Upgrade Plexus Utils to 3.3.1
   https://github.com/apache/maven/commit/8b157e7b0e2eb89a704e42bfda641d460236645f";>8b157e7
 [MNG-7489] Upgrade JUnit to 4.13.2
   https://github.com/apache/maven/commit/afc0155a9aeb57027958ff9bac9bcd2ae928a38d";>afc0155
 [MNG-7488] Upgrade SLF4J to 1.7.36
   https://github.com/apache/maven/commit/5c0d6b9a11a74493391ca5c1a3e78a5dc7dc0354";>5c0d6b9
 [MNG-7476] Display a warning when an aggregator mojo is locking other mojos 
e...
   https://github.com/apache/maven/commit/0b79a9e64325f21659923fd01606b26d4c993b63";>0b79a9e
 [MNG-7487] Fix deadlock during forked lifecycle executions
   https://github.com/apache/maven/commit/88a03f8ea53242bdcd18657b2ef10806b151f475";>88a03f8
 [MNG-7486] Create a multiline message helper for boxed log messages
   https://github.com/apache/maven/commit/23cc8633983f04f243b15b02fc2e92e2807e009d";>23cc863
 [MNG-7448] Don't ignore bin/ otherwise bin/ in apache-maven module cannot be 
...
   https://github.com/apache/maven/commit/7ae663f73b287d07f561d28407fb401a4e7698d3";>7ae663f
 Revert "[MNG-7347] SessionScoped beans should be singletons for a given 
sessi...
   Additional commits viewable in https://github.com/apache/maven/compare/maven-3.8.5...maven-3.8.6";>compare
 view
   
   
   
   
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creati

[GitHub] [maven-apache-parent] dependabot[bot] opened a new pull request, #87: Bump maven-enforcer-plugin from 3.0.0 to 3.1.0

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #87:
URL: https://github.com/apache/maven-apache-parent/pull/87

   Bumps [maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 
3.0.0 to 3.1.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-enforcer/releases";>maven-enforcer-plugin's
 releases.
   
   3.1.0
   
   🚀 New features and improvements
   
   https://issues.apache.org/jira/browse/MENFORCER-420";>[MENFORCER-420] 
- cache dependencies across rules (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/152";>#152)
 https://github.com/josephw";>@​josephw
   https://issues.apache.org/jira/browse/MENFORCER-409";>[MENFORCER-409] 
- Log at ERROR level when  is set (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/133";>#133)
 https://github.com/electrum";>@​electrum
   
   🐛 Bug Fixes
   
   https://issues.apache.org/jira/browse/MENFORCER-389";>[MENFORCER-389] 
- Allow filtering of parent in requireReleaseDeps (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/157";>#157)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MENFORCER-421";>[MENFORCER-421] 
- Use currently build artifacts in IT tests (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/159";>#159)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MENFORCER-402";>[MENFORCER-402] 
- fix provided dependencies in RequireUpperBoundDeps (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/140";>#140)
 https://github.com/subes";>@​subes
   
   📦 Dependency updates
   
   Bump mockito.version from 4.6.0 to 4.6.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/161";>#161)
 https://github.com/dependabot";>@​dependabot
   Bump assertj-core from 3.23.0 to 3.23.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/160";>#160)
 https://github.com/dependabot";>@​dependabot
   Bump assertj-core from 3.22.0 to 3.23.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/158";>#158)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.5.1 to 4.6.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/156";>#156)
 https://github.com/dependabot";>@​dependabot
   https://issues.apache.org/jira/browse/MENFORCER-419";>[MENFORCER-419] 
- Upgrade Maven to 3.2.5 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/154";>#154)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MENFORCER-418";>[MENFORCER-418] 
- Upgrade Parent to 36 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/153";>#153)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump plexus-utils from 3.4.1 to 3.4.2 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/151";>#151)
 https://github.com/dependabot";>@​dependabot
   Bump maven-dependency-tree from 3.1.0 to 3.1.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/150";>#150)
 https://github.com/dependabot";>@​dependabot
   Bump maven-javadoc-plugin from 3.3.1 to 3.4.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/147";>#147)
 https://github.com/dependabot";>@​dependabot
   Bump maven-surefire-plugin from 3.0.0-M5 to 3.0.0-M6 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/148";>#148)
 https://github.com/dependabot";>@​dependabot
   Bump maven-project-info-reports-plugin from 3.2.2 to 3.3.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/149";>#149)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.4.0 to 4.5.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/146";>#146)
 https://github.com/dependabot";>@​dependabot
   Bump assertj-core from 3.21.0 to 3.22.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/134";>#134)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.2.0 to 4.4.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/142";>#142)
 https://github.com/dependabot";>@​dependabot
   Bump maven-jxr-plugin from 3.1.1 to 3.2.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/143";>#143)
 https://github.com/dependabot";>@​dependabot
   Bump maven-project-info-reports-plugin from 3.1.2 to 3.2.2 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/144";>#144)
 https://github.com/dependabot";>@​dependabot
   Bump mrm-maven-plugin from 1.2.0 to 1.3.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/129";>#129)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.1.0 to 4.2.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/132";>#132)
 https://github.com/dependabot";>@​dependabot
   Bump maven-javadoc-plugin from 3.2.0 to 3.3.1 (https://github-red

[GitHub] [maven-apache-parent] dependabot[bot] opened a new pull request, #88: Bump apache-rat-plugin from 0.13 to 0.14

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #88:
URL: https://github.com/apache/maven-apache-parent/pull/88

   Bumps apache-rat-plugin from 0.13 to 0.14.
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.rat:apache-rat-plugin&package-manager=maven&previous-version=0.13&new-version=0.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jlink-plugin] dependabot[bot] commented on pull request #88: Bump plexus-archiver from 4.2.6 to 4.2.7

2022-06-12 Thread GitBox


dependabot[bot] commented on PR #88:
URL: 
https://github.com/apache/maven-jlink-plugin/pull/88#issuecomment-1153440716

   Superseded by #112.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jlink-plugin] dependabot[bot] opened a new pull request, #112: Bump plexus-archiver from 4.2.6 to 4.3.0

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #112:
URL: https://github.com/apache/maven-jlink-plugin/pull/112

   Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) 
from 4.2.6 to 4.3.0.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases";>plexus-archiver's
 releases.
   
   Plexus Archiver 4.2.7
   🚀 New features and improvements
   
   Respect order of META-INF/ and META-INF/MANIFEST.MF entries in a JAR 
file (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/189";>#189)
 https://github.com/michael-o";>@​michael-o
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/88d132ad0cb904d1786c9a4ec4b8318ac66f3864";>88d132a
 [maven-release-plugin] prepare release plexus-archiver-4.3.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/e135a2b6671fa098b429bc28eb178af256326b79";>e135a2b
 Bump plexus from 8 to 10
   https://github.com/codehaus-plexus/plexus-archiver/commit/e8eecf29c068c20dca8a126a7c7d28a184e8e318";>e8eecf2
 switch build badge from Travis to GH
   https://github.com/codehaus-plexus/plexus-archiver/commit/d715d6437afbb75c913d0e8d76ef2e00b8a0e322";>d715d64
 Bump release-drafter/release-drafter from 5.19.0 to 5.20.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/50c5fc07ae7e84e7d9a33fe22e2e409ec6aa8a08";>50c5fc0
 Rename setTime method to setZipEntryTime
   https://github.com/codehaus-plexus/plexus-archiver/commit/ee2f99da1d8fc90b5a9c9722176c0c8b88ea";>ee2f99d
 Bump plexus-io from 3.2.0 to 3.3.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/c2a06d64b76458d12cc4e7fab9b9b82cbd686cf5";>c2a06d6
 Bump plexus-utils from 3.4.1 to 3.4.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/6d0cb3607a7c35e12ddaa9a133885caa777b177d";>6d0cb36
 remove old release tag value
   https://github.com/codehaus-plexus/plexus-archiver/commit/581e306276b780092b43cd5b9a230f9960fa27c2";>581e306
 Convert InputStreamSupplier to lambdas
   https://github.com/codehaus-plexus/plexus-archiver/commit/7eb5a660a9ccb2968ce4f172baaa949c72e87f87";>7eb5a66
 Delete codeql-analysis.yml
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.2.6...plexus-archiver-4.3.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver&package-manager=maven&previous-version=4.2.6&new-version=4.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jlink-plugin] dependabot[bot] closed pull request #88: Bump plexus-archiver from 4.2.6 to 4.2.7

2022-06-12 Thread GitBox


dependabot[bot] closed pull request #88: Bump plexus-archiver from 4.2.6 to 
4.2.7
URL: https://github.com/apache/maven-jlink-plugin/pull/88


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-help-plugin] dependabot[bot] opened a new pull request, #63: Bump maven-enforcer-plugin from 3.0.0-M3 to 3.1.0

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #63:
URL: https://github.com/apache/maven-help-plugin/pull/63

   Bumps [maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 
3.0.0-M3 to 3.1.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-enforcer/releases";>maven-enforcer-plugin's
 releases.
   
   3.1.0
   
   🚀 New features and improvements
   
   https://issues.apache.org/jira/browse/MENFORCER-420";>[MENFORCER-420] 
- cache dependencies across rules (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/152";>#152)
 https://github.com/josephw";>@​josephw
   https://issues.apache.org/jira/browse/MENFORCER-409";>[MENFORCER-409] 
- Log at ERROR level when  is set (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/133";>#133)
 https://github.com/electrum";>@​electrum
   
   🐛 Bug Fixes
   
   https://issues.apache.org/jira/browse/MENFORCER-389";>[MENFORCER-389] 
- Allow filtering of parent in requireReleaseDeps (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/157";>#157)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MENFORCER-421";>[MENFORCER-421] 
- Use currently build artifacts in IT tests (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/159";>#159)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MENFORCER-402";>[MENFORCER-402] 
- fix provided dependencies in RequireUpperBoundDeps (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/140";>#140)
 https://github.com/subes";>@​subes
   
   📦 Dependency updates
   
   Bump mockito.version from 4.6.0 to 4.6.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/161";>#161)
 https://github.com/dependabot";>@​dependabot
   Bump assertj-core from 3.23.0 to 3.23.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/160";>#160)
 https://github.com/dependabot";>@​dependabot
   Bump assertj-core from 3.22.0 to 3.23.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/158";>#158)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.5.1 to 4.6.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/156";>#156)
 https://github.com/dependabot";>@​dependabot
   https://issues.apache.org/jira/browse/MENFORCER-419";>[MENFORCER-419] 
- Upgrade Maven to 3.2.5 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/154";>#154)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MENFORCER-418";>[MENFORCER-418] 
- Upgrade Parent to 36 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/153";>#153)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump plexus-utils from 3.4.1 to 3.4.2 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/151";>#151)
 https://github.com/dependabot";>@​dependabot
   Bump maven-dependency-tree from 3.1.0 to 3.1.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/150";>#150)
 https://github.com/dependabot";>@​dependabot
   Bump maven-javadoc-plugin from 3.3.1 to 3.4.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/147";>#147)
 https://github.com/dependabot";>@​dependabot
   Bump maven-surefire-plugin from 3.0.0-M5 to 3.0.0-M6 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/148";>#148)
 https://github.com/dependabot";>@​dependabot
   Bump maven-project-info-reports-plugin from 3.2.2 to 3.3.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/149";>#149)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.4.0 to 4.5.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/146";>#146)
 https://github.com/dependabot";>@​dependabot
   Bump assertj-core from 3.21.0 to 3.22.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/134";>#134)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.2.0 to 4.4.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/142";>#142)
 https://github.com/dependabot";>@​dependabot
   Bump maven-jxr-plugin from 3.1.1 to 3.2.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/143";>#143)
 https://github.com/dependabot";>@​dependabot
   Bump maven-project-info-reports-plugin from 3.1.2 to 3.2.2 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/144";>#144)
 https://github.com/dependabot";>@​dependabot
   Bump mrm-maven-plugin from 1.2.0 to 1.3.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/129";>#129)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.1.0 to 4.2.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/132";>#132)
 https://github.com/dependabot";>@​dependabot
   Bump maven-javadoc-plugin from 3.2.0 to 3.3.1 (https://github-re

[GitHub] [maven-help-plugin] dependabot[bot] opened a new pull request, #64: Bump maven-model from 3.8.5 to 3.8.6

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #64:
URL: https://github.com/apache/maven-help-plugin/pull/64

   Bumps [maven-model](https://github.com/apache/maven) from 3.8.5 to 3.8.6.
   
   Commits
   
   https://github.com/apache/maven/commit/84538c9988a25aec085021c365c560670ad80f63";>84538c9
 [maven-release-plugin] prepare release maven-3.8.6
   https://github.com/apache/maven/commit/a2ad4f2f7b4c5be6c65191dbe721e35839f107ec";>a2ad4f2
 deploy master, 3.8.x and 3.9.x
   https://github.com/apache/maven/commit/9a8c4a464cdc2c5ea329a8340142892319173b5d";>9a8c4a4
 [MNG-7490] Upgrade Plexus Utils to 3.3.1
   https://github.com/apache/maven/commit/8b157e7b0e2eb89a704e42bfda641d460236645f";>8b157e7
 [MNG-7489] Upgrade JUnit to 4.13.2
   https://github.com/apache/maven/commit/afc0155a9aeb57027958ff9bac9bcd2ae928a38d";>afc0155
 [MNG-7488] Upgrade SLF4J to 1.7.36
   https://github.com/apache/maven/commit/5c0d6b9a11a74493391ca5c1a3e78a5dc7dc0354";>5c0d6b9
 [MNG-7476] Display a warning when an aggregator mojo is locking other mojos 
e...
   https://github.com/apache/maven/commit/0b79a9e64325f21659923fd01606b26d4c993b63";>0b79a9e
 [MNG-7487] Fix deadlock during forked lifecycle executions
   https://github.com/apache/maven/commit/88a03f8ea53242bdcd18657b2ef10806b151f475";>88a03f8
 [MNG-7486] Create a multiline message helper for boxed log messages
   https://github.com/apache/maven/commit/23cc8633983f04f243b15b02fc2e92e2807e009d";>23cc863
 [MNG-7448] Don't ignore bin/ otherwise bin/ in apache-maven module cannot be 
...
   https://github.com/apache/maven/commit/7ae663f73b287d07f561d28407fb401a4e7698d3";>7ae663f
 Revert "[MNG-7347] SessionScoped beans should be singletons for a given 
sessi...
   Additional commits viewable in https://github.com/apache/maven/compare/maven-3.8.5...maven-3.8.6";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven:maven-model&package-manager=maven&previous-version=3.8.5&new-version=3.8.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-archetype] dependabot[bot] opened a new pull request, #110: Bump plexus-archiver from 4.2.2 to 4.3.0

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #110:
URL: https://github.com/apache/maven-archetype/pull/110

   Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) 
from 4.2.2 to 4.3.0.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases";>plexus-archiver's
 releases.
   
   Plexus Archiver 4.2.7
   🚀 New features and improvements
   
   Respect order of META-INF/ and META-INF/MANIFEST.MF entries in a JAR 
file (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/189";>#189)
 https://github.com/michael-o";>@​michael-o
   
   Plexus Archiver 4.2.6
   This release updates commons-compress to 1.21 which contains security 
fixed for https://github.com/advisories/GHSA-xqfj-vm6h-2x34";>CVE-2021-35517 https://github.com/advisories/GHSA-crv7-7245-f45f";>CVE-2021-35516 https://github.com/advisories/GHSA-7hfm-57qf-j43q";>CVE-2021-35515 https://github.com/advisories/GHSA-mc84-pj99-q6hh";>CVE-2021-36090
   This version requires Java 8 as minimum (commons-compress 1.21 
requires Java 8).
   🚀 New features and improvements
   
   FileInputStream, FileOutputStream, FileReader and FileWriter are no 
longer used (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/183";>#183)
 https://github.com/jorsol";>@​jorsol
   Code cleanup (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/172";>#172)
 https://github.com/olamy";>@​olamy
   
   📦 Dependency updates
   
   Bump plexus from 7 to 8 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/179";>#179)
 https://github.com/dependabot";>@​dependabot
   Bump plexus-utils from 3.3.0 to 3.4.1 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/181";>#181)
 https://github.com/dependabot";>@​dependabot
   Bump commons-compress from 1.20 to 1.21 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/177";>#177)
 https://github.com/dependabot";>@​dependabot
   
   Plexus Archiver 4.2.5
   🚀 New features and improvements
   
   Speed improvements (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/157";>#157)
  https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix use of a mismatching Unicode path extra field in zip unarchiving (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/167";>#167)
 https://github.com/cwalther";>@​cwalther
   In some cases zip archiver may update the file path but not the Unicode path 
extra field. This would result in Plexus Archiver extracting the file using 
wrong (obsolete) path. Now Plexus Archiver follows the specification and in 
this case will ignore the extra filed and extract the file in the correct 
location.
   
   📦 Dependency updates
   
   Bump plexus from 6.5 to 7 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/158";>#158)
 https://github.com/dependabot";>@​dependabot
   Bump xz from 1.8 to 1.9 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/165";>#165)
 https://github.com/dependabot";>@​dependabot
   
   Plexus Archiver 4.2.4
   🐛 Bug Fixes
   
   Fix unjustified warning about casing for directory entries (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/155";>#155)
 https://github.com/mthmulders";>@​mthmulders
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/88d132ad0cb904d1786c9a4ec4b8318ac66f3864";>88d132a
 [maven-release-plugin] prepare release plexus-archiver-4.3.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/e135a2b6671fa098b429bc28eb178af256326b79";>e135a2b
 Bump plexus from 8 to 10
   https://github.com/codehaus-plexus/plexus-archiver/commit/e8eecf29c068c20dca8a126a7c7d28a184e8e318";>e8eecf2
 switch build badge from Travis to GH
   https://github.com/codehaus-plexus/plexus-archiver/commit/d715d6437afbb75c913d0e8d76ef2e00b8a0e322";>d715d64
 Bump release-drafter/release-drafter from 5.19.0 to 5.20.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/50c5fc07ae7e84e7d9a33fe22e2e409ec6aa8a08";>50c5fc0
 Rename setTime method to setZipEntryTime
   https://github.com/codehaus-plexus/plexus-archiver/commit/ee2f99da1d8fc90b5a9c9722176c0c8b88ea";>ee2f99d
 Bump plexus-io from 3.2.0 to 3.3.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/c2a06d64b76458d12cc4e7fab9b9b82cbd686cf5";>c2a06d6
 Bump plexus-utils from 3.4.1 to 3.4.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/6d0cb3607a7c35e12ddaa9a133885caa777b177d";>6d0cb36
 remove old release tag value
   https://github.com/codehaus-plexus/plexus-archiver/commit/581e306276b780092b43cd5b9a230f9960fa27c2";>581e306
 Convert InputStreamSupplier to lambdas
   https://github.com/codehaus-plexus/plexus-archiver/commit/7eb5a660a9ccb2968ce4f172baaa949c72e87f87";>7eb5a66
 Delete codeql-analysis.yml
   Additional commits viewable in htt

[GitHub] [maven-archetype] dependabot[bot] commented on pull request #106: Bump plexus-archiver from 4.2.2 to 4.2.7

2022-06-12 Thread GitBox


dependabot[bot] commented on PR #106:
URL: https://github.com/apache/maven-archetype/pull/106#issuecomment-1153455470

   Superseded by #110.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-archetype] dependabot[bot] closed pull request #106: Bump plexus-archiver from 4.2.2 to 4.2.7

2022-06-12 Thread GitBox


dependabot[bot] closed pull request #106: Bump plexus-archiver from 4.2.2 to 
4.2.7
URL: https://github.com/apache/maven-archetype/pull/106


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-resources-plugin] dependabot[bot] opened a new pull request, #30: Bump mavenVersion from 3.2.5 to 3.8.6

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #30:
URL: https://github.com/apache/maven-resources-plugin/pull/30

   Bumps `mavenVersion` from 3.2.5 to 3.8.6.
   Updates `maven-plugin-api` from 3.2.5 to 3.8.6
   
   Release notes
   Sourced from https://github.com/apache/maven/releases";>maven-plugin-api's 
releases.
   
   3.8.5
   What's Changed
   
   [3.8.x][MNG-7156][MNG-7285] Add locking in MojoExecutor by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/628";>apache/maven#628
   [MNG-6326] Make the build fail if core extensions can not be loaded by 
https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/648";>apache/maven#648
   [3.8.x][MNG-7347] SessionScoped beans should be singletons for a given 
session by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/653";>apache/maven#653
   [3.8.x][MNG-7386] Make sure the ModelMerger$MergingList can be 
serialized by https://github.com/gnodet";>@​gnodet in 
https://github-redirect.dependabot.com/apache/maven/pull/656";>apache/maven#656
   [3.8.x][MNG-7349] Limit relocation warning message to direct 
dependencies only by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/657";>apache/maven#657
   [3.8.x][MNG-6727] Changed expression check to project.version and 
project.parent.version by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/670";>apache/maven#670
   [3.8.x][MNG-7395] - Support system-properties in extension.xml by https://github.com/laeubi";>@​laeubi in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   New Contributors
   
   https://github.com/laeubi";>@​laeubi made their 
first contribution in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   Full Changelog: https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5";>https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5
   3.8.4
   What's Changed
   
   [MNG-6302] logging the module count by https://github.com/rmannibucau";>@​rmannibucau in https://github-redirect.dependabot.com/apache/maven/pull/136";>apache/maven#136
   [MNG-6424] - Upgrade plexus-interpolation to 1.25 by https://github.com/shemic87";>@​shemic87 in https://github-redirect.dependabot.com/apache/maven/pull/172";>apache/maven#172
   Update Jenkins build to use Maven 3.5.4 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/179";>apache/maven#179
   [MNG-6473] Update Mockito to 2.21.0 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/181";>apache/maven#181
   MNG-6414 Add more Apache license headers to skip downloading license … 
by https://github.com/slachiewicz";>@​slachiewicz in 
https://github-redirect.dependabot.com/apache/maven/pull/167";>apache/maven#167
   [MNG-6479] Upgrade XMLUnit to 2.2.1 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/183";>apache/maven#183
   Fixed typo in exception logging by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/170";>apache/maven#170
   [MNG-6490] Maven fails reporting circular dependency when the depende… 
by https://github.com/slachiewicz";>@​slachiewicz in 
https://github-redirect.dependabot.com/apache/maven/pull/188";>apache/maven#188
   [MNG-6261] - using java File api to compare by https://github.com/fabcipriano";>@​fabcipriano in https://github-redirect.dependabot.com/apache/maven/pull/192";>apache/maven#192
   MNG-6529 - ProjectBuild.build(projectsList, ...) ignores 
request.isResolveDependencies() by https://github.com/mickaelistria";>@​mickaelistria in https://github-redirect.dependabot.com/apache/maven/pull/193";>apache/maven#193
   [MNG-6559] Fix mailing list URL by https://github.com/johnlinp";>@​johnlinp in https://github-redirect.dependabot.com/apache/maven/pull/230";>apache/maven#230
   [MNG-6611] Update animal-sniffer-maven-plugin to version 1.17 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/237";>apache/maven#237
   [MNG-6405] Fix basedir in MavenProject.deepCopy by https://github.com/jglick";>@​jglick in https://github-redirect.dependabot.com/apache/maven/pull/225";>apache/maven#225
   [MNG-6655] Add support for "release" qualifier by https://github.com/michael-o";>@​michael-o in https://github-redirect.dependabot.com/apache/maven/pull/249";>apache/maven#249
   Always deploy snapshot from master by https://github.com/mickaelistria";>@​mickaelistria in https://github-redirect.dependabot.com/apache/maven/pull/250";>apache/maven#250
   [MNG-6665] toolchain.xml file should support environment variables by https://github.com/MartinKanters";>@​MartinKanters 

[GitHub] [maven-resources-plugin] dependabot[bot] closed pull request #27: Bump mavenVersion from 3.2.5 to 3.8.5

2022-06-12 Thread GitBox


dependabot[bot] closed pull request #27: Bump mavenVersion from 3.2.5 to 3.8.5
URL: https://github.com/apache/maven-resources-plugin/pull/27


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-resources-plugin] dependabot[bot] commented on pull request #27: Bump mavenVersion from 3.2.5 to 3.8.5

2022-06-12 Thread GitBox


dependabot[bot] commented on PR #27:
URL: 
https://github.com/apache/maven-resources-plugin/pull/27#issuecomment-1153457609

   Superseded by #30.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-install-plugin] dependabot[bot] opened a new pull request, #30: Bump mavenVersion from 3.2.5 to 3.8.6

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #30:
URL: https://github.com/apache/maven-install-plugin/pull/30

   Bumps `mavenVersion` from 3.2.5 to 3.8.6.
   Updates `maven-plugin-api` from 3.2.5 to 3.8.6
   
   Release notes
   Sourced from https://github.com/apache/maven/releases";>maven-plugin-api's 
releases.
   
   3.8.5
   What's Changed
   
   [3.8.x][MNG-7156][MNG-7285] Add locking in MojoExecutor by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/628";>apache/maven#628
   [MNG-6326] Make the build fail if core extensions can not be loaded by 
https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/648";>apache/maven#648
   [3.8.x][MNG-7347] SessionScoped beans should be singletons for a given 
session by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/653";>apache/maven#653
   [3.8.x][MNG-7386] Make sure the ModelMerger$MergingList can be 
serialized by https://github.com/gnodet";>@​gnodet in 
https://github-redirect.dependabot.com/apache/maven/pull/656";>apache/maven#656
   [3.8.x][MNG-7349] Limit relocation warning message to direct 
dependencies only by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/657";>apache/maven#657
   [3.8.x][MNG-6727] Changed expression check to project.version and 
project.parent.version by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/670";>apache/maven#670
   [3.8.x][MNG-7395] - Support system-properties in extension.xml by https://github.com/laeubi";>@​laeubi in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   New Contributors
   
   https://github.com/laeubi";>@​laeubi made their 
first contribution in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   Full Changelog: https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5";>https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5
   3.8.4
   What's Changed
   
   [MNG-6302] logging the module count by https://github.com/rmannibucau";>@​rmannibucau in https://github-redirect.dependabot.com/apache/maven/pull/136";>apache/maven#136
   [MNG-6424] - Upgrade plexus-interpolation to 1.25 by https://github.com/shemic87";>@​shemic87 in https://github-redirect.dependabot.com/apache/maven/pull/172";>apache/maven#172
   Update Jenkins build to use Maven 3.5.4 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/179";>apache/maven#179
   [MNG-6473] Update Mockito to 2.21.0 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/181";>apache/maven#181
   MNG-6414 Add more Apache license headers to skip downloading license … 
by https://github.com/slachiewicz";>@​slachiewicz in 
https://github-redirect.dependabot.com/apache/maven/pull/167";>apache/maven#167
   [MNG-6479] Upgrade XMLUnit to 2.2.1 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/183";>apache/maven#183
   Fixed typo in exception logging by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/170";>apache/maven#170
   [MNG-6490] Maven fails reporting circular dependency when the depende… 
by https://github.com/slachiewicz";>@​slachiewicz in 
https://github-redirect.dependabot.com/apache/maven/pull/188";>apache/maven#188
   [MNG-6261] - using java File api to compare by https://github.com/fabcipriano";>@​fabcipriano in https://github-redirect.dependabot.com/apache/maven/pull/192";>apache/maven#192
   MNG-6529 - ProjectBuild.build(projectsList, ...) ignores 
request.isResolveDependencies() by https://github.com/mickaelistria";>@​mickaelistria in https://github-redirect.dependabot.com/apache/maven/pull/193";>apache/maven#193
   [MNG-6559] Fix mailing list URL by https://github.com/johnlinp";>@​johnlinp in https://github-redirect.dependabot.com/apache/maven/pull/230";>apache/maven#230
   [MNG-6611] Update animal-sniffer-maven-plugin to version 1.17 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/237";>apache/maven#237
   [MNG-6405] Fix basedir in MavenProject.deepCopy by https://github.com/jglick";>@​jglick in https://github-redirect.dependabot.com/apache/maven/pull/225";>apache/maven#225
   [MNG-6655] Add support for "release" qualifier by https://github.com/michael-o";>@​michael-o in https://github-redirect.dependabot.com/apache/maven/pull/249";>apache/maven#249
   Always deploy snapshot from master by https://github.com/mickaelistria";>@​mickaelistria in https://github-redirect.dependabot.com/apache/maven/pull/250";>apache/maven#250
   [MNG-6665] toolchain.xml file should support environment variables by https://github.com/MartinKanters";>@​MartinKanters in

[GitHub] [maven-install-plugin] dependabot[bot] closed pull request #29: Bump mavenVersion from 3.2.5 to 3.8.5

2022-06-12 Thread GitBox


dependabot[bot] closed pull request #29: Bump mavenVersion from 3.2.5 to 3.8.5
URL: https://github.com/apache/maven-install-plugin/pull/29


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-install-plugin] dependabot[bot] commented on pull request #29: Bump mavenVersion from 3.2.5 to 3.8.5

2022-06-12 Thread GitBox


dependabot[bot] commented on PR #29:
URL: 
https://github.com/apache/maven-install-plugin/pull/29#issuecomment-1153457900

   Superseded by #30.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-checkstyle-plugin] dependabot[bot] opened a new pull request, #81: Bump maven-enforcer-plugin from 3.0.0 to 3.1.0

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #81:
URL: https://github.com/apache/maven-checkstyle-plugin/pull/81

   Bumps [maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 
3.0.0 to 3.1.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-enforcer/releases";>maven-enforcer-plugin's
 releases.
   
   3.1.0
   
   🚀 New features and improvements
   
   https://issues.apache.org/jira/browse/MENFORCER-420";>[MENFORCER-420] 
- cache dependencies across rules (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/152";>#152)
 https://github.com/josephw";>@​josephw
   https://issues.apache.org/jira/browse/MENFORCER-409";>[MENFORCER-409] 
- Log at ERROR level when  is set (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/133";>#133)
 https://github.com/electrum";>@​electrum
   
   🐛 Bug Fixes
   
   https://issues.apache.org/jira/browse/MENFORCER-389";>[MENFORCER-389] 
- Allow filtering of parent in requireReleaseDeps (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/157";>#157)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MENFORCER-421";>[MENFORCER-421] 
- Use currently build artifacts in IT tests (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/159";>#159)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MENFORCER-402";>[MENFORCER-402] 
- fix provided dependencies in RequireUpperBoundDeps (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/140";>#140)
 https://github.com/subes";>@​subes
   
   📦 Dependency updates
   
   Bump mockito.version from 4.6.0 to 4.6.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/161";>#161)
 https://github.com/dependabot";>@​dependabot
   Bump assertj-core from 3.23.0 to 3.23.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/160";>#160)
 https://github.com/dependabot";>@​dependabot
   Bump assertj-core from 3.22.0 to 3.23.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/158";>#158)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.5.1 to 4.6.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/156";>#156)
 https://github.com/dependabot";>@​dependabot
   https://issues.apache.org/jira/browse/MENFORCER-419";>[MENFORCER-419] 
- Upgrade Maven to 3.2.5 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/154";>#154)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MENFORCER-418";>[MENFORCER-418] 
- Upgrade Parent to 36 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/153";>#153)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump plexus-utils from 3.4.1 to 3.4.2 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/151";>#151)
 https://github.com/dependabot";>@​dependabot
   Bump maven-dependency-tree from 3.1.0 to 3.1.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/150";>#150)
 https://github.com/dependabot";>@​dependabot
   Bump maven-javadoc-plugin from 3.3.1 to 3.4.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/147";>#147)
 https://github.com/dependabot";>@​dependabot
   Bump maven-surefire-plugin from 3.0.0-M5 to 3.0.0-M6 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/148";>#148)
 https://github.com/dependabot";>@​dependabot
   Bump maven-project-info-reports-plugin from 3.2.2 to 3.3.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/149";>#149)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.4.0 to 4.5.1 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/146";>#146)
 https://github.com/dependabot";>@​dependabot
   Bump assertj-core from 3.21.0 to 3.22.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/134";>#134)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.2.0 to 4.4.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/142";>#142)
 https://github.com/dependabot";>@​dependabot
   Bump maven-jxr-plugin from 3.1.1 to 3.2.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/143";>#143)
 https://github.com/dependabot";>@​dependabot
   Bump maven-project-info-reports-plugin from 3.1.2 to 3.2.2 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/144";>#144)
 https://github.com/dependabot";>@​dependabot
   Bump mrm-maven-plugin from 1.2.0 to 1.3.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/129";>#129)
 https://github.com/dependabot";>@​dependabot
   Bump mockito.version from 4.1.0 to 4.2.0 (https://github-redirect.dependabot.com/apache/maven-enforcer/issues/132";>#132)
 https://github.com/dependabot";>@​dependabot
   Bump maven-javadoc-plugin from 3.2.0 to 3.3.1 (https://github

[GitHub] [maven-clean-plugin] dependabot[bot] opened a new pull request, #18: Bump mavenVersion from 3.2.5 to 3.8.6

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #18:
URL: https://github.com/apache/maven-clean-plugin/pull/18

   Bumps `mavenVersion` from 3.2.5 to 3.8.6.
   Updates `maven-plugin-api` from 3.2.5 to 3.8.6
   
   Release notes
   Sourced from https://github.com/apache/maven/releases";>maven-plugin-api's 
releases.
   
   3.8.5
   What's Changed
   
   [3.8.x][MNG-7156][MNG-7285] Add locking in MojoExecutor by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/628";>apache/maven#628
   [MNG-6326] Make the build fail if core extensions can not be loaded by 
https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/648";>apache/maven#648
   [3.8.x][MNG-7347] SessionScoped beans should be singletons for a given 
session by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/653";>apache/maven#653
   [3.8.x][MNG-7386] Make sure the ModelMerger$MergingList can be 
serialized by https://github.com/gnodet";>@​gnodet in 
https://github-redirect.dependabot.com/apache/maven/pull/656";>apache/maven#656
   [3.8.x][MNG-7349] Limit relocation warning message to direct 
dependencies only by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/657";>apache/maven#657
   [3.8.x][MNG-6727] Changed expression check to project.version and 
project.parent.version by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/670";>apache/maven#670
   [3.8.x][MNG-7395] - Support system-properties in extension.xml by https://github.com/laeubi";>@​laeubi in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   New Contributors
   
   https://github.com/laeubi";>@​laeubi made their 
first contribution in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   Full Changelog: https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5";>https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5
   3.8.4
   What's Changed
   
   [MNG-6302] logging the module count by https://github.com/rmannibucau";>@​rmannibucau in https://github-redirect.dependabot.com/apache/maven/pull/136";>apache/maven#136
   [MNG-6424] - Upgrade plexus-interpolation to 1.25 by https://github.com/shemic87";>@​shemic87 in https://github-redirect.dependabot.com/apache/maven/pull/172";>apache/maven#172
   Update Jenkins build to use Maven 3.5.4 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/179";>apache/maven#179
   [MNG-6473] Update Mockito to 2.21.0 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/181";>apache/maven#181
   MNG-6414 Add more Apache license headers to skip downloading license … 
by https://github.com/slachiewicz";>@​slachiewicz in 
https://github-redirect.dependabot.com/apache/maven/pull/167";>apache/maven#167
   [MNG-6479] Upgrade XMLUnit to 2.2.1 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/183";>apache/maven#183
   Fixed typo in exception logging by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/170";>apache/maven#170
   [MNG-6490] Maven fails reporting circular dependency when the depende… 
by https://github.com/slachiewicz";>@​slachiewicz in 
https://github-redirect.dependabot.com/apache/maven/pull/188";>apache/maven#188
   [MNG-6261] - using java File api to compare by https://github.com/fabcipriano";>@​fabcipriano in https://github-redirect.dependabot.com/apache/maven/pull/192";>apache/maven#192
   MNG-6529 - ProjectBuild.build(projectsList, ...) ignores 
request.isResolveDependencies() by https://github.com/mickaelistria";>@​mickaelistria in https://github-redirect.dependabot.com/apache/maven/pull/193";>apache/maven#193
   [MNG-6559] Fix mailing list URL by https://github.com/johnlinp";>@​johnlinp in https://github-redirect.dependabot.com/apache/maven/pull/230";>apache/maven#230
   [MNG-6611] Update animal-sniffer-maven-plugin to version 1.17 by https://github.com/slachiewicz";>@​slachiewicz in https://github-redirect.dependabot.com/apache/maven/pull/237";>apache/maven#237
   [MNG-6405] Fix basedir in MavenProject.deepCopy by https://github.com/jglick";>@​jglick in https://github-redirect.dependabot.com/apache/maven/pull/225";>apache/maven#225
   [MNG-6655] Add support for "release" qualifier by https://github.com/michael-o";>@​michael-o in https://github-redirect.dependabot.com/apache/maven/pull/249";>apache/maven#249
   Always deploy snapshot from master by https://github.com/mickaelistria";>@​mickaelistria in https://github-redirect.dependabot.com/apache/maven/pull/250";>apache/maven#250
   [MNG-6665] toolchain.xml file should support environment variables by https://github.com/MartinKanters";>@​MartinKanters in h

[GitHub] [maven-clean-plugin] dependabot[bot] commented on pull request #16: Bump mavenVersion from 3.2.5 to 3.8.5

2022-06-12 Thread GitBox


dependabot[bot] commented on PR #16:
URL: 
https://github.com/apache/maven-clean-plugin/pull/16#issuecomment-1153490128

   Superseded by #18.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-clean-plugin] dependabot[bot] closed pull request #16: Bump mavenVersion from 3.2.5 to 3.8.5

2022-06-12 Thread GitBox


dependabot[bot] closed pull request #16: Bump mavenVersion from 3.2.5 to 3.8.5
URL: https://github.com/apache/maven-clean-plugin/pull/16


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-verifier] dependabot[bot] opened a new pull request, #27: Bump maven-embedder from 3.8.4 to 3.8.6

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #27:
URL: https://github.com/apache/maven-verifier/pull/27

   Bumps [maven-embedder](https://github.com/apache/maven) from 3.8.4 to 3.8.6.
   
   Release notes
   Sourced from https://github.com/apache/maven/releases";>maven-embedder's 
releases.
   
   3.8.5
   What's Changed
   
   [3.8.x][MNG-7156][MNG-7285] Add locking in MojoExecutor by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/628";>apache/maven#628
   [MNG-6326] Make the build fail if core extensions can not be loaded by 
https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/648";>apache/maven#648
   [3.8.x][MNG-7347] SessionScoped beans should be singletons for a given 
session by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/653";>apache/maven#653
   [3.8.x][MNG-7386] Make sure the ModelMerger$MergingList can be 
serialized by https://github.com/gnodet";>@​gnodet in 
https://github-redirect.dependabot.com/apache/maven/pull/656";>apache/maven#656
   [3.8.x][MNG-7349] Limit relocation warning message to direct 
dependencies only by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/657";>apache/maven#657
   [3.8.x][MNG-6727] Changed expression check to project.version and 
project.parent.version by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/670";>apache/maven#670
   [3.8.x][MNG-7395] - Support system-properties in extension.xml by https://github.com/laeubi";>@​laeubi in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   New Contributors
   
   https://github.com/laeubi";>@​laeubi made their 
first contribution in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   Full Changelog: https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5";>https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5
   
   
   
   Commits
   
   https://github.com/apache/maven/commit/84538c9988a25aec085021c365c560670ad80f63";>84538c9
 [maven-release-plugin] prepare release maven-3.8.6
   https://github.com/apache/maven/commit/a2ad4f2f7b4c5be6c65191dbe721e35839f107ec";>a2ad4f2
 deploy master, 3.8.x and 3.9.x
   https://github.com/apache/maven/commit/9a8c4a464cdc2c5ea329a8340142892319173b5d";>9a8c4a4
 [MNG-7490] Upgrade Plexus Utils to 3.3.1
   https://github.com/apache/maven/commit/8b157e7b0e2eb89a704e42bfda641d460236645f";>8b157e7
 [MNG-7489] Upgrade JUnit to 4.13.2
   https://github.com/apache/maven/commit/afc0155a9aeb57027958ff9bac9bcd2ae928a38d";>afc0155
 [MNG-7488] Upgrade SLF4J to 1.7.36
   https://github.com/apache/maven/commit/5c0d6b9a11a74493391ca5c1a3e78a5dc7dc0354";>5c0d6b9
 [MNG-7476] Display a warning when an aggregator mojo is locking other mojos 
e...
   https://github.com/apache/maven/commit/0b79a9e64325f21659923fd01606b26d4c993b63";>0b79a9e
 [MNG-7487] Fix deadlock during forked lifecycle executions
   https://github.com/apache/maven/commit/88a03f8ea53242bdcd18657b2ef10806b151f475";>88a03f8
 [MNG-7486] Create a multiline message helper for boxed log messages
   https://github.com/apache/maven/commit/23cc8633983f04f243b15b02fc2e92e2807e009d";>23cc863
 [MNG-7448] Don't ignore bin/ otherwise bin/ in apache-maven module cannot be 
...
   https://github.com/apache/maven/commit/7ae663f73b287d07f561d28407fb401a4e7698d3";>7ae663f
 Revert "[MNG-7347] SessionScoped beans should be singletons for a given 
sessi...
   Additional commits viewable in https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.6";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven:maven-embedder&package-manager=maven&previous-version=3.8.4&new-version=3.8.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot re

[GitHub] [maven-verifier] dependabot[bot] opened a new pull request, #28: Bump maven-compat from 3.8.4 to 3.8.6

2022-06-12 Thread GitBox


dependabot[bot] opened a new pull request, #28:
URL: https://github.com/apache/maven-verifier/pull/28

   Bumps [maven-compat](https://github.com/apache/maven) from 3.8.4 to 3.8.6.
   
   Release notes
   Sourced from https://github.com/apache/maven/releases";>maven-compat's 
releases.
   
   3.8.5
   What's Changed
   
   [3.8.x][MNG-7156][MNG-7285] Add locking in MojoExecutor by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/628";>apache/maven#628
   [MNG-6326] Make the build fail if core extensions can not be loaded by 
https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/648";>apache/maven#648
   [3.8.x][MNG-7347] SessionScoped beans should be singletons for a given 
session by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/653";>apache/maven#653
   [3.8.x][MNG-7386] Make sure the ModelMerger$MergingList can be 
serialized by https://github.com/gnodet";>@​gnodet in 
https://github-redirect.dependabot.com/apache/maven/pull/656";>apache/maven#656
   [3.8.x][MNG-7349] Limit relocation warning message to direct 
dependencies only by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/657";>apache/maven#657
   [3.8.x][MNG-6727] Changed expression check to project.version and 
project.parent.version by https://github.com/gnodet";>@​gnodet in https://github-redirect.dependabot.com/apache/maven/pull/670";>apache/maven#670
   [3.8.x][MNG-7395] - Support system-properties in extension.xml by https://github.com/laeubi";>@​laeubi in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   New Contributors
   
   https://github.com/laeubi";>@​laeubi made their 
first contribution in https://github-redirect.dependabot.com/apache/maven/pull/673";>apache/maven#673
   
   Full Changelog: https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5";>https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.5
   
   
   
   Commits
   
   https://github.com/apache/maven/commit/84538c9988a25aec085021c365c560670ad80f63";>84538c9
 [maven-release-plugin] prepare release maven-3.8.6
   https://github.com/apache/maven/commit/a2ad4f2f7b4c5be6c65191dbe721e35839f107ec";>a2ad4f2
 deploy master, 3.8.x and 3.9.x
   https://github.com/apache/maven/commit/9a8c4a464cdc2c5ea329a8340142892319173b5d";>9a8c4a4
 [MNG-7490] Upgrade Plexus Utils to 3.3.1
   https://github.com/apache/maven/commit/8b157e7b0e2eb89a704e42bfda641d460236645f";>8b157e7
 [MNG-7489] Upgrade JUnit to 4.13.2
   https://github.com/apache/maven/commit/afc0155a9aeb57027958ff9bac9bcd2ae928a38d";>afc0155
 [MNG-7488] Upgrade SLF4J to 1.7.36
   https://github.com/apache/maven/commit/5c0d6b9a11a74493391ca5c1a3e78a5dc7dc0354";>5c0d6b9
 [MNG-7476] Display a warning when an aggregator mojo is locking other mojos 
e...
   https://github.com/apache/maven/commit/0b79a9e64325f21659923fd01606b26d4c993b63";>0b79a9e
 [MNG-7487] Fix deadlock during forked lifecycle executions
   https://github.com/apache/maven/commit/88a03f8ea53242bdcd18657b2ef10806b151f475";>88a03f8
 [MNG-7486] Create a multiline message helper for boxed log messages
   https://github.com/apache/maven/commit/23cc8633983f04f243b15b02fc2e92e2807e009d";>23cc863
 [MNG-7448] Don't ignore bin/ otherwise bin/ in apache-maven module cannot be 
...
   https://github.com/apache/maven/commit/7ae663f73b287d07f561d28407fb401a4e7698d3";>7ae663f
 Revert "[MNG-7347] SessionScoped beans should be singletons for a given 
sessi...
   Additional commits viewable in https://github.com/apache/maven/compare/maven-3.8.4...maven-3.8.6";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven:maven-compat&package-manager=maven&previous-version=3.8.4&new-version=3.8.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreati

[GitHub] [maven-archetype] olamy commented on a diff in pull request #109: adding a debug message for getRemoteCatalog

2022-06-12 Thread GitBox


olamy commented on code in PR #109:
URL: https://github.com/apache/maven-archetype/pull/109#discussion_r895344469


##
archetype-common/src/main/java/org/apache/maven/archetype/DefaultArchetypeManager.java:
##
@@ -198,6 +198,7 @@ public ArchetypeCatalog getRemoteCatalog( 
ProjectBuildingRequest buildingRequest
 }
 catch ( ArchetypeDataSourceException e )
 {
+getLogger().debug( "failed to download from remote", e );

Review Comment:
   I would use `warn` rather than `debug` because it's a big problem enough 



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MSKINS-193) Remove 3rd party JS for Google Site Search

2022-06-12 Thread Konrad Windszus (Jira)


[ 
https://issues.apache.org/jira/browse/MSKINS-193?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553398#comment-17553398
 ] 

Konrad Windszus commented on MSKINS-193:


As the license of the placeholder image currently in use is not clear to me 
(https://cse.google.com/cse/images/google_custom_search_watermark.gif) I 
propose to instead rely on a textual placeholder only.

> Remove 3rd party JS for Google Site Search
> --
>
> Key: MSKINS-193
> URL: https://issues.apache.org/jira/browse/MSKINS-193
> Project: Maven Skins
>  Issue Type: Improvement
>  Components: Fluido Skin
>Affects Versions: fluido-1.11.0
>Reporter: Konrad Windszus
>Priority: Major
>
> Currently the [Google Search 
> Feature|https://maven.apache.org/skins/maven-fluido-skin/#googlesearch] 
> relies on a JS loaded from Google (for skinning purposes): 
> https://github.com/apache/maven-fluido-skin/blob/171292d7f70b78c449d602da2414815cdb8e4ffd/src/main/resources/META-INF/maven/site-macros.vm#L634.
>  In order to be compatible with 
> https://privacy.apache.org/policies/privacy-policy-public.html one should not 
> load any resources from Google without explicit User consent.
> It should be possible to use the Google Site Search with just custom HTML and 
> CSS without the need to load JS from Google.
> Obviously once the user submitted a search query, Google would get all data, 
> but I guess consent can be assumed in that case.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [maven-archiver] michael-o commented on a diff in pull request #22: [MSHARED-1066] - Upgrade Plexus Archiver to 4.3.0, Improve the Reproducible Builds methods

2022-06-12 Thread GitBox


michael-o commented on code in PR #22:
URL: https://github.com/apache/maven-archiver/pull/22#discussion_r895363820


##
src/main/java/org/apache/maven/archiver/MavenArchiver.java:
##
@@ -812,28 +814,70 @@ public void setBuildJdkSpecDefaultEntry( boolean 
buildJdkSpecDefaultEntry )
  * @return the parsed timestamp, may be null if 
null input or input contains only 1
  * character
  * @since 3.5.0
- * @throws java.lang.IllegalArgumentException if the outputTimestamp is 
neither ISO 8601 nor an integer
+ * @throws IllegalArgumentException if the outputTimestamp is neither ISO 
8601 nor an integer
+ * @deprecated Use {@link #parseBuildOutputTimestamp(String)} instead.
  */
+@Deprecated
 public Date parseOutputTimestamp( String outputTimestamp )
 {
+return parseBuildOutputTimestamp( outputTimestamp ).map( Date::from 
).orElse( null );
+}
+
+/**
+ * Configure Reproducible Builds archive creation if a timestamp is 
provided.
+ *
+ * @param outputTimestamp the value of {@code 
${project.build.outputTimestamp}} (may be {@code null})
+ * @return the parsed timestamp as {@link java.util.Date}
+ * @since 3.5.0
+ * @see #parseOutputTimestamp
+ * @deprecated Use {@link #configureReproducibleBuild(String)} instead.
+ */
+@Deprecated
+public Date configureReproducible( String outputTimestamp )
+{
+configureReproducibleBuild( outputTimestamp );
+return parseOutputTimestamp( outputTimestamp );
+}
+
+/**
+ * Parse output timestamp configured for Reproducible Builds' archive 
entries.
+ *
+ * Either as {@link java.time.format.DateTimeFormatter#ISO_INSTANT} or 
as a number representing seconds since the
+ * epoch (like https://reproducible-builds.org/docs/source-date-epoch/";>SOURCE_DATE_EPOCH).
+ *
+ * @param outputTimestamp the value of {@code 
${project.build.outputTimestamp}} (may be {@code null})
+ * @return the parsed timestamp as an {@code Optional}, {@code 
empty} if input is {@code null} or input
+ * contains only 1 character (not a number)
+ * @since 3.6.0
+ * @throws IllegalArgumentException if the outputTimestamp is neither ISO 
8601 nor an integer
+ */
+public static Optional parseBuildOutputTimestamp( String 
outputTimestamp )
+{
+// Fail-fast on nulls
+if ( outputTimestamp == null )
+{
+return Optional.empty();
+}
+
+// Number representing seconds since the epoch
 if ( StringUtils.isNumeric( outputTimestamp ) && 
StringUtils.isNotEmpty( outputTimestamp ) )

Review Comment:
   Interesting, can it be empty if it is a numeric?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MSHARED-1066) Upgrade Plexus Archiver to 4.3.0

2022-06-12 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MSHARED-1066?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17553400#comment-17553400
 ] 

ASF GitHub Bot commented on MSHARED-1066:
-

michael-o commented on code in PR #22:
URL: https://github.com/apache/maven-archiver/pull/22#discussion_r895363820


##
src/main/java/org/apache/maven/archiver/MavenArchiver.java:
##
@@ -812,28 +814,70 @@ public void setBuildJdkSpecDefaultEntry( boolean 
buildJdkSpecDefaultEntry )
  * @return the parsed timestamp, may be null if 
null input or input contains only 1
  * character
  * @since 3.5.0
- * @throws java.lang.IllegalArgumentException if the outputTimestamp is 
neither ISO 8601 nor an integer
+ * @throws IllegalArgumentException if the outputTimestamp is neither ISO 
8601 nor an integer
+ * @deprecated Use {@link #parseBuildOutputTimestamp(String)} instead.
  */
+@Deprecated
 public Date parseOutputTimestamp( String outputTimestamp )
 {
+return parseBuildOutputTimestamp( outputTimestamp ).map( Date::from 
).orElse( null );
+}
+
+/**
+ * Configure Reproducible Builds archive creation if a timestamp is 
provided.
+ *
+ * @param outputTimestamp the value of {@code 
${project.build.outputTimestamp}} (may be {@code null})
+ * @return the parsed timestamp as {@link java.util.Date}
+ * @since 3.5.0
+ * @see #parseOutputTimestamp
+ * @deprecated Use {@link #configureReproducibleBuild(String)} instead.
+ */
+@Deprecated
+public Date configureReproducible( String outputTimestamp )
+{
+configureReproducibleBuild( outputTimestamp );
+return parseOutputTimestamp( outputTimestamp );
+}
+
+/**
+ * Parse output timestamp configured for Reproducible Builds' archive 
entries.
+ *
+ * Either as {@link java.time.format.DateTimeFormatter#ISO_INSTANT} or 
as a number representing seconds since the
+ * epoch (like https://reproducible-builds.org/docs/source-date-epoch/";>SOURCE_DATE_EPOCH).
+ *
+ * @param outputTimestamp the value of {@code 
${project.build.outputTimestamp}} (may be {@code null})
+ * @return the parsed timestamp as an {@code Optional}, {@code 
empty} if input is {@code null} or input
+ * contains only 1 character (not a number)
+ * @since 3.6.0
+ * @throws IllegalArgumentException if the outputTimestamp is neither ISO 
8601 nor an integer
+ */
+public static Optional parseBuildOutputTimestamp( String 
outputTimestamp )
+{
+// Fail-fast on nulls
+if ( outputTimestamp == null )
+{
+return Optional.empty();
+}
+
+// Number representing seconds since the epoch
 if ( StringUtils.isNumeric( outputTimestamp ) && 
StringUtils.isNotEmpty( outputTimestamp ) )

Review Comment:
   Interesting, can it be empty if it is a numeric?





> Upgrade Plexus Archiver to 4.3.0
> 
>
> Key: MSHARED-1066
> URL: https://issues.apache.org/jira/browse/MSHARED-1066
> Project: Maven Shared Components
>  Issue Type: Dependency upgrade
>  Components: maven-archiver
>Affects Versions: maven-archiver-3.5.2
>Reporter: Jorge Solórzano
>Priority: Major
> Fix For: maven-archiver-3.6.0
>
>
> Maven Archiver 3.6.0 should update to Plexus Archiver 4.3.0 (once it's 
> released), it contains fixes to reproducible modular jars and also target 
> Java 8.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [maven-fluido-skin] kwin opened a new pull request, #36: [MSKINS-193] remove loading 3rd party resources for Google site search

2022-06-12 Thread GitBox


kwin opened a new pull request, #36:
URL: https://github.com/apache/maven-fluido-skin/pull/36

   use simple placeholder
   remove JS loaded from Google


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-fluido-skin] michael-o commented on pull request #36: [MSKINS-193] remove loading 3rd party resources for Google site search

2022-06-12 Thread GitBox


michael-o commented on PR #36:
URL: https://github.com/apache/maven-fluido-skin/pull/36#issuecomment-1153544906

   Will take care of this.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org