Re: Maven Doxia and minimum Java versions

2018-05-16 Thread Chas Honton
Answering my own question; it appears that you can use the animal sniffer plugin (https://www.mojohaus.org/animal-sniffer/animal-sniffer-maven-plugin/examples/generating-java-signatures.html) Chas > On May 16, 2018, at 7:21 AM, Chas Honton wrote: > > Use “enforce byte code vers

Re: Maven Doxia and minimum Java versions

2018-05-16 Thread Chas Honton
Use “enforce byte code version” rule: http://www.mojohaus.org/extra-enforcer-rules/enforceBytecodeVersion.html. You can set ignoreScopes to test. Anyone know how to validate newer jdk methods are not used? Chas > On May 16, 2018, at 7:08 AM, Graham Leggett wrote: > >> On 15 May

Re: Build vs Consumer POM study

2018-03-12 Thread Chas Honton
scenarios where flattening the consumer pom will change which definition is nearest, and therefore the version may change. This is a corner case, but should be mentioned. Chas > On Mar 12, 2018, at 4:13 PM, Hervé BOUTEMY wrote: > > Hi Charles, > > Thanks for the feedback &

Re: RFC: Maven to raise a notification if downloading vulnerable content

2018-03-06 Thread Chas Honton
If you want the package repository to add the header, you will need to make your request to Sonatype (Nexus) and JFrog (Artifactory) Chas > On Mar 6, 2018, at 4:12 AM, Peter Muryshkin wrote: > > Hi, all, > > currently you can run OWASP dependency check plugin agains

AtEnd aggregation implementation idiom broken

2018-01-19 Thread chas
rties[1].  The full details are in a github pull request [2] Please validate that this is the best imlementation of the 'atEnd' idiom.  If this pull request is accepted, I will write up the details for the Maven plugins Cookbook[3] thanks, chas Links: -- [1] https://gi

Gitbox pull requests

2017-12-11 Thread Chas Honton
Pull requests for new project are not sent to the dev mailing list (e.g. https://github.com/apache/maven-deploy-plugin/pull/1). Are these PRs supposed to be forwarded to some mailing list? Are these PRs supposed to be automatically built? Thanks, Chas

Re: Jenkins and Maven 3.0.5 or JDK 7

2017-10-07 Thread Chas Honton
Is it usual to need all dozen repositories or is a single repository (or a handful) more likely? Chas > On Oct 7, 2017, at 1:32 PM, Arnaud Héritier wrote: > > AFAIR the main concern was for developers to have to clone several dozen of > repositories > I don't think it is

Re: Jenkins and Maven 3.0.5 or JDK 7

2017-10-07 Thread Chas Honton
What are the concerns with separate git repository per artifact? Is it the monolithic build? Chas > On Oct 7, 2017, at 1:20 PM, Arnaud Héritier wrote: > > +1 > >> On Sat, Oct 7, 2017 at 7:11 PM, Hervé BOUTEMY wrote: >> >> we can start with naming the future

Re: main-class + module-version

2017-08-22 Thread Chas Honton
Jar plugin is used more often than shade plugin. (I dis-recommend shade since provenance of classes is difficult or impossible to trace.). If module version is required to make jar useful, then jar plugin appears more appropriate. Chas > On Aug 22, 2017, at 6:10 PM, Olivier Lamy wr

Re: Loading providers in named modules with ServiceLoader using a plugin class realm

2017-06-25 Thread Chas Honton
Under what circumstances would a plugin not want the platform classloader? Chas > On Jun 25, 2017, at 12:40 PM, Robert Scholte wrote: > > Hi Guillaume, > > I don't know all the details about the Platform classloader, but it has been > introduced with a reason. >

Re: [MNG-6169] Lifecycle/binding plugin version updates

2017-05-12 Thread Chas Honton
Can we declare explicitly that this pom does not inherit from super pom? Chas > On May 12, 2017, at 4:50 AM, Michael Osipov wrote: > >> Am 2017-05-12 um 08:25 schrieb Hervé BOUTEMY: >> Jenkins build is not flaky: it is strict on dependency resolution from cache, >> w

Re: [MNG-6169] Lifecycle/binding plugin version updates

2017-05-12 Thread Chas Honton
How can the super pom be explicitly added to the project's pom? Chas > On May 12, 2017, at 4:50 AM, Michael Osipov wrote: > >> Am 2017-05-12 um 08:25 schrieb Hervé BOUTEMY: >> Jenkins build is not flaky: it is strict on dependency resolution from cache, >>

Re: [ANN] Apache Maven 3.5.0 Released

2017-04-07 Thread Chas Honton
Congratulations on a successful release! Thanks to all of the maven core team for your work, particularly for the willingness to abandon 3.4 and reset to a more iterative approach. Thanks, Chas > On Apr 7, 2017, at 2:07 PM, Stephen Connolly wrote: > > The Apache Maven team woul

Re: [VOTE] Release Apache Maven 3.5.0

2017-04-05 Thread Chas Honton
+1 Java 1.8.0_74 Mac OS X 10.12.3 Multi-module project with 562 goals (50 unique) Chas > On Apr 3, 2017, at 3:14 PM, Stephen Connolly > wrote: > > Hi, > > We solved 86 issues: > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922&versio

Re: [VOTE] Release Apache Maven 3.5.0-beta-1

2017-03-24 Thread Chas Honton
Not testing maven core ITs. Using multi-module project with 562 goal invocations (50 unique goals) including three integration test suites run with invoker plugin. +1 tested on OS X 10.12.3, Java 1.8.0_074 ++1: 3.5.0 warned about a dependent Pom problem which was not found with 3.3.9 Chas

Re: POM 5: The problems with mixins

2016-12-05 Thread Chas Honton
What problems are you trying to solve with mixins? What is missing from the current inheritance scheme? It appears to me that you are putting the "how before the "what". My personal experience is that mixins lead to jar hell rather fast. Chas > On Dec 5, 2016, at 4:28 AM,

Re: maven-gpg-plugin updates

2016-12-04 Thread Chas Honton
Already there. Chas > On Dec 4, 2016, at 4:22 AM, Christian Schulte wrote: > >> Am 12/04/16 um 06:27 schrieb Charles Honton: >> Who can work with me to get maven-gpg-plugin updated? In particular, I’d >> like to add goals to sign and checksum files that are not art

Re: POM Model version 4.1.0 in 3.4.0-SNAPSHOTs

2016-08-25 Thread Chas Honton
I use the current Pom to automate checking license policy and checking owasp database for known security flaws. The scm and website metadata is also very useful. Automated download of source for debugging is essential. As a consumer, I don't want to lose these abilities. Chas > O

Re: Profile Activation

2016-08-15 Thread Chas Honton
The behavior is AND. You can have multiple profiles for OR. Chas > On Aug 15, 2016, at 11:45 AM, Christopher wrote: > > If there could be "AND" and "OR" primitives for profile activation > conditions, you could do something like: > >

Re: opinions on MJAVADOC-451

2016-08-05 Thread Chas Honton
+1 Chas > On Aug 5, 2016, at 7:37 AM, Christopher wrote: > > I'm always in favor of adding skip properties. They are very useful for > manipulating builds for debugging, running on CI servers, controlling > executions in child poms, etc. Even if it's not recommended

Re: Functional distinction between install and deploy operations

2012-02-24 Thread Chas Emerick
nk the lack of clear answers on this thread demonstrates that Maven _doesn't_ have a well-defined structure and semantics (talking here about the repository, operations on it, etc., not the modes and knobs of `mvn`). If it did, and it was documented, then Ivy's intero

Re: Functional distinction between install and deploy operations

2012-02-23 Thread Chas Emerick
On Feb 23, 2012, at 12:29 PM, Manfred Moser wrote: > On 12-02-23 04:37 AM, Chas Emerick wrote: >> On Feb 23, 2012, at 1:01 AM, Chris Graham wrote: >> >>> Remember that 'deploy' still calls 'install'. >> Very true for `mvn`. Not true in

Re: Functional distinction between install and deploy operations

2012-02-23 Thread Chas Emerick
from any particular implementation or API would be desirable. Cheers, - Chas On Feb 23, 2012, at 9:53 AM, Vincent Latombe wrote: > In my opinion you'll get more relevant answers on the Aether ML. > > Vincent - To

Re: Functional distinction between install and deploy operations

2012-02-23 Thread Chas Emerick
d in the maven-ant-tasks, or in whatever was the underpinning of Maven 2.x. Likewise for "'install' operation". It seems odd to me that all of the responses so far have been referring to userland concepts, rather than the semantics of the fundamental operations implemented

Re: Functional distinction between install and deploy operations

2012-02-23 Thread Chas Emerick
install' do, the various contents (and potential contents) of repositories in different contexts and their semantics, and so on. - Chas - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org

Re: Functional distinction between install and deploy operations

2012-02-22 Thread Chas Emerick
On Feb 22, 2012, at 11:54 PM, Manfred Moser wrote: > On 12-02-22 08:11 PM, Chas Emerick wrote: >> I am working on a Clojure facade for Aether,[1] and would like to clarify >> some semantics. Though I'm working with Aether, I think this question is >> generally appl

Functional distinction between install and deploy operations

2012-02-22 Thread Chas Emerick
nsofar as it seems you just use 'deploy' to push artifacts into a file-based repository and successfully use the results. Thanks, - Chas [1] https://github.com/cemerick/pomegranate - To unsubscribe, e-ma

Re: [DISCUSS] release maven-3.0.4 now with the old aether

2011-08-19 Thread Chas Emerick
ssues that have been raised re: Aether, its move to Eclipse, and so on. Suffice it to say that, as a user, it's disappointing and frustrating that that such issues appear to have stalled the release of bugfixes that presumably lots of people are waiting for and perhaps blocking on. Cheers,