Re: [VOTE] Release Maven Resolver 2.0.6

2025-02-08 Thread Sylwester Lachiewicz
+1 sob., 8 lut 2025, 07:44 użytkownik Slawomir Jaranowski < s.jaranow...@gmail.com> napisał: > +1 > > śr., 5 lut 2025, 10:54 użytkownik Tamás Cservenák > napisał: > > > Howdy, > > > > This Resolver 2.0.6 release is a bugfix release with some > > improvements as well. > > > > Maven 4.x is picking

Re: [VOTE] Release Maven Resolver 2.0.6

2025-02-08 Thread Arnaud Héritier
+1 Arnaud Héritier Twitter/GitHub/ASF... : aheritier On Sat, Feb 8, 2025 at 09:01 Sylwester Lachiewicz wrote: > +1 > > sob., 8 lut 2025, 07:44 użytkownik Slawomir Jaranowski < > s.jaranow...@gmail.com> napisał: > > > +1 > > > > śr., 5 lut 2025, 10:54 użytkownik Tamás Cservenák > > napisał: >

Re: Supply Chain Attacks and Insider Threats

2025-02-08 Thread Xeno Amess
Yes that is why usually it becomes harder and harder to become a new formal commiter in a mature apache project. Btw even if you know the commiter be a real human face, can you just decide if he evil? Or is the face really him, or a cheap Indian-face-freelancer hired at network for a 10$ salary? So

[ANN] Maven Resolver 2.0.6 released

2025-02-08 Thread Tamás Cservenák
The Apache Maven team is pleased to announce the release of the Maven Resolver 2.0.6: The 1.x resolver lineage is in "bugfix only" maintenance mode. Maven Resolver 1.x is used in Maven 3.x, while Resolver 2.x is used in Maven 4.x. === Site: https://maven.apache.org/resolver Release Notes - Mave

Re: Documentation for 4.x/3.x plugins and components

2025-02-08 Thread Slawomir Jaranowski
Hi, After discussion I think that model like: https://maven.apache.org/plugins/maven-clean-plugin/ - documentation for branch 3.x https://maven.apache.org/plugins/maven-clean-plugin-4.x/ - documentation for master version 4.x and according to above for stage version https://maven.apache.org/

[RESULT][VOTE] Release Maven Resolver 2.0.6

2025-02-08 Thread Tamás Cservenák
Howdy, The vote has passed with the following result: +1: Tamas, Guillaume, Slawomir, Sylwester, Arnaud PMC quorum: reached I will promote the source release zip file to the Apache distribution area and the artifacts to the Maven Central repo. Thanks T

Re: Supply Chain Attacks and Insider Threats

2025-02-08 Thread Elliotte Rusty Harold
On Sat, Feb 8, 2025 at 1:19 PM Xeno Amess wrote: > BTW Elli yourself have lots of branches at main repo too...well yes master > branch and release branch is more important, yes. but other branches in the > same repo shall be...more formal, right? After all, they be central repo. No, not importan

Re: Documentation for 4.x/3.x plugins and components

2025-02-08 Thread Elliotte Rusty Harold
sounds good. +1. Thanks On Sat, Feb 8, 2025 at 12:49 PM Slawomir Jaranowski wrote: > > Hi, > > After discussion I think that model like: > > https://maven.apache.org/plugins/maven-clean-plugin/ > - documentation for branch 3.x > > https://maven.apache.org/plugins/maven-clean-plugin-4.x/ > - doc

Re: Supply Chain Attacks and Insider Threats

2025-02-08 Thread Slawomir Jaranowski
Hi, On Fri, 7 Feb 2025 at 14:52, Elliotte Rusty Harold wrote: > > This is an early draft of something I plan to publish for more open > source projects, but I wanted to send this out here first since I'm > more directly involved. > > Open source projects, especially widely used ones like Maven, n