Hi,

I would like to see in 3.5.3 if there are no objections:

* MNG-6298 3.5.2: ClassNotFoundException: javax.annotation.security.RolesAllowed
* MNG-6312 Update Maven Wagon dependency (based on CVE-2015-6748
)

* MNG-6326 Build continues when core extensions aren't found
   WDYT ?

* MNG-6096
   I had the idea in mind to enhance the ComparableVersion
   (change only from private to public to make parts accessible)
   and enhance the implementation of DefaultArtifactVersion
   based on that to get the correct information
   from ComparableVersion which parses all the information
   and handling all the different cases.
   The same issue came up in versions-maven-plugin and
   build-helper-maven-plugin (where I removed the usage of
   DefaultArtifactVersion) to handle versions correctly
   and in the same way as in Maven itself.
   Maybe We can make a separate project to test
   different ideas...and postpone the deprecation
   to 3.6.X...

Kind regars
Karl Heinz Marbaise

[1]: https://issues.apache.org/jira/browse/MNG-6298
[2]: https://builds.apache.org/job/maven-wip/job/maven/job/MNG-6298/

[3]: https://issues.apache.org/jira/browse/MNG-6312
[2]: https://builds.apache.org/job/maven-wip/job/maven/job/MNG-6312/


On 13/01/18 17:09, Robert Scholte wrote:
+1

3.5.3 has one 9/10 closed, 1 is in progress[1]

3.5.3-candidate have a couple of issues with pull request, so let's verify those. (ps. I'd like to move MNG-6096 forward, since there's no clear explanation how DefaultArtifactVersion is replaced)

3.5-x-candidate[3] most seem to be dependency management related, don't think this will ever end up in a 3.5.x release.

thanks,
Robert

[1] https://issues.apache.org/jira/projects/MNG/versions/12341428

[2] https://issues.apache.org/jira/projects/MNG/versions/12338968

[3] https://issues.apache.org/jira/projects/MNG/versions/12338965

On Sat, 13 Jan 2018 15:33:47 +0100, Stephen Connolly <stephen.alan.conno...@gmail.com> wrote:

1 weeks notice before I declare a code freeze.

If you want to identify release blockers reply here and i’ll assess how
long to hold up until they are fixed

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org

Reply via email to