[ https://issues.apache.org/jira/browse/MPOM-118?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15303695#comment-15303695 ]
Hervé Boutemy commented on MPOM-118: ------------------------------------ this time, it's me who is not clear and have to explain better :) we have 2 XML snippets: parent XML snippet (from parent POM) and child XML snippet (from child POM) {{combine.self}} and {{combine.children}} from child snippet is used to choose how child XML snippet will be merged into parent XML snippet parent XML snippet has no control on how child XML snippets will want to merge: 2 child XML snippets can decide to merge in different ways see Xpp3Dom class in http://maven.apache.org/shared/maven-shared-utils/ for code and unit tests in our precise case, specifying {{combine.children="append"}} in ASF parent POM means that we want to merge XML with ASF'parent parent POM: there is no ASF parent parent, then this configuration won't do anything (it won't really harm either) > Enforce strong GPG signatures by default > ---------------------------------------- > > Key: MPOM-118 > URL: https://issues.apache.org/jira/browse/MPOM-118 > Project: Maven POMs > Issue Type: Improvement > Components: asf > Affects Versions: ASF-17 > Reporter: Christopher Tubbs > Fix For: ASF-19 > > > maven-gpg-plugin configuration could be improved a bit so that ASF releases > are not weakened by a user's weak personal configuration. > I suggest adding something like the following to maven-gpg-plugin's > configuration in the pluginManagement section: > {code:xml} > <gpgArguments combine.children="append"> > <arg>--digest-algo=SHA512</arg> > </gpgArguments> > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)