[ 
https://issues.apache.org/jira/browse/MPOM-118?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15303695#comment-15303695
 ] 

Hervé Boutemy commented on MPOM-118:
------------------------------------

this time, it's me who is not clear and have to explain better :)

we have 2 XML snippets: parent XML snippet (from parent POM) and child XML 
snippet (from child POM)
{{combine.self}} and {{combine.children}} from child snippet is used to choose 
how child XML snippet will be merged into parent XML snippet
parent XML snippet has no control on how child XML snippets will want to merge: 
2 child XML snippets can decide to merge in different ways
see Xpp3Dom class in http://maven.apache.org/shared/maven-shared-utils/ for 
code and unit tests

in our precise case, specifying {{combine.children="append"}} in ASF parent POM 
means that we want to merge XML with ASF'parent parent POM: there is no ASF 
parent parent, then this configuration won't do anything (it won't really harm 
either)

> Enforce strong GPG signatures by default
> ----------------------------------------
>
>                 Key: MPOM-118
>                 URL: https://issues.apache.org/jira/browse/MPOM-118
>             Project: Maven POMs
>          Issue Type: Improvement
>          Components: asf
>    Affects Versions: ASF-17
>            Reporter: Christopher Tubbs
>             Fix For: ASF-19
>
>
> maven-gpg-plugin configuration could be improved a bit so that ASF releases 
> are not weakened by a user's weak personal configuration.
> I suggest adding something like the following to maven-gpg-plugin's 
> configuration in the pluginManagement section:
> {code:xml}
> <gpgArguments combine.children="append">
>   <arg>--digest-algo=SHA512</arg>
> </gpgArguments>
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to