Guillaume Nodet created MNG-8527:
------------------------------------
Summary: Re-enable consumer POM
Key: MNG-8527
URL: https://issues.apache.org/jira/browse/MNG-8527
Project: Maven
Issue Type: Task
Affects Versions: 4.0.0-rc-2
Reporter: Guillaume Nodet
The consumer POM has been disabled in RC-2 (see MNG-8393) for 4.0.0 models.
I think it needs to be enabled again.
But there are a few things to fix:
* some properties (including CI-friendly) may leak through from consumer to
dependency POM (see MNG-8523)
* the consumer pom flattens and inline all properties, which may be a problem
if the property can be modified by a profile (javafx use case)
* the flattening process also makes all poms much more heavy as they usually
convey lots of (previously inherited) data such as managed dependencies.
For the leak, this happens if the property is not actually defined as a
property in the pom. It may come from a Maven user property. In such case,
the property value won't be in the installed POM (when not using consumer POM),
which means it can be modified by a user property from the requesting POM.
This is also related to profile activation, which may be activated or
deactivated using user or system properties (including OS data which can be
overridden from CLI).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
