[ANN] Apache Maven Dependency Plugin Version 3.1.0 Released
The Apache Maven team is pleased to announce the release of the Apache Maven Dependency Plugin Version 3.1.0 https://maven.apache.org/plugins/maven-dependency-plugin/ Important Note since 3.1.0: * Maven 3.X only * JDK 7 minimum requirement You should specify the version in your project's plugin configuration: org.apache.maven.plugins maven-dependency-plugin 3.1.0 You can download the appropriate sources etc. from the download page: https://maven.apache.org/plugins/maven-dependency-plugin/download.cgi Release Notes Maven Dependency Plugin 3.1.0 https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12341595 Bugs: * [MDEP-559] - Java 9 bytecode cannot be parsed * [MDEP-603] - dependency:analyze fails on JDK 9 / JDK 10 Improvement: * [MDEP-605] - Add documentation information for GitHub Dependency upgrades: * [MDEP-584] - Upgrade plexus-utils to version 3.1.0 * [MDEP-585] - Upgrade plexus-archiver to 3.5. * [MDEP-599] - Upgrade parent to 31 Many thanks to all reporters/contributors/testers of this release. Reporters: * MDEP-559: Ben Alex Testers: * Mark Raynsford Enjos, - The Apache Maven team - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
[ANN] Apache Maven Shade Plugin Version 3.1.1 Released
The Apache Maven team is pleased to announce the release of the Apache Maven Shade Plugin Version 3.1.1 https://maven.apache.org/plugins/maven-shade-plugin/ Important Note since 3.1.1: * Maven 3.X only You should specify the version in your project's plugin configuration: org.apache.maven.plugins maven-shade-plugin 3.1.1 You can download the appropriate sources etc. from the download page: https://maven.apache.org/plugins/maven-shade-plugin/download.cgi Release Notes Maven Shade Plugin 3.1.0 https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317921&version=12341390 Bugs: * [MSHADE-273] - Shading of paths starting with / ignores excludes * [MSHADE-275] - Maven Shade Plugin does not work under Java 10 Improvements: * [MSHADE-277] - Identify issue related IT failure mini-jar-malformed-dependencies/pom.xml * [MSHADE-278] - Print out the jar responsible for exceptions like "Error creating shaded jar: invalid LOC header (bad signature)" * [MSHADE-283] - Add documentation information for GitHub Dependency upgrades: * [MSHADE-276] - Upgrade parent to 31 * [MSHADE-279] - Upgrade mave-surefire/failsafe-plugin 2.21.0 * [MSHADE-280] - Upgrade jdom 1.1.3 to jdom2 2.0.6 * [MSHADE-281] - Upgrade plexus-utils 3.1.0 * [MSHADE-282] - Remove not used directories rel-path-test-files Many thanks to all reporters/contributors/testers of this release. Reporters: * MSHADE-273: Eugene Kirpichov * MSHADE-275: Markus Grech * MSHADE-278: Gary Gregory Testers: * Markus Grech * Rafael Winterhalter Enjoy - The Apache Maven team - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
[VOTE] Release Apache Maven JAR Plugin version 3.1.0
Hi, We solved 9 issues: https://issues.apache.org/jira/projects/MJAR/versions/12342349 There are still a couple of issues left in JIRA: https://issues.apache.org/jira/issues/?jql=project%20%3D%20MJAR%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20key%20DESC%2C%20priority%20DESC%2C%20updated%20DESC Staging repo: https://repository.apache.org/content/repositories/maven-1413/ https://repository.apache.org/content/repositories/maven-1413/org/apache/maven/plugins/maven-jar-plugin/3.1.0/maven-jar-plugin-3.1.0-source-release.zip Source release checksum(s): maven-jar-plugin-3.1.0-source-release.zip sha1: 06c9404e218df2f407eedaec64289d3e7fda5592 Staging site: https://maven.apache.org/plugins-archives/maven-jar-plugin-LATEST/ Guide to testing staged releases: https://maven.apache.org/guides/development/guide-testing-releases.html Vote open for at least 72 hours. [ ] +1 [ ] +0 [ ] -1 Kind regards Karl Heinz Marbaise - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Download links for sha256/sha512 checksums
Hi to all, updated the download page having now sha256/sha512 links... first step of the efforts to migrate away from .md5 to sha256/sha512.. Most important: https://maven.apache.org/download.cgi WDYT ? other changes/improvements ? Kind regards Karl Heinz Marbaise - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: Download links for sha256/sha512 checksums
Am 2018-04-06 um 21:50 schrieb Karl Heinz Marbaise: Hi to all, updated the download page having now sha256/sha512 links... first step of the efforts to migrate away from .md5 to sha256/sha512.. Most important: https://maven.apache.org/download.cgi WDYT ? other changes/improvements ? I would definitively keep SHA-1 around. As for SHA2-512, isn't there any benefit for us ATM compared to 256? Michael - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: Download links for sha256/sha512 checksums
Hi, On 06/04/18 21:54, Michael Osipov wrote: Am 2018-04-06 um 21:50 schrieb Karl Heinz Marbaise: Hi to all, updated the download page having now sha256/sha512 links... first step of the efforts to migrate away from .md5 to sha256/sha512.. Most important: https://maven.apache.org/download.cgi WDYT ? other changes/improvements ? I would definitively keep SHA-1 around. As for SHA2-512, isn't there any benefit for us ATM compared to 256? So you would say having only sha1, sha256 ? Kind regards Karl Heinz Marbaise Michael - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: Download links for sha256/sha512 checksums
Am 2018-04-06 um 22:13 schrieb Karl Heinz Marbaise: Hi, On 06/04/18 21:54, Michael Osipov wrote: Am 2018-04-06 um 21:50 schrieb Karl Heinz Marbaise: Hi to all, updated the download page having now sha256/sha512 links... first step of the efforts to migrate away from .md5 to sha256/sha512.. Most important: https://maven.apache.org/download.cgi WDYT ? other changes/improvements ? I would definitively keep SHA-1 around. As for SHA2-512, isn't there any benefit for us ATM compared to 256? So you would say having only sha1, sha256 ? Correct. - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: Download links for sha256/sha512 checksums
Hi, On 06/04/18 22:28, Michael Osipov wrote: Am 2018-04-06 um 22:13 schrieb Karl Heinz Marbaise: Hi, On 06/04/18 21:54, Michael Osipov wrote: Am 2018-04-06 um 21:50 schrieb Karl Heinz Marbaise: Hi to all, updated the download page having now sha256/sha512 links... first step of the efforts to migrate away from .md5 to sha256/sha512.. Most important: https://maven.apache.org/download.cgi WDYT ? other changes/improvements ? I would definitively keep SHA-1 around. As for SHA2-512, isn't there any benefit for us ATM compared to 256? So you would say having only sha1, sha256 ? Correct. changed accordingly.. Kind regards Karl Heinz Marbaise - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: Download links for sha256/sha512 checksums
Am 2018-04-06 um 22:38 schrieb Karl Heinz Marbaise: Hi, On 06/04/18 22:28, Michael Osipov wrote: Am 2018-04-06 um 22:13 schrieb Karl Heinz Marbaise: Hi, On 06/04/18 21:54, Michael Osipov wrote: Am 2018-04-06 um 21:50 schrieb Karl Heinz Marbaise: Hi to all, updated the download page having now sha256/sha512 links... first step of the efforts to migrate away from .md5 to sha256/sha512.. Most important: https://maven.apache.org/download.cgi WDYT ? other changes/improvements ? I would definitively keep SHA-1 around. As for SHA2-512, isn't there any benefit for us ATM compared to 256? So you would say having only sha1, sha256 ? Correct. changed accordingly.. +1 - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Changing Release Procedure - VOTE?
Hi, based on the request to change the checksums on the site we have to change our release procedure[1] which currently describes: "Copy the source release to the Apache Distribution Area". wagon/wagon-2.2-source-release.zip wagon/wagon-2.2-source-release.zip.asc wagon/wagon-2.2-source-release.zip.md5 which means we have to change that into: wagon/wagon-2.2-source-release.zip wagon/wagon-2.2-source-release.zip.asc wagon/wagon-2.2-source-release.zip.sha1 Do we need for such things a formal VOTE or would it be sufficient to simply having +1 ... Furthermore I think we need to enhance the core release part to have sha1/sha256 checksums instead of .md5... ? Kind regards Karl Heinz Marbaise [1]: https://maven.apache.org/developers/release/maven-project-release-procedure.html [2]: https://maven.apache.org/developers/release/maven-core-release.html - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Release Apache Maven JAR Plugin version 3.1.0
The link with the solved issues leads to a page that requires you to be a Jira user. On Fri, Apr 6, 2018, 20:26 Karl Heinz Marbaise wrote: > Hi, > > We solved 9 issues: > https://issues.apache.org/jira/projects/MJAR/versions/12342349 > > There are still a couple of issues left in JIRA: > > https://issues.apache.org/jira/issues/?jql=project%20%3D%20MJAR%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20key%20DESC%2C%20priority%20DESC%2C%20updated%20DESC > > Staging repo: > https://repository.apache.org/content/repositories/maven-1413/ > > > https://repository.apache.org/content/repositories/maven-1413/org/apache/maven/plugins/maven-jar-plugin/3.1.0/maven-jar-plugin-3.1.0-source-release.zip > > Source release checksum(s): > maven-jar-plugin-3.1.0-source-release.zip sha1: > 06c9404e218df2f407eedaec64289d3e7fda5592 > > Staging site: > https://maven.apache.org/plugins-archives/maven-jar-plugin-LATEST/ > > Guide to testing staged releases: > https://maven.apache.org/guides/development/guide-testing-releases.html > > Vote open for at least 72 hours. > > [ ] +1 > [ ] +0 > [ ] -1 > > Kind regards > Karl Heinz Marbaise > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > >
Re: [VOTE] Release Apache Maven Archetype Bundles version 1.3
here is my +1 anybody else? Regards, Hervé Le mardi 3 avril 2018, 00:00:01 CEST Hervé BOUTEMY a écrit : > Hi, > > We solved 14 issues: > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317123&ve > rsion=12342794&styleName=Text > > There are still a couple of issues left in JIRA: > https://issues.apache.org/jira/issues/?jql=project%20%3D%20MARCHETYPES%20AND > %20status%20%3D%20Open%20ORDER%20BY%20key%20DESC%2C%20priority%20DESC > > Staging repo: > https://repository.apache.org/content/repositories/maven-1411/ > https://repository.apache.org/content/repositories/maven-1411/org/apache/mav > en/archetypes/maven-archetype-bundles/1.3/maven-archetype-bundles-1.3-source > -release.zip > > Source release checksum(s): > maven-archetype-bundles-1.3-source-release.zip sha1: > 9f4a9422942ca7e6b737a86e21fd39d66b4e73ec > > Staging site: > https://maven.apache.org/archetypes-archives/archetypes-LATEST/ > > Guide to testing staged releases: > https://maven.apache.org/guides/development/guide-testing-releases.html > > Vote open for at least 72 hours. > > [ ] +1 > [ ] +0 > [ ] -1 > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
