[ANN] Apache Maven Parent POMs 40 Released

2023-06-15 Thread Slawomir Jaranowski
The Apache Maven team is pleased to announce the release of the Maven
Parent POMs Version 40.

Maven Parent POMs include Maven Parent POM itself,
but also Maven Plugins Parent POM, Maven Shared Components Parent POM,
Maven Skins Parent POM and Maven Doxia Tools Parent POM.

https://maven.apache.org/pom/maven/

You should specify the version in your project as parent like the following:


  org.apache.maven
  maven-parent
  40


You can download the appropriate sources etc. from the download page:

https://maven.apache.org/pom/maven/download.html

Release Notes - Maven POMs - Version MAVEN-40

** New Feature
* [MPOM-346] - publish SBOM on release

** Improvement
* [MPOM-397] - Don not run ITs during release
* [MPOM-422] - Bump modello from 2.1.1 to 2.1.2

** Task
* [MPOM-200] - remove Apache Resource Bundles parent POM
* [MPOM-415] - Use surefire/failsafe version from ASF parent

** Dependency upgrade
* [MPOM-390] - Upgrade to Maven Fluido Skin 1.11.2
* [MPOM-391] - Upgrade to Maven Surefire 3.0.0-M8
* [MPOM-392] - Upgrade to Maven Checkstyle Plugin 3.2.1
* [MPOM-393] - Upgrade to Maven PMD Plugin 3.21.0
* [MPOM-412] - Bump maven-enforcer-plugin to 3.3.0 and
extra-enforcer-rules from 1.6.1 to 1.7.0
* [MPOM-413] - Bump plexus-utils from 3.5.1 to 4.0.0 and add plexus-xml
4.0.0
* [MPOM-414] - Bump spotless-maven-plugin from 2.28.0 to 2.37.0
* [MPOM-420] - Bump maven-checkstyle-plugin from 3.2.1 to 3.3.0
* [MPOM-421] - Bump sisu from 0.3.5 to 0.9.0.M2
* [MPOM-424] - Upgrade Parent to 30

Enjoy,

-The Apache Maven team


[RESULT] [VOTE] Release Apache Maven parent 40

2023-06-15 Thread Slawomir Jaranowski
Hi,

The vote has passed with the following result:

+1: Tamás Cservenák, Sylwester Lachiewicz, Guillaume Nodet, Slawomir
Jaranowski
-1: Elliotte Rusty Harold

Elliotte had objections about plexus-utils/plexus-xml in version 4.0.0 in
dependencyManagement
Impacts of change was explained by Guillaume and this pom is our internal
parent for Maven projects.
So I made a decision to release it.

PMC quorum: reached

I will promote the source release zip file to Apache distribution area and
the artifacts to the central repo.

-- 
Sławomir Jaranowski


Re: Maven 3.9.x plugins verifications

2023-06-15 Thread Romain Manni-Bucau
Hi



Le jeu. 15 juin 2023 à 21:15, Slawomir Jaranowski 
a écrit :

> Hi
>
> Next my propositions for reporting Plugin Validation issues.
> Improve reporting [1] and documentation [2]
>
> I see many benefits when we show "external" issues to users.
> Many times plugin authors don't care or don't know how to make theirs
> plugins better, ready for next Maven versions and so on
>

This all belong to plugin sdk so feel like we still modify the wrong part.


> When we also inform users about such issues I see that many plugins have
> fixed or will be fixed soon [3] without it I think that never will happen
>

Looks mainly jacoco and quite a few actually plus some "hide me that
unwilled logs" so not sure data changes or we dont interpret it the same
way but I rather see the opposite with this filter.


> So we can think again if we should hide it by default, if someone doesn't
> like it can change on your system.
>

Not sure I read it as you intended but +1 to hide by default and using
logging config of v4 (v3 uses a file or system props to do the same) to
enable it (before debug mode) would be neat instead of duplicated options.
Loggers will be way better cause you can output it somewhere else whereas
toggle will still require grep to pick warnings you want to process when
they are numerous.


>
> [1] https://github.com/apache/maven/pull/1167
> [2] https://github.com/apache/maven-site/pull/429
> [3] https://github.com/search?q=maven.plugin.validation&type=issues
> https://github.com/search?q=maven.plugin.validation&type=pullrequests
>
>
>
> sob., 10 cze 2023 o 20:23 Henning Schmiedehausen <
> henn...@schmiedehausen.org>
> napisał(a):
>
> > On Fri, Jun 9, 2023 at 7:44 AM Slawomir Jaranowski <
> s.jaranow...@gmail.com
> > >
> > wrote:
> >
> > > In current 3.9.x we have:
> > >
> > >  - NONE, // mute validation completely (validation issue collection
> still
> > > happens, it is just not reported!)
> > >  - INLINE, // inline, each "internal" problem one line next to mojo
> > > invocation
> > >  - SUMMARY, // at end, list of plugin GAVs along with "internal" issues
> > >  - BRIEF, // synonym to SUMMARY
> > >  - VERBOSE // at end, list of plugin GAVs along with detailed report of
> > ANY
> > > validation issues
> > >
> > > First BRIEF and SUMMARY are duplicated one should be enough.
> > >
> >
> > Then remove SUMMARY. We shipped BRIEF in Maven 3.9.2, so it is here to
> > stay.
> >
> > -h
> >
>
>
> --
> Sławomir Jaranowski
>


Re: Maven 3.9.x plugins verifications

2023-06-15 Thread Slawomir Jaranowski
Hi

Next my propositions for reporting Plugin Validation issues.
Improve reporting [1] and documentation [2]

I see many benefits when we show "external" issues to users.
Many times plugin authors don't care or don't know how to make theirs
plugins better, ready for next Maven versions and so on

When we also inform users about such issues I see that many plugins have
fixed or will be fixed soon [3] without it I think that never will happen

So we can think again if we should hide it by default, if someone doesn't
like it can change on your system.


[1] https://github.com/apache/maven/pull/1167
[2] https://github.com/apache/maven-site/pull/429
[3] https://github.com/search?q=maven.plugin.validation&type=issues
https://github.com/search?q=maven.plugin.validation&type=pullrequests



sob., 10 cze 2023 o 20:23 Henning Schmiedehausen 
napisał(a):

> On Fri, Jun 9, 2023 at 7:44 AM Slawomir Jaranowski  >
> wrote:
>
> > In current 3.9.x we have:
> >
> >  - NONE, // mute validation completely (validation issue collection still
> > happens, it is just not reported!)
> >  - INLINE, // inline, each "internal" problem one line next to mojo
> > invocation
> >  - SUMMARY, // at end, list of plugin GAVs along with "internal" issues
> >  - BRIEF, // synonym to SUMMARY
> >  - VERBOSE // at end, list of plugin GAVs along with detailed report of
> ANY
> > validation issues
> >
> > First BRIEF and SUMMARY are duplicated one should be enough.
> >
>
> Then remove SUMMARY. We shipped BRIEF in Maven 3.9.2, so it is here to
> stay.
>
> -h
>


-- 
Sławomir Jaranowski


Re: [VOTE] Release Maven Clean Plugin version 3.3.1

2023-06-15 Thread Slawomir Jaranowski
+1

Please fix release notes in jira - it still points to version 3.3.0

śr., 14 cze 2023 o 20:58 Guillaume Nodet  napisał(a):

> Hi,
>
> Fwiw, I've burned the 3.3.0 release, hence 3.3.1...
>
> we solved 5 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317224&version=12351541
>
> There are still a couple of issues left in JIRA:
> https://issues.apache.org/jira/projects/MCLEAN/issues
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-1961/
>
> https://repository.apache.org/content/repositories/maven-1961/org/apache/maven/plugins/maven-clean-plugin/3.3.1/maven-clean-plugin-3.3.1-source-release.zip
>
> Source release checksum(s):
> maven-clean-plugin-3.3.1-source-release.zip
> sha512:
>
> a195d19de931800d243aed24fa4eb86ac0961ed0a487ff88e513bccb183176b4dd401f870ad970f630ed72a86b5826b8b0e0bd50afecbae5ba7fb2d65a0eb9af
>
> Staging site:
> https://maven.apache.org/plugins-archives/maven-clean-plugin-LATEST/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> --
> 
> Guillaume Nodet
>


-- 
Sławomir Jaranowski


Re: [VOTE] Release Maven Indexer 7.0.3

2023-06-15 Thread Sylwester Lachiewicz
+1

wt., 13 cze 2023, 21:27 użytkownik Tamás Cservenák 
napisał:

> Howdy,
>
> We solved 5 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317523&version=12353223
>
> There are still some issues in JIRA:
> https://issues.apache.org/jira/projects/MINDEXER/issues
>
> Staging repository:
> https://repository.apache.org/content/repositories/maven-1959/
>
> Source release SHA512:
>
> 9e7206dd73580014286c209bf8d978ed93cfdf1037acb97f72f0276675725862d9973a4ac9c1343eb5865b7963259f0fc2c25445ea46d392650d8f5959997ade
>
> Staging site:
> https://maven.apache.org/maven-indexer-archives/maven-indexer-LATEST/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for 72 hours.
>
> [ ] +1
> [ ] +0
> [ ] -1
>


Re: [VOTE] Release Maven Indexer 7.0.3

2023-06-15 Thread Tamás Cservenák
+1

On Tue, Jun 13, 2023 at 9:25 PM Tamás Cservenák  wrote:

> Howdy,
>
> We solved 5 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317523&version=12353223
>
> There are still some issues in JIRA:
> https://issues.apache.org/jira/projects/MINDEXER/issues
>
> Staging repository:
> https://repository.apache.org/content/repositories/maven-1959/
>
> Source release SHA512:
>
> 9e7206dd73580014286c209bf8d978ed93cfdf1037acb97f72f0276675725862d9973a4ac9c1343eb5865b7963259f0fc2c25445ea46d392650d8f5959997ade
>
> Staging site:
> https://maven.apache.org/maven-indexer-archives/maven-indexer-LATEST/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for 72 hours.
>
> [ ] +1
> [ ] +0
> [ ] -1
>


Re: [VOTE] Release Maven Clean Plugin version 3.3.1

2023-06-15 Thread Tamás Cservenák
+1

On Wed, Jun 14, 2023 at 8:58 PM Guillaume Nodet  wrote:

> Hi,
>
> Fwiw, I've burned the 3.3.0 release, hence 3.3.1...
>
> we solved 5 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317224&version=12351541
>
> There are still a couple of issues left in JIRA:
> https://issues.apache.org/jira/projects/MCLEAN/issues
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-1961/
>
> https://repository.apache.org/content/repositories/maven-1961/org/apache/maven/plugins/maven-clean-plugin/3.3.1/maven-clean-plugin-3.3.1-source-release.zip
>
> Source release checksum(s):
> maven-clean-plugin-3.3.1-source-release.zip
> sha512:
>
> a195d19de931800d243aed24fa4eb86ac0961ed0a487ff88e513bccb183176b4dd401f870ad970f630ed72a86b5826b8b0e0bd50afecbae5ba7fb2d65a0eb9af
>
> Staging site:
> https://maven.apache.org/plugins-archives/maven-clean-plugin-LATEST/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> --
> 
> Guillaume Nodet
>


[ANN] Maven WAR Plugin 3.4.0 released

2023-06-15 Thread Michael Osipov
The Apache Maven team is pleased to announce the release of the Maven 
WAR Plugin version 3.4.0.


https://maven.apache.org/plugins/maven-war-plugin/

You should specify the version in your project's plugin configuration:


  org.apache.maven.plugins
  maven-war-plugin
  3.4.0



Release Notes - Maven WAR Plugin - Version 3.4.0

** Bug
* [MWAR-456] - Latest maven-war-plugin causing vulnerable .jars to 
be downloaded


** Improvement
* [MWAR-450] - ISO8859-1 properties files get changed into UTF-8 
when filtered

* [MWAR-452] - One page about Skinny WARs

** Task
* [MWAR-444] - Update plugin (requires Maven 3.2.5+)
* [MWAR-453] - Require Java 8
* [MWAR-457] - Update plexus-utils to 3.0.24 - in its
* [MWAR-465] - Empty test classes cause dependency:analyze to fail
* [MWAR-466] - Refresh download page

** Dependency upgrade
* [MWAR-454] - Upgrade Parent to 36
* [MWAR-458] - Update maven-filtering to version 3.3.1
* [MWAR-459] - Bump plexus-archiver to 4.7.1
* [MWAR-460] - Bump maven-archiver from 3.5.1 to 3.6.0
* [MWAR-461] - Bump commons-io from 2.6 to 2.11.0
* [MWAR-462] - Bump plexus-utils from 3.3.0 to 3.5.1
* [MWAR-463] - Upgrade Parent to 39
* [MWAR-464] - Upgrade lifecycle mapping plugins
* [MWAR-467] - Upgrade components


Enjoy,

-The Apache Maven team

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



[ANN] Maven Invoker Plugin 3.6.0 released

2023-06-15 Thread Michael Osipov
The Apache Maven team is pleased to announce the release of the Maven 
Invoker Plugin version 3.6.0.


https://maven.apache.org/plugins/maven-invoker-plugin/

You should specify the version in your project's plugin configuration:


  org.apache.maven.plugins
  maven-invoker-plugin
  3.6.0



Release Notes - Maven Invoker Plugin - Version 3.6.0

** Sub-task
* [MINVOKER-347] - Document upcoming report file name change

** Bug
* [MINVOKER-340] - AbstractInvokerMojo/InvokerReport subclasses are 
not thread-safe due to use of DecimalFormat


** Improvement
* [MINVOKER-341] - Make elapsed time field type consistent with 
Maven Surefire
* [MINVOKER-342] - Use ChoiceFormat to selectively render elapsed 
time in AbstractInvokerMojo
* [MINVOKER-345] - Use ChoiceFormat to selectively render 
percentage and elapsed time in InvokerReportRenderer


** Task
* [MINVOKER-343] - Make elapsed time rendering consistent with 
Maven Surefire
* [MINVOKER-344] - Move reporting rendering logic into a 
ReportRenderer class


** Dependency upgrade
* [MINVOKER-338] - Bump groovy-bom from 4.0.10 to 4.0.12


Enjoy,

-The Apache Maven team

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



[RESULT] [VOTE] Release Maven WAR Plugin version 3.4.0

2023-06-15 Thread Michael Osipov

Hi,

The vote has passed with the following result:

+1: Sylwester Lachiewicz, Slawomir Jaranowski, Olivier Lamy, Tamás 
Cservenák, Hervé Boutemy, Guillaume Nodet, Romain Manni-Bucau, Benjamin 
Marwell, Karl Heinz Marbaise


PMC quorum: reached

I will promote the artifacts to the central repo, the source release ZIP 
file

and add this release the board report.