[GitHub] maven issue #151: [MNG-5968] Default plugin version updates

2018-01-07 Thread slachiewicz
Github user slachiewicz commented on the issue:

https://github.com/apache/maven/pull/151
  
Thank you for the explanation, I have seen previous discussions about the 
update - for sure the refreshment of the topic will be useful like MNG-6169
I have prepared fix for MNG-5992 and clossing this pull.


---

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



[GitHub] maven issue #151: [MNG-5968] Default plugin version updates

2018-01-06 Thread hboutemy
Github user hboutemy commented on the issue:

https://github.com/apache/maven/pull/151
  
other topics:
- MNG-5968 is closed
- MNG-5968 is not about default plugins versions, but about Maven core build

if you rework this PR to focus on MNG-5992, ie providing a more secure 
maven-release-plugin by default in Super POM, I would push this one
If you want to update other plugins, please consider other PRs with other 
Jira issues, since I will challenge the change seriously :)


---

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



[GitHub] maven issue #151: [MNG-5968] Default plugin version updates

2018-01-06 Thread hboutemy
Github user hboutemy commented on the issue:

https://github.com/apache/maven/pull/151
  
I'm not a fan of default plugins updates in core:
- depending on default versions is a bad practice, we expect users to 
explicitely choose their version through pluginManagement (and we display a big 
WARNING in case they don't do it)
- it changes behaviour when switching from one mvn version to the other

then IMHO changing default plugins version should really be driven by key 
issues that we really want to avoid for untrained people (who don't know the 
requirement to define their choice): for example MNG-5992 would such an 
exception (default security is more important than helping people know that 
they need to choose their plugins versions by letting old plugins versions by 
default)


---

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



[GitHub] maven issue #151: [MNG-5968] Default plugin version updates

2018-01-06 Thread slachiewicz
Github user slachiewicz commented on the issue:

https://github.com/apache/maven/pull/151
  
I found this changes in abdoned 3.4 line. Should also fix MNG-5992


---

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org