[GitHub] [maven] gnodet commented on pull request #762: [EXPERIMENT] Resolver locking mode

2022-06-27 Thread GitBox


gnodet commented on PR #762:
URL: https://github.com/apache/maven/pull/762#issuecomment-1168302480

   @cstamas what's the difference between `default` and `auto` ?
   Is `auto` a placeholder to add some automatic detection of the filesystem if 
possible and switch between file and ipc (both could be setup without any 
additional external requirements) ?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven] gnodet merged pull request #744: [MNG-7360] Fix xml transformation to ensure proper context

2022-06-27 Thread GitBox


gnodet merged PR #744:
URL: https://github.com/apache/maven/pull/744


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-integration-testing] gnodet merged pull request #167: [MNG-7360] Add an IT for build consumer with tags in plugin configs

2022-06-27 Thread GitBox


gnodet merged PR #167:
URL: https://github.com/apache/maven-integration-testing/pull/167


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-help-plugin] slachiewicz merged pull request #66: Bump mrm-maven-plugin from 1.4.0 to 1.4.1

2022-06-27 Thread GitBox


slachiewicz merged PR #66:
URL: https://github.com/apache/maven-help-plugin/pull/66


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-release] dependabot[bot] closed pull request #140: Bump mrm-maven-plugin from 1.3.0 to 1.4.0

2022-06-27 Thread GitBox


dependabot[bot] closed pull request #140: Bump mrm-maven-plugin from 1.3.0 to 
1.4.0
URL: https://github.com/apache/maven-release/pull/140


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-release] dependabot[bot] commented on pull request #140: Bump mrm-maven-plugin from 1.3.0 to 1.4.0

2022-06-27 Thread GitBox


dependabot[bot] commented on PR #140:
URL: https://github.com/apache/maven-release/pull/140#issuecomment-1168203881

   Superseded by #142.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-release] dependabot[bot] opened a new pull request, #142: Bump mrm-maven-plugin from 1.3.0 to 1.4.1

2022-06-27 Thread GitBox


dependabot[bot] opened a new pull request, #142:
URL: https://github.com/apache/maven-release/pull/142

   Bumps [mrm-maven-plugin](https://github.com/mojohaus/mrm) from 1.3.0 to 
1.4.1.
   
   Release notes
   Sourced from https://github.com/mojohaus/mrm/releases";>mrm-maven-plugin's 
releases.
   
   1.4.1
   
   🐛 Bug Fixes
   
   Generate correct content of empty jars (https://github-redirect.dependabot.com/mojohaus/mrm/issues/112";>#112) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus-archiver from 4.3.0 to 4.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/111";>#111) 
https://github.com/dependabot";>@​dependabot
   Bump jetty.version from 9.4.46.v20220331 to 9.4.48.v20220622 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/110";>#110) 
https://github.com/dependabot";>@​dependabot
   
   👻 Maintenance
   
   Site improvement (https://github-redirect.dependabot.com/mojohaus/mrm/issues/113";>#113) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   1.4.0
   
   🚀 New features and improvements
   
   basePath configuration parameter (https://github-redirect.dependabot.com/mojohaus/mrm/issues/94";>#94) 
https://github.com/ppalaga";>@​ppalaga
   
   🐛 Bug Fixes
   
   Fix unclosed opened stream (https://github-redirect.dependabot.com/mojohaus/mrm/issues/105";>#105) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump mojo-parent from 67 to 68 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/106";>#106) 
https://github.com/dependabot";>@​dependabot
   Bump maven-enforcer-plugin from 3.0.0 to 3.1.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/102";>#102) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-archiver from 4.2.7 to 4.3.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/101";>#101) 
https://github.com/dependabot";>@​dependabot
   Bump maven-common-artifact-filters from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/104";>#104) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.5.1 to 4.6.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/98";>#98) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-utils from 3.4.1 to 3.4.2 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/93";>#93) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/92";>#92) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.5.0 to 4.5.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/89";>#89) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.4.0 to 4.5.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/88";>#88) 
https://github.com/dependabot";>@​dependabot
   Update Jetty to 9.4.46.v20220331 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/72";>#72) 
https://github.com/jorsol";>@​jorsol
   Bump mojo-parent from 65 to 67 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/87";>#87) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.5.0 to 3 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/80";>#80) 
https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 2.4.0 to 3 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/81";>#81) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.17.6 to 5.19.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/82";>#82) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.3.1 to 4.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/83";>#83) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.2.0 to 4.3.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/75";>#75) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.15.0 to 5.17.6 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/73";>#73) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-archiver from 4.2.6 to 4.2.7 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/69";>#69) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.4.0 to 2.5.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/67";>#67) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.1.0 to 4.2.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/66";>#66) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.3.1 to 2.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/65";>#65) 
https://github.com/dependabot";>@​dependabot
   
   📝 Documentation updates
   
   
   ... (truncated)
   
   
   Commits
   
   https://github.com/mojohaus/mrm/commit/c0c9ae890a0e25

[GitHub] [maven-help-plugin] dependabot[bot] opened a new pull request, #66: Bump mrm-maven-plugin from 1.4.0 to 1.4.1

2022-06-27 Thread GitBox


dependabot[bot] opened a new pull request, #66:
URL: https://github.com/apache/maven-help-plugin/pull/66

   Bumps [mrm-maven-plugin](https://github.com/mojohaus/mrm) from 1.4.0 to 
1.4.1.
   
   Release notes
   Sourced from https://github.com/mojohaus/mrm/releases";>mrm-maven-plugin's 
releases.
   
   1.4.1
   
   🐛 Bug Fixes
   
   Generate correct content of empty jars (https://github-redirect.dependabot.com/mojohaus/mrm/issues/112";>#112) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus-archiver from 4.3.0 to 4.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/111";>#111) 
https://github.com/dependabot";>@​dependabot
   Bump jetty.version from 9.4.46.v20220331 to 9.4.48.v20220622 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/110";>#110) 
https://github.com/dependabot";>@​dependabot
   
   👻 Maintenance
   
   Site improvement (https://github-redirect.dependabot.com/mojohaus/mrm/issues/113";>#113) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   
   
   
   Commits
   
   https://github.com/mojohaus/mrm/commit/c0c9ae890a0e2550231db82e995e1a517bb90c88";>c0c9ae8
 [maven-release-plugin] prepare release mrm-1.4.1
   https://github.com/mojohaus/mrm/commit/2f207efb4a7d5558d37fef3e4622dd3f9185c593";>2f207ef
 Site improvement
   https://github.com/mojohaus/mrm/commit/4f2b7b7f9574be0c18d406b772e488681ac930c4";>4f2b7b7
 Generate correct content of empty jars
   https://github.com/mojohaus/mrm/commit/9de675bbdfc5adeeb24c4e8d9078c95663c1170f";>9de675b
 Bump plexus-archiver from 4.3.0 to 4.4.0
   https://github.com/mojohaus/mrm/commit/ebd27189d7896293916896d3bc93bb9dcd775970";>ebd2718
 Bump jetty.version from 9.4.46.v20220331 to 9.4.48.v20220622
   https://github.com/mojohaus/mrm/commit/50f0325fbfa99d1262e649bcd57ed190d3e1bf76";>50f0325
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/mojohaus/mrm/compare/mrm-1.4.0...mrm-1.4.1";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.mojo:mrm-maven-plugin&package-manager=maven&previous-version=1.4.0&new-version=1.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-shade-plugin] dependabot[bot] closed pull request #141: Bump mrm-maven-plugin from 1.2.0 to 1.4.0

2022-06-27 Thread GitBox


dependabot[bot] closed pull request #141: Bump mrm-maven-plugin from 1.2.0 to 
1.4.0
URL: https://github.com/apache/maven-shade-plugin/pull/141


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-shade-plugin] dependabot[bot] commented on pull request #141: Bump mrm-maven-plugin from 1.2.0 to 1.4.0

2022-06-27 Thread GitBox


dependabot[bot] commented on PR #141:
URL: 
https://github.com/apache/maven-shade-plugin/pull/141#issuecomment-1168192638

   Superseded by #142.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-shade-plugin] dependabot[bot] opened a new pull request, #142: Bump mrm-maven-plugin from 1.2.0 to 1.4.1

2022-06-27 Thread GitBox


dependabot[bot] opened a new pull request, #142:
URL: https://github.com/apache/maven-shade-plugin/pull/142

   Bumps [mrm-maven-plugin](https://github.com/mojohaus/mrm) from 1.2.0 to 
1.4.1.
   
   Release notes
   Sourced from https://github.com/mojohaus/mrm/releases";>mrm-maven-plugin's 
releases.
   
   1.4.1
   
   🐛 Bug Fixes
   
   Generate correct content of empty jars (https://github-redirect.dependabot.com/mojohaus/mrm/issues/112";>#112) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus-archiver from 4.3.0 to 4.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/111";>#111) 
https://github.com/dependabot";>@​dependabot
   Bump jetty.version from 9.4.46.v20220331 to 9.4.48.v20220622 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/110";>#110) 
https://github.com/dependabot";>@​dependabot
   
   👻 Maintenance
   
   Site improvement (https://github-redirect.dependabot.com/mojohaus/mrm/issues/113";>#113) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   1.4.0
   
   🚀 New features and improvements
   
   basePath configuration parameter (https://github-redirect.dependabot.com/mojohaus/mrm/issues/94";>#94) 
https://github.com/ppalaga";>@​ppalaga
   
   🐛 Bug Fixes
   
   Fix unclosed opened stream (https://github-redirect.dependabot.com/mojohaus/mrm/issues/105";>#105) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump mojo-parent from 67 to 68 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/106";>#106) 
https://github.com/dependabot";>@​dependabot
   Bump maven-enforcer-plugin from 3.0.0 to 3.1.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/102";>#102) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-archiver from 4.2.7 to 4.3.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/101";>#101) 
https://github.com/dependabot";>@​dependabot
   Bump maven-common-artifact-filters from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/104";>#104) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.5.1 to 4.6.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/98";>#98) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-utils from 3.4.1 to 3.4.2 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/93";>#93) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/92";>#92) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.5.0 to 4.5.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/89";>#89) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.4.0 to 4.5.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/88";>#88) 
https://github.com/dependabot";>@​dependabot
   Update Jetty to 9.4.46.v20220331 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/72";>#72) 
https://github.com/jorsol";>@​jorsol
   Bump mojo-parent from 65 to 67 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/87";>#87) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.5.0 to 3 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/80";>#80) 
https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 2.4.0 to 3 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/81";>#81) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.17.6 to 5.19.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/82";>#82) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.3.1 to 4.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/83";>#83) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.2.0 to 4.3.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/75";>#75) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.15.0 to 5.17.6 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/73";>#73) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-archiver from 4.2.6 to 4.2.7 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/69";>#69) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.4.0 to 2.5.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/67";>#67) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.1.0 to 4.2.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/66";>#66) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.3.1 to 2.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/65";>#65) 
https://github.com/dependabot";>@​dependabot
   
   📝 Documentation updates
   
   
   ... (truncated)
   
   
   Commits
   
   https://github.com/mojohaus/mrm/commit/c0c9ae890

[GitHub] [maven-indexer] dependabot[bot] opened a new pull request, #226: Bump checkstyle from 10.3 to 10.3.1

2022-06-27 Thread GitBox


dependabot[bot] opened a new pull request, #226:
URL: https://github.com/apache/maven-indexer/pull/226

   Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 10.3 to 
10.3.1.
   
   Release notes
   Sourced from https://github.com/checkstyle/checkstyle/releases";>checkstyle's 
releases.
   
   checkstyle-10.3.1
   https://checkstyle.org/releasenotes.html#Release_10.3.1";>https://checkstyle.org/releasenotes.html#Release_10.3.1
   
   
   
   Commits
   
   https://github.com/checkstyle/checkstyle/commit/2163fa6dab8b97aaf26107ae0f1123811c31c5a8";>2163fa6
 [maven-release-plugin] prepare release checkstyle-10.3.1
   https://github.com/checkstyle/checkstyle/commit/47e6e280027940ba741d552ab9147fba7b4152a7";>47e6e28
 doc: release notes 10.3.1
   https://github.com/checkstyle/checkstyle/commit/b8d8466aa4db10128990a64384a88450d3b2e498";>b8d8466
 doc: release notes 10.3.1-SNAPSHOT
   https://github.com/checkstyle/checkstyle/commit/a5e4c7268a45005e75f9d7d84fe27409cddafa02";>a5e4c72
 config: update to 10.3.1-SNAPSHOT
   https://github.com/checkstyle/checkstyle/commit/c666b0ea9bb9521103977e4ead81fcba7976815f";>c666b0e
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/11726";>#11726:
 Automate creation of settings.xml file for release
   https://github.com/checkstyle/checkstyle/commit/caa1951b40162a7531cfcbe957ff910fa4dfde13";>caa1951
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/11729";>#11729:
 Automate update of releasenotes.xml by content for new release
   https://github.com/checkstyle/checkstyle/commit/4d8f81630bbc47d349fca421a99e4454b38d9db2";>4d8f816
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/11725";>#11725:
 Automate twitter posts to use single shell command
   https://github.com/checkstyle/checkstyle/commit/1f498f318e0ad0a3d3a227a190c4e6342c92cbd6";>1f498f3
 Issue https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/7797";>#7797:
 Kill two surviving mutations in pitest-javadoc
   https://github.com/checkstyle/checkstyle/commit/df3b5ea2da26ce1e504129d1d4241880d29c9e8b";>df3b5ea
 Pull https://github-redirect.dependabot.com/checkstyle/checkstyle/issues/11761";>#11761:
 resolve dependency order for XpathFileGeneratorAstFilter
   https://github.com/checkstyle/checkstyle/commit/b3a1623c15c16e3389a57732c85b6435dde9feed";>b3a1623
 dependency: bump pitest-maven and pitest-junit5-plugin
   Additional commits viewable in https://github.com/checkstyle/checkstyle/compare/checkstyle-10.3...checkstyle-10.3.1";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.puppycrawl.tools:checkstyle&package-manager=maven&previous-version=10.3&new-version=10.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-site-plugin] dependabot[bot] commented on pull request #90: Bump mrm-maven-plugin from 1.3.0 to 1.4.0

2022-06-27 Thread GitBox


dependabot[bot] commented on PR #90:
URL: https://github.com/apache/maven-site-plugin/pull/90#issuecomment-1168191865

   Superseded by #93.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-site-plugin] dependabot[bot] closed pull request #90: Bump mrm-maven-plugin from 1.3.0 to 1.4.0

2022-06-27 Thread GitBox


dependabot[bot] closed pull request #90: Bump mrm-maven-plugin from 1.3.0 to 
1.4.0
URL: https://github.com/apache/maven-site-plugin/pull/90


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-site-plugin] dependabot[bot] opened a new pull request, #93: Bump mrm-maven-plugin from 1.3.0 to 1.4.1

2022-06-27 Thread GitBox


dependabot[bot] opened a new pull request, #93:
URL: https://github.com/apache/maven-site-plugin/pull/93

   Bumps [mrm-maven-plugin](https://github.com/mojohaus/mrm) from 1.3.0 to 
1.4.1.
   
   Release notes
   Sourced from https://github.com/mojohaus/mrm/releases";>mrm-maven-plugin's 
releases.
   
   1.4.1
   
   🐛 Bug Fixes
   
   Generate correct content of empty jars (https://github-redirect.dependabot.com/mojohaus/mrm/issues/112";>#112) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus-archiver from 4.3.0 to 4.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/111";>#111) 
https://github.com/dependabot";>@​dependabot
   Bump jetty.version from 9.4.46.v20220331 to 9.4.48.v20220622 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/110";>#110) 
https://github.com/dependabot";>@​dependabot
   
   👻 Maintenance
   
   Site improvement (https://github-redirect.dependabot.com/mojohaus/mrm/issues/113";>#113) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   1.4.0
   
   🚀 New features and improvements
   
   basePath configuration parameter (https://github-redirect.dependabot.com/mojohaus/mrm/issues/94";>#94) 
https://github.com/ppalaga";>@​ppalaga
   
   🐛 Bug Fixes
   
   Fix unclosed opened stream (https://github-redirect.dependabot.com/mojohaus/mrm/issues/105";>#105) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump mojo-parent from 67 to 68 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/106";>#106) 
https://github.com/dependabot";>@​dependabot
   Bump maven-enforcer-plugin from 3.0.0 to 3.1.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/102";>#102) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-archiver from 4.2.7 to 4.3.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/101";>#101) 
https://github.com/dependabot";>@​dependabot
   Bump maven-common-artifact-filters from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/104";>#104) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.5.1 to 4.6.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/98";>#98) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-utils from 3.4.1 to 3.4.2 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/93";>#93) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/92";>#92) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.5.0 to 4.5.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/89";>#89) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.4.0 to 4.5.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/88";>#88) 
https://github.com/dependabot";>@​dependabot
   Update Jetty to 9.4.46.v20220331 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/72";>#72) 
https://github.com/jorsol";>@​jorsol
   Bump mojo-parent from 65 to 67 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/87";>#87) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.5.0 to 3 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/80";>#80) 
https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 2.4.0 to 3 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/81";>#81) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.17.6 to 5.19.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/82";>#82) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.3.1 to 4.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/83";>#83) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.2.0 to 4.3.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/75";>#75) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.15.0 to 5.17.6 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/73";>#73) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-archiver from 4.2.6 to 4.2.7 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/69";>#69) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.4.0 to 2.5.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/67";>#67) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.1.0 to 4.2.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/66";>#66) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.3.1 to 2.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/65";>#65) 
https://github.com/dependabot";>@​dependabot
   
   📝 Documentation updates
   
   
   ... (truncated)
   
   
   Commits
   
   https://github.com/mojohaus/mrm/commit/c0c9ae890a0e

[GitHub] [maven-javadoc-plugin] dependabot[bot] commented on pull request #148: Bump mrm-maven-plugin from 1.2.0 to 1.4.0

2022-06-27 Thread GitBox


dependabot[bot] commented on PR #148:
URL: 
https://github.com/apache/maven-javadoc-plugin/pull/148#issuecomment-1168166866

   Superseded by #149.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-javadoc-plugin] dependabot[bot] closed pull request #148: Bump mrm-maven-plugin from 1.2.0 to 1.4.0

2022-06-27 Thread GitBox


dependabot[bot] closed pull request #148: Bump mrm-maven-plugin from 1.2.0 to 
1.4.0
URL: https://github.com/apache/maven-javadoc-plugin/pull/148


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-javadoc-plugin] dependabot[bot] opened a new pull request, #149: Bump mrm-maven-plugin from 1.2.0 to 1.4.1

2022-06-27 Thread GitBox


dependabot[bot] opened a new pull request, #149:
URL: https://github.com/apache/maven-javadoc-plugin/pull/149

   Bumps [mrm-maven-plugin](https://github.com/mojohaus/mrm) from 1.2.0 to 
1.4.1.
   
   Release notes
   Sourced from https://github.com/mojohaus/mrm/releases";>mrm-maven-plugin's 
releases.
   
   1.4.1
   
   🐛 Bug Fixes
   
   Generate correct content of empty jars (https://github-redirect.dependabot.com/mojohaus/mrm/issues/112";>#112) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus-archiver from 4.3.0 to 4.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/111";>#111) 
https://github.com/dependabot";>@​dependabot
   Bump jetty.version from 9.4.46.v20220331 to 9.4.48.v20220622 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/110";>#110) 
https://github.com/dependabot";>@​dependabot
   
   👻 Maintenance
   
   Site improvement (https://github-redirect.dependabot.com/mojohaus/mrm/issues/113";>#113) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   1.4.0
   
   🚀 New features and improvements
   
   basePath configuration parameter (https://github-redirect.dependabot.com/mojohaus/mrm/issues/94";>#94) 
https://github.com/ppalaga";>@​ppalaga
   
   🐛 Bug Fixes
   
   Fix unclosed opened stream (https://github-redirect.dependabot.com/mojohaus/mrm/issues/105";>#105) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump mojo-parent from 67 to 68 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/106";>#106) 
https://github.com/dependabot";>@​dependabot
   Bump maven-enforcer-plugin from 3.0.0 to 3.1.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/102";>#102) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-archiver from 4.2.7 to 4.3.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/101";>#101) 
https://github.com/dependabot";>@​dependabot
   Bump maven-common-artifact-filters from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/104";>#104) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.5.1 to 4.6.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/98";>#98) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-utils from 3.4.1 to 3.4.2 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/93";>#93) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/92";>#92) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.5.0 to 4.5.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/89";>#89) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.4.0 to 4.5.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/88";>#88) 
https://github.com/dependabot";>@​dependabot
   Update Jetty to 9.4.46.v20220331 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/72";>#72) 
https://github.com/jorsol";>@​jorsol
   Bump mojo-parent from 65 to 67 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/87";>#87) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.5.0 to 3 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/80";>#80) 
https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 2.4.0 to 3 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/81";>#81) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.17.6 to 5.19.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/82";>#82) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.3.1 to 4.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/83";>#83) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.2.0 to 4.3.1 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/75";>#75) 
https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.15.0 to 5.17.6 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/73";>#73) 
https://github.com/dependabot";>@​dependabot
   Bump plexus-archiver from 4.2.6 to 4.2.7 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/69";>#69) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.4.0 to 2.5.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/67";>#67) 
https://github.com/dependabot";>@​dependabot
   Bump mockito-core from 4.1.0 to 4.2.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/66";>#66) 
https://github.com/dependabot";>@​dependabot
   Bump actions/setup-java from 2.3.1 to 2.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/65";>#65) 
https://github.com/dependabot";>@​dependabot
   
   📝 Documentation updates
   
   
   ... (truncated)
   
   
   Commits
   
   https://github.com/mojohaus/mrm/commit/c0c9ae8

[GitHub] [maven-wrapper] dependabot[bot] opened a new pull request, #54: Bump mrm-maven-plugin from 1.4.0 to 1.4.1

2022-06-27 Thread GitBox


dependabot[bot] opened a new pull request, #54:
URL: https://github.com/apache/maven-wrapper/pull/54

   Bumps [mrm-maven-plugin](https://github.com/mojohaus/mrm) from 1.4.0 to 
1.4.1.
   
   Release notes
   Sourced from https://github.com/mojohaus/mrm/releases";>mrm-maven-plugin's 
releases.
   
   1.4.1
   
   🐛 Bug Fixes
   
   Generate correct content of empty jars (https://github-redirect.dependabot.com/mojohaus/mrm/issues/112";>#112) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus-archiver from 4.3.0 to 4.4.0 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/111";>#111) 
https://github.com/dependabot";>@​dependabot
   Bump jetty.version from 9.4.46.v20220331 to 9.4.48.v20220622 (https://github-redirect.dependabot.com/mojohaus/mrm/issues/110";>#110) 
https://github.com/dependabot";>@​dependabot
   
   👻 Maintenance
   
   Site improvement (https://github-redirect.dependabot.com/mojohaus/mrm/issues/113";>#113) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   
   
   
   Commits
   
   https://github.com/mojohaus/mrm/commit/c0c9ae890a0e2550231db82e995e1a517bb90c88";>c0c9ae8
 [maven-release-plugin] prepare release mrm-1.4.1
   https://github.com/mojohaus/mrm/commit/2f207efb4a7d5558d37fef3e4622dd3f9185c593";>2f207ef
 Site improvement
   https://github.com/mojohaus/mrm/commit/4f2b7b7f9574be0c18d406b772e488681ac930c4";>4f2b7b7
 Generate correct content of empty jars
   https://github.com/mojohaus/mrm/commit/9de675bbdfc5adeeb24c4e8d9078c95663c1170f";>9de675b
 Bump plexus-archiver from 4.3.0 to 4.4.0
   https://github.com/mojohaus/mrm/commit/ebd27189d7896293916896d3bc93bb9dcd775970";>ebd2718
 Bump jetty.version from 9.4.46.v20220331 to 9.4.48.v20220622
   https://github.com/mojohaus/mrm/commit/50f0325fbfa99d1262e649bcd57ed190d3e1bf76";>50f0325
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/mojohaus/mrm/compare/mrm-1.4.0...mrm-1.4.1";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.mojo:mrm-maven-plugin&package-manager=maven&previous-version=1.4.0&new-version=1.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-doxia-sitetools] dependabot[bot] closed pull request #43: Bump wagon-http from 2.8 to 3.5.1

2022-06-27 Thread GitBox


dependabot[bot] closed pull request #43: Bump wagon-http from 2.8 to 3.5.1
URL: https://github.com/apache/maven-doxia-sitetools/pull/43


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-doxia-sitetools] dependabot[bot] commented on pull request #43: Bump wagon-http from 2.8 to 3.5.1

2022-06-27 Thread GitBox


dependabot[bot] commented on PR #43:
URL: 
https://github.com/apache/maven-doxia-sitetools/pull/43#issuecomment-1168046081

   Superseded by #56.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-doxia-sitetools] dependabot[bot] opened a new pull request, #56: Bump wagon-http from 2.8 to 3.5.2

2022-06-27 Thread GitBox


dependabot[bot] opened a new pull request, #56:
URL: https://github.com/apache/maven-doxia-sitetools/pull/56

   Bumps wagon-http from 2.8 to 3.5.2.
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.wagon:wagon-http&package-manager=maven&previous-version=2.8&new-version=3.5.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-indexer] fawind commented on a diff in pull request #225: [MINDEXER-144] Fix IOOBEx on GAV remote repositories

2022-06-27 Thread GitBox


fawind commented on code in PR #225:
URL: https://github.com/apache/maven-indexer/pull/225#discussion_r907857798


##
indexer-core/src/test/java/org/apache/maven/index/artifact/M2GavCalculatorTest.java:
##
@@ -585,6 +585,8 @@ public void testGav()
 assertNull( gav );
 gav = gavCalculator.pathToGav( 
"/dev/mbien/hintmod/maven-metadata-local.xml" );
 assertNull( gav );
+gav = gavCalculator.pathToGav( 
"/dev/mbien/hintmod/1.0-SNAPSHOT/_remote.repositories" ); // causes MINDEXER-144
+assertNull( gav );

Review Comment:
   This case failed with `IndexOutOfBoundsException` before the patch.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-indexer] fawind opened a new pull request, #225: [MINDEXER-144] Fix IOOBEx on GAV remote repositories

2022-06-27 Thread GitBox


fawind opened a new pull request, #225:
URL: https://github.com/apache/maven-indexer/pull/225

   This is a follow-up on https://github.com/apache/maven-indexer/pull/198, 
which only fixed the IndexOutOfBound issues for some file types.
   
   The exception can still happen if the local repository contains 
`_remote.repository` files. Apparently, with Maven 3.0.x, maven creates these 
file to record where the file was resolved from 
([source](https://stackoverflow.com/questions/32591187/maven-meaning-of-remote-repositories-file)).
   
   ---
   
   https://issues.apache.org/jira/browse/MINDEXER-144


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven] gnodet commented on pull request #743: [3.9.x] [MNG-7401] [MNG-7474] Keep a single maven session and fix session scope

2022-06-27 Thread GitBox


gnodet commented on PR #743:
URL: https://github.com/apache/maven/pull/743#issuecomment-1167990027

   > > I can write one for 
[MNG-7474](https://issues.apache.org/jira/browse/MNG-7474). 
[MNG-7401](https://issues.apache.org/jira/browse/MNG-7401) is an internal 
behavior and would require a junit test rather than an IT imho.
   > 
   > I guess so that would be best
   
   Unit test and IT added !


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-dependency-plugin] dependabot[bot] closed pull request #184: Bump wagon-http-lightweight from 3.4.0 to 3.5.1

2022-06-27 Thread GitBox


dependabot[bot] closed pull request #184: Bump wagon-http-lightweight from 
3.4.0 to 3.5.1
URL: https://github.com/apache/maven-dependency-plugin/pull/184


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-dependency-plugin] dependabot[bot] commented on pull request #184: Bump wagon-http-lightweight from 3.4.0 to 3.5.1

2022-06-27 Thread GitBox


dependabot[bot] commented on PR #184:
URL: 
https://github.com/apache/maven-dependency-plugin/pull/184#issuecomment-1167958477

   Superseded by #224.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-dependency-plugin] dependabot[bot] opened a new pull request, #224: Bump wagon-http-lightweight from 3.4.0 to 3.5.2

2022-06-27 Thread GitBox


dependabot[bot] opened a new pull request, #224:
URL: https://github.com/apache/maven-dependency-plugin/pull/224

   Bumps wagon-http-lightweight from 3.4.0 to 3.5.2.
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.wagon:wagon-http-lightweight&package-manager=maven&previous-version=3.4.0&new-version=3.5.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-source-plugin] cstamas commented on pull request #4: [MSOURCES-131] - Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


cstamas commented on PR #4:
URL: 
https://github.com/apache/maven-source-plugin/pull/4#issuecomment-1167933227

   @jorsol and @slawekjaranowski thanks


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-source-plugin] slawekjaranowski commented on pull request #4: [MSOURCES-131] - Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


slawekjaranowski commented on PR #4:
URL: 
https://github.com/apache/maven-source-plugin/pull/4#issuecomment-1167924727

   @jorsol thanks


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-source-plugin] slawekjaranowski merged pull request #4: [MSOURCES-131] - Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


slawekjaranowski merged PR #4:
URL: https://github.com/apache/maven-source-plugin/pull/4


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-archetype] geoffpotter opened a new pull request, #113: Update CreateArchetypeFromProjectMojo.java

2022-06-27 Thread GitBox


geoffpotter opened a new pull request, #113:
URL: https://github.com/apache/maven-archetype/pull/113

   Add "outputDirectory" property so I can change where this puts the generated 
archetype code from command line.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-source-plugin] slawekjaranowski commented on pull request #4: [MSOURCES-131] - Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


slawekjaranowski commented on PR #4:
URL: 
https://github.com/apache/maven-source-plugin/pull/4#issuecomment-1167701630

   GH action added - @jorsol please rebase 
   please also fix jenkins url ci-builds -> ci-maven


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-source-plugin] slawekjaranowski commented on pull request #4: [MSOURCES-131] - Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


slawekjaranowski commented on PR #4:
URL: 
https://github.com/apache/maven-source-plugin/pull/4#issuecomment-1167681358

   > there is no CI build?
   
   ups ... no I will add


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-source-plugin] jorsol commented on a diff in pull request #4: [MSOURCES-131] - Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


jorsol commented on code in PR #4:
URL: https://github.com/apache/maven-source-plugin/pull/4#discussion_r907638763


##
pom.xml:
##
@@ -25,12 +25,12 @@ under the License.
   
 maven-plugins
 org.apache.maven.plugins
-34
+36
 ../../pom/maven/maven-plugins/pom.xml

Review Comment:
   👍🏽 



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MPLUGIN-297) plugin-info.html should contain a better Usage section

2022-06-27 Thread Hudson (Jira)


[ 
https://issues.apache.org/jira/browse/MPLUGIN-297?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17559305#comment-17559305
 ] 

Hudson commented on MPLUGIN-297:


Build succeeded in Jenkins: Maven » Maven TLP » maven-plugin-tools » master #18

See 
https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/job/master/18/

> plugin-info.html should contain a better Usage section
> --
>
> Key: MPLUGIN-297
> URL: https://issues.apache.org/jira/browse/MPLUGIN-297
> Project: Maven Plugin Tools
>  Issue Type: Improvement
>  Components: Plugin Plugin
>Affects Versions: 3.4
>Reporter: Konrad Windszus
>Assignee: Slawomir Jaranowski
>Priority: Major
> Fix For: 3.7.0
>
> Attachments: MPLUGIN-297-maven-plugin-tools.patch
>
>
> The usage section in the page "plugin-info.html" being generated by the 
> {{report}} goal of the {{maven-plugin-plugin}} contains the version 
> information of the plugin in both sections {{pluginManagement}} as well as 
> {{plugins}}. I think it is best practice to only give out the version in the 
> {{pluginManagement}}. Therefore please remove the version from  the 
> {{plugins}} section.
> One example for that can be seen in 
> https://maven.apache.org/plugins/maven-compiler-plugin/plugin-info.html.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [maven-source-plugin] cstamas commented on pull request #4: [MSOURCES-131] - Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


cstamas commented on PR #4:
URL: 
https://github.com/apache/maven-source-plugin/pull/4#issuecomment-1167669035

   there is no CI build?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MPLUGIN-297) plugin-info.html should contain a better Usage section

2022-06-27 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MPLUGIN-297?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17559300#comment-17559300
 ] 

ASF GitHub Bot commented on MPLUGIN-297:


slawekjaranowski merged PR #98:
URL: https://github.com/apache/maven-plugin-tools/pull/98




> plugin-info.html should contain a better Usage section
> --
>
> Key: MPLUGIN-297
> URL: https://issues.apache.org/jira/browse/MPLUGIN-297
> Project: Maven Plugin Tools
>  Issue Type: Improvement
>  Components: Plugin Plugin
>Affects Versions: 3.4
>Reporter: Konrad Windszus
>Priority: Major
> Attachments: MPLUGIN-297-maven-plugin-tools.patch
>
>
> The usage section in the page "plugin-info.html" being generated by the 
> {{report}} goal of the {{maven-plugin-plugin}} contains the version 
> information of the plugin in both sections {{pluginManagement}} as well as 
> {{plugins}}. I think it is best practice to only give out the version in the 
> {{pluginManagement}}. Therefore please remove the version from  the 
> {{plugins}} section.
> One example for that can be seen in 
> https://maven.apache.org/plugins/maven-compiler-plugin/plugin-info.html.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Closed] (MPLUGIN-297) plugin-info.html should contain a better Usage section

2022-06-27 Thread Slawomir Jaranowski (Jira)


 [ 
https://issues.apache.org/jira/browse/MPLUGIN-297?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Slawomir Jaranowski closed MPLUGIN-297.
---
Fix Version/s: 3.7.0
 Assignee: Slawomir Jaranowski
   Resolution: Fixed

> plugin-info.html should contain a better Usage section
> --
>
> Key: MPLUGIN-297
> URL: https://issues.apache.org/jira/browse/MPLUGIN-297
> Project: Maven Plugin Tools
>  Issue Type: Improvement
>  Components: Plugin Plugin
>Affects Versions: 3.4
>Reporter: Konrad Windszus
>Assignee: Slawomir Jaranowski
>Priority: Major
> Fix For: 3.7.0
>
> Attachments: MPLUGIN-297-maven-plugin-tools.patch
>
>
> The usage section in the page "plugin-info.html" being generated by the 
> {{report}} goal of the {{maven-plugin-plugin}} contains the version 
> information of the plugin in both sections {{pluginManagement}} as well as 
> {{plugins}}. I think it is best practice to only give out the version in the 
> {{pluginManagement}}. Therefore please remove the version from  the 
> {{plugins}} section.
> One example for that can be seen in 
> https://maven.apache.org/plugins/maven-compiler-plugin/plugin-info.html.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [maven-plugin-tools] slawekjaranowski merged pull request #98: [MPLUGIN-297] don't duplicate version from pluginManagement

2022-06-27 Thread GitBox


slawekjaranowski merged PR #98:
URL: https://github.com/apache/maven-plugin-tools/pull/98


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-source-plugin] cstamas commented on pull request #4: [MSOURCES-131] - Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


cstamas commented on PR #4:
URL: 
https://github.com/apache/maven-source-plugin/pull/4#issuecomment-1167628048

   Aside of parent pom rel path, looks good


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-source-plugin] cstamas commented on a diff in pull request #4: [MSOURCES-131] - Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


cstamas commented on code in PR #4:
URL: https://github.com/apache/maven-source-plugin/pull/4#discussion_r907610991


##
pom.xml:
##
@@ -25,12 +25,12 @@ under the License.
   
 maven-plugins
 org.apache.maven.plugins
-34
+36
 ../../pom/maven/maven-plugins/pom.xml

Review Comment:
   ``



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-source-plugin] jorsol opened a new pull request, #4: [MSOURCES-131] - Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


jorsol opened a new pull request, #4:
URL: https://github.com/apache/maven-source-plugin/pull/4

   Since the plugin is a bit outdated, this aims to update all the dependencies 
used by maven-source-plugin.
   
   Bump to Java 8
   Require Maven 3.2.5+
   Update parent-pom maven-plugins to 36
   Maven bits scope set to provided
   Update plexus-utils to 3.4.2
   Update maven-plugin-testing-harness to 3.3.0
   
   The update for maven-archiver will be handled in another issue.
   
   ---
   https://issues.apache.org/jira/browse/MSOURCES-131


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Created] (MSOURCES-131) Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread Jira
Jorge Solórzano created MSOURCES-131:


 Summary: Update plugin (requires Maven 3.2.5+)
 Key: MSOURCES-131
 URL: https://issues.apache.org/jira/browse/MSOURCES-131
 Project: Maven Source Plugin
  Issue Type: Dependency upgrade
Affects Versions: 3.2.1
Reporter: Jorge Solórzano


Since the plugin is a bit outdated, this aims to update all the dependencies 
used by maven-source-plugin.
 * Bump to Java 8
 * Require Maven 3.2.5+
 * Update parent-pom maven-plugins to 36
 * Maven bits scope set to provided
 * Update plexus-utils to 3.4.2
 * Update maven-plugin-testing-harness to 3.3.0

 

The update for maven-archiver will be handled in another issue.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Comment Edited] (MPLUGIN-297) plugin-info.html should contain a better Usage section

2022-06-27 Thread Konrad Windszus (Jira)


[ 
https://issues.apache.org/jira/browse/MPLUGIN-297?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17559184#comment-17559184
 ] 

Konrad Windszus edited comment on MPLUGIN-297 at 6/27/22 2:15 PM:
--

bq. simply removing plugins section does not looks a good idea

That was not proposed in this ticket, the proposal was to merely remove the 
{{  }} element, as its version is managed (so 
there is no need to duplicate the version number).


was (Author: kwin):
bq. simply removing plugins section does not looks a good idea

That was not proposed in this ticket, the proposal was to merely remove the 
{{->->->}} element, as its version is managed 
(so there is no need to duplicate the version number).

> plugin-info.html should contain a better Usage section
> --
>
> Key: MPLUGIN-297
> URL: https://issues.apache.org/jira/browse/MPLUGIN-297
> Project: Maven Plugin Tools
>  Issue Type: Improvement
>  Components: Plugin Plugin
>Affects Versions: 3.4
>Reporter: Konrad Windszus
>Priority: Major
> Attachments: MPLUGIN-297-maven-plugin-tools.patch
>
>
> The usage section in the page "plugin-info.html" being generated by the 
> {{report}} goal of the {{maven-plugin-plugin}} contains the version 
> information of the plugin in both sections {{pluginManagement}} as well as 
> {{plugins}}. I think it is best practice to only give out the version in the 
> {{pluginManagement}}. Therefore please remove the version from  the 
> {{plugins}} section.
> One example for that can be seen in 
> https://maven.apache.org/plugins/maven-compiler-plugin/plugin-info.html.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Comment Edited] (MPLUGIN-297) plugin-info.html should contain a better Usage section

2022-06-27 Thread Konrad Windszus (Jira)


[ 
https://issues.apache.org/jira/browse/MPLUGIN-297?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17559184#comment-17559184
 ] 

Konrad Windszus edited comment on MPLUGIN-297 at 6/27/22 2:14 PM:
--

bq. simply removing plugins section does not looks a good idea

That was not proposed in this ticket, the proposal was to merely remove the 
{{->->->}} element, as its version is managed 
(so there is no need to duplicate the version number).


was (Author: kwin):
bq. simply removing plugins section does not looks a good idea

That was not proposed in this ticket, the proposal was to merely remove the 
{{}} element from the plugin, as its version is managed (so there is 
no need to duplicate the version number).

> plugin-info.html should contain a better Usage section
> --
>
> Key: MPLUGIN-297
> URL: https://issues.apache.org/jira/browse/MPLUGIN-297
> Project: Maven Plugin Tools
>  Issue Type: Improvement
>  Components: Plugin Plugin
>Affects Versions: 3.4
>Reporter: Konrad Windszus
>Priority: Major
> Attachments: MPLUGIN-297-maven-plugin-tools.patch
>
>
> The usage section in the page "plugin-info.html" being generated by the 
> {{report}} goal of the {{maven-plugin-plugin}} contains the version 
> information of the plugin in both sections {{pluginManagement}} as well as 
> {{plugins}}. I think it is best practice to only give out the version in the 
> {{pluginManagement}}. Therefore please remove the version from  the 
> {{plugins}} section.
> One example for that can be seen in 
> https://maven.apache.org/plugins/maven-compiler-plugin/plugin-info.html.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (MPLUGIN-297) plugin-info.html should contain a better Usage section

2022-06-27 Thread Konrad Windszus (Jira)


[ 
https://issues.apache.org/jira/browse/MPLUGIN-297?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17559184#comment-17559184
 ] 

Konrad Windszus commented on MPLUGIN-297:
-

bq. simply removing plugins section does not looks a good idea

That was not proposed in this ticket, the proposal was to merely remove the 
{{}} element from the plugin, as its version is managed (so there is 
no need to duplicate the version number).

> plugin-info.html should contain a better Usage section
> --
>
> Key: MPLUGIN-297
> URL: https://issues.apache.org/jira/browse/MPLUGIN-297
> Project: Maven Plugin Tools
>  Issue Type: Improvement
>  Components: Plugin Plugin
>Affects Versions: 3.4
>Reporter: Konrad Windszus
>Priority: Major
> Attachments: MPLUGIN-297-maven-plugin-tools.patch
>
>
> The usage section in the page "plugin-info.html" being generated by the 
> {{report}} goal of the {{maven-plugin-plugin}} contains the version 
> information of the plugin in both sections {{pluginManagement}} as well as 
> {{plugins}}. I think it is best practice to only give out the version in the 
> {{pluginManagement}}. Therefore please remove the version from  the 
> {{plugins}} section.
> One example for that can be seen in 
> https://maven.apache.org/plugins/maven-compiler-plugin/plugin-info.html.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [maven-file-management] slachiewicz commented on pull request #11: [MSHARED-1090] Update module

2022-06-27 Thread GitBox


slachiewicz commented on PR #11:
URL: 
https://github.com/apache/maven-file-management/pull/11#issuecomment-1167390384

   Maybe we can just switch to pure slf4j?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Updated] (MPLUGIN-401) Error: missing '>' for end of tag

2022-06-27 Thread Konrad Windszus (Jira)


 [ 
https://issues.apache.org/jira/browse/MPLUGIN-401?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Konrad Windszus updated MPLUGIN-401:

Description: 
When executing {{mvn clean site -X}} on 
https://github.com/apache/jackrabbit-filevault-package-maven-plugin (e.g. on 
commit a356dd9) the following error is emitted during 
{{maven-plugin-plugin:3.6.4:descriptor}}
{code}
[DEBUG] expand complete
[INFO] java-annotations mojo extractor found 9 mojo descriptors.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:check-signature',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:help', 
realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:analyze-classes',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:validate-files',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:generate-metadata',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:generate-cnd',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:validate-package',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:format-xml',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:package', 
realm: null] to plugin descriptor.
line 6 column 16 - Error:  missing '>' for end of tag
{code}

It is unclear to me, where the missing end tag really is and on which file the 
"line 6 column 16" refers to. When looking at 
{{target/classes/META-INF/maven/plugin.xml}} the line 6 only contains
{code}
 Apache Jackrabbit FileVault - Package Maven Plugin
{code}
I also looked in the javadoc for missing closing tags for  but haven't found 
anything.

The same error "line 6 column 16 - Error:  missing '>' for end of tag" is 
logged twice again during the subsequent {{maven-plugin-plugin:3.6.4:report}}
{code}
 [INFO] Generating "Plugin Documentation" report --- 
maven-plugin-plugin:3.6.4:report
line 6 column 16 - Error:  missing '>' for end of tag
line 6 column 16 - Error:  missing '>' for end of tag
{code}

Even if the error is in fact in some custom javadoc and not in the templates 
shipped with m-p-p or some false positives the path of the file containing the 
error should be logged.

  was:
When executing {{mvn clean site -X}} on 
https://github.com/apache/jackrabbit-filevault-package-maven-plugin (e.g. on 
commit a356dd9) the following error is emitted during 
{{maven-plugin-plugin:3.6.4:descriptor}}
{code}
[DEBUG] expand complete
[INFO] java-annotations mojo extractor found 9 mojo descriptors.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:check-signature',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:help', 
realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:analyze-classes',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:validate-files',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.Ex

[jira] [Created] (MPLUGIN-401) Error: missing '>' for end of tag

2022-06-27 Thread Konrad Windszus (Jira)
Konrad Windszus created MPLUGIN-401:
---

 Summary: Error:  missing '>' for end of tag
 Key: MPLUGIN-401
 URL: https://issues.apache.org/jira/browse/MPLUGIN-401
 Project: Maven Plugin Tools
  Issue Type: Bug
  Components: Plugin Plugin
Affects Versions: 3.6.4
Reporter: Konrad Windszus


When executing {{mvn clean site -X}} on 
https://github.com/apache/jackrabbit-filevault-package-maven-plugin (e.g. on 
commit a356dd9) the following error is emitted during 
{{maven-plugin-plugin:3.6.4:descriptor}}
{code}
[DEBUG] expand complete
[INFO] java-annotations mojo extractor found 9 mojo descriptors.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:check-signature',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:help', 
realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:analyze-classes',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:validate-files',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:generate-metadata',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:generate-cnd',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:validate-package',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:format-xml',
 realm: null] to plugin descriptor.
[DEBUG] Adding mojo: org.apache.maven.tools.plugin.ExtendedMojoDescriptor 
[role: 'org.apache.maven.plugin.Mojo', hint: 
'org.apache.jackrabbit:filevault-package-maven-plugin:1.3.1-SNAPSHOT:package', 
realm: null] to plugin descriptor.
line 6 column 16 - Error:  missing '>' for end of tag
{code}

It is unclear to me, where the missing end tag really is and on which file the 
"line 6 column 16" refers to. When looking at 
{{target/classes/META-INF/maven/plugin.xml}} the line 6 only contains
{code}
 Apache Jackrabbit FileVault - Package Maven Plugin
{code}
I also looked in the javadoc for missing closing tags for  but haven't found 
anything.

The same error "line 6 column 16 - Error:  missing '>' for end of tag" is 
logged twice again during the subsequent "maven-plugin-plugin:3.6.4:report"
{code}
 [INFO] Generating "Plugin Documentation" report --- 
maven-plugin-plugin:3.6.4:report
line 6 column 16 - Error:  missing '>' for end of tag
line 6 column 16 - Error:  missing '>' for end of tag
{code}

Even if the error is in fact in some custom javadoc and not in the templates 
shipped with m-p-p or some false positives the path of the file containing the 
error should be logged.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Updated] (MRESOLVER-265) Discrepancy between produced and recognized checksums

2022-06-27 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/MRESOLVER-265?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov updated MRESOLVER-265:
-
Fix Version/s: (was: resolver-next)

> Discrepancy between produced and recognized checksums
> -
>
> Key: MRESOLVER-265
> URL: https://issues.apache.org/jira/browse/MRESOLVER-265
> Project: Maven Resolver
>  Issue Type: Bug
>Affects Versions: 1.8.0
>Reporter: Tamás Cservenák
>Assignee: Tamás Cservenák
>Priority: Major
> Fix For: 1.8.2
>
>
> In short: repository layout has member:
> * 
> {{org.eclipse.aether.internal.impl.Maven2RepositoryLayoutFactory.Maven2RepositoryLayout#checksumAlgorithms}}
> That is checksums (as configured by user of default) that will be consumed 
> (on fetch) or produced (publish).
> Now, if we consider "default" configured resolver (checksumAlrgorithms=SHA1, 
> MD5) there is a discrepancy IF ANY OTHER supported but not configured 
> checksum comes in play:
> If a Mojo attaches an artifact having extension ".zip.sha512", resolver will 
> checksum it (w/ {{checksumAlgorithms}} checksums) DESPITE it should know this 
> is a checksum, and "checksum of a checksum" is a nonsense, just makes noise.
> Reason: method 
> {{org.eclipse.aether.internal.impl.Maven2RepositoryLayoutFactory.Maven2RepositoryLayout#isChecksum}}
>  works with preconfigured checksums only (in our example SHA1 and MD5) and 
> will respond "not a checksum" for SHA512.
> Proposal to fix:
> The method check should NOT be based on {{checksumAlgorithms}} but on "all 
> checksums supported by Resolver".



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [maven-file-management] michael-o commented on pull request #11: [MSHARED-1090] Update module

2022-06-27 Thread GitBox


michael-o commented on PR #11:
URL: 
https://github.com/apache/maven-file-management/pull/11#issuecomment-1167332564

   Why do you I have the feeling that I have seen this with Plexus Utils too?!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-file-management] cstamas commented on pull request #11: [MSHARED-1090] Update module

2022-06-27 Thread GitBox


cstamas commented on PR #11:
URL: 
https://github.com/apache/maven-file-management/pull/11#issuecomment-1167323621

   
https://github.com/search?l=Java&q=org.apache.maven.shared.model.fileset.util.FileSetManager&type=Code


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-file-management] cstamas commented on pull request #11: [MSHARED-1090] Update module

2022-06-27 Thread GitBox


cstamas commented on PR #11:
URL: 
https://github.com/apache/maven-file-management/pull/11#issuecomment-1167322093

   maven-jar-plugin for sure, unsure for others, but gh search reveals a LOT of 
uses across many (non our) plugins
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-file-management] michael-o commented on pull request #11: [MSHARED-1090] Update module

2022-06-27 Thread GitBox


michael-o commented on PR #11:
URL: 
https://github.com/apache/maven-file-management/pull/11#issuecomment-1167309543

   Where is this module still used?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-file-management] cstamas commented on pull request #11: [MSHARED-1090] Update module

2022-06-27 Thread GitBox


cstamas commented on PR #11:
URL: 
https://github.com/apache/maven-file-management/pull/11#issuecomment-1167304592

   Hm, maybe we need NoopMessageSink to retain existing behaviour with defautl 
ctor... as now it will use sl4j logger and this is behaviour change from before 
when def ctor used.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jxr] dependabot[bot] opened a new pull request, #59: Bump wagon-provider-api from 2.8 to 3.5.2

2022-06-27 Thread GitBox


dependabot[bot] opened a new pull request, #59:
URL: https://github.com/apache/maven-jxr/pull/59

   Bumps [wagon-provider-api](https://github.com/apache/maven-wagon) from 2.8 
to 3.5.2.
   
   Commits
   
   https://github.com/apache/maven-wagon/commit/8331ee26ffb3b5770c4e01ac3ed38d321c9158b1";>8331ee2
 [maven-release-plugin] prepare release wagon-3.5.2
   https://github.com/apache/maven-wagon/commit/88e8574c69d83e6a658fcd2ad10f3f80926b8840";>88e8574
 [WAGON-629] Properly handle authentication scenarios with MKCOL
   https://github.com/apache/maven-wagon/commit/17529c6232a02ee836107bae11a9b5eb6778afb1";>17529c6
 [WAGON-628] Default connect timeout not set when no HttpMethodConfiguration 
i...
   https://github.com/apache/maven-wagon/commit/d7f336745a6fec7c3697e47b17f46b9ae996d305";>d7f3367
 [WAGON-627] Maven deploy fails with 401 Unauthorized when using £ in 
password
   https://github.com/apache/maven-wagon/commit/8e5a4b698b77b5272405a1678ef87e24aba2f4a2";>8e5a4b6
 Drop findbugs from site reporting
   https://github.com/apache/maven-wagon/commit/c1ab05d476413d6d31cf5d98ffdaadee65aa956c";>c1ab05d
 Use shared GitHub Actions
   https://github.com/apache/maven-wagon/commit/c4be92b1749341cedb936ce2292136367e0d0869";>c4be92b
 [maven-release-plugin] prepare for next development iteration
   https://github.com/apache/maven-wagon/commit/a40b7196f72f23a68b765c0a9a3c6984edbc221d";>a40b719
 [maven-release-plugin] prepare release wagon-3.5.1
   https://github.com/apache/maven-wagon/commit/fd2ae925fab62da455df61d915126cee13a1d31b";>fd2ae92
 [WAGON-623] Upgrade HttpCore to 4.4.15
   https://github.com/apache/maven-wagon/commit/c9aa4c51fd256b4a949c658aabbdcc057bcc253e";>c9aa4c5
 [WAGON-622] Upgrade Plexus Interactivity to 1.1
   Additional commits viewable in https://github.com/apache/maven-wagon/compare/wagon-2.8...wagon-3.5.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.wagon:wagon-provider-api&package-manager=maven&previous-version=2.8&new-version=3.5.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MNG-7506) Upgrade Maven Wagon to 3.5.2

2022-06-27 Thread Hudson (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7506?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17559140#comment-17559140
 ] 

Hudson commented on MNG-7506:
-

Build succeeded in Jenkins: Maven » Maven TLP » maven » master #64

See https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/job/master/64/

> Upgrade Maven Wagon to 3.5.2
> 
>
> Key: MNG-7506
> URL: https://issues.apache.org/jira/browse/MNG-7506
> Project: Maven
>  Issue Type: Dependency upgrade
>Reporter: Michael Osipov
>Assignee: Michael Osipov
>Priority: Major
> Fix For: 3.9.0, 4.0.0-alpha-1, 4.0.0
>
>




--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (MNG-7506) Upgrade Maven Wagon to 3.5.2

2022-06-27 Thread Hudson (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7506?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17559141#comment-17559141
 ] 

Hudson commented on MNG-7506:
-

Build succeeded in Jenkins: Maven » Maven TLP » maven » maven-3.9.x #52

See 
https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/job/maven-3.9.x/52/

> Upgrade Maven Wagon to 3.5.2
> 
>
> Key: MNG-7506
> URL: https://issues.apache.org/jira/browse/MNG-7506
> Project: Maven
>  Issue Type: Dependency upgrade
>Reporter: Michael Osipov
>Assignee: Michael Osipov
>Priority: Major
> Fix For: 3.9.0, 4.0.0-alpha-1, 4.0.0
>
>




--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [maven-file-management] cstamas commented on pull request #11: [MSHARED-1090] Update module

2022-06-27 Thread GitBox


cstamas commented on PR #11:
URL: 
https://github.com/apache/maven-file-management/pull/11#issuecomment-1167272364

   Of course, but did not want to mix the two (there are a LOT of other changes 
already requiring it)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-file-management] jorsol commented on pull request #11: [MSHARED-1090] Update module

2022-06-27 Thread GitBox


jorsol commented on PR #11:
URL: 
https://github.com/apache/maven-file-management/pull/11#issuecomment-1167269448

   This change should probably bump the minor version.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jar-plugin] cstamas commented on pull request #19: [MJAR-278] Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


cstamas commented on PR #19:
URL: https://github.com/apache/maven-jar-plugin/pull/19#issuecomment-1167256474

   Depends on https://github.com/apache/maven-file-management/pull/11


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jar-plugin] cstamas commented on a diff in pull request #19: [MJAR-278] Update plugin (requires Maven 3.2.5+)

2022-06-27 Thread GitBox


cstamas commented on code in PR #19:
URL: https://github.com/apache/maven-jar-plugin/pull/19#discussion_r907297824


##
pom.xml:
##
@@ -130,7 +132,11 @@
   org.apache.maven.shared
   maven-shared-utils
   3.3.4
-  runtime
+
+
+  org.codehaus.plexus
+  plexus-archiver
+  4.2.5

Review Comment:
   Sorry, but I have to, as am dropping m-shared-utils... so IMHO once this 
merged you should add your PR on top of it. W/o this change, due drop of 
m-shared-utils the build would fail :disappointed: 



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Closed] (MNG-7506) Upgrade Maven Wagon to 3.5.2

2022-06-27 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7506?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov closed MNG-7506.
---
Resolution: Fixed

Fixed with 
[7dbbcc23a98c5a786876e00dac6fe79160e04467|https://gitbox.apache.org/repos/asf?p=maven.git&a=commit&h=7dbbcc23a98c5a786876e00dac6fe79160e04467]
 in master and with 
[9b876fa90b1f3683617102d1843e3efb89654cb8|https://gitbox.apache.org/repos/asf?p=maven.git&a=commit&h=9b876fa90b1f3683617102d1843e3efb89654cb8]
 in 3.9.x.

> Upgrade Maven Wagon to 3.5.2
> 
>
> Key: MNG-7506
> URL: https://issues.apache.org/jira/browse/MNG-7506
> Project: Maven
>  Issue Type: Dependency upgrade
>Reporter: Michael Osipov
>Assignee: Michael Osipov
>Priority: Major
> Fix For: 3.9.0, 4.0.0-alpha-1, 4.0.0
>
>




--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Updated] (MSHARED-1090) Update parent to 36, Maven to 3.2.5, drop legacy

2022-06-27 Thread Jira


 [ 
https://issues.apache.org/jira/browse/MSHARED-1090?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tamás Cservenák updated MSHARED-1090:
-
Summary: Update parent to 36, Maven to 3.2.5, drop legacy  (was: Update to 
Maven 3.2.6, drop legacy)

> Update parent to 36, Maven to 3.2.5, drop legacy
> 
>
> Key: MSHARED-1090
> URL: https://issues.apache.org/jira/browse/MSHARED-1090
> Project: Maven Shared Components
>  Issue Type: Task
>  Components: file-management
>Reporter: Tamás Cservenák
>Priority: Major
> Fix For: file-management-3.0.1
>
>
> Update module:
> * parent to POM 36
> * Maven level to 3.2.5
> * Java level to 8
> * drop m-shared-utils
> * drop legacy APIs like plexus logger



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Updated] (MSHARED-1090) Update to Maven 3.2.6, drop legacy

2022-06-27 Thread Jira


 [ 
https://issues.apache.org/jira/browse/MSHARED-1090?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tamás Cservenák updated MSHARED-1090:
-
Fix Version/s: file-management-3.0.1

> Update to Maven 3.2.6, drop legacy
> --
>
> Key: MSHARED-1090
> URL: https://issues.apache.org/jira/browse/MSHARED-1090
> Project: Maven Shared Components
>  Issue Type: Task
>  Components: file-management
>Reporter: Tamás Cservenák
>Priority: Major
> Fix For: file-management-3.0.1
>
>
> Update module:
> * parent to POM 36
> * Maven level to 3.2.5
> * Java level to 8
> * drop m-shared-utils
> * drop legacy APIs like plexus logger



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[GitHub] [maven-file-management] cstamas opened a new pull request, #11: [MSHARED-1090] Update module

2022-06-27 Thread GitBox


cstamas opened a new pull request, #11:
URL: https://github.com/apache/maven-file-management/pull/11

   Update module:
   * parent to POM 36
   * Maven level to 3.2.5
   * Java level to 8
   * drop m-shared-utils
   * drop legacy APIs like plexus logger
   
   ---
   
   https://issues.apache.org/jira/browse/MSHARED-1090


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Created] (MSHARED-1090) Update to Maven 3.2.6, drop legacy

2022-06-27 Thread Jira
Tamás Cservenák created MSHARED-1090:


 Summary: Update to Maven 3.2.6, drop legacy
 Key: MSHARED-1090
 URL: https://issues.apache.org/jira/browse/MSHARED-1090
 Project: Maven Shared Components
  Issue Type: Task
  Components: file-management
Reporter: Tamás Cservenák


Update module:
* parent to POM 36
* Maven level to 3.2.5
* Java level to 8
* drop m-shared-utils
* drop legacy APIs like plexus logger



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (MJAR-275) outputTimestamp not applied to module-info; breaks reproducible builds

2022-06-27 Thread Jira


[ 
https://issues.apache.org/jira/browse/MJAR-275?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17559093#comment-17559093
 ] 

Jorge Solórzano commented on MJAR-275:
--

The PR [https://github.com/apache/maven-jar-plugin/pull/43] should be ready for 
review.

This should fix the timestamp modification.

> outputTimestamp not applied to module-info; breaks reproducible builds
> --
>
> Key: MJAR-275
> URL: https://issues.apache.org/jira/browse/MJAR-275
> Project: Maven JAR Plugin
>  Issue Type: Bug
>Affects Versions: 3.2.0
> Environment: Mac OS X 10.14.6
> JDK 15 (build 15+36)
> JDK 11 (build 11.0.8+10)
>Reporter: Anand Beh
>Priority: Minor
> Fix For: 3.3.0
>
> Attachments: MCOMPILER-439.zip, Screenshot 2020-10-25 at 2.35.59 
> PM.png
>
>
> Setting {{project.build.outputTimestamp}} to a fixed value allows creating 
> reproducible builds per this guide: 
> [https://maven.apache.org/guides/mini/guide-reproducible-builds.html 
> |https://maven.apache.org/guides/mini/guide-reproducible-builds.html]However, 
> if one adds a module-info file to the project, reproducible builds break.
> This is caused by module-info.class using the latest timestamp and not 
> {{project.build.outputTimestamp}}. I was able to identify the problem using 
> diffoscope: [https://diffoscope.org/.|https://diffoscope.org/] With it I 
> determined the timestamp across 2 builds was constant for all but the 
> module-info.class:
>  
> {code:java}
>   -rw 2.0 fat  862 bl defN 20-Oct-17 00:40 
> space/arim/libertybans/api/select/SelectionOrder.class
> │  -rw 2.0 fat 1113 bl defN 20-Oct-17 00:40 
> space/arim/libertybans/api/select/SelectionOrderBuilder.class
> │  -rw 2.0 fat 2285 bl defN 20-Oct-17 00:40 
> META-INF/maven/space.arim.libertybans/bans-api/pom.xml
> │  -rw 2.0 fat   74 bl defN 20-Oct-17 00:40 
> META-INF/maven/space.arim.libertybans/bans-api/pom.properties
> │ --rw 2.0 fat  557 bl defN 20-Oct-25 12:39 module-info.class
> │ +-rw 2.0 fat  557 bl defN 20-Oct-25 12:41 module-info.class
> {code}
>  
> Note the + and - which are diffoscope's way of indicating the difference 
> between the .jar files. Here the {{project.build.outputTimestamp}} is on 17 
> October. As shown, module-info has a "rebellious" timestamp.
>  
> *EDIT:*
> Example project to reproduce the bug:
> [https://github.com/A248/MJAR-275|https://github.com/A248/MCOMPILER-439] 
> (Renamed from [https://github.com/A248/MCOMPILER-439])
> Source code is also provided as an attachment below



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (MENFORCER-424) Maven enforcer rule which checks that all dependencies in dependencyManagement don't have an explicit scope set

2022-06-27 Thread Slawomir Jaranowski (Jira)


[ 
https://issues.apache.org/jira/browse/MENFORCER-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17559057#comment-17559057
 ] 

Slawomir Jaranowski commented on MENFORCER-424:
---

For me ok.

> Maven enforcer rule which checks that all dependencies in 
> dependencyManagement don't have an explicit scope set
> ---
>
> Key: MENFORCER-424
> URL: https://issues.apache.org/jira/browse/MENFORCER-424
> Project: Maven Enforcer Plugin
>  Issue Type: New Feature
>  Components: Standard Rules
>Reporter: Konrad Windszus
>Priority: Major
>
> Setting the scope in the dependencyManagement is an anti-pattern and may lead 
> to surprising results during classpath creation. Compare also with the 
> discussion in 
> https://github.com/apache/maven-apache-parent/pull/63#discussion_r788361219.
> I propose to add a new rule with name {{banDependencyManagementScope}}.
> Probably scope {{import}} should be accepted though, because it is a special 
> case.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)