[jira] [Updated] (MNG-7710) Upgrade plexus-utils to 3.5.1

2023-03-01 Thread Tamas Cservenak (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7710?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tamas Cservenak updated MNG-7710:
-
Description: 
Maven 3.9.0 was shipped with plexus-utils 3.4.2 that introduced several 
breakages, such as:
 * XML parsing not backward compatible 
[https://github.com/codehaus-plexus/plexus-utils/issues/238]
 * Merge behavior [https://github.com/codehaus-plexus/plexus-utils/issues/239]

As issues were fixed in latest p-u release, upgrade to it.

 

  was:
Maven 3.9.0 was shipped with plexus-utils 3.4.2, downgrade it to 3.3.1, same 
version used in Maven 3.8.7.

plexus-utils 3.4.0+ introduced several breakages, such as:
 * XML parsing not backward compatible 
[https://github.com/codehaus-plexus/plexus-utils/issues/238]
 * Merge behavior [https://github.com/codehaus-plexus/plexus-utils/issues/239]

Downgrade until all the issues are discussed and resolved. This makes Maven 
3.9.1 use same p-u as Maven 3.8.7 did.


> Upgrade plexus-utils to 3.5.1
> -
>
> Key: MNG-7710
> URL: https://issues.apache.org/jira/browse/MNG-7710
> Project: Maven
>  Issue Type: Bug
>  Components: Dependencies
>Affects Versions: 3.9.0
>Reporter: Tamas Cservenak
>Assignee: Tamas Cservenak
>Priority: Major
> Fix For: 3.9.1
>
>
> Maven 3.9.0 was shipped with plexus-utils 3.4.2 that introduced several 
> breakages, such as:
>  * XML parsing not backward compatible 
> [https://github.com/codehaus-plexus/plexus-utils/issues/238]
>  * Merge behavior [https://github.com/codehaus-plexus/plexus-utils/issues/239]
> As issues were fixed in latest p-u release, upgrade to it.
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [maven-checkstyle-plugin] dependabot[bot] closed pull request #98: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #98: Bump plexus-utils from 3.4.2 to 3.5.0
URL: https://github.com/apache/maven-checkstyle-plugin/pull/98


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-checkstyle-plugin] dependabot[bot] opened a new pull request, #107: Bump plexus-utils from 3.4.2 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #107:
URL: https://github.com/apache/maven-checkstyle-plugin/pull/107

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.4.2 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   3.5.0
   
   
   Don't throw IOException when none is required (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/206";>#206)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/221";>#221)
 https://github.com/michael-o";>@​michael-o
   Always preserve dominant node value (even if empty) (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/217";>#217)
 https://github.com/kwin";>@​kwin
   Don't overwrite blank (but non-empty) dominant values during 
mergeXpp3Dom (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/213";>#213)
 https://github.com/kwin";>@​kwin
   Deprecate isEmpty(String) and isNotEmpty(String) in favour of same named 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/218";>#218)
 https://github.com/kwin";>@​kwin
   isEmpty(String) must not return false for whitespace-only values (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/219";>#219)
 https://github.com/kwin";>@​kwin
   Get rid maven-plugin-testing-harness from dependency (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/208";>#208)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus from 8 to 10 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/207";>#207)
 https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/205";>#205)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-ut

[GitHub] [maven-checkstyle-plugin] dependabot[bot] commented on pull request #98: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #98:
URL: 
https://github.com/apache/maven-checkstyle-plugin/pull/98#issuecomment-1451342603

   Superseded by #107.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-assembly-plugin] dependabot[bot] closed pull request #114: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #114: Bump plexus-utils from 3.4.2 to 3.5.0
URL: https://github.com/apache/maven-assembly-plugin/pull/114


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-assembly-plugin] dependabot[bot] commented on pull request #114: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #114:
URL: 
https://github.com/apache/maven-assembly-plugin/pull/114#issuecomment-1451339923

   Superseded by #118.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-assembly-plugin] dependabot[bot] opened a new pull request, #118: Bump plexus-utils from 3.4.2 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #118:
URL: https://github.com/apache/maven-assembly-plugin/pull/118

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.4.2 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   3.5.0
   
   
   Don't throw IOException when none is required (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/206";>#206)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/221";>#221)
 https://github.com/michael-o";>@​michael-o
   Always preserve dominant node value (even if empty) (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/217";>#217)
 https://github.com/kwin";>@​kwin
   Don't overwrite blank (but non-empty) dominant values during 
mergeXpp3Dom (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/213";>#213)
 https://github.com/kwin";>@​kwin
   Deprecate isEmpty(String) and isNotEmpty(String) in favour of same named 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/218";>#218)
 https://github.com/kwin";>@​kwin
   isEmpty(String) must not return false for whitespace-only values (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/219";>#219)
 https://github.com/kwin";>@​kwin
   Get rid maven-plugin-testing-harness from dependency (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/208";>#208)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus from 8 to 10 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/207";>#207)
 https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/205";>#205)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-util

[GitHub] [maven-assembly-plugin] dependabot[bot] closed pull request #107: Bump plexus-archiver from 4.6.0 to 4.6.1

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #107: Bump plexus-archiver from 4.6.0 to 
4.6.1
URL: https://github.com/apache/maven-assembly-plugin/pull/107


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-assembly-plugin] dependabot[bot] commented on pull request #107: Bump plexus-archiver from 4.6.0 to 4.6.1

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #107:
URL: 
https://github.com/apache/maven-assembly-plugin/pull/107#issuecomment-1451339798

   Superseded by #117.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-assembly-plugin] dependabot[bot] opened a new pull request, #117: Bump plexus-archiver from 4.6.0 to 4.6.2

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #117:
URL: https://github.com/apache/maven-assembly-plugin/pull/117

   Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) 
from 4.6.0 to 4.6.2.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases";>plexus-archiver's
 releases.
   
   Plexus Archiver 4.6.2
   🐛 Bug Fixes
   
   Fix regression in handling symbolic links. See https://github-redirect.dependabot.com/codehaus-plexus/plexus-io/issues/89";>codehaus-plexus/plexus-io#89
   
   📦 Dependency updates
   
   Bump plexus-io from 3.4.0 to 3.4.1 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/256";>#256)
 https://github.com/dependabot";>@​dependabot
   Bump zstd-jni from 1.5.2-5 to 1.5.4-2  (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/254";>#254)
 https://github.com/dependabot";>@​dependabot, (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/255";>#255)
 https://github.com/dependabot";>@​dependabot
   
   Plexus Archiver 4.6.1
   🐛 Bug Fixes
   
   Normalize file separators before warning about equal archive entries (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/249";>#249)
 https://github.com/Bananeweizen";>@​Bananeweizen
   
   📦 Dependency updates
   
   Bump commons-compress from 1.21 to 1.22 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/243";>#243)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/e4449b2cbfd1aa87223cea8fa7c1a987477587af";>e4449b2
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/737ac96e761e17c16020adc479b11e78cf3e0e75";>737ac96
 [maven-release-plugin] rollback the release of plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/d950f06756c461975d6f1d014cc1fa8bcf477677";>d950f06
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/8c65753ba31d8f1a6d0a6e4cd8e01a40e00e";>8c65753
 Bump plexus-io from 3.4.0 to 3.4.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/b434156c56be930c04ecfa2588917defe458e902";>b434156
 Bump zstd-jni from 1.5.4-1 to 1.5.4-2
   https://github.com/codehaus-plexus/plexus-archiver/commit/64d3acf94d370e5174c73567a1508d97be665a23";>64d3acf
 Bump zstd-jni from 1.5.2-5 to 1.5.4-1
   https://github.com/codehaus-plexus/plexus-archiver/commit/033ecbdf300aaf31c7c9d908e62eb623d85898b7";>033ecbd
 Bump junitVersion from 5.9.1 to 5.9.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/28e269f48b62f7619a9f85ceefcddca4c0a43832";>28e269f
 Bump assertj-core from 3.23.1 to 3.24.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/18fa4254558737ef7b35e34fdbc65c427011eb7a";>18fa425
 [maven-release-plugin] prepare for next development iteration
   https://github.com/codehaus-plexus/plexus-archiver/commit/f23f7ad8cc510c4a7e888699937d782371cb700c";>f23f7ad
 [maven-release-plugin] prepare release plexus-archiver-4.6.1
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.6.0...plexus-archiver-4.6.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver&package-manager=maven&previous-version=4.6.0&new-version=4.6.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for

[jira] [Commented] (MNG-7683) Plugin configuration is merged incorrectly

2023-03-01 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7683?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695461#comment-17695461
 ] 

ASF GitHub Bot commented on MNG-7683:
-

gnodet merged PR #986:
URL: https://github.com/apache/maven/pull/986




> Plugin configuration is merged incorrectly
> --
>
> Key: MNG-7683
> URL: https://issues.apache.org/jira/browse/MNG-7683
> Project: Maven
>  Issue Type: Bug
>  Components: Inheritance and Interpolation
>Affects Versions: 4.0.0-alpha-3, 4.0.x-candidate
>Reporter: Alexey Venderov
>Priority: Major
>
> Hi,
> As was mentioned by my colleague 
> [here|https://github.com/apache/maven/pull/866#discussion_r1058637665] there 
> is a regression in the plugin configuration merging logic introduced in 
> version {{4.0.0-alpha-3}}. The original assumption was that the issue is 
> caused by 
> [this|https://github.com/codehaus-plexus/plexus-utils/commit/67ac243dbc6434c03a9b1582d94aef6bf2b5cf95]
>  change in the {{plexus-utils}} library. I wrote a small reproducer test: 
> [https://github.com/c00ler/plexus-utils-merge-xml-reproducer/blob/main/src/test/java/com/github/avenderov/ReproducerTest.java]
>  and run it with the {{plexus-utils}} versions before and after the change. 
> Test passes with both versions. So it's not the change in the 
> {{plexus-utils}}.
> After that, I checked Maven sources and found out that {{Maven 4}} doesn't 
> use {{Xpp3Dom}} and associated utilities from the {{plexus-utils}} anymore, 
> and has its own merging logic implemented 
> [here|https://github.com/apache/maven/blob/master/maven-xml-impl/src/main/java/org/apache/maven/internal/xml/XmlNodeImpl.java#L207].
>  The behavior of the configuration merging logic was correct (same as in 
> maven 3.x) up until version {{4.0.0-alpha-2}} and then was changed in version 
> {{4.0.0-alpha-3}}.
> h3. Problem description.
> We have the following {{foo-bar-plugin}} configuration in the parent pom:
> {code:xml}
> 
>   
> 
>   foo.bar
>   foo-bar-plugin
>   
> 
>   
> org.apache.maven.plugins
> maven-compiler-plugin
> 
>   foo
> 
>   
>   
> org.apache.maven.plugins
> maven-surefire-plugin
> 
>   
> 
>   prop1
>   value1
> 
>   
> 
>   
> 
>   
> 
>   
> 
> {code}
> In the child pom, we want to make changes to the {{foo-bar-plugin}} 
> configuration:
> {code:xml}
> 
> 
>   
> foo.bar
> foo-bar-plugin
> 
>   
> 
>   org.apache.maven.plugins
>   maven-compiler-plugin
> 
> 
>   org.apache.maven.plugins
>   maven-surefire-plugin
>   
> 
>   
> prop2
> value2
>   
> 
>   
> 
>   
> 
>   
> 
> 
> {code}
> The expected effective pom after merging ({{maven-compiler-plugin}} 
> configuration is persisted, {{maven-surefire-plugin}} configuration is 
> merged):
> {code:xml}
> 
> 
>   
> foo.bar
> foo-bar-plugin
> 
>   
> 
>   org.apache.maven.plugins
>   maven-compiler-plugin
>   
> foo
>   
> 
> 
>   org.apache.maven.plugins
>   maven-surefire-plugin
>   
> 
>   
> prop1
> value1
>   
>   
> prop2
> value2
>   
> 
>   
> 
>   
> 
>   
> 
> 
> {code}
> Instead {{Maven 4.0.0-alpha-3}} produces the following result:
> {code:xml}
> 
> 
>   
> foo.bar
> foo-bar-plugin
> 
>   
> 
>   org.apache.maven.plugins
>   maven-compiler-plugin
>   
> 
>   
> prop1
> value1
>   
> 
>   
> 
> 
>   org.apache.maven.plugins
>   maven-surefire-plugin
>   
> 
>   
> prop2
> value2
>   
> 
>   
> 
>   
> 
>   
> 
> 
> {code}
> h3. Steps to reproduce.
> We have a repository with the reproducer: 
> [https://github.com/c00ler/maven-merge-xml-reproducer]:
>  * the [main|https://github.com/c00ler/maven-merge-xml-reproducer] branch 
> produces a diff between {{maven 3.8.7}} and {{maven 4.0.0-alpha-3}}. It shows 
> the described example;
>  * the 
> [alpha2-alpha3|https://github.com/c00ler/maven-merge-xml-reproducer/tree/alpha2-alpha3]
>  branch produces a diff between {{

[jira] [Closed] (MNG-7683) Plugin configuration is merged incorrectly

2023-03-01 Thread Guillaume Nodet (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7683?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Guillaume Nodet closed MNG-7683.

Fix Version/s: 4.0.0-alpha-5
 Assignee: Guillaume Nodet
   Resolution: Fixed

> Plugin configuration is merged incorrectly
> --
>
> Key: MNG-7683
> URL: https://issues.apache.org/jira/browse/MNG-7683
> Project: Maven
>  Issue Type: Bug
>  Components: Inheritance and Interpolation
>Affects Versions: 4.0.0-alpha-3, 4.0.x-candidate
>Reporter: Alexey Venderov
>Assignee: Guillaume Nodet
>Priority: Major
> Fix For: 4.0.0-alpha-5
>
>
> Hi,
> As was mentioned by my colleague 
> [here|https://github.com/apache/maven/pull/866#discussion_r1058637665] there 
> is a regression in the plugin configuration merging logic introduced in 
> version {{4.0.0-alpha-3}}. The original assumption was that the issue is 
> caused by 
> [this|https://github.com/codehaus-plexus/plexus-utils/commit/67ac243dbc6434c03a9b1582d94aef6bf2b5cf95]
>  change in the {{plexus-utils}} library. I wrote a small reproducer test: 
> [https://github.com/c00ler/plexus-utils-merge-xml-reproducer/blob/main/src/test/java/com/github/avenderov/ReproducerTest.java]
>  and run it with the {{plexus-utils}} versions before and after the change. 
> Test passes with both versions. So it's not the change in the 
> {{plexus-utils}}.
> After that, I checked Maven sources and found out that {{Maven 4}} doesn't 
> use {{Xpp3Dom}} and associated utilities from the {{plexus-utils}} anymore, 
> and has its own merging logic implemented 
> [here|https://github.com/apache/maven/blob/master/maven-xml-impl/src/main/java/org/apache/maven/internal/xml/XmlNodeImpl.java#L207].
>  The behavior of the configuration merging logic was correct (same as in 
> maven 3.x) up until version {{4.0.0-alpha-2}} and then was changed in version 
> {{4.0.0-alpha-3}}.
> h3. Problem description.
> We have the following {{foo-bar-plugin}} configuration in the parent pom:
> {code:xml}
> 
>   
> 
>   foo.bar
>   foo-bar-plugin
>   
> 
>   
> org.apache.maven.plugins
> maven-compiler-plugin
> 
>   foo
> 
>   
>   
> org.apache.maven.plugins
> maven-surefire-plugin
> 
>   
> 
>   prop1
>   value1
> 
>   
> 
>   
> 
>   
> 
>   
> 
> {code}
> In the child pom, we want to make changes to the {{foo-bar-plugin}} 
> configuration:
> {code:xml}
> 
> 
>   
> foo.bar
> foo-bar-plugin
> 
>   
> 
>   org.apache.maven.plugins
>   maven-compiler-plugin
> 
> 
>   org.apache.maven.plugins
>   maven-surefire-plugin
>   
> 
>   
> prop2
> value2
>   
> 
>   
> 
>   
> 
>   
> 
> 
> {code}
> The expected effective pom after merging ({{maven-compiler-plugin}} 
> configuration is persisted, {{maven-surefire-plugin}} configuration is 
> merged):
> {code:xml}
> 
> 
>   
> foo.bar
> foo-bar-plugin
> 
>   
> 
>   org.apache.maven.plugins
>   maven-compiler-plugin
>   
> foo
>   
> 
> 
>   org.apache.maven.plugins
>   maven-surefire-plugin
>   
> 
>   
> prop1
> value1
>   
>   
> prop2
> value2
>   
> 
>   
> 
>   
> 
>   
> 
> 
> {code}
> Instead {{Maven 4.0.0-alpha-3}} produces the following result:
> {code:xml}
> 
> 
>   
> foo.bar
> foo-bar-plugin
> 
>   
> 
>   org.apache.maven.plugins
>   maven-compiler-plugin
>   
> 
>   
> prop1
> value1
>   
> 
>   
> 
> 
>   org.apache.maven.plugins
>   maven-surefire-plugin
>   
> 
>   
> prop2
> value2
>   
> 
>   
> 
>   
> 
>   
> 
> 
> {code}
> h3. Steps to reproduce.
> We have a repository with the reproducer: 
> [https://github.com/c00ler/maven-merge-xml-reproducer]:
>  * the [main|https://github.com/c00ler/maven-merge-xml-reproducer] branch 
> produces a diff between {{maven 3.8.7}} and {{maven 4.0.0-alpha-3}}. It shows 
> the described example;
>  * the 
> [alpha2-alpha3|https://github.com/c00ler/maven-merge-xml-reproducer/tree/alpha2-alp

[GitHub] [maven] gnodet merged pull request #986: [MNG-7683] Iterate over each dominant child

2023-03-01 Thread via GitHub


gnodet merged PR #986:
URL: https://github.com/apache/maven/pull/986


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-gpg-plugin] dependabot[bot] commented on pull request #27: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #27:
URL: https://github.com/apache/maven-gpg-plugin/pull/27#issuecomment-1451307126

   Superseded by #39.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-gpg-plugin] dependabot[bot] closed pull request #27: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #27: Bump plexus-utils from 3.4.2 to 3.5.0
URL: https://github.com/apache/maven-gpg-plugin/pull/27


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-gpg-plugin] dependabot[bot] opened a new pull request, #39: Bump plexus-utils from 3.4.2 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #39:
URL: https://github.com/apache/maven-gpg-plugin/pull/39

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.4.2 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   3.5.0
   
   
   Don't throw IOException when none is required (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/206";>#206)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/221";>#221)
 https://github.com/michael-o";>@​michael-o
   Always preserve dominant node value (even if empty) (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/217";>#217)
 https://github.com/kwin";>@​kwin
   Don't overwrite blank (but non-empty) dominant values during 
mergeXpp3Dom (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/213";>#213)
 https://github.com/kwin";>@​kwin
   Deprecate isEmpty(String) and isNotEmpty(String) in favour of same named 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/218";>#218)
 https://github.com/kwin";>@​kwin
   isEmpty(String) must not return false for whitespace-only values (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/219";>#219)
 https://github.com/kwin";>@​kwin
   Get rid maven-plugin-testing-harness from dependency (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/208";>#208)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus from 8 to 10 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/207";>#207)
 https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/205";>#205)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-utils/commi

[GitHub] [maven-resources-plugin] dependabot[bot] closed pull request #37: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #37: Bump plexus-utils from 3.4.2 to 3.5.0
URL: https://github.com/apache/maven-resources-plugin/pull/37


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-resources-plugin] dependabot[bot] commented on pull request #37: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #37:
URL: 
https://github.com/apache/maven-resources-plugin/pull/37#issuecomment-1451303736

   Superseded by #50.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-resources-plugin] dependabot[bot] opened a new pull request, #50: Bump plexus-utils from 3.4.2 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #50:
URL: https://github.com/apache/maven-resources-plugin/pull/50

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.4.2 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   3.5.0
   
   
   Don't throw IOException when none is required (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/206";>#206)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/221";>#221)
 https://github.com/michael-o";>@​michael-o
   Always preserve dominant node value (even if empty) (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/217";>#217)
 https://github.com/kwin";>@​kwin
   Don't overwrite blank (but non-empty) dominant values during 
mergeXpp3Dom (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/213";>#213)
 https://github.com/kwin";>@​kwin
   Deprecate isEmpty(String) and isNotEmpty(String) in favour of same named 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/218";>#218)
 https://github.com/kwin";>@​kwin
   isEmpty(String) must not return false for whitespace-only values (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/219";>#219)
 https://github.com/kwin";>@​kwin
   Get rid maven-plugin-testing-harness from dependency (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/208";>#208)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus from 8 to 10 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/207";>#207)
 https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/205";>#205)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-utils

[GitHub] [maven-archetype] dependabot[bot] closed pull request #124: Bump plexus-archiver from 4.2.2 to 4.6.1

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #124: Bump plexus-archiver from 4.2.2 to 
4.6.1
URL: https://github.com/apache/maven-archetype/pull/124


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-archetype] dependabot[bot] commented on pull request #124: Bump plexus-archiver from 4.2.2 to 4.6.1

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #124:
URL: https://github.com/apache/maven-archetype/pull/124#issuecomment-1451303389

   Superseded by #127.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-archetype] dependabot[bot] opened a new pull request, #127: Bump plexus-archiver from 4.2.2 to 4.6.2

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #127:
URL: https://github.com/apache/maven-archetype/pull/127

   Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) 
from 4.2.2 to 4.6.2.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases";>plexus-archiver's
 releases.
   
   Plexus Archiver 4.6.2
   🐛 Bug Fixes
   
   Fix regression in handling symbolic links. See https://github-redirect.dependabot.com/codehaus-plexus/plexus-io/issues/89";>codehaus-plexus/plexus-io#89
   
   📦 Dependency updates
   
   Bump plexus-io from 3.4.0 to 3.4.1 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/256";>#256)
 https://github.com/dependabot";>@​dependabot
   Bump zstd-jni from 1.5.2-5 to 1.5.4-2  (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/254";>#254)
 https://github.com/dependabot";>@​dependabot, (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/255";>#255)
 https://github.com/dependabot";>@​dependabot
   
   Plexus Archiver 4.6.1
   🐛 Bug Fixes
   
   Normalize file separators before warning about equal archive entries (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/249";>#249)
 https://github.com/Bananeweizen";>@​Bananeweizen
   
   📦 Dependency updates
   
   Bump commons-compress from 1.21 to 1.22 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/243";>#243)
 https://github.com/dependabot";>@​dependabot
   
   Plexus Archiver 4.6.0
   🚀 New features and improvements
   
   keep file/directory permissions in Reproducible Builds mode (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/241";>#241)
 https://github.com/hboutemy";>@​hboutemy
   
   📦 Dependency updates
   
   Bump junitVersion from 5.9.0 to 5.9.1 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/236";>#236)
 https://github.com/dependabot";>@​dependabot
   Bump plexus-utils from 3.4.2 to 3.5.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/242";>#242)
 https://github.com/dependabot";>@​dependabot
   Bump zstd-jni from 1.5.2-4 to 1.5.2-5 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/240";>#240)
 https://github.com/dependabot";>@​dependabot
   
   Plexus Archiver 4.5.0
   🚀 New features and improvements
   
   Add zstd (un)archiver support (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/226";>#226)
 https://github.com/pleeplop";>@​pleeplop
   
   🐛 Bug Fixes
   
   Fix UnArchiver#isOverwrite not working as expected (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/229";>#229)
 https://github.com/plamentotev";>@​plamentotev
   Existing files were overridden only if UnArchiver#isOverwrite 
was set and the existing files were older than the archive entry.
   Now it works as documented: older files are always overridden; when 
UnArchiver#isOverwrite is true, existing files are 
always
   overridden regardless if they are older or not.
   
   Plexus Archiver 4.4.0
   
   🚀 New features and improvements
   
   Drop legacy plexus API and use only JSR330 components (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/220";>#220)
 https://github.com/cstamas";>@​cstamas
   
   Plexus Archiver 4.3.0
   
   
   ... (truncated)
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/e4449b2cbfd1aa87223cea8fa7c1a987477587af";>e4449b2
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/737ac96e761e17c16020adc479b11e78cf3e0e75";>737ac96
 [maven-release-plugin] rollback the release of plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/d950f06756c461975d6f1d014cc1fa8bcf477677";>d950f06
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/8c65753ba31d8f1a6d0a6e4cd8e01a40e00e";>8c65753
 Bump plexus-io from 3.4.0 to 3.4.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/b434156c56be930c04ecfa2588917defe458e902";>b434156
 Bump zstd-jni from 1.5.4-1 to 1.5.4-2
   https://github.com/codehaus-plexus/plexus-archiver/commit/64d3acf94d370e5174c73567a1508d97be665a23";>64d3acf
 Bump zstd-jni from 1.5.2-5 to 1.5.4-1
   https://github.com/codehaus-plexus/plexus-archiver/commit/033ecbdf300aaf31c7c9d908e62eb623d85898b7";>033ecbd
 Bump junitVersion from 5.9.1 to 5.9.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/28e269f48b62f7619a9f85ceefcddca4c0a43832";>28e269f
 Bump assertj-core from 3.23.1 to 3.24.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/18fa4254558737ef7b35e34fdbc65c427011eb7a";>18fa425
 [maven-release-plugin] prepare for next development iteration
   https://github.com/codehaus-plexus/plexus-archiver/commit/f23f7ad8cc510c4a7e888699937d78

[GitHub] [maven-release] dependabot[bot] commented on pull request #156: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #156:
URL: https://github.com/apache/maven-release/pull/156#issuecomment-1451302287

   Superseded by #168.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-release] dependabot[bot] closed pull request #156: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #156: Bump plexus-utils from 3.4.2 to 3.5.0
URL: https://github.com/apache/maven-release/pull/156


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-release] dependabot[bot] opened a new pull request, #168: Bump plexus-utils from 3.4.2 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #168:
URL: https://github.com/apache/maven-release/pull/168

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.4.2 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   3.5.0
   
   
   Don't throw IOException when none is required (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/206";>#206)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/221";>#221)
 https://github.com/michael-o";>@​michael-o
   Always preserve dominant node value (even if empty) (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/217";>#217)
 https://github.com/kwin";>@​kwin
   Don't overwrite blank (but non-empty) dominant values during 
mergeXpp3Dom (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/213";>#213)
 https://github.com/kwin";>@​kwin
   Deprecate isEmpty(String) and isNotEmpty(String) in favour of same named 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/218";>#218)
 https://github.com/kwin";>@​kwin
   isEmpty(String) must not return false for whitespace-only values (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/219";>#219)
 https://github.com/kwin";>@​kwin
   Get rid maven-plugin-testing-harness from dependency (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/208";>#208)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus from 8 to 10 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/207";>#207)
 https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/205";>#205)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-utils/commit

[GitHub] [maven-help-plugin] dependabot[bot] closed pull request #75: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #75: Bump plexus-utils from 3.4.2 to 3.5.0
URL: https://github.com/apache/maven-help-plugin/pull/75


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-help-plugin] dependabot[bot] commented on pull request #75: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #75:
URL: https://github.com/apache/maven-help-plugin/pull/75#issuecomment-1451299947

   Superseded by #86.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-help-plugin] dependabot[bot] opened a new pull request, #86: Bump plexus-utils from 3.4.2 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #86:
URL: https://github.com/apache/maven-help-plugin/pull/86

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.4.2 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   3.5.0
   
   
   Don't throw IOException when none is required (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/206";>#206)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/221";>#221)
 https://github.com/michael-o";>@​michael-o
   Always preserve dominant node value (even if empty) (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/217";>#217)
 https://github.com/kwin";>@​kwin
   Don't overwrite blank (but non-empty) dominant values during 
mergeXpp3Dom (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/213";>#213)
 https://github.com/kwin";>@​kwin
   Deprecate isEmpty(String) and isNotEmpty(String) in favour of same named 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/218";>#218)
 https://github.com/kwin";>@​kwin
   isEmpty(String) must not return false for whitespace-only values (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/219";>#219)
 https://github.com/kwin";>@​kwin
   Get rid maven-plugin-testing-harness from dependency (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/208";>#208)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus from 8 to 10 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/207";>#207)
 https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/205";>#205)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-utils/comm

[GitHub] [maven-jlink-plugin] dependabot[bot] closed pull request #145: Bump plexus-utils from 3.4.1 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #145: Bump plexus-utils from 3.4.1 to 3.5.0
URL: https://github.com/apache/maven-jlink-plugin/pull/145


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jlink-plugin] dependabot[bot] commented on pull request #145: Bump plexus-utils from 3.4.1 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #145:
URL: 
https://github.com/apache/maven-jlink-plugin/pull/145#issuecomment-1451299586

   Superseded by #151.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jlink-plugin] dependabot[bot] opened a new pull request, #151: Bump plexus-utils from 3.4.1 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #151:
URL: https://github.com/apache/maven-jlink-plugin/pull/151

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.4.1 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   3.5.0
   
   
   Don't throw IOException when none is required (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/206";>#206)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/221";>#221)
 https://github.com/michael-o";>@​michael-o
   Always preserve dominant node value (even if empty) (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/217";>#217)
 https://github.com/kwin";>@​kwin
   Don't overwrite blank (but non-empty) dominant values during 
mergeXpp3Dom (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/213";>#213)
 https://github.com/kwin";>@​kwin
   Deprecate isEmpty(String) and isNotEmpty(String) in favour of same named 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/218";>#218)
 https://github.com/kwin";>@​kwin
   isEmpty(String) must not return false for whitespace-only values (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/219";>#219)
 https://github.com/kwin";>@​kwin
   Get rid maven-plugin-testing-harness from dependency (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/208";>#208)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus from 8 to 10 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/207";>#207)
 https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/205";>#205)
 https://github.com/dependabot";>@​dependabot
   
   3.4.2
   
   🚀 New features and improvements
   
   Provides a CachingOuptutStream and a CachingWriter (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/184";>#184)
 https://github.com/gnodet";>@​gnodet
   Use (already) precalculated value (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/186";>#186)
 https://github.com/pzygielo";>@​pzygielo
   use github shared actions (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/171";>#171)
 https://github.com/olamy";>@​olamy
   
   🐛 Bug Fixes
   
   MXParser fixes (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/185";>#185)
 https://github.com/gnodet";>@​gnodet
   Fix last modified time not being updated on linux (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/203";>#203)
 https://github.com/gnodet";>@​gnodet
   Fix regression and deprecate: FileUtils.fileAppend should create file… 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/200";>#200)
 https://github.com/slachiewicz";>@​slachiewicz
   Fix some testing XML files checkout with incorrect eol (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issu

[GitHub] [maven-jlink-plugin] dependabot[bot] closed pull request #128: Bump plexus-archiver from 4.2.6 to 4.6.1

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #128: Bump plexus-archiver from 4.2.6 to 
4.6.1
URL: https://github.com/apache/maven-jlink-plugin/pull/128


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-invoker-plugin] dependabot[bot] opened a new pull request, #178: Bump plexus-utils from 3.5.0 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #178:
URL: https://github.com/apache/maven-invoker-plugin/pull/178

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.5.0 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-utils/commit/9db3ea7f918d3c5612703c6f95f1c2a87337ab05";>9db3ea7
 Using Files#write() to implement Files#append()
   https://github.com/codehaus-plexus/plexus-utils/commit/6aa1b6fa11f16340757842939ff27a79c937a87f";>6aa1b6f
 Using Files#readString()/#writeString() on Java 11+
   https://github.com/codehaus-plexus/plexus-utils/commit/c41544820537cc0ab39791f65baa1cb518a33879";>c415448
 Using Files.write instead of OutputStream.write
   https://github.com/codehaus-plexus/plexus-utils/commit/b8696fb4b0ee29d866c5e09c08b6617dbc1fbfc2";>b8696fb
 Using Files.readAllBytes instead of custom loop
   https://github.com/codehaus-plexus/plexus-utils/commit/6288353e08b999ff16b7cf8ab09625f4e17b1b98";>6288353
 Bump actions/checkout from 3.1.0 to 3.2.0
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.5.0...plexus-utils-3.5.1";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-utils&package-manager=maven&previous-version=3.5.0&new-version=3.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this 

[GitHub] [maven-jlink-plugin] dependabot[bot] commented on pull request #128: Bump plexus-archiver from 4.2.6 to 4.6.1

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #128:
URL: 
https://github.com/apache/maven-jlink-plugin/pull/128#issuecomment-1451299534

   Superseded by #150.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jlink-plugin] dependabot[bot] opened a new pull request, #150: Bump plexus-archiver from 4.2.6 to 4.6.2

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #150:
URL: https://github.com/apache/maven-jlink-plugin/pull/150

   Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) 
from 4.2.6 to 4.6.2.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases";>plexus-archiver's
 releases.
   
   Plexus Archiver 4.6.2
   🐛 Bug Fixes
   
   Fix regression in handling symbolic links. See https://github-redirect.dependabot.com/codehaus-plexus/plexus-io/issues/89";>codehaus-plexus/plexus-io#89
   
   📦 Dependency updates
   
   Bump plexus-io from 3.4.0 to 3.4.1 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/256";>#256)
 https://github.com/dependabot";>@​dependabot
   Bump zstd-jni from 1.5.2-5 to 1.5.4-2  (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/254";>#254)
 https://github.com/dependabot";>@​dependabot, (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/255";>#255)
 https://github.com/dependabot";>@​dependabot
   
   Plexus Archiver 4.6.1
   🐛 Bug Fixes
   
   Normalize file separators before warning about equal archive entries (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/249";>#249)
 https://github.com/Bananeweizen";>@​Bananeweizen
   
   📦 Dependency updates
   
   Bump commons-compress from 1.21 to 1.22 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/243";>#243)
 https://github.com/dependabot";>@​dependabot
   
   Plexus Archiver 4.6.0
   🚀 New features and improvements
   
   keep file/directory permissions in Reproducible Builds mode (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/241";>#241)
 https://github.com/hboutemy";>@​hboutemy
   
   📦 Dependency updates
   
   Bump junitVersion from 5.9.0 to 5.9.1 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/236";>#236)
 https://github.com/dependabot";>@​dependabot
   Bump plexus-utils from 3.4.2 to 3.5.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/242";>#242)
 https://github.com/dependabot";>@​dependabot
   Bump zstd-jni from 1.5.2-4 to 1.5.2-5 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/240";>#240)
 https://github.com/dependabot";>@​dependabot
   
   Plexus Archiver 4.5.0
   🚀 New features and improvements
   
   Add zstd (un)archiver support (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/226";>#226)
 https://github.com/pleeplop";>@​pleeplop
   
   🐛 Bug Fixes
   
   Fix UnArchiver#isOverwrite not working as expected (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/229";>#229)
 https://github.com/plamentotev";>@​plamentotev
   Existing files were overridden only if UnArchiver#isOverwrite 
was set and the existing files were older than the archive entry.
   Now it works as documented: older files are always overridden; when 
UnArchiver#isOverwrite is true, existing files are 
always
   overridden regardless if they are older or not.
   
   Plexus Archiver 4.4.0
   
   🚀 New features and improvements
   
   Drop legacy plexus API and use only JSR330 components (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/220";>#220)
 https://github.com/cstamas";>@​cstamas
   
   Plexus Archiver 4.3.0
   
   
   ... (truncated)
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/e4449b2cbfd1aa87223cea8fa7c1a987477587af";>e4449b2
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/737ac96e761e17c16020adc479b11e78cf3e0e75";>737ac96
 [maven-release-plugin] rollback the release of plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/d950f06756c461975d6f1d014cc1fa8bcf477677";>d950f06
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/8c65753ba31d8f1a6d0a6e4cd8e01a40e00e";>8c65753
 Bump plexus-io from 3.4.0 to 3.4.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/b434156c56be930c04ecfa2588917defe458e902";>b434156
 Bump zstd-jni from 1.5.4-1 to 1.5.4-2
   https://github.com/codehaus-plexus/plexus-archiver/commit/64d3acf94d370e5174c73567a1508d97be665a23";>64d3acf
 Bump zstd-jni from 1.5.2-5 to 1.5.4-1
   https://github.com/codehaus-plexus/plexus-archiver/commit/033ecbdf300aaf31c7c9d908e62eb623d85898b7";>033ecbd
 Bump junitVersion from 5.9.1 to 5.9.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/28e269f48b62f7619a9f85ceefcddca4c0a43832";>28e269f
 Bump assertj-core from 3.23.1 to 3.24.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/18fa4254558737ef7b35e34fdbc65c427011eb7a";>18fa425
 [maven-release-plugin] prepare for next development iteration
   https://github.com/codehaus-plexus/plexus-archiver/commit/f23f7ad8cc510c4a7e888699937

[GitHub] [maven-shade-plugin] dependabot[bot] closed pull request #163: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #163: Bump plexus-utils from 3.4.2 to 3.5.0
URL: https://github.com/apache/maven-shade-plugin/pull/163


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-shade-plugin] dependabot[bot] commented on pull request #163: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #163:
URL: 
https://github.com/apache/maven-shade-plugin/pull/163#issuecomment-1451299319

   Superseded by #178.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-indexer] dependabot[bot] opened a new pull request, #297: Bump plexus-utils from 3.5.0 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #297:
URL: https://github.com/apache/maven-indexer/pull/297

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.5.0 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-utils/commit/9db3ea7f918d3c5612703c6f95f1c2a87337ab05";>9db3ea7
 Using Files#write() to implement Files#append()
   https://github.com/codehaus-plexus/plexus-utils/commit/6aa1b6fa11f16340757842939ff27a79c937a87f";>6aa1b6f
 Using Files#readString()/#writeString() on Java 11+
   https://github.com/codehaus-plexus/plexus-utils/commit/c41544820537cc0ab39791f65baa1cb518a33879";>c415448
 Using Files.write instead of OutputStream.write
   https://github.com/codehaus-plexus/plexus-utils/commit/b8696fb4b0ee29d866c5e09c08b6617dbc1fbfc2";>b8696fb
 Using Files.readAllBytes instead of custom loop
   https://github.com/codehaus-plexus/plexus-utils/commit/6288353e08b999ff16b7cf8ab09625f4e17b1b98";>6288353
 Bump actions/checkout from 3.1.0 to 3.2.0
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.5.0...plexus-utils-3.5.1";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-utils&package-manager=maven&previous-version=3.5.0&new-version=3.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   

[GitHub] [maven-shade-plugin] dependabot[bot] opened a new pull request, #178: Bump plexus-utils from 3.4.2 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #178:
URL: https://github.com/apache/maven-shade-plugin/pull/178

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.4.2 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   3.5.0
   
   
   Don't throw IOException when none is required (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/206";>#206)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/221";>#221)
 https://github.com/michael-o";>@​michael-o
   Always preserve dominant node value (even if empty) (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/217";>#217)
 https://github.com/kwin";>@​kwin
   Don't overwrite blank (but non-empty) dominant values during 
mergeXpp3Dom (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/213";>#213)
 https://github.com/kwin";>@​kwin
   Deprecate isEmpty(String) and isNotEmpty(String) in favour of same named 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/218";>#218)
 https://github.com/kwin";>@​kwin
   isEmpty(String) must not return false for whitespace-only values (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/219";>#219)
 https://github.com/kwin";>@​kwin
   Get rid maven-plugin-testing-harness from dependency (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/208";>#208)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus from 8 to 10 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/207";>#207)
 https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/205";>#205)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-utils/c

[GitHub] [maven-dependency-analyzer] dependabot[bot] closed pull request #72: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #72: Bump plexus-utils from 3.4.2 to 3.5.0
URL: https://github.com/apache/maven-dependency-analyzer/pull/72


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-dependency-analyzer] dependabot[bot] commented on pull request #72: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #72:
URL: 
https://github.com/apache/maven-dependency-analyzer/pull/72#issuecomment-1451299205

   Superseded by #79.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-dependency-analyzer] dependabot[bot] opened a new pull request, #79: Bump plexus-utils from 3.4.2 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #79:
URL: https://github.com/apache/maven-dependency-analyzer/pull/79

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.4.2 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   3.5.0
   
   
   Don't throw IOException when none is required (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/206";>#206)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/221";>#221)
 https://github.com/michael-o";>@​michael-o
   Always preserve dominant node value (even if empty) (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/217";>#217)
 https://github.com/kwin";>@​kwin
   Don't overwrite blank (but non-empty) dominant values during 
mergeXpp3Dom (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/213";>#213)
 https://github.com/kwin";>@​kwin
   Deprecate isEmpty(String) and isNotEmpty(String) in favour of same named 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/218";>#218)
 https://github.com/kwin";>@​kwin
   isEmpty(String) must not return false for whitespace-only values (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/219";>#219)
 https://github.com/kwin";>@​kwin
   Get rid maven-plugin-testing-harness from dependency (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/208";>#208)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus from 8 to 10 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/207";>#207)
 https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/205";>#205)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-ut

[GitHub] [maven-doxia-converter] dependabot[bot] opened a new pull request, #42: Bump plexus-utils from 3.5.0 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #42:
URL: https://github.com/apache/maven-doxia-converter/pull/42

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.5.0 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-utils/commit/9db3ea7f918d3c5612703c6f95f1c2a87337ab05";>9db3ea7
 Using Files#write() to implement Files#append()
   https://github.com/codehaus-plexus/plexus-utils/commit/6aa1b6fa11f16340757842939ff27a79c937a87f";>6aa1b6f
 Using Files#readString()/#writeString() on Java 11+
   https://github.com/codehaus-plexus/plexus-utils/commit/c41544820537cc0ab39791f65baa1cb518a33879";>c415448
 Using Files.write instead of OutputStream.write
   https://github.com/codehaus-plexus/plexus-utils/commit/b8696fb4b0ee29d866c5e09c08b6617dbc1fbfc2";>b8696fb
 Using Files.readAllBytes instead of custom loop
   https://github.com/codehaus-plexus/plexus-utils/commit/6288353e08b999ff16b7cf8ab09625f4e17b1b98";>6288353
 Bump actions/checkout from 3.1.0 to 3.2.0
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.5.0...plexus-utils-3.5.1";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-utils&package-manager=maven&previous-version=3.5.0&new-version=3.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this P

[GitHub] [maven-site-plugin] dependabot[bot] opened a new pull request, #132: Bump plexus-archiver from 4.6.1 to 4.6.2

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #132:
URL: https://github.com/apache/maven-site-plugin/pull/132

   Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) 
from 4.6.1 to 4.6.2.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases";>plexus-archiver's
 releases.
   
   Plexus Archiver 4.6.2
   🐛 Bug Fixes
   
   Fix regression in handling symbolic links. See https://github-redirect.dependabot.com/codehaus-plexus/plexus-io/issues/89";>codehaus-plexus/plexus-io#89
   
   📦 Dependency updates
   
   Bump plexus-io from 3.4.0 to 3.4.1 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/256";>#256)
 https://github.com/dependabot";>@​dependabot
   Bump zstd-jni from 1.5.2-5 to 1.5.4-2  (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/254";>#254)
 https://github.com/dependabot";>@​dependabot, (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/255";>#255)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/e4449b2cbfd1aa87223cea8fa7c1a987477587af";>e4449b2
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/737ac96e761e17c16020adc479b11e78cf3e0e75";>737ac96
 [maven-release-plugin] rollback the release of plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/d950f06756c461975d6f1d014cc1fa8bcf477677";>d950f06
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/8c65753ba31d8f1a6d0a6e4cd8e01a40e00e";>8c65753
 Bump plexus-io from 3.4.0 to 3.4.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/b434156c56be930c04ecfa2588917defe458e902";>b434156
 Bump zstd-jni from 1.5.4-1 to 1.5.4-2
   https://github.com/codehaus-plexus/plexus-archiver/commit/64d3acf94d370e5174c73567a1508d97be665a23";>64d3acf
 Bump zstd-jni from 1.5.2-5 to 1.5.4-1
   https://github.com/codehaus-plexus/plexus-archiver/commit/033ecbdf300aaf31c7c9d908e62eb623d85898b7";>033ecbd
 Bump junitVersion from 5.9.1 to 5.9.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/28e269f48b62f7619a9f85ceefcddca4c0a43832";>28e269f
 Bump assertj-core from 3.23.1 to 3.24.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/18fa4254558737ef7b35e34fdbc65c427011eb7a";>18fa425
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.6.1...plexus-archiver-4.6.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver&package-manager=maven&previous-version=4.6.1&new-version=4.6.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-parent] dependabot[bot] opened a new pull request, #113: Bump plexus-utils from 3.5.0 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #113:
URL: https://github.com/apache/maven-parent/pull/113

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.5.0 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-utils/commit/9db3ea7f918d3c5612703c6f95f1c2a87337ab05";>9db3ea7
 Using Files#write() to implement Files#append()
   https://github.com/codehaus-plexus/plexus-utils/commit/6aa1b6fa11f16340757842939ff27a79c937a87f";>6aa1b6f
 Using Files#readString()/#writeString() on Java 11+
   https://github.com/codehaus-plexus/plexus-utils/commit/c41544820537cc0ab39791f65baa1cb518a33879";>c415448
 Using Files.write instead of OutputStream.write
   https://github.com/codehaus-plexus/plexus-utils/commit/b8696fb4b0ee29d866c5e09c08b6617dbc1fbfc2";>b8696fb
 Using Files.readAllBytes instead of custom loop
   https://github.com/codehaus-plexus/plexus-utils/commit/6288353e08b999ff16b7cf8ab09625f4e17b1b98";>6288353
 Bump actions/checkout from 3.1.0 to 3.2.0
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.5.0...plexus-utils-3.5.1";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-utils&package-manager=maven&previous-version=3.5.0&new-version=3.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   -

[GitHub] [maven-site-plugin] dependabot[bot] opened a new pull request, #131: Bump plexus-utils from 3.5.0 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #131:
URL: https://github.com/apache/maven-site-plugin/pull/131

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.5.0 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-utils/commit/9db3ea7f918d3c5612703c6f95f1c2a87337ab05";>9db3ea7
 Using Files#write() to implement Files#append()
   https://github.com/codehaus-plexus/plexus-utils/commit/6aa1b6fa11f16340757842939ff27a79c937a87f";>6aa1b6f
 Using Files#readString()/#writeString() on Java 11+
   https://github.com/codehaus-plexus/plexus-utils/commit/c41544820537cc0ab39791f65baa1cb518a33879";>c415448
 Using Files.write instead of OutputStream.write
   https://github.com/codehaus-plexus/plexus-utils/commit/b8696fb4b0ee29d866c5e09c08b6617dbc1fbfc2";>b8696fb
 Using Files.readAllBytes instead of custom loop
   https://github.com/codehaus-plexus/plexus-utils/commit/6288353e08b999ff16b7cf8ab09625f4e17b1b98";>6288353
 Bump actions/checkout from 3.1.0 to 3.2.0
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.5.0...plexus-utils-3.5.1";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-utils&package-manager=maven&previous-version=3.5.0&new-version=3.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:

[jira] [Commented] (MNG-7710) Upgrade plexus-utils to 3.5.1

2023-03-01 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7710?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695449#comment-17695449
 ] 

ASF GitHub Bot commented on MNG-7710:
-

olamy commented on code in PR #1024:
URL: https://github.com/apache/maven/pull/1024#discussion_r1122590010


##
pom.xml:
##
@@ -135,7 +135,7 @@ under the License.
 2.1.0
 1.26
  Upgrade plexus-utils to 3.5.1
> -
>
> Key: MNG-7710
> URL: https://issues.apache.org/jira/browse/MNG-7710
> Project: Maven
>  Issue Type: Bug
>  Components: Dependencies
>Affects Versions: 3.9.0
>Reporter: Tamas Cservenak
>Assignee: Tamas Cservenak
>Priority: Major
> Fix For: 3.9.1
>
>
> Maven 3.9.0 was shipped with plexus-utils 3.4.2, downgrade it to 3.3.1, same 
> version used in Maven 3.8.7.
> plexus-utils 3.4.0+ introduced several breakages, such as:
>  * XML parsing not backward compatible 
> [https://github.com/codehaus-plexus/plexus-utils/issues/238]
>  * Merge behavior [https://github.com/codehaus-plexus/plexus-utils/issues/239]
> Downgrade until all the issues are discussed and resolved. This makes Maven 
> 3.9.1 use same p-u as Maven 3.8.7 did.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [maven] olamy commented on a diff in pull request #1024: [maven-3.9.x][MNG-7710] Upgrade plexus-utils to 3.5.1

2023-03-01 Thread via GitHub


olamy commented on code in PR #1024:
URL: https://github.com/apache/maven/pull/1024#discussion_r1122590010


##
pom.xml:
##
@@ -135,7 +135,7 @@ under the License.
 2.1.0
 1.26
 
-3.3.1
+3.5.0

Review Comment:
   ```suggestion
   3.5.1
   ```



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jar-plugin] dependabot[bot] closed pull request #54: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #54: Bump plexus-utils from 3.4.2 to 3.5.0
URL: https://github.com/apache/maven-jar-plugin/pull/54


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jar-plugin] dependabot[bot] commented on pull request #54: Bump plexus-utils from 3.4.2 to 3.5.0

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #54:
URL: https://github.com/apache/maven-jar-plugin/pull/54#issuecomment-1451205070

   Superseded by #61.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-jar-plugin] dependabot[bot] opened a new pull request, #61: Bump plexus-utils from 3.4.2 to 3.5.1

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #61:
URL: https://github.com/apache/maven-jar-plugin/pull/61

   Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 
3.4.2 to 3.5.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-utils/releases";>plexus-utils's 
releases.
   
   3.5.1
   
   🚀 New features and improvements
   
   Reading and writing files using Java NIO (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/232";>#232)
 https://github.com/mkarg";>@​mkarg
   
   🐛 Bug Fixes
   
   Partial revert of "Support combine.self='remove'" to fix 
MNG-7709 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/241";>#241)
 https://github.com/gnodet";>@​gnodet
   Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/240";>#240)
 https://github.com/gnodet";>@​gnodet
   
   📦 Dependency updates
   
   Bump codehaus-plexus/.github from 0.0.1 to 0.0.4 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/237";>#237)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/231";>#231)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.1.0 to 3.2.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-generator-annprocess from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/222";>#222)
 https://github.com/dependabot";>@​dependabot
   Bump jmh-core from 1.35 to 1.36 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/223";>#223)
 https://github.com/dependabot";>@​dependabot
   Bump actions/checkout from 3.0.2 to 3.1.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/220";>#220)
 https://github.com/dependabot";>@​dependabot
   
   3.5.0
   
   
   Don't throw IOException when none is required (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/206";>#206)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/221";>#221)
 https://github.com/michael-o";>@​michael-o
   Always preserve dominant node value (even if empty) (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/217";>#217)
 https://github.com/kwin";>@​kwin
   Don't overwrite blank (but non-empty) dominant values during 
mergeXpp3Dom (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/213";>#213)
 https://github.com/kwin";>@​kwin
   Deprecate isEmpty(String) and isNotEmpty(String) in favour of same named 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/218";>#218)
 https://github.com/kwin";>@​kwin
   isEmpty(String) must not return false for whitespace-only values (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/219";>#219)
 https://github.com/kwin";>@​kwin
   Get rid maven-plugin-testing-harness from dependency (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/208";>#208)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump plexus from 8 to 10 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/207";>#207)
 https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/pull/205";>#205)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-utils/commit/8488ff2200964f47114b9dee5604dc3314a2fe8a";>8488ff2
 [maven-release-plugin] prepare release plexus-utils-3.5.1
   https://github.com/codehaus-plexus/plexus-utils/commit/bf198ff5d8f3bd5eb90d09826006c4d419884660";>bf198ff
 Partial revert of "Support combine.self='remove'" to fix MNG-7709 
(https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/241";>#241)
   https://github.com/codehaus-plexus/plexus-utils/commit/32b72a6e8ff51e7b53510ecfc47ca46eaa4695ba";>32b72a6
 Fix reading comments with UTF chars (fixes https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/238";>#238)
 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/240";>#240)
   https://github.com/codehaus-plexus/plexus-utils/commit/d3d137cdf51aff2fc854eb60c300a9953c0e093d";>d3d137c
 Bump codehaus-plexus/.github from 0.0.1 to 0.0.4
   https://github.com/codehaus-plexus/plexus-utils/commit/4f333f2691873e5ba024991a03390a4e773511e9";>4f333f2
 Bump actions/checkout from 3.2.0 to 3.3.0 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-utils/issues/231";>#231)
   https://github.com/codehaus-plexus/plexus-utils/commi

[GitHub] [maven-wrapper] dependabot[bot] opened a new pull request, #93: Bump plexus-archiver from 4.6.1 to 4.6.2

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #93:
URL: https://github.com/apache/maven-wrapper/pull/93

   Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) 
from 4.6.1 to 4.6.2.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases";>plexus-archiver's
 releases.
   
   Plexus Archiver 4.6.2
   🐛 Bug Fixes
   
   Fix regression in handling symbolic links. See https://github-redirect.dependabot.com/codehaus-plexus/plexus-io/issues/89";>codehaus-plexus/plexus-io#89
   
   📦 Dependency updates
   
   Bump plexus-io from 3.4.0 to 3.4.1 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/256";>#256)
 https://github.com/dependabot";>@​dependabot
   Bump zstd-jni from 1.5.2-5 to 1.5.4-2  (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/254";>#254)
 https://github.com/dependabot";>@​dependabot, (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/255";>#255)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/e4449b2cbfd1aa87223cea8fa7c1a987477587af";>e4449b2
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/737ac96e761e17c16020adc479b11e78cf3e0e75";>737ac96
 [maven-release-plugin] rollback the release of plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/d950f06756c461975d6f1d014cc1fa8bcf477677";>d950f06
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/8c65753ba31d8f1a6d0a6e4cd8e01a40e00e";>8c65753
 Bump plexus-io from 3.4.0 to 3.4.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/b434156c56be930c04ecfa2588917defe458e902";>b434156
 Bump zstd-jni from 1.5.4-1 to 1.5.4-2
   https://github.com/codehaus-plexus/plexus-archiver/commit/64d3acf94d370e5174c73567a1508d97be665a23";>64d3acf
 Bump zstd-jni from 1.5.2-5 to 1.5.4-1
   https://github.com/codehaus-plexus/plexus-archiver/commit/033ecbdf300aaf31c7c9d908e62eb623d85898b7";>033ecbd
 Bump junitVersion from 5.9.1 to 5.9.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/28e269f48b62f7619a9f85ceefcddca4c0a43832";>28e269f
 Bump assertj-core from 3.23.1 to 3.24.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/18fa4254558737ef7b35e34fdbc65c427011eb7a";>18fa425
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.6.1...plexus-archiver-4.6.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver&package-manager=maven&previous-version=4.6.1&new-version=4.6.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Updated] (MNG-7710) Upgrade plexus-utils to 3.5.1

2023-03-01 Thread Olivier Lamy (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7710?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Olivier Lamy updated MNG-7710:
--
Summary: Upgrade plexus-utils to 3.5.1  (was: Downgrade plexus-utils to 
3.5.1)

> Upgrade plexus-utils to 3.5.1
> -
>
> Key: MNG-7710
> URL: https://issues.apache.org/jira/browse/MNG-7710
> Project: Maven
>  Issue Type: Bug
>  Components: Dependencies
>Affects Versions: 3.9.0
>Reporter: Tamas Cservenak
>Assignee: Tamas Cservenak
>Priority: Major
> Fix For: 3.9.1
>
>
> Maven 3.9.0 was shipped with plexus-utils 3.4.2, downgrade it to 3.3.1, same 
> version used in Maven 3.8.7.
> plexus-utils 3.4.0+ introduced several breakages, such as:
>  * XML parsing not backward compatible 
> [https://github.com/codehaus-plexus/plexus-utils/issues/238]
>  * Merge behavior [https://github.com/codehaus-plexus/plexus-utils/issues/239]
> Downgrade until all the issues are discussed and resolved. This makes Maven 
> 3.9.1 use same p-u as Maven 3.8.7 did.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MNG-7700) Improper canonicalization of versions

2023-03-01 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7700?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695390#comment-17695390
 ] 

ASF GitHub Bot commented on MNG-7700:
-

elharo merged PR #1014:
URL: https://github.com/apache/maven/pull/1014




> Improper canonicalization of versions
> -
>
> Key: MNG-7700
> URL: https://issues.apache.org/jira/browse/MNG-7700
> Project: Maven
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 3.8.7, 3.9.0
>Reporter: David M. Lloyd
>Assignee: Elliotte Rusty Harold
>Priority: Minor
> Fix For: 3.8.x-candidate, 3.9.1-candidate, waiting-for-feedback
>
>
> The canonicalization logic for versions is incorrect.
> Using the method {{ComparableVersion#getCanonical}} as in {{new 
> ComparableVersion(input).getCanonical()}}, the following results can be 
> observed:
> ||Input||3.8.6 Output||3.8.6 OK?||3.9.0 Output||3.9.0 OK?||
> |{{1}}|{{1}}|yes|{{1}}|yes|
> |{{0.1}}|{{0.1}}|yes|{{0.1}}|yes|
> |{{0-1}}|{{1}}|no|{{1}}|no|
> |{{1.x}}|{{1.x}}|yes|{{1-x}}|maybe*|
> |{{1-x}}|{{1-x}}|yes|{{1-x}}|yes|
> |{{0.x}}|{{0.x}}|yes|{{x}}|no|
> |{{0-x}}|{{x}}|no|{{x}}|no|
> |{{x}}|{{x}}|yes|{{x}}|yes|
> |{{0.rc}}|{{0.rc}}|yes|{{rc}}|no|
> The "OK?" columns indicate whether parsing the canonical version string will 
> yield a {{ComparableVersion}} instance that is {{equal}} to one constructed 
> from the original input, i.e. it's internally consistent.
> The "maybe*" item indicates that starting with 3.9.0, version `1.x` is now 
> considered to be equal to `1-x`. I'm not sure if this is a bug or not, or was 
> intentional or not, but it is definitely a change.
> These canonicalizations seem to have gotten less consistent in the move to 
> 3.9.0.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [maven] elharo merged pull request #1014: [MNG-7700] test some edge cases with leading zeroes

2023-03-01 Thread via GitHub


elharo merged PR #1014:
URL: https://github.com/apache/maven/pull/1014


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MSHADE-420) Reproducible Builds timestamp issue in some cases

2023-03-01 Thread Niels Basjes (Jira)


[ 
https://issues.apache.org/jira/browse/MSHADE-420?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695357#comment-17695357
 ] 

Niels Basjes commented on MSHADE-420:
-

I suspect that this shift is caused by the same rootcause as this problem which 
I reported today: [https://github.com/spring-projects/spring-boot/issues/34424]

Here the Apache commons compress receives a timestamp for a file that is to be 
placed in a zip file as an epoch (without timezone): a FileTime only holds the 
epoch.

Then during the creation of the actual file in 
org.apache.commons.compress.archivers.zip.ZipArchiveOutputStream this epoch 
time is converted into a human readable form and then into bytes again using a 
Calendar that is retrieved as Calendar.getInstance();
 
The effect is that the files do get the correct timestamp but it is offset by 
the Timezone of the build machine.
 
I suspect this local timezone usage in this Zip implementation may very well be 
the rootcause behind this problem too.
 
Perhaps you can try something like this (with the correct timezone) ?
 
    TZ=Europe/Amsterdam mvn clean verify ... 
 
or 
 
    mvn -Duser.timezone=Europe/Amsterdam  clean verify ... 
 

> Reproducible Builds timestamp issue in some cases
> -
>
> Key: MSHADE-420
> URL: https://issues.apache.org/jira/browse/MSHADE-420
> Project: Maven Shade Plugin
>  Issue Type: Bug
>Affects Versions: 3.2.4
>Reporter: Herve Boutemy
>Priority: Major
>
> seen in Tika 
> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/tika/tika-2.4.0.diffoscope
> maven-shade-plugin 3.2.4 has an issue with timestamps in unexplained 
> circumstances:
> why does 21-Nov-20 20:25 from reference become 21-Nov-21 01:25 in rebuild?
> why does 20-May-14 07:15 from reference become 20-May-14 11:15 in rebuild?
> could be related to the timezone of the rebuilder?
> {noformat}
> 21 / 44 target/reference/tika-parser-nlp-package-2.4.0.jar 
> tika-parsers/tika-parsers-ml/tika-parser-nlp-package/target/tika-parser-nlp-package-2.4.0.jar
> --- target/reference/tika-parser-nlp-package-2.4.0.jar
> +++ 
> tika-parsers/tika-parsers-ml/tika-parser-nlp-package/target/tika-parser-nlp-package-2.4.0.jar
> ├── zipinfo {}
> │ @@ -9868,1231 +9868,1231 @@
> │  -rw 2.0 fat 2653 bl defN 22-Apr-08 17:41 
> schemas/wsdl/ws-addr-wsdl.xsd
> │  -rw 2.0 fat 5591 bl defN 22-Apr-08 17:41 
> schemas/wsdl/ws-addr.xsd
> │  -rw 2.0 fat 1606 bl defN 22-Apr-08 17:41 schemas/wsdl/wsdl.xjb
> │  -rw 2.0 fat12126 bl defN 22-Apr-08 17:41 schemas/wsdl/wsdl.xsd
> │  -rw 2.0 fat 8198 bl defN 22-Apr-08 17:41 schemas/wsdl/wsrm.xsd
> │  -rw 2.0 fat  932 bl defN 22-Apr-08 17:41 schemas/wsdl/xmime.xsd
> │  -rw 2.0 fat 5840 bl defN 22-Apr-08 17:41 schemas/wsdl/xml.xsd
> │ --rw 2.0 fat0 bl defN 21-Nov-20 20:25 
> META-INF/maven/com.fasterxml.woodstox/
> │ --rw 2.0 fat0 bl defN 21-Nov-20 20:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/
> │ --rw 2.0 fat   70 bl defN 21-Nov-20 20:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.properties
> │ --rw 2.0 fat15917 bl defN 21-Nov-20 20:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.xml
> │ --rw 2.0 fat0 bl defN 21-Nov-20 20:25 com/ctc/
> │ --rw 2.0 fat0 bl defN 21-Nov-20 20:25 com/ctc/wstx/
> │ --rw 2.0 fat0 bl defN 21-Nov-20 20:25 com/ctc/wstx/api/
> ...
> │ --rw 2.0 fat  722 bl defN 20-May-14 07:15 
> org/codehaus/stax2/validation/XMLValidationSchema.class
> │ --rw 2.0 fat 7795 bl defN 20-May-14 07:15 
> org/codehaus/stax2/validation/XMLValidationSchemaFactory.class
> │ --rw 2.0 fat 1801 bl defN 20-May-14 07:15 
> org/codehaus/stax2/validation/XMLValidator.class
> │ +-rw 2.0 fat0 bl defN 21-Nov-21 01:25 
> META-INF/maven/com.fasterxml.woodstox/
> │ +-rw 2.0 fat0 bl defN 21-Nov-21 01:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/
> │ +-rw 2.0 fat   70 bl defN 21-Nov-21 01:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.properties
> │ +-rw 2.0 fat15917 bl defN 21-Nov-21 01:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.xml
> │ +-rw 2.0 fat0 bl defN 21-Nov-21 01:25 com/ctc/
> │ +-rw 2.0 fat0 bl defN 21-Nov-21 01:25 com/ctc/wstx/
> │ +-rw 2.0 fat0 bl defN 21-Nov-21 01:25 com/ctc/wstx/api/
> ...
> │ +-rw 2.0 fat  722 bl defN 20-May-14 11:15 
> org/codehaus/stax2/validation/XMLValidationSchema.class
> │ +-rw 2.0 fat 7795 bl defN 20-May-14 11:15 
> org/codehaus/stax2/validation/XMLValidationSchemaFactory.class
> │ 

[GitHub] [maven-dependency-plugin] dependabot[bot] closed pull request #278: Bump plexus-archiver from 4.6.0 to 4.6.1

2023-03-01 Thread via GitHub


dependabot[bot] closed pull request #278: Bump plexus-archiver from 4.6.0 to 
4.6.1
URL: https://github.com/apache/maven-dependency-plugin/pull/278


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-dependency-plugin] dependabot[bot] commented on pull request #278: Bump plexus-archiver from 4.6.0 to 4.6.1

2023-03-01 Thread via GitHub


dependabot[bot] commented on PR #278:
URL: 
https://github.com/apache/maven-dependency-plugin/pull/278#issuecomment-1450978454

   Superseded by #289.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-dependency-plugin] dependabot[bot] opened a new pull request, #289: Bump plexus-archiver from 4.6.0 to 4.6.2

2023-03-01 Thread via GitHub


dependabot[bot] opened a new pull request, #289:
URL: https://github.com/apache/maven-dependency-plugin/pull/289

   Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) 
from 4.6.0 to 4.6.2.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases";>plexus-archiver's
 releases.
   
   Plexus Archiver 4.6.2
   🐛 Bug Fixes
   
   Fix regression in handling symbolic links. See https://github-redirect.dependabot.com/codehaus-plexus/plexus-io/issues/89";>codehaus-plexus/plexus-io#89
   
   📦 Dependency updates
   
   Bump plexus-io from 3.4.0 to 3.4.1 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/256";>#256)
 https://github.com/dependabot";>@​dependabot
   Bump zstd-jni from 1.5.2-5 to 1.5.4-2  (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/254";>#254)
 https://github.com/dependabot";>@​dependabot, (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/255";>#255)
 https://github.com/dependabot";>@​dependabot
   
   Plexus Archiver 4.6.1
   🐛 Bug Fixes
   
   Normalize file separators before warning about equal archive entries (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/249";>#249)
 https://github.com/Bananeweizen";>@​Bananeweizen
   
   📦 Dependency updates
   
   Bump commons-compress from 1.21 to 1.22 (https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/243";>#243)
 https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/e4449b2cbfd1aa87223cea8fa7c1a987477587af";>e4449b2
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/737ac96e761e17c16020adc479b11e78cf3e0e75";>737ac96
 [maven-release-plugin] rollback the release of plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/d950f06756c461975d6f1d014cc1fa8bcf477677";>d950f06
 [maven-release-plugin] prepare release plexus-archiver-4.6.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/8c65753ba31d8f1a6d0a6e4cd8e01a40e00e";>8c65753
 Bump plexus-io from 3.4.0 to 3.4.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/b434156c56be930c04ecfa2588917defe458e902";>b434156
 Bump zstd-jni from 1.5.4-1 to 1.5.4-2
   https://github.com/codehaus-plexus/plexus-archiver/commit/64d3acf94d370e5174c73567a1508d97be665a23";>64d3acf
 Bump zstd-jni from 1.5.2-5 to 1.5.4-1
   https://github.com/codehaus-plexus/plexus-archiver/commit/033ecbdf300aaf31c7c9d908e62eb623d85898b7";>033ecbd
 Bump junitVersion from 5.9.1 to 5.9.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/28e269f48b62f7619a9f85ceefcddca4c0a43832";>28e269f
 Bump assertj-core from 3.23.1 to 3.24.2
   https://github.com/codehaus-plexus/plexus-archiver/commit/18fa4254558737ef7b35e34fdbc65c427011eb7a";>18fa425
 [maven-release-plugin] prepare for next development iteration
   https://github.com/codehaus-plexus/plexus-archiver/commit/f23f7ad8cc510c4a7e888699937d782371cb700c";>f23f7ad
 [maven-release-plugin] prepare release plexus-archiver-4.6.1
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.6.0...plexus-archiver-4.6.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver&package-manager=maven&previous-version=4.6.0&new-version=4.6.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more f

[jira] [Comment Edited] (MSHADE-420) Reproducible Builds timestamp issue in some cases

2023-03-01 Thread Niels Basjes (Jira)


[ 
https://issues.apache.org/jira/browse/MSHADE-420?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17691544#comment-17691544
 ] 

Niels Basjes edited comment on MSHADE-420 at 3/1/23 10:42 PM:
--

-Note that there is about 1 year between *21-Nov-20 20:25* and {*}21-Nov-21 
01:25{*}.-
-I have never seen a timezone do that.-

Never mind; I got confused by the date format ... Sorry

 


was (Author: nielsbasjes):
Note that there is about 1 year between *21-Nov-20 20:25* and *21-Nov-21 01:25*.
I have never seen a timezone do that.

> Reproducible Builds timestamp issue in some cases
> -
>
> Key: MSHADE-420
> URL: https://issues.apache.org/jira/browse/MSHADE-420
> Project: Maven Shade Plugin
>  Issue Type: Bug
>Affects Versions: 3.2.4
>Reporter: Herve Boutemy
>Priority: Major
>
> seen in Tika 
> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/tika/tika-2.4.0.diffoscope
> maven-shade-plugin 3.2.4 has an issue with timestamps in unexplained 
> circumstances:
> why does 21-Nov-20 20:25 from reference become 21-Nov-21 01:25 in rebuild?
> why does 20-May-14 07:15 from reference become 20-May-14 11:15 in rebuild?
> could be related to the timezone of the rebuilder?
> {noformat}
> 21 / 44 target/reference/tika-parser-nlp-package-2.4.0.jar 
> tika-parsers/tika-parsers-ml/tika-parser-nlp-package/target/tika-parser-nlp-package-2.4.0.jar
> --- target/reference/tika-parser-nlp-package-2.4.0.jar
> +++ 
> tika-parsers/tika-parsers-ml/tika-parser-nlp-package/target/tika-parser-nlp-package-2.4.0.jar
> ├── zipinfo {}
> │ @@ -9868,1231 +9868,1231 @@
> │  -rw 2.0 fat 2653 bl defN 22-Apr-08 17:41 
> schemas/wsdl/ws-addr-wsdl.xsd
> │  -rw 2.0 fat 5591 bl defN 22-Apr-08 17:41 
> schemas/wsdl/ws-addr.xsd
> │  -rw 2.0 fat 1606 bl defN 22-Apr-08 17:41 schemas/wsdl/wsdl.xjb
> │  -rw 2.0 fat12126 bl defN 22-Apr-08 17:41 schemas/wsdl/wsdl.xsd
> │  -rw 2.0 fat 8198 bl defN 22-Apr-08 17:41 schemas/wsdl/wsrm.xsd
> │  -rw 2.0 fat  932 bl defN 22-Apr-08 17:41 schemas/wsdl/xmime.xsd
> │  -rw 2.0 fat 5840 bl defN 22-Apr-08 17:41 schemas/wsdl/xml.xsd
> │ --rw 2.0 fat0 bl defN 21-Nov-20 20:25 
> META-INF/maven/com.fasterxml.woodstox/
> │ --rw 2.0 fat0 bl defN 21-Nov-20 20:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/
> │ --rw 2.0 fat   70 bl defN 21-Nov-20 20:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.properties
> │ --rw 2.0 fat15917 bl defN 21-Nov-20 20:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.xml
> │ --rw 2.0 fat0 bl defN 21-Nov-20 20:25 com/ctc/
> │ --rw 2.0 fat0 bl defN 21-Nov-20 20:25 com/ctc/wstx/
> │ --rw 2.0 fat0 bl defN 21-Nov-20 20:25 com/ctc/wstx/api/
> ...
> │ --rw 2.0 fat  722 bl defN 20-May-14 07:15 
> org/codehaus/stax2/validation/XMLValidationSchema.class
> │ --rw 2.0 fat 7795 bl defN 20-May-14 07:15 
> org/codehaus/stax2/validation/XMLValidationSchemaFactory.class
> │ --rw 2.0 fat 1801 bl defN 20-May-14 07:15 
> org/codehaus/stax2/validation/XMLValidator.class
> │ +-rw 2.0 fat0 bl defN 21-Nov-21 01:25 
> META-INF/maven/com.fasterxml.woodstox/
> │ +-rw 2.0 fat0 bl defN 21-Nov-21 01:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/
> │ +-rw 2.0 fat   70 bl defN 21-Nov-21 01:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.properties
> │ +-rw 2.0 fat15917 bl defN 21-Nov-21 01:25 
> META-INF/maven/com.fasterxml.woodstox/woodstox-core/pom.xml
> │ +-rw 2.0 fat0 bl defN 21-Nov-21 01:25 com/ctc/
> │ +-rw 2.0 fat0 bl defN 21-Nov-21 01:25 com/ctc/wstx/
> │ +-rw 2.0 fat0 bl defN 21-Nov-21 01:25 com/ctc/wstx/api/
> ...
> │ +-rw 2.0 fat  722 bl defN 20-May-14 11:15 
> org/codehaus/stax2/validation/XMLValidationSchema.class
> │ +-rw 2.0 fat 7795 bl defN 20-May-14 11:15 
> org/codehaus/stax2/validation/XMLValidationSchemaFactory.class
> │ +-rw 2.0 fat 1801 bl defN 20-May-14 11:15 
> org/codehaus/stax2/validation/XMLValidator.class
> │  -rw 2.0 fat0 bl defN 21-Sep-14 14:41 
> META-INF/maven/org.apache.ws.xmlschema/
> │  -rw 2.0 fat0 bl defN 21-Sep-14 14:41 
> META-INF/maven/org.apache.ws.xmlschema/xmlschema-core/
> │  -rw 2.0 fat  146 bl defN 21-Sep-14 14:41 
> META-INF/maven/org.apache.ws.xmlschema/xmlschema-core/pom.properties
> │  -rw 2.0 fat 6857 bl defN 21-Sep-14 14:41 
> META-INF/maven/org.apache.ws.xmlschema/xmlschema-core/pom.xml
> │  -rw 2.0 fat0 bl defN 21-Sep-14 14:4

[jira] [Updated] (MNG-7710) Downgrade plexus-utils to 3.5.1

2023-03-01 Thread Olivier Lamy (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7710?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Olivier Lamy updated MNG-7710:
--
Summary: Downgrade plexus-utils to 3.5.1  (was: Downgrade plexus-utils to 
3.3.1)

> Downgrade plexus-utils to 3.5.1
> ---
>
> Key: MNG-7710
> URL: https://issues.apache.org/jira/browse/MNG-7710
> Project: Maven
>  Issue Type: Bug
>  Components: Dependencies
>Affects Versions: 3.9.0
>Reporter: Tamas Cservenak
>Assignee: Tamas Cservenak
>Priority: Major
> Fix For: 3.9.1
>
>
> Maven 3.9.0 was shipped with plexus-utils 3.4.2, downgrade it to 3.3.1, same 
> version used in Maven 3.8.7.
> plexus-utils 3.4.0+ introduced several breakages, such as:
>  * XML parsing not backward compatible 
> [https://github.com/codehaus-plexus/plexus-utils/issues/238]
>  * Merge behavior [https://github.com/codehaus-plexus/plexus-utils/issues/239]
> Downgrade until all the issues are discussed and resolved. This makes Maven 
> 3.9.1 use same p-u as Maven 3.8.7 did.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MRESOLVER-337) Real cause when artifact not found with repository filtering

2023-03-01 Thread Tamas Cservenak (Jira)


[ 
https://issues.apache.org/jira/browse/MRESOLVER-337?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695339#comment-17695339
 ] 

Tamas Cservenak commented on MRESOLVER-337:
---

A very good initiative. I have several issues with ArtifactResolutionException 
and it's "twin" 
DependencyResolutionException, especially around this, that it sometimes 
reports only one cause...
 
Given the class receive List the output should be more like 
this:
{noformat}
G1:A1:V1 (absent)  repo1: not found
   repo2: filtered out
   repo3: not found
G2:A2:V2 (absent): repo1: not found
...{noformat}
basically, the exception receives a list of ArtifactResult, where each result 
contains one or more exceptions, and many times error IS misleading. Just try 
to use 2 or more remote repositories (so define some plus), and it will say 
"not available from repo1"... was repo2 tried at all?

> Real cause when artifact not found with repository filtering
> 
>
> Key: MRESOLVER-337
> URL: https://issues.apache.org/jira/browse/MRESOLVER-337
> Project: Maven Resolver
>  Issue Type: Improvement
>Reporter: Slawomir Jaranowski
>Priority: Major
>
> One case from MRESOLVER-335.
> When we use remote repository filtering real cause for artifact not found may 
> be hidden.
> We can return first ArtifactNotFoundException which is not caused by 
> filtering.
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MWRAPPER-98) distributionType=script does not overwrite files

2023-03-01 Thread Wolfgang Knauf (Jira)


[ 
https://issues.apache.org/jira/browse/MWRAPPER-98?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695322#comment-17695322
 ] 

Wolfgang Knauf commented on MWRAPPER-98:


Could you close this issue? I am not able to do so or don't find the button ;)

> distributionType=script does not overwrite files
> 
>
> Key: MWRAPPER-98
> URL: https://issues.apache.org/jira/browse/MWRAPPER-98
> Project: Maven Wrapper
>  Issue Type: Bug
>  Components: Maven Wrapper Scripts
>Affects Versions: 3.1.1
>Reporter: Wolfgang Knauf
>Priority: Major
>
> Not sure whether this is a bug or a misunderstanding: This project 
> [https://github.com/arquillian/arquillian-extension-warp] contains a rather 
> old version of Maven Wrapper. So I tried to update it.
>  
> When using this command...
> {code:java}
> mvn wrapper:wrapper -Dtype=script{code}
> ...I would expect it to overwrite "mvnw.cmd" and "mvnw" with newer versions, 
> but the files are not modified. When deleting them before, it works. They are 
> not write protected.
>  
> This command...
> {noformat}
> mvn wrapper:wrapper -Dtype=bin{noformat}
> ...overwrites ".mvn/wrapper/maven-wrapper.jar" and 
> ".mvn/wrapper/maven-wrapper.properties", as expected.
> Also, I wonder how the old project managed to combine the distribution types 
> "bin", "source" and "script" in one package. I assume it is not possible to 
> combine all three types?



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MWRAPPER-98) distributionType=script does not overwrite files

2023-03-01 Thread Wolfgang Knauf (Jira)


[ 
https://issues.apache.org/jira/browse/MWRAPPER-98?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695321#comment-17695321
 ] 

Wolfgang Knauf commented on MWRAPPER-98:


Thanks, this works with 3.2.0-SNAPSHOT.

I can confirm the even "wrapper:wrapper" without "type" parameter updates the 
scripts AND the "maven-wrapper.jar". Only the "MavenWrapperDownloader.java" 
from the respository is deleted in this case.

> distributionType=script does not overwrite files
> 
>
> Key: MWRAPPER-98
> URL: https://issues.apache.org/jira/browse/MWRAPPER-98
> Project: Maven Wrapper
>  Issue Type: Bug
>  Components: Maven Wrapper Scripts
>Affects Versions: 3.1.1
>Reporter: Wolfgang Knauf
>Priority: Major
>
> Not sure whether this is a bug or a misunderstanding: This project 
> [https://github.com/arquillian/arquillian-extension-warp] contains a rather 
> old version of Maven Wrapper. So I tried to update it.
>  
> When using this command...
> {code:java}
> mvn wrapper:wrapper -Dtype=script{code}
> ...I would expect it to overwrite "mvnw.cmd" and "mvnw" with newer versions, 
> but the files are not modified. When deleting them before, it works. They are 
> not write protected.
>  
> This command...
> {noformat}
> mvn wrapper:wrapper -Dtype=bin{noformat}
> ...overwrites ".mvn/wrapper/maven-wrapper.jar" and 
> ".mvn/wrapper/maven-wrapper.properties", as expected.
> Also, I wonder how the old project managed to combine the distribution types 
> "bin", "source" and "script" in one package. I assume it is not possible to 
> combine all three types?



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MWRAPPER-98) distributionType=script does not overwrite files

2023-03-01 Thread Slawomir Jaranowski (Jira)


[ 
https://issues.apache.org/jira/browse/MWRAPPER-98?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695311#comment-17695311
 ] 

Slawomir Jaranowski commented on MWRAPPER-98:
-

Is it not duplicate of MWRAPPER-77 ?

Can you test with the latest snapshot version 3.2.0-SNAPSHOT?
https://maven.apache.org/guides/development/guide-testing-development-plugins.html

> distributionType=script does not overwrite files
> 
>
> Key: MWRAPPER-98
> URL: https://issues.apache.org/jira/browse/MWRAPPER-98
> Project: Maven Wrapper
>  Issue Type: Bug
>  Components: Maven Wrapper Scripts
>Affects Versions: 3.1.1
>Reporter: Wolfgang Knauf
>Priority: Major
>
> Not sure whether this is a bug or a misunderstanding: This project 
> [https://github.com/arquillian/arquillian-extension-warp] contains a rather 
> old version of Maven Wrapper. So I tried to update it.
>  
> When using this command...
> {code:java}
> mvn wrapper:wrapper -Dtype=script{code}
> ...I would expect it to overwrite "mvnw.cmd" and "mvnw" with newer versions, 
> but the files are not modified. When deleting them before, it works. They are 
> not write protected.
>  
> This command...
> {noformat}
> mvn wrapper:wrapper -Dtype=bin{noformat}
> ...overwrites ".mvn/wrapper/maven-wrapper.jar" and 
> ".mvn/wrapper/maven-wrapper.properties", as expected.
> Also, I wonder how the old project managed to combine the distribution types 
> "bin", "source" and "script" in one package. I assume it is not possible to 
> combine all three types?



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (MNG-7715) Upgrade to Maven Resolver 1.9.6

2023-03-01 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7715?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov updated MNG-7715:

Summary: Upgrade to Maven Resolver 1.9.6  (was: Upgrade to resolver 1.9.6)

> Upgrade to Maven Resolver 1.9.6
> ---
>
> Key: MNG-7715
> URL: https://issues.apache.org/jira/browse/MNG-7715
> Project: Maven
>  Issue Type: Dependency upgrade
>  Components: Dependencies
>Reporter: Tamas Cservenak
>Priority: Major
> Fix For: 4.0.0, 4.0.0-alpha-5, 3.9.1
>
>
> Update resolver to 1.9.6.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (DOXIA-699) Xhtml5Parser may emit sectionX() without sectionX_()

2023-03-01 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/DOXIA-699?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695310#comment-17695310
 ] 

Michael Osipov commented on DOXIA-699:
--

Will try to check this week.

> Xhtml5Parser may emit sectionX() without sectionX_()
> 
>
> Key: DOXIA-699
> URL: https://issues.apache.org/jira/browse/DOXIA-699
> Project: Maven Doxia
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 2.0.0-M5
>Reporter: Konrad Windszus
>Priority: Major
> Attachments: test.xhtml5
>
>
> Due to the logic in 
> https://github.com/apache/maven-doxia/blob/37173794270ee68894aac0e252dcb87545770952/doxia-core/src/main/java/org/apache/maven/doxia/parser/Xhtml5BaseParser.java#L631
>  there may calls of {{Sink.sectionX()}} without the according call of 
> {{Sink.sectionX_()}}.
> The attached XHTML5 being parsed and then converted back through the Sink to 
> XHTML5 is invalid (lacks one closing section tag).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MRESOLVER-337) Real cause when artifact not found with repository filtering

2023-03-01 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MRESOLVER-337?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695306#comment-17695306
 ] 

ASF GitHub Bot commented on MRESOLVER-337:
--

slawekjaranowski opened a new pull request, #262:
URL: https://github.com/apache/maven-resolver/pull/262

   When we use remote repository filtering real cause for artifact not found 
may be hidden.
   
   https://issues.apache.org/jira/browse/MRESOLVER-337




> Real cause when artifact not found with repository filtering
> 
>
> Key: MRESOLVER-337
> URL: https://issues.apache.org/jira/browse/MRESOLVER-337
> Project: Maven Resolver
>  Issue Type: Improvement
>Reporter: Slawomir Jaranowski
>Priority: Major
>
> One case from MRESOLVER-335.
> When we use remote repository filtering real cause for artifact not found may 
> be hidden.
> We can return first ArtifactNotFoundException which is not caused by 
> filtering.
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [maven-resolver] slawekjaranowski opened a new pull request, #262: [MRESOLVER-337] Real cause when artifact not found with repository filtering

2023-03-01 Thread via GitHub


slawekjaranowski opened a new pull request, #262:
URL: https://github.com/apache/maven-resolver/pull/262

   When we use remote repository filtering real cause for artifact not found 
may be hidden.
   
   https://issues.apache.org/jira/browse/MRESOLVER-337


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Updated] (MRESOLVER-335) Better resolver errors for Artifact Not Found

2023-03-01 Thread Slawomir Jaranowski (Jira)


 [ 
https://issues.apache.org/jira/browse/MRESOLVER-335?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Slawomir Jaranowski updated MRESOLVER-335:
--
Description: 
When we have many remote repositories only first {{ArtifactNotFoundException}} 
is returned, all checks for other repositories are hidden.

When we have errors for many artifacts in one request - list of problematic 
artifacts is present in message and only first exception for one artifact.

Next case is with remote repository filtering, checks for remote repository 
according to filtering also produce {{ArtifactNotFoundException}}, this is done 
at the beginning so exception is first on list.

In logs and exception we have:

{code}
Downloading from my-mirror: 
https://artifactory.../artifactory/remote-repos/org/apache/commons/commons-lang3/4.4.4/commons-lang3-4.4.4.pom
[WARNING] The POM for org.apache.commons:commons-lang3:jar:4.4.4 is missing, no 
dependency information available
Downloading from my-mirror: 
https://artifactory.../artifactory/remote-repos/org/apache/commons/commons-lang3/4.4.4/commons-lang3-4.4.4.jar

[ERROR] Failed to execute goal on project maven-3.9: Could not resolve 
dependencies for project org.test:maven-3.9:jar:1.0.0-SNAPSHOT: Prefix org NOT 
allowed from mayrepo (https://artifactory.../artifactory/myrepo/, default, 
releases+snapshots) 
{code}

As we see artefact was not found in {{my-mirror}}, but in error report we have 
information about not allowed prefixes - it can be confusing



  was:
When we have many remote repositories only first {{ArtifactNotFoundException}} 
is returned, all checks for other repositories are hidden.

Next case is with remote repository filtering, checks for remote repository 
according to filtering also produce {{ArtifactNotFoundException}}, this is done 
at the beginning so exception is first on list.

In logs and exception we have:

{code}
Downloading from my-mirror: 
https://artifactory.../artifactory/remote-repos/org/apache/commons/commons-lang3/4.4.4/commons-lang3-4.4.4.pom
[WARNING] The POM for org.apache.commons:commons-lang3:jar:4.4.4 is missing, no 
dependency information available
Downloading from my-mirror: 
https://artifactory.../artifactory/remote-repos/org/apache/commons/commons-lang3/4.4.4/commons-lang3-4.4.4.jar

[ERROR] Failed to execute goal on project maven-3.9: Could not resolve 
dependencies for project org.test:maven-3.9:jar:1.0.0-SNAPSHOT: Prefix org NOT 
allowed from mayrepo (https://artifactory.../artifactory/myrepo/, default, 
releases+snapshots) 
{code}

As we see artefact was not found in {{my-mirror}}, but in error report we have 
information about not allowed prefixes - it can be confusing




> Better resolver errors for Artifact Not Found
> -
>
> Key: MRESOLVER-335
> URL: https://issues.apache.org/jira/browse/MRESOLVER-335
> Project: Maven Resolver
>  Issue Type: Improvement
>Reporter: Slawomir Jaranowski
>Priority: Major
>
> When we have many remote repositories only first 
> {{ArtifactNotFoundException}} is returned, all checks for other repositories 
> are hidden.
> When we have errors for many artifacts in one request - list of problematic 
> artifacts is present in message and only first exception for one artifact.
> Next case is with remote repository filtering, checks for remote repository 
> according to filtering also produce {{ArtifactNotFoundException}}, this is 
> done at the beginning so exception is first on list.
> In logs and exception we have:
> {code}
> Downloading from my-mirror: 
> https://artifactory.../artifactory/remote-repos/org/apache/commons/commons-lang3/4.4.4/commons-lang3-4.4.4.pom
> [WARNING] The POM for org.apache.commons:commons-lang3:jar:4.4.4 is missing, 
> no dependency information available
> Downloading from my-mirror: 
> https://artifactory.../artifactory/remote-repos/org/apache/commons/commons-lang3/4.4.4/commons-lang3-4.4.4.jar
> [ERROR] Failed to execute goal on project maven-3.9: Could not resolve 
> dependencies for project org.test:maven-3.9:jar:1.0.0-SNAPSHOT: Prefix org 
> NOT allowed from mayrepo (https://artifactory.../artifactory/myrepo/, 
> default, releases+snapshots) 
> {code}
> As we see artefact was not found in {{my-mirror}}, but in error report we 
> have information about not allowed prefixes - it can be confusing



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [maven-compiler-plugin] psiroky commented on pull request #180: [MCOMPILER-391] Use dep mgmt when resolving annotation processors and their deps

2023-03-01 Thread via GitHub


psiroky commented on PR #180:
URL: 
https://github.com/apache/maven-compiler-plugin/pull/180#issuecomment-1450781593

   I ran a quick performance test using the Quarkus repo (1k modules, where 500 
of them are using annotation processors) and I could not really spot any 
noticeable difference in the overall build time. I am sure there is more "work" 
being done (e.g. search those dependency management lists), but it seems it 
gets lost in the rest of the work being done as part of the build. I ran the 
following command:
   ```
   mvn387 clean install -DskipTests -Dversion.enforcer.plugin=3.2.1 
-Dversion.compiler.plugin=3.11.1-SNAPSHOT -T8
   ```
   with three different configurations: 
* default (no dependency management usage) - option 1) above
* using dep mgmt to only get the top-level versions - option 3) above
* using dep mgmt to get the top-level versions and also to resolve 
transitive dependencies - option 4)
   
   In all cases I got build times ranging from 01:49min to 01:52min. No 
noticeable difference overall.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Created] (MRESOLVER-337) Real cause when artifact not found with repository filtering

2023-03-01 Thread Slawomir Jaranowski (Jira)
Slawomir Jaranowski created MRESOLVER-337:
-

 Summary: Real cause when artifact not found with repository 
filtering
 Key: MRESOLVER-337
 URL: https://issues.apache.org/jira/browse/MRESOLVER-337
 Project: Maven Resolver
  Issue Type: Improvement
Reporter: Slawomir Jaranowski


One case from MRESOLVER-335.

When we use remote repository filtering real cause for artifact not found may 
be hidden.
We can return first ArtifactNotFoundException which is not caused by filtering.

 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Created] (MWRAPPER-98) distributionType=script does not overwrite files

2023-03-01 Thread Wolfgang Knauf (Jira)
Wolfgang Knauf created MWRAPPER-98:
--

 Summary: distributionType=script does not overwrite files
 Key: MWRAPPER-98
 URL: https://issues.apache.org/jira/browse/MWRAPPER-98
 Project: Maven Wrapper
  Issue Type: Bug
  Components: Maven Wrapper Scripts
Affects Versions: 3.1.1
Reporter: Wolfgang Knauf


Not sure whether this is a bug or a misunderstanding: This project 
[https://github.com/arquillian/arquillian-extension-warp] contains a rather old 
version of Maven Wrapper. So I tried to update it.

 

When using this command...
{code:java}
mvn wrapper:wrapper -Dtype=script{code}
...I would expect it to overwrite "mvnw.cmd" and "mvnw" with newer versions, 
but the files are not modified. When deleting them before, it works. They are 
not write protected.

 

This command...
{noformat}
mvn wrapper:wrapper -Dtype=bin{noformat}
...overwrites ".mvn/wrapper/maven-wrapper.jar" and 
".mvn/wrapper/maven-wrapper.properties", as expected.

Also, I wonder how the old project managed to combine the distribution types 
"bin", "source" and "script" in one package. I assume it is not possible to 
combine all three types?



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (DOXIA-699) Xhtml5Parser may emit sectionX() without sectionX_()

2023-03-01 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/DOXIA-699?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695282#comment-17695282
 ] 

ASF GitHub Bot commented on DOXIA-699:
--

kwin commented on PR #152:
URL: https://github.com/apache/maven-doxia/pull/152#issuecomment-1450744459

   @michael-o Can you have a look why this test fails?




> Xhtml5Parser may emit sectionX() without sectionX_()
> 
>
> Key: DOXIA-699
> URL: https://issues.apache.org/jira/browse/DOXIA-699
> Project: Maven Doxia
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 2.0.0-M5
>Reporter: Konrad Windszus
>Priority: Major
> Attachments: test.xhtml5
>
>
> Due to the logic in 
> https://github.com/apache/maven-doxia/blob/37173794270ee68894aac0e252dcb87545770952/doxia-core/src/main/java/org/apache/maven/doxia/parser/Xhtml5BaseParser.java#L631
>  there may calls of {{Sink.sectionX()}} without the according call of 
> {{Sink.sectionX_()}}.
> The attached XHTML5 being parsed and then converted back through the Sink to 
> XHTML5 is invalid (lacks one closing section tag).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [maven-doxia] kwin commented on pull request #152: [DOXIA-699] Add failing test case

2023-03-01 Thread via GitHub


kwin commented on PR #152:
URL: https://github.com/apache/maven-doxia/pull/152#issuecomment-1450744459

   @michael-o Can you have a look why this test fails?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MNG-7715) Upgrade to resolver 1.9.6

2023-03-01 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7715?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695274#comment-17695274
 ] 

ASF GitHub Bot commented on MNG-7715:
-

cstamas opened a new pull request, #1025:
URL: https://github.com/apache/maven/pull/1025

   Update and apply some adjustments to UTs as
   error message did change.
   
   ---
   
   https://issues.apache.org/jira/browse/MNG-7715




> Upgrade to resolver 1.9.6
> -
>
> Key: MNG-7715
> URL: https://issues.apache.org/jira/browse/MNG-7715
> Project: Maven
>  Issue Type: Dependency upgrade
>  Components: Dependencies
>Reporter: Tamas Cservenak
>Priority: Major
> Fix For: 4.0.0, 4.0.0-alpha-5, 3.9.1
>
>
> Update resolver to 1.9.6.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [maven] cstamas opened a new pull request, #1025: [MNG-7715] Update to resolver 1.9.6

2023-03-01 Thread via GitHub


cstamas opened a new pull request, #1025:
URL: https://github.com/apache/maven/pull/1025

   Update and apply some adjustments to UTs as
   error message did change.
   
   ---
   
   https://issues.apache.org/jira/browse/MNG-7715


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Updated] (MNG-7715) Upgrade to resolver 1.9.6

2023-03-01 Thread Tamas Cservenak (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7715?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tamas Cservenak updated MNG-7715:
-
Fix Version/s: 4.0.0
   4.0.0-alpha-5

> Upgrade to resolver 1.9.6
> -
>
> Key: MNG-7715
> URL: https://issues.apache.org/jira/browse/MNG-7715
> Project: Maven
>  Issue Type: Dependency upgrade
>  Components: Dependencies
>Reporter: Tamas Cservenak
>Priority: Major
> Fix For: 4.0.0, 4.0.0-alpha-5, 3.9.1
>
>
> Update resolver to 1.9.6.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Created] (MNG-7715) Upgrade to resolver 1.9.6

2023-03-01 Thread Tamas Cservenak (Jira)
Tamas Cservenak created MNG-7715:


 Summary: Upgrade to resolver 1.9.6
 Key: MNG-7715
 URL: https://issues.apache.org/jira/browse/MNG-7715
 Project: Maven
  Issue Type: Dependency upgrade
  Components: Dependencies
Reporter: Tamas Cservenak
 Fix For: 3.9.1


Update resolver to 1.9.6.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (DOXIA-699) Xhtml5Parser may emit sectionX() without sectionX_()

2023-03-01 Thread Konrad Windszus (Jira)


 [ 
https://issues.apache.org/jira/browse/DOXIA-699?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Konrad Windszus updated DOXIA-699:
--
Description: 
Due to the logic in 
https://github.com/apache/maven-doxia/blob/37173794270ee68894aac0e252dcb87545770952/doxia-core/src/main/java/org/apache/maven/doxia/parser/Xhtml5BaseParser.java#L631
 there may calls of {{Sink.sectionX()}} without the according call of 
{{Sink.sectionX_()}}.

The attached XHTML5 being parsed and then converted back through the Sink to 
XHTML5 is invalid (lacks one closing section tag).

  was:
Due to the logic in 
https://github.com/apache/maven-doxia/blob/37173794270ee68894aac0e252dcb87545770952/doxia-core/src/main/java/org/apache/maven/doxia/parser/Xhtml5BaseParser.java#L631
 there may be opening {{section}} tags without the according closing ones.

The attached XHTML5 being parsed and then converted back through the Sink to 
XHTML5 is invalid (lacks one closing section tag).


> Xhtml5Parser may emit sectionX() without sectionX_()
> 
>
> Key: DOXIA-699
> URL: https://issues.apache.org/jira/browse/DOXIA-699
> Project: Maven Doxia
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 2.0.0-M5
>Reporter: Konrad Windszus
>Priority: Major
> Attachments: test.xhtml5
>
>
> Due to the logic in 
> https://github.com/apache/maven-doxia/blob/37173794270ee68894aac0e252dcb87545770952/doxia-core/src/main/java/org/apache/maven/doxia/parser/Xhtml5BaseParser.java#L631
>  there may calls of {{Sink.sectionX()}} without the according call of 
> {{Sink.sectionX_()}}.
> The attached XHTML5 being parsed and then converted back through the Sink to 
> XHTML5 is invalid (lacks one closing section tag).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (DOXIA-699) Xhtml5Parser may emit sectionX() without sectionX_()

2023-03-01 Thread Konrad Windszus (Jira)


 [ 
https://issues.apache.org/jira/browse/DOXIA-699?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Konrad Windszus updated DOXIA-699:
--
Summary: Xhtml5Parser may emit sectionX() without sectionX_()  (was: 
Xhtml5Sink may generate invalid XML)

> Xhtml5Parser may emit sectionX() without sectionX_()
> 
>
> Key: DOXIA-699
> URL: https://issues.apache.org/jira/browse/DOXIA-699
> Project: Maven Doxia
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 2.0.0-M5
>Reporter: Konrad Windszus
>Priority: Major
> Attachments: test.xhtml5
>
>
> Due to the logic in 
> https://github.com/apache/maven-doxia/blob/37173794270ee68894aac0e252dcb87545770952/doxia-core/src/main/java/org/apache/maven/doxia/parser/Xhtml5BaseParser.java#L631
>  there may be opening {{section}} tags without the according closing ones.
> The attached XHTML5 being parsed and then converted back through the Sink to 
> XHTML5 is invalid (lacks one closing section tag).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (DOXIA-699) Xhtml5Sink may generate invalid XML

2023-03-01 Thread Konrad Windszus (Jira)


 [ 
https://issues.apache.org/jira/browse/DOXIA-699?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Konrad Windszus updated DOXIA-699:
--
Attachment: test.xhtml5

> Xhtml5Sink may generate invalid XML
> ---
>
> Key: DOXIA-699
> URL: https://issues.apache.org/jira/browse/DOXIA-699
> Project: Maven Doxia
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 2.0.0-M5
>Reporter: Konrad Windszus
>Priority: Major
> Attachments: test.xhtml5
>
>
> Due to the logic in 
> https://github.com/apache/maven-doxia/blob/37173794270ee68894aac0e252dcb87545770952/doxia-core/src/main/java/org/apache/maven/doxia/parser/Xhtml5BaseParser.java#L631
>  there may be opening {{section}} tags without the according closing ones.
> The attached XHTML5 being parsed and then converted back through the Sink to 
> XHTML5 is invalid (lacks one closing section tag).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Created] (DOXIA-699) Xhtml5Sink may generate invalid XML

2023-03-01 Thread Konrad Windszus (Jira)
Konrad Windszus created DOXIA-699:
-

 Summary: Xhtml5Sink may generate invalid XML
 Key: DOXIA-699
 URL: https://issues.apache.org/jira/browse/DOXIA-699
 Project: Maven Doxia
  Issue Type: Bug
  Components: Core
Affects Versions: 2.0.0-M5
Reporter: Konrad Windszus


Due to the logic in 
https://github.com/apache/maven-doxia/blob/37173794270ee68894aac0e252dcb87545770952/doxia-core/src/main/java/org/apache/maven/doxia/parser/Xhtml5BaseParser.java#L631
 there may be opening {{section}} tags without the according closing ones.

The attached XHTML5 being parsed and then converted back through the Sink to 
XHTML5 is invalid (lacks one closing section tag).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [maven-mvnd] oehme commented on a diff in pull request #797: Add property to disable model caching

2023-03-01 Thread via GitHub


oehme commented on code in PR #797:
URL: https://github.com/apache/maven-mvnd/pull/797#discussion_r1122150631


##
daemon/src/main/java/org/apache/maven/project/SnapshotModelCacheFactory.java:
##
@@ -45,6 +45,9 @@ public SnapshotModelCacheFactory(DefaultModelCacheFactory 
factory) {
 
 @Override
 public ModelCache createCache(RepositorySystemSession session) {
-return new SnapshotModelCache(globalCache, 
factory.createCache(session));
+boolean enableModelCache = 
Boolean.parseBoolean(System.getProperty("mvnd.modelCache", "true"));

Review Comment:
   Sure, I'll do that



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MNG-7705) Sporadic failures on multiple builds sharing the same local repo when writing the .lastUpdated file

2023-03-01 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7705?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695243#comment-17695243
 ] 

Michael Osipov commented on MNG-7705:
-

For Maven, it is 
https://maven.apache.org/resolver/maven-resolver-named-locks-redisson/index.html
 needs revision though. 

> Sporadic failures on multiple builds sharing the same local repo when writing 
> the .lastUpdated file
> ---
>
> Key: MNG-7705
> URL: https://issues.apache.org/jira/browse/MNG-7705
> Project: Maven
>  Issue Type: Bug
>Affects Versions: 3.9.0
> Environment: Apache Maven 3.9.0 
> (9b58d2bad23a66be161c4664ef21ce219c2c8584)
> Maven home: /data00/bamboo/maven/maven-next
> Java version: 1.8.0_362, vendor: Red Hat, Inc., runtime: 
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.x86_64/jre
> Default locale: en_CA, platform encoding: ISO-8859-1
> OS name: "linux", version: "4.18.0-193.el8.x86_64", arch: "amd64", family: 
> "unix"
>Reporter: Jim Sellers
>Priority: Minor
> Attachments: 2023-02-28_failure.zip, MNG-7705-2023-02-27.zip, 
> MNG-7705.zip, MNG-7705_strace_2023-02-27.zip, 
> apache-maven-3.9.1-SNAPSHOT-bin.tar.gz, maven-resolver-util-1.9.6-SNAPSHOT.jar
>
>
> On a CI server, we have multiple builds running on the same host and sharing 
> the same repo.
> While testing 3.9.0, I started to see a NIO exception for the 
> {{.lastUpdated}} file. This has worked fine for years, all the way up to 
> 3.8.7.
> If you re-run the build, it will work. I think that it's just a collision 
> between the different processes.
> {code:title=example command}
> mvn --batch-mode dependency:sources dependency:resolve -Dclassifier=javadoc
> # this uses dependency:3.5.0:sources
> {code}
> {code:title=stracktrace}
> [WARNING] Failed to write tracking file 
> '/home/bamboo/.m2/repository/io/smallrye/config/smallrye-config/2.3.0/smallrye-config-2.3.0-javadoc.jar.lastUpdated'
>     java.nio.file.NoSuchFileException: 
> /home/bamboo/.m2/repository/io/smallrye/config/smallrye-config/2.3.0/smallrye-config-2.3.0-javadoc.jar.lastUpdated
>         at sun.nio.fs.UnixException.translateToIOException 
> (UnixException.java:86)
>         at sun.nio.fs.UnixException.rethrowAsIOException 
> (UnixException.java:102)
>         at sun.nio.fs.UnixException.rethrowAsIOException 
> (UnixException.java:107)
>         at sun.nio.fs.UnixFileSystemProvider.newByteChannel 
> (UnixFileSystemProvider.java:214)
>         at java.nio.file.Files.newByteChannel (Files.java:361)
>         at java.nio.file.Files.newByteChannel (Files.java:407)
>         at java.nio.file.spi.FileSystemProvider.newInputStream 
> (FileSystemProvider.java:384)
>         at java.nio.file.Files.newInputStream (Files.java:152)
>         at org.eclipse.aether.internal.impl.DefaultTrackingFileManager.update 
> (DefaultTrackingFileManager.java:90)
>         at org.eclipse.aether.internal.impl.DefaultUpdateCheckManager.write 
> (DefaultUpdateCheckManager.java:604)
>         at 
> org.eclipse.aether.internal.impl.DefaultUpdateCheckManager.touchArtifact 
> (DefaultUpdateCheckManager.java:539)
>         at 
> org.eclipse.aether.internal.impl.DefaultArtifactResolver.evaluateDownloads 
> (DefaultArtifactResolver.java:701)
>         at 
> org.eclipse.aether.internal.impl.DefaultArtifactResolver.performDownloads 
> (DefaultArtifactResolver.java:592)
>         at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve 
> (DefaultArtifactResolver.java:478)
>         at 
> org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifacts 
> (DefaultArtifactResolver.java:278)
>         at 
> org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifact 
> (DefaultArtifactResolver.java:255)
>         at 
> org.eclipse.aether.internal.impl.DefaultRepositorySystem.resolveArtifact 
> (DefaultRepositorySystem.java:296)
>         at 
> org.apache.maven.shared.transfer.artifact.resolve.internal.Maven31ArtifactResolver.resolveArtifact
>  (Maven31ArtifactResolver.java:97)
>         at 
> org.apache.maven.shared.transfer.artifact.resolve.internal.Maven31ArtifactResolver.resolveArtifact
>  (Maven31ArtifactResolver.java:78)
>         at 
> org.apache.maven.shared.transfer.artifact.resolve.internal.DefaultArtifactResolver.resolveArtifact
>  (DefaultArtifactResolver.java:70)
>         at 
> org.apache.maven.plugins.dependency.fromDependencies.AbstractDependencyFilterMojo.resolve
>  (AbstractDependencyFilterMojo.java:464)
>         at 
> org.apache.maven.plugins.dependency.fromDependencies.AbstractDependencyFilterMojo.getClassifierTranslatedDependencies
>  (AbstractDependencyFilterMojo.java:408)
>         at 
> org.apache.maven.plugins.dependency.fromDependencies.AbstractDependencyFilterMojo.getDependencySets
>  (AbstractDep

[jira] [Commented] (MNG-7705) Sporadic failures on multiple builds sharing the same local repo when writing the .lastUpdated file

2023-03-01 Thread Jim Sellers (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7705?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695237#comment-17695237
 ] 

Jim Sellers commented on MNG-7705:
--

[~michael-o] I'm unfamiliar with Redisson. Is there a setup doc somewhere this 
is mentioned for debugging or anything?

I can also set an env to use a nightly snapshot to see if I can reproduce this 
if that helps. Would it be best to use the 3.9.x version then?

> Sporadic failures on multiple builds sharing the same local repo when writing 
> the .lastUpdated file
> ---
>
> Key: MNG-7705
> URL: https://issues.apache.org/jira/browse/MNG-7705
> Project: Maven
>  Issue Type: Bug
>Affects Versions: 3.9.0
> Environment: Apache Maven 3.9.0 
> (9b58d2bad23a66be161c4664ef21ce219c2c8584)
> Maven home: /data00/bamboo/maven/maven-next
> Java version: 1.8.0_362, vendor: Red Hat, Inc., runtime: 
> /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.x86_64/jre
> Default locale: en_CA, platform encoding: ISO-8859-1
> OS name: "linux", version: "4.18.0-193.el8.x86_64", arch: "amd64", family: 
> "unix"
>Reporter: Jim Sellers
>Priority: Minor
> Attachments: 2023-02-28_failure.zip, MNG-7705-2023-02-27.zip, 
> MNG-7705.zip, MNG-7705_strace_2023-02-27.zip, 
> apache-maven-3.9.1-SNAPSHOT-bin.tar.gz, maven-resolver-util-1.9.6-SNAPSHOT.jar
>
>
> On a CI server, we have multiple builds running on the same host and sharing 
> the same repo.
> While testing 3.9.0, I started to see a NIO exception for the 
> {{.lastUpdated}} file. This has worked fine for years, all the way up to 
> 3.8.7.
> If you re-run the build, it will work. I think that it's just a collision 
> between the different processes.
> {code:title=example command}
> mvn --batch-mode dependency:sources dependency:resolve -Dclassifier=javadoc
> # this uses dependency:3.5.0:sources
> {code}
> {code:title=stracktrace}
> [WARNING] Failed to write tracking file 
> '/home/bamboo/.m2/repository/io/smallrye/config/smallrye-config/2.3.0/smallrye-config-2.3.0-javadoc.jar.lastUpdated'
>     java.nio.file.NoSuchFileException: 
> /home/bamboo/.m2/repository/io/smallrye/config/smallrye-config/2.3.0/smallrye-config-2.3.0-javadoc.jar.lastUpdated
>         at sun.nio.fs.UnixException.translateToIOException 
> (UnixException.java:86)
>         at sun.nio.fs.UnixException.rethrowAsIOException 
> (UnixException.java:102)
>         at sun.nio.fs.UnixException.rethrowAsIOException 
> (UnixException.java:107)
>         at sun.nio.fs.UnixFileSystemProvider.newByteChannel 
> (UnixFileSystemProvider.java:214)
>         at java.nio.file.Files.newByteChannel (Files.java:361)
>         at java.nio.file.Files.newByteChannel (Files.java:407)
>         at java.nio.file.spi.FileSystemProvider.newInputStream 
> (FileSystemProvider.java:384)
>         at java.nio.file.Files.newInputStream (Files.java:152)
>         at org.eclipse.aether.internal.impl.DefaultTrackingFileManager.update 
> (DefaultTrackingFileManager.java:90)
>         at org.eclipse.aether.internal.impl.DefaultUpdateCheckManager.write 
> (DefaultUpdateCheckManager.java:604)
>         at 
> org.eclipse.aether.internal.impl.DefaultUpdateCheckManager.touchArtifact 
> (DefaultUpdateCheckManager.java:539)
>         at 
> org.eclipse.aether.internal.impl.DefaultArtifactResolver.evaluateDownloads 
> (DefaultArtifactResolver.java:701)
>         at 
> org.eclipse.aether.internal.impl.DefaultArtifactResolver.performDownloads 
> (DefaultArtifactResolver.java:592)
>         at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve 
> (DefaultArtifactResolver.java:478)
>         at 
> org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifacts 
> (DefaultArtifactResolver.java:278)
>         at 
> org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifact 
> (DefaultArtifactResolver.java:255)
>         at 
> org.eclipse.aether.internal.impl.DefaultRepositorySystem.resolveArtifact 
> (DefaultRepositorySystem.java:296)
>         at 
> org.apache.maven.shared.transfer.artifact.resolve.internal.Maven31ArtifactResolver.resolveArtifact
>  (Maven31ArtifactResolver.java:97)
>         at 
> org.apache.maven.shared.transfer.artifact.resolve.internal.Maven31ArtifactResolver.resolveArtifact
>  (Maven31ArtifactResolver.java:78)
>         at 
> org.apache.maven.shared.transfer.artifact.resolve.internal.DefaultArtifactResolver.resolveArtifact
>  (DefaultArtifactResolver.java:70)
>         at 
> org.apache.maven.plugins.dependency.fromDependencies.AbstractDependencyFilterMojo.resolve
>  (AbstractDependencyFilterMojo.java:464)
>         at 
> org.apache.maven.plugins.dependency.fromDependencies.AbstractDependencyFilterMojo.getClassifierTranslatedDependencies
>  (AbstractDependencyFilterMojo.java:40

[GitHub] [maven-mvnd] ppalaga commented on a diff in pull request #797: Add property to disable model caching

2023-03-01 Thread via GitHub


ppalaga commented on code in PR #797:
URL: https://github.com/apache/maven-mvnd/pull/797#discussion_r1122109132


##
daemon/src/main/java/org/apache/maven/project/SnapshotModelCacheFactory.java:
##
@@ -45,6 +45,9 @@ public SnapshotModelCacheFactory(DefaultModelCacheFactory 
factory) {
 
 @Override
 public ModelCache createCache(RepositorySystemSession session) {
-return new SnapshotModelCache(globalCache, 
factory.createCache(session));
+boolean enableModelCache = 
Boolean.parseBoolean(System.getProperty("mvnd.modelCache", "true"));

Review Comment:
   Could you please add the new property to 
`org.mvndaemon.mvnd.common.Environment` and add a bit of JavaDoc describing 
what it is doing?
   
   Naming: Looking at other boolean properties, we have in 
`org.mvndaemon.mvnd.common.Environment`, perhaps the `mvnd.noModelCache` style 
would suit best here. I am not especially happy about negating names, but we 
already have a couple of those, and they are easier to use (given the default 
is with model cache enabled) from command line: `-Dmvnd.noModelCache` vs. 
`-Dmvnd.modelCache=false`. It is less typing. What do others think?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [maven-mvnd] ppalaga commented on pull request #797: Add property to disable model caching

2023-03-01 Thread via GitHub


ppalaga commented on PR #797:
URL: https://github.com/apache/maven-mvnd/pull/797#issuecomment-1450557202

   > you have a property for reloading certain class realms (e.g. for plugins 
that hold static state). But nothing for the model cache.
   
   Thanks for explaining @oehme! That's exactly, what my foggy recollection was 
about. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Updated] (MRESOLVER-327) Make tranport-http obey system properties regarding proxy settings

2023-03-01 Thread Tamas Cservenak (Jira)


 [ 
https://issues.apache.org/jira/browse/MRESOLVER-327?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tamas Cservenak updated MRESOLVER-327:
--
Fix Version/s: (was: 1.9.6)

> Make tranport-http obey system properties regarding proxy settings
> --
>
> Key: MRESOLVER-327
> URL: https://issues.apache.org/jira/browse/MRESOLVER-327
> Project: Maven Resolver
>  Issue Type: Improvement
>  Components: Resolver
>Reporter: Tamas Cservenak
>Priority: Major
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [maven-mvnd] oehme commented on pull request #797: Add property to disable model caching

2023-03-01 Thread via GitHub


oehme commented on PR #797:
URL: https://github.com/apache/maven-mvnd/pull/797#issuecomment-1450502370

   @ppalaga you have a property for[ reloading certain class 
realms](https://github.com/apache/maven-mvnd/blob/b97f585c0915c6ec5525f752b575c40e09ce297c/common/src/main/java/org/mvndaemon/mvnd/common/Environment.java#L288)
 (e.g. for plugins that hold static state). But nothing for the model cache.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MNG-7710) Downgrade plexus-utils to 3.3.1

2023-03-01 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7710?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695211#comment-17695211
 ] 

ASF GitHub Bot commented on MNG-7710:
-

cstamas opened a new pull request, #1024:
URL: https://github.com/apache/maven/pull/1024

   (when the fixed release is done, this is just a placeholder)
   
   ---
   
   https://issues.apache.org/jira/browse/MNG-7710




> Downgrade plexus-utils to 3.3.1
> ---
>
> Key: MNG-7710
> URL: https://issues.apache.org/jira/browse/MNG-7710
> Project: Maven
>  Issue Type: Bug
>  Components: Dependencies
>Affects Versions: 3.9.0
>Reporter: Tamas Cservenak
>Assignee: Tamas Cservenak
>Priority: Major
> Fix For: 3.9.1
>
>
> Maven 3.9.0 was shipped with plexus-utils 3.4.2, downgrade it to 3.3.1, same 
> version used in Maven 3.8.7.
> plexus-utils 3.4.0+ introduced several breakages, such as:
>  * XML parsing not backward compatible 
> [https://github.com/codehaus-plexus/plexus-utils/issues/238]
>  * Merge behavior [https://github.com/codehaus-plexus/plexus-utils/issues/239]
> Downgrade until all the issues are discussed and resolved. This makes Maven 
> 3.9.1 use same p-u as Maven 3.8.7 did.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [maven] cstamas opened a new pull request, #1024: [maven-3.9.x][MNG-7710] Upgrade plexus-utils

2023-03-01 Thread via GitHub


cstamas opened a new pull request, #1024:
URL: https://github.com/apache/maven/pull/1024

   (when the fixed release is done, this is just a placeholder)
   
   ---
   
   https://issues.apache.org/jira/browse/MNG-7710


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Assigned] (MNG-7709) plexus-utils upgrade changes the way configuration is parsed

2023-03-01 Thread Guillaume Nodet (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Guillaume Nodet reassigned MNG-7709:


Assignee: Guillaume Nodet  (was: Tamas Cservenak)

> plexus-utils upgrade changes the way configuration is parsed
> 
>
> Key: MNG-7709
> URL: https://issues.apache.org/jira/browse/MNG-7709
> Project: Maven
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 3.9.0, 4.0.0-alpha-4
>Reporter: Jonathan Haber
>Assignee: Guillaume Nodet
>Priority: Minor
> Fix For: 3.9.1
>
>
> While upgrading to Maven 3.9.0, we noticed a change in the way some of our 
> pom configuration is parsed. This seems to be a very rare edge case that we 
> can work around, but I wanted to flag it in case the root cause turns out to 
> have more widespread impact. I put together a small repo that demonstrates 
> the issue:
> [https://github.com/jhaber/maven-configuration-reproducer] 
> Summary of reproducer:
> * The parent module configures the shade plugin with an outputFile parameter: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/pom.xml#L16-L23]
> * The child module inherits from parent and resets the shade plugin 
> configuration (using ): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L20-L25]
> * However, child module also configures shade plugin inside a profile (adding 
> an unrelated finalName parameter): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L41-L47]
> * The nested-child module inherits from child module. It doesn't contain any 
> configuration, but it activates the profile: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/tree/main/child/nested-child]
>  
> It is expected that child and nested-child do not inherit the outputFile 
> parameter, because the shade configuration is removed in child pom.xml. This 
> works in Maven 3.8.7, but in Maven 3.9.0 the nested-child module does inherit 
> the outputFile parameter. I assume this has something to do with the profile 
> getting activated and causing the configuration to not get merged properly, 
> but I'm not sure.
> I also built a custom version of Maven 3.9.0 which uses plexus-utils 3.3.1, 
> and the behavior is back to normal. So I think the behavior change is in 
> plexus-utils (although it could be that Maven is "mis-using" plexus-utils, 
> and the plexus-utils change is technically correct). I tested with a few 
> different plexus-utils versions and it seems like the behavior change was 
> introduced in plexus-utils 3.4.0 (I also tested with plexus-utils 3.5.0 and 
> this issue is not fixed).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Comment Edited] (MNG-7709) plexus-utils upgrade changes the way configuration is parsed

2023-03-01 Thread Guillaume Nodet (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7709?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695204#comment-17695204
 ] 

Guillaume Nodet edited comment on MNG-7709 at 3/1/23 4:55 PM:
--

It should be fixed by https://github.com/codehaus-plexus/plexus-utils/pull/241 
for 3.9.x and https://github.com/apache/maven/pull/1023 for 4.x


was (Author: gnt):
It should be fixed by https://github.com/codehaus-plexus/plexus-utils/pull/241 
for 3.9.x

> plexus-utils upgrade changes the way configuration is parsed
> 
>
> Key: MNG-7709
> URL: https://issues.apache.org/jira/browse/MNG-7709
> Project: Maven
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 3.9.0, 4.0.0-alpha-4
>Reporter: Jonathan Haber
>Assignee: Tamas Cservenak
>Priority: Minor
> Fix For: 3.9.1
>
>
> While upgrading to Maven 3.9.0, we noticed a change in the way some of our 
> pom configuration is parsed. This seems to be a very rare edge case that we 
> can work around, but I wanted to flag it in case the root cause turns out to 
> have more widespread impact. I put together a small repo that demonstrates 
> the issue:
> [https://github.com/jhaber/maven-configuration-reproducer] 
> Summary of reproducer:
> * The parent module configures the shade plugin with an outputFile parameter: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/pom.xml#L16-L23]
> * The child module inherits from parent and resets the shade plugin 
> configuration (using ): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L20-L25]
> * However, child module also configures shade plugin inside a profile (adding 
> an unrelated finalName parameter): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L41-L47]
> * The nested-child module inherits from child module. It doesn't contain any 
> configuration, but it activates the profile: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/tree/main/child/nested-child]
>  
> It is expected that child and nested-child do not inherit the outputFile 
> parameter, because the shade configuration is removed in child pom.xml. This 
> works in Maven 3.8.7, but in Maven 3.9.0 the nested-child module does inherit 
> the outputFile parameter. I assume this has something to do with the profile 
> getting activated and causing the configuration to not get merged properly, 
> but I'm not sure.
> I also built a custom version of Maven 3.9.0 which uses plexus-utils 3.3.1, 
> and the behavior is back to normal. So I think the behavior change is in 
> plexus-utils (although it could be that Maven is "mis-using" plexus-utils, 
> and the plexus-utils change is technically correct). I tested with a few 
> different plexus-utils versions and it seems like the behavior change was 
> introduced in plexus-utils 3.4.0 (I also tested with plexus-utils 3.5.0 and 
> this issue is not fixed).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MNG-7709) plexus-utils upgrade changes the way configuration is parsed

2023-03-01 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7709?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695209#comment-17695209
 ] 

ASF GitHub Bot commented on MNG-7709:
-

gnodet opened a new pull request, #1023:
URL: https://github.com/apache/maven/pull/1023

   Following this checklist to help us incorporate your
   contribution quickly and easily:
   
- [ ] Make sure there is a [JIRA 
issue](https://issues.apache.org/jira/browse/MNG) filed
  for the change (usually before you start working on it).  Trivial 
changes like typos do not
  require a JIRA issue. Your pull request should address just this 
issue, without
  pulling in other changes.
- [ ] Each commit in the pull request should have a meaningful subject line 
and body.
- [ ] Format the pull request title like `[MNG-XXX] SUMMARY`,
  where you replace `MNG-XXX` and `SUMMARY` with the appropriate JIRA 
issue.
- [ ] Also format the first line of the commit message like `[MNG-XXX] 
SUMMARY`.
  Best practice is to use the JIRA issue title in both the pull request 
title and in the first line of the commit message.
- [ ] Write a pull request description that is detailed enough to 
understand what the pull request does, how, and why.
- [ ] Run `mvn clean verify` to make sure basic checks pass. A more 
thorough check will
  be performed on your pull request automatically.
- [ ] You have run the [Core IT][core-its] successfully.
   
   If your pull request is about ~20 lines of code you don't need to sign an
   [Individual Contributor License 
Agreement](https://www.apache.org/licenses/icla.pdf) if you are unsure
   please ask on the developers list.
   
   To make clear that you license your contribution under
   the [Apache License Version 2.0, January 
2004](http://www.apache.org/licenses/LICENSE-2.0)
   you have to acknowledge this by using the following check-box.
   
- [ ] I hereby declare this contribution to be licenced under the [Apache 
License Version 2.0, January 2004](http://www.apache.org/licenses/LICENSE-2.0)
   
- [ ] In any other case, please file an [Apache Individual Contributor 
License Agreement](https://www.apache.org/licenses/icla.pdf).
   
   [core-its]: https://maven.apache.org/core-its/core-it-suite/
   




> plexus-utils upgrade changes the way configuration is parsed
> 
>
> Key: MNG-7709
> URL: https://issues.apache.org/jira/browse/MNG-7709
> Project: Maven
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 3.9.0, 4.0.0-alpha-4
>Reporter: Jonathan Haber
>Assignee: Tamas Cservenak
>Priority: Minor
> Fix For: 3.9.1
>
>
> While upgrading to Maven 3.9.0, we noticed a change in the way some of our 
> pom configuration is parsed. This seems to be a very rare edge case that we 
> can work around, but I wanted to flag it in case the root cause turns out to 
> have more widespread impact. I put together a small repo that demonstrates 
> the issue:
> [https://github.com/jhaber/maven-configuration-reproducer] 
> Summary of reproducer:
> * The parent module configures the shade plugin with an outputFile parameter: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/pom.xml#L16-L23]
> * The child module inherits from parent and resets the shade plugin 
> configuration (using ): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L20-L25]
> * However, child module also configures shade plugin inside a profile (adding 
> an unrelated finalName parameter): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L41-L47]
> * The nested-child module inherits from child module. It doesn't contain any 
> configuration, but it activates the profile: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/tree/main/child/nested-child]
>  
> It is expected that child and nested-child do not inherit the outputFile 
> parameter, because the shade configuration is removed in child pom.xml. This 
> works in Maven 3.8.7, but in Maven 3.9.0 the nested-child module does inherit 
> the outputFile parameter. I assume this has something to do with the profile 
> getting activated and causing the configuration to not get merged properly, 
> but I'm not sure.
> I also built a custom version of Maven 3.9.0 which uses plexus-utils 3.3.1, 
> and the behavior is back to normal. So I think the behavior change is in 
> plexus-utils (although it could be that Maven is "mis-using" plexus-utils, 
> and the plexus-utils change is technically correct). I tested with a few 
> different plexus-utils versions and it seems like th

[GitHub] [maven] gnodet opened a new pull request, #1023: [MNG-7709] Regression in configuration merge

2023-03-01 Thread via GitHub


gnodet opened a new pull request, #1023:
URL: https://github.com/apache/maven/pull/1023

   Following this checklist to help us incorporate your
   contribution quickly and easily:
   
- [ ] Make sure there is a [JIRA 
issue](https://issues.apache.org/jira/browse/MNG) filed
  for the change (usually before you start working on it).  Trivial 
changes like typos do not
  require a JIRA issue. Your pull request should address just this 
issue, without
  pulling in other changes.
- [ ] Each commit in the pull request should have a meaningful subject line 
and body.
- [ ] Format the pull request title like `[MNG-XXX] SUMMARY`,
  where you replace `MNG-XXX` and `SUMMARY` with the appropriate JIRA 
issue.
- [ ] Also format the first line of the commit message like `[MNG-XXX] 
SUMMARY`.
  Best practice is to use the JIRA issue title in both the pull request 
title and in the first line of the commit message.
- [ ] Write a pull request description that is detailed enough to 
understand what the pull request does, how, and why.
- [ ] Run `mvn clean verify` to make sure basic checks pass. A more 
thorough check will
  be performed on your pull request automatically.
- [ ] You have run the [Core IT][core-its] successfully.
   
   If your pull request is about ~20 lines of code you don't need to sign an
   [Individual Contributor License 
Agreement](https://www.apache.org/licenses/icla.pdf) if you are unsure
   please ask on the developers list.
   
   To make clear that you license your contribution under
   the [Apache License Version 2.0, January 
2004](http://www.apache.org/licenses/LICENSE-2.0)
   you have to acknowledge this by using the following check-box.
   
- [ ] I hereby declare this contribution to be licenced under the [Apache 
License Version 2.0, January 2004](http://www.apache.org/licenses/LICENSE-2.0)
   
- [ ] In any other case, please file an [Apache Individual Contributor 
License Agreement](https://www.apache.org/licenses/icla.pdf).
   
   [core-its]: https://maven.apache.org/core-its/core-it-suite/
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MNG-7710) Downgrade plexus-utils to 3.3.1

2023-03-01 Thread Tamas Cservenak (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7710?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695207#comment-17695207
 ] 

Tamas Cservenak commented on MNG-7710:
--

Let's wait for fixed plexus utils instead...

> Downgrade plexus-utils to 3.3.1
> ---
>
> Key: MNG-7710
> URL: https://issues.apache.org/jira/browse/MNG-7710
> Project: Maven
>  Issue Type: Bug
>  Components: Dependencies
>Affects Versions: 3.9.0
>Reporter: Tamas Cservenak
>Assignee: Tamas Cservenak
>Priority: Major
> Fix For: 3.9.1
>
>
> Maven 3.9.0 was shipped with plexus-utils 3.4.2, downgrade it to 3.3.1, same 
> version used in Maven 3.8.7.
> plexus-utils 3.4.0+ introduced several breakages, such as:
>  * XML parsing not backward compatible 
> [https://github.com/codehaus-plexus/plexus-utils/issues/238]
>  * Merge behavior [https://github.com/codehaus-plexus/plexus-utils/issues/239]
> Downgrade until all the issues are discussed and resolved. This makes Maven 
> 3.9.1 use same p-u as Maven 3.8.7 did.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Reopened] (MNG-7709) plexus-utils upgrade changes the way configuration is parsed

2023-03-01 Thread Tamas Cservenak (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tamas Cservenak reopened MNG-7709:
--

> plexus-utils upgrade changes the way configuration is parsed
> 
>
> Key: MNG-7709
> URL: https://issues.apache.org/jira/browse/MNG-7709
> Project: Maven
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 3.9.0, 4.0.0-alpha-4
>Reporter: Jonathan Haber
>Assignee: Tamas Cservenak
>Priority: Minor
> Fix For: 3.9.1
>
>
> While upgrading to Maven 3.9.0, we noticed a change in the way some of our 
> pom configuration is parsed. This seems to be a very rare edge case that we 
> can work around, but I wanted to flag it in case the root cause turns out to 
> have more widespread impact. I put together a small repo that demonstrates 
> the issue:
> [https://github.com/jhaber/maven-configuration-reproducer] 
> Summary of reproducer:
> * The parent module configures the shade plugin with an outputFile parameter: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/pom.xml#L16-L23]
> * The child module inherits from parent and resets the shade plugin 
> configuration (using ): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L20-L25]
> * However, child module also configures shade plugin inside a profile (adding 
> an unrelated finalName parameter): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L41-L47]
> * The nested-child module inherits from child module. It doesn't contain any 
> configuration, but it activates the profile: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/tree/main/child/nested-child]
>  
> It is expected that child and nested-child do not inherit the outputFile 
> parameter, because the shade configuration is removed in child pom.xml. This 
> works in Maven 3.8.7, but in Maven 3.9.0 the nested-child module does inherit 
> the outputFile parameter. I assume this has something to do with the profile 
> getting activated and causing the configuration to not get merged properly, 
> but I'm not sure.
> I also built a custom version of Maven 3.9.0 which uses plexus-utils 3.3.1, 
> and the behavior is back to normal. So I think the behavior change is in 
> plexus-utils (although it could be that Maven is "mis-using" plexus-utils, 
> and the plexus-utils change is technically correct). I tested with a few 
> different plexus-utils versions and it seems like the behavior change was 
> introduced in plexus-utils 3.4.0 (I also tested with plexus-utils 3.5.0 and 
> this issue is not fixed).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (MNG-7709) plexus-utils upgrade changes the way configuration is parsed

2023-03-01 Thread Guillaume Nodet (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Guillaume Nodet updated MNG-7709:
-
Affects Version/s: 4.0.0-alpha-4

> plexus-utils upgrade changes the way configuration is parsed
> 
>
> Key: MNG-7709
> URL: https://issues.apache.org/jira/browse/MNG-7709
> Project: Maven
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 3.9.0, 4.0.0-alpha-4
>Reporter: Jonathan Haber
>Assignee: Tamas Cservenak
>Priority: Minor
> Fix For: 3.9.1
>
>
> While upgrading to Maven 3.9.0, we noticed a change in the way some of our 
> pom configuration is parsed. This seems to be a very rare edge case that we 
> can work around, but I wanted to flag it in case the root cause turns out to 
> have more widespread impact. I put together a small repo that demonstrates 
> the issue:
> [https://github.com/jhaber/maven-configuration-reproducer] 
> Summary of reproducer:
> * The parent module configures the shade plugin with an outputFile parameter: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/pom.xml#L16-L23]
> * The child module inherits from parent and resets the shade plugin 
> configuration (using ): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L20-L25]
> * However, child module also configures shade plugin inside a profile (adding 
> an unrelated finalName parameter): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L41-L47]
> * The nested-child module inherits from child module. It doesn't contain any 
> configuration, but it activates the profile: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/tree/main/child/nested-child]
>  
> It is expected that child and nested-child do not inherit the outputFile 
> parameter, because the shade configuration is removed in child pom.xml. This 
> works in Maven 3.8.7, but in Maven 3.9.0 the nested-child module does inherit 
> the outputFile parameter. I assume this has something to do with the profile 
> getting activated and causing the configuration to not get merged properly, 
> but I'm not sure.
> I also built a custom version of Maven 3.9.0 which uses plexus-utils 3.3.1, 
> and the behavior is back to normal. So I think the behavior change is in 
> plexus-utils (although it could be that Maven is "mis-using" plexus-utils, 
> and the plexus-utils change is technically correct). I tested with a few 
> different plexus-utils versions and it seems like the behavior change was 
> introduced in plexus-utils 3.4.0 (I also tested with plexus-utils 3.5.0 and 
> this issue is not fixed).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Comment Edited] (MNG-7709) plexus-utils upgrade changes the way configuration is parsed

2023-03-01 Thread Guillaume Nodet (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7709?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17695204#comment-17695204
 ] 

Guillaume Nodet edited comment on MNG-7709 at 3/1/23 4:52 PM:
--

It should be fixed by https://github.com/codehaus-plexus/plexus-utils/pull/241 
for 3.9.x


was (Author: gnt):
It should be fixed by https://github.com/codehaus-plexus/plexus-utils/pull/241

> plexus-utils upgrade changes the way configuration is parsed
> 
>
> Key: MNG-7709
> URL: https://issues.apache.org/jira/browse/MNG-7709
> Project: Maven
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 3.9.0, 4.0.0-alpha-4
>Reporter: Jonathan Haber
>Assignee: Tamas Cservenak
>Priority: Minor
> Fix For: 3.9.1
>
>
> While upgrading to Maven 3.9.0, we noticed a change in the way some of our 
> pom configuration is parsed. This seems to be a very rare edge case that we 
> can work around, but I wanted to flag it in case the root cause turns out to 
> have more widespread impact. I put together a small repo that demonstrates 
> the issue:
> [https://github.com/jhaber/maven-configuration-reproducer] 
> Summary of reproducer:
> * The parent module configures the shade plugin with an outputFile parameter: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/pom.xml#L16-L23]
> * The child module inherits from parent and resets the shade plugin 
> configuration (using ): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L20-L25]
> * However, child module also configures shade plugin inside a profile (adding 
> an unrelated finalName parameter): 
> [link|https://github.com/jhaber/maven-configuration-reproducer/blob/4017887fed8bd9c7abd7174407be56531db912b0/child/pom.xml#L41-L47]
> * The nested-child module inherits from child module. It doesn't contain any 
> configuration, but it activates the profile: 
> [link|https://github.com/jhaber/maven-configuration-reproducer/tree/main/child/nested-child]
>  
> It is expected that child and nested-child do not inherit the outputFile 
> parameter, because the shade configuration is removed in child pom.xml. This 
> works in Maven 3.8.7, but in Maven 3.9.0 the nested-child module does inherit 
> the outputFile parameter. I assume this has something to do with the profile 
> getting activated and causing the configuration to not get merged properly, 
> but I'm not sure.
> I also built a custom version of Maven 3.9.0 which uses plexus-utils 3.3.1, 
> and the behavior is back to normal. So I think the behavior change is in 
> plexus-utils (although it could be that Maven is "mis-using" plexus-utils, 
> and the plexus-utils change is technically correct). I tested with a few 
> different plexus-utils versions and it seems like the behavior change was 
> introduced in plexus-utils 3.4.0 (I also tested with plexus-utils 3.5.0 and 
> this issue is not fixed).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


  1   2   3   >