Re: [VOTE] Release Apache Maven Invoker Plugin version 3.2.2

2021-02-15 Thread Olivier Lamy
+1 On Sun, 14 Feb 2021 at 10:40 am, Sylwester Lachiewicz < slachiew...@apache.org> wrote: > Hi, > > We solved 17 issues: > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317525&version=12346157&styleName=Text > > There are still a couple of issues left in JIRA: > https://iss

Re: Plan to enable developers to consume maven-core without CVE

2021-02-15 Thread Romain Manni-Bucau
Le lun. 15 févr. 2021 à 19:37, Robert Scholte a écrit : > We could consider to do Maven APIs/SPIs for Maven 5, not earlier. Maven 4 > is already hard enough to reach release ready status, so let's not increase > the scope. > Ok > It will require a complete new set of interfaces in their own p

Re: [VOTE] Release Apache Maven Invoker Plugin version 3.2.2

2021-02-15 Thread Slawomir Jaranowski
+1 Tested with java 1.8, 11, 15 on MacOS, maven 3.6.3 New options *streamLogsOnFailures* and *parallelThreads* set to *1C* work as expected. niedz., 14 lut 2021 o 01:40 Sylwester Lachiewicz napisał(a): > Hi, > > We solved 17 issues: > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?pr

Re: Plan to enable developers to consume maven-core without CVE

2021-02-15 Thread Robert Scholte
We could consider to do  Maven APIs/SPIs for Maven 5, not earlier. Maven 4 is already hard enough to reach release ready status, so let's not increase the scope. It will require a complete new set of interfaces in their own packages, which would also help with the split package issue of the java

Plan to enable developers to consume maven-core without CVE

2021-02-15 Thread Romain Manni-Bucau
Hi everybody, As of today if you depend on maven-core 3.6.3 you get CVE warning until you force in your project another guava version. Do we have any plan to make it hurtless? Is it related to make a plugin oriented (public) API dependency? Romain Manni-Bucau @rmannibucau