[ANN] Apache Maven Dependency Plugin 3.9.0 Released

2025-10-02 Thread Slawomir Jaranowski
The Apache Maven team is pleased to announce the release of the Apache Maven Dependency Plugin, version 3.9.0 https://maven.apache.org/plugins/maven-dependency-plugin/ You should specify the version in your project's plugin configuration: org.apache.maven.plugins maven-dependency-p

[RESULT] [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-10-02 Thread Slawomir Jaranowski
Hi, The vote has passed with the following result: +1: Tamás Cservenák, Romain Manni-Bucau, Sylwester Lachiewicz, Karl Heinz Marbaise, Olivier Lamy, Slawomir Jaranowski PMC quorum: reached I will promote the source release zip file to the Apache distribution area and the artifacts to the centra

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-10-02 Thread Slawomir Jaranowski
+1 On Mon, 29 Sept 2025 at 08:05, Slawomir Jaranowski wrote: > Hi, > > We solved 74 issues: > > https://github.com/apache/maven-dependency-plugin/issues?q=is%3Aclosed%20milestone%3A3.9.0 > > Changes since the last release: > > https://github.com/apache/maven-depe

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-30 Thread Sylwester Lachiewicz
founder (Java/.NET service - contact via linkedin) > > > Le lun. 29 sept. 2025 à 12:06, Tamás Cservenák a > écrit : > > > +1 > > > > On Mon, Sep 29, 2025 at 8:16 AM Slawomir Jaranowski > > wrote: > > > > > > Hi, > > > > > &

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-30 Thread Romain Manni-Bucau
This is wrong Elliotte, your fix breaks others - see the example I gave, basically any time an user doesn't use the RI - which is common - your fix is wrong. > It is far more important to make sure that all emitted warnings are accurate and actionable than to make sure we warn about everything tha

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-30 Thread Slawomir Jaranowski
I would like to kindly reminder that it is vote thread On Tue, 30 Sept 2025 at 15:51, Romain Manni-Bucau wrote: > This is wrong Elliotte, your fix breaks others - see the example I gave, > basically any time an user doesn't use the RI - which is common - your fix > is wrong. > > > It is far more

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-30 Thread Elliotte Rusty Harold
On Mon, Sep 29, 2025 at 7:09 PM Romain Manni-Bucau wrote: > > I'm mixed cause this stays a challenge cause you do not handle most of the > gav still. I'm not sure what your point is. Most artifacts won't and shouldn't be touched by this approach. Of those that are, more can be added once we stop

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-30 Thread Olivier Lamy
+1 On Mon, 29 Sept 2025 at 16:05, Slawomir Jaranowski wrote: > > Hi, > > We solved 74 issues: > https://github.com/apache/maven-dependency-plugin/issues?q=is%3Aclosed%20milestone%3A3.9.0 > > Changes since the last release: > https://github.com/apache/maven-depende

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-29 Thread Karl Heinz Marbaise
Hi, +1 from me. Kind regards Karl Heinz Marbaise On 29.09.25 08:05, Slawomir Jaranowski wrote: Hi, We solved 74 issues: https://github.com/apache/maven-dependency-plugin/issues?q=is%3Aclosed%20milestone%3A3.9.0 Changes since the last release: https://github.com/apache/maven-dependency-plugin

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-29 Thread Romain Manni-Bucau
Le lun. 29 sept. 2025 à 15:07, Elliotte Rusty Harold a écrit : > On Mon, Sep 29, 2025 at 12:09 PM Romain Manni-Bucau > wrote: > > > > Hi Elliotte, > > > > Can we target it for next round? > > I'm not yet sure of the best way to solve it but it looks like it needs > > more love since all EE specs

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-29 Thread Elliotte Rusty Harold
On Mon, Sep 29, 2025 at 12:09 PM Romain Manni-Bucau wrote: > > Hi Elliotte, > > Can we target it for next round? > I'm not yet sure of the best way to solve it but it looks like it needs > more love since all EE specs + microprofile + SPI based loading with a > hardocoded default have this issue a

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-29 Thread Romain Manni-Bucau
inkedin.com/in/rmannibucau> | Book <https://www.packtpub.com/en-us/product/java-ee-8-high-performance-9781788473064> Javaccino founder (Java/.NET service - contact via linkedin) Le lun. 29 sept. 2025 à 14:01, Elliotte Rusty Harold a écrit : > I would really like to get > https://github.com

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-29 Thread Elliotte Rusty Harold
I would really like to get https://github.com/apache/maven-dependency-plugin/pull/459 in before the next cut. In itself, it's pretty minor but it points the way forward for a large number of small in isolation improvements that together make dependency analysis more accurate and reliable. O

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-29 Thread Romain Manni-Bucau
lawomir Jaranowski > wrote: > > > > Hi, > > > > We solved 74 issues: > > > https://github.com/apache/maven-dependency-plugin/issues?q=is%3Aclosed%20milestone%3A3.9.0 > > > > Changes since the last release: > > > https://github.com/apache/mave

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-29 Thread Tamás Cservenák
+1 On Mon, Sep 29, 2025 at 8:16 AM Slawomir Jaranowski wrote: > > Hi, > > We solved 74 issues: > https://github.com/apache/maven-dependency-plugin/issues?q=is%3Aclosed%20milestone%3A3.9.0 > > Changes since the last release: > https://github.com/apache/maven-depende

[VOTE] Release Apache Maven Dependency Plugin version 3.9.0

2025-09-28 Thread Slawomir Jaranowski
Hi, We solved 74 issues: https://github.com/apache/maven-dependency-plugin/issues?q=is%3Aclosed%20milestone%3A3.9.0 Changes since the last release: https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.8.1...maven-dependency-plugin-3.9.0 As we have about 74 solved

RE: Re: Proposal: Display dependency checksums (SHA hashes) in maven-dependency-plugin

2025-07-16 Thread Adam Kaplan
Excellent news on the trusted checksums feature! As this appears to be provided by Maven itself (in 3.9 onward?), is this the recommended way for teams to version Maven checksums in git? If so, is more documentation planned/needed? Perhaps what is missing in maven-dependency-plugin is machine

Re: Proposal: Display dependency checksums (SHA hashes) in maven-dependency-plugin

2025-07-11 Thread Tamás Cservenák
And one more thing: On a related note (globally, not TC related directly), in Maven 4 (Resolver 2) we have much greater control over connectors, see https://github.com/apache/maven-resolver/issues/1361 And as the issue shows, "signature checking" connector is about to arrive soon(ish). And this a

Re: Proposal: Display dependency checksums (SHA hashes) in maven-dependency-plugin

2025-07-11 Thread Tamás Cservenák
Howdy, Yes, sadly we (project) are very bad at "advertising" and "properly documenting" things. Sorry about that. Trusted checksums is in fact SPI and one can plug in various sources (while resolver contains some "basic" implementations). This is a very similar setup as with Remote Repository Fi

Re: Proposal: Display dependency checksums (SHA hashes) in maven-dependency-plugin

2025-07-11 Thread John Neffenger
On 7/11/25 7:26 AM, Calum Harrison wrote: "Trusted Checksums" is good to know about -- I had missed that. It's very easy to miss! I came across it accidentally myself rather recently. I was participating in this issue: [MNG-6026] Extend the Project Object Model (POM) with trust information

Re: Proposal: Display dependency checksums (SHA hashes) in maven-dependency-plugin

2025-07-11 Thread Calum Harrison
Hi, You are all fundamentally correct: Just printing the checksums is of course insufficient. For large projects, it would just be noise. The aim would be for the hashes to be consumed by downstream systems. `maven-dependency-plugin` seemed to me one of the more natural places to provide this

Re: Proposal: Display dependency checksums (SHA hashes) in maven-dependency-plugin

2025-07-11 Thread Tamás Cservenák
pport manual verification is security > > theater and a waste of time. > > > > > > > > On Thu, Jul 10, 2025 at 6:18 PM Calum Harrison > > wrote: > > > > > > Hi dev list, > > > > > > I'd like to propose a small enhancement to the

Re: Proposal: Display dependency checksums (SHA hashes) in maven-dependency-plugin

2025-07-11 Thread Slawomir Jaranowski
> > Hi dev list, > > > > I'd like to propose a small enhancement to the maven-dependency-plugin. > > From a Software Composition Analysis (SCA) and security perspective, it's > > crucial to verify the exact artifact that has been resolved during a build

Re: Proposal: Display dependency checksums (SHA hashes) in maven-dependency-plugin

2025-07-10 Thread Manfred Moser
ld provide a simple, standardized way to verify artifact integrity without relying on third-party plugins, which are often restricted in corporate environments. Is this functionality something that would be within the scope of the maven-dependency-plugin, or would it be better suited for another

Re: Proposal: Display dependency checksums (SHA hashes) in maven-dependency-plugin

2025-07-10 Thread Elliotte Rusty Harold
years. Checksums need to be verified automatically. Adding code to support manual verification is security theater and a waste of time. On Thu, Jul 10, 2025 at 6:18 PM Calum Harrison wrote: > > Hi dev list, > > I'd like to propose a small enhancement to the maven-dependency

Proposal: Display dependency checksums (SHA hashes) in maven-dependency-plugin

2025-07-10 Thread Calum Harrison
Hi dev list, I'd like to propose a small enhancement to the maven-dependency-plugin. >From a Software Composition Analysis (SCA) and security perspective, it's crucial to verify the exact artifact that has been resolved during a build. Private or third-party repositories may prov

Re: POC for improved DOT output for maven-dependency-plugin

2025-03-27 Thread Bear Giles
iles wrote: >>> >>> > I should be clear - the glitch is the column of empty boxes above the >>> root >>> > dependency. They should not appear. >>> > >>> > The grayed areas, with one exception, have the same groupId. If they >>&

Re: POC for improved DOT output for maven-dependency-plugin

2025-03-27 Thread Bear Giles
; The 'type' is omitted if it's "jar", otherwise it will be included on >> that >> > line. >> > >> > If there are multiple versions in the cluster then there will be >> > multiple "records" with same structure as the stan

Re: POC for improved DOT output for maven-dependency-plugin

2025-03-24 Thread Bear Giles
> > The one exception is the "Database Drivers" in the bottom left - that's > an > > experiment specific to this pom - sometimes you might have a group > > independent dependencies that serve the same role, e.g., database JDBC > > drivers. Does it make se

Re: POC for improved DOT output for maven-dependency-plugin

2025-03-24 Thread Tomo Suzuki
e bottom left - that's an > experiment specific to this pom - sometimes you might have a group > independent dependencies that serve the same role, e.g., database JDBC > drivers. Does it make sense to put them into their own cluster? > > Bear > > On Mon, Mar 24, 2025 at 4:52 

Re: POC for improved DOT output for maven-dependency-plugin

2025-03-24 Thread Bear Giles
is the "Database Drivers" in the bottom left - that's an experiment specific to this pom - sometimes you might have a group independent dependencies that serve the same role, e.g., database JDBC drivers. Does it make sense to put them into their own cluster? Bear On Mon, Mar 24

Re: POC for improved DOT output for maven-dependency-plugin

2025-03-24 Thread Elliotte Rusty Harold
t 10:53 PM Bear Giles wrote: > The maven-dependency-plugin has a '.dot' option but because of the layout > it's useless for anything other than the most trivial dependency trees. I > know we can't replace existing functionality but this could be added as > "d

maven-dependency-plugin PRs for review

2024-11-17 Thread Elliotte Rusty Harold
I have a number of bug fix, clean up, and new feature PRs of varying sizes pen in maven-dependency-plugin if anyone has time to review: https://github.com/apache/maven-dependency-plugin/pull/471 https://github.com/apache/maven-dependency-plugin/pull/470 https://github.com/apache/maven-dependency

[ANN] Release Maven Dependency Plugin 3.8.1 released

2024-10-25 Thread Michael Osipov
The Apache Maven team is pleased to announce the release of the Maven Dependency Plugin version 3.8.1. https://maven.apache.org/plugins/maven-dependency-plugin/ You should specify the version in your project's plugin configuration: org.apache.maven.plugins maven-dependency-plugin

[RESULT] [VOTE] Release Maven Dependency Plugin version 3.8.1

2024-10-25 Thread Michael Osipov
Hi, The vote has passed with the following result: +1: Michael Osipov, Slawomir Jaranowski, Olivier Lamy, Elliotte Rusty Harold PMC quorum: reached I will promote the artifacts to the central repo, the source release ZIP file and add this release the board report. --

Re: [VOTE] Release Maven Dependency Plugin version 3.8.1

2024-10-22 Thread Elliotte Rusty Harold
rg/jira/projects/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-2227/ > https://repository.apache.org/content/repositories/maven-2227/org/apache/maven/plugins/maven-dependency-plugin/3.8.1/maven-dependency-plugin-3.8.1-source-release.zip > >

Re: [VOTE] Release Maven Dependency Plugin version 3.8.1

2024-10-21 Thread Olivier Lamy
rg/jira/projects/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-2227/ > > https://repository.apache.org/content/repositories/maven-2227/org/apache/maven/plugins/maven-dependency-plugin/3.8.1/maven-dependency-plugin-3.8.1-source-release.zip > &g

Re: [VOTE] Release Maven Dependency Plugin version 3.8.1

2024-10-21 Thread Michael Osipov
ttps://repository.apache.org/content/repositories/maven-2227/ https://repository.apache.org/content/repositories/maven-2227/org/ apache/maven/plugins/maven-dependency-plugin/3.8.1/maven-dependency- plugin-3.8.1-source-release.zip Source release checksum(s): maven-dependency-plugin-3.8.1-source-release

Re: [VOTE] Release Maven Dependency Plugin version 3.8.1

2024-10-21 Thread Slawomir Jaranowski
rg/jira/projects/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-2227/ > https://repository.apache.org/content/repositories/maven-2227/org/apache/maven/plugins/maven-dependency-plugin/3.8.1/maven-dependency-plugin-3.8.1-source-release.zip > > Source

[VOTE] Release Maven Dependency Plugin version 3.8.1

2024-10-21 Thread Michael Osipov
2227/ https://repository.apache.org/content/repositories/maven-2227/org/apache/maven/plugins/maven-dependency-plugin/3.8.1/maven-dependency-plugin-3.8.1-source-release.zip Source release checksum(s): maven-dependency-plugin-3.8.1-source-release.zip sh

[ANN] Release Maven Dependency Plugin 3.8.0 released

2024-08-21 Thread Michael Osipov
The Apache Maven team is pleased to announce the release of the Maven Dependency Plugin version 3.8.0. https://maven.apache.org/plugins/maven-dependency-plugin/ You should specify the version in your project's plugin configuration: org.apache.maven.plugins maven-dependency-plugin

[RESULT] [VOTE] Release Maven Dependency Plugin version 3.8.0

2024-08-21 Thread Michael Osipov
Hi, The vote has passed with the following result: +1: Michael Osipov, Sylwester Lachiewicz, Hervé Boutemy, Slawomir Jaranowski, Olivier Lamy, Tamás Cservenák PMC quorum: reached I will promote the artifacts to the central repo, the source release ZIP file and add this release the board re

Re: [VOTE] Release Maven Dependency Plugin version 3.8.0

2024-08-21 Thread Tamás Cservenák
itories/maven-2191/org/apache/maven/plugins/maven-dependency-plugin/3.8.0/maven-dependency-plugin-3.8.0-source-release.zip > > Source release checksum(s): > maven-dependency-plugin-3.8.0-source-release.zip > sha512: > 12c1904e5b3aeb43097a5a5ab770c8b25971e419b66ba9e7d157e415bd305661

Re: [VOTE] Release Maven Dependency Plugin version 3.8.0

2024-08-21 Thread Slawomir Jaranowski
positories/maven-2191/org/apache/maven/plugins/maven-dependency-plugin/3.8.0/maven-dependency-plugin-3.8.0-source-release.zip > > Source release checksum(s): > maven-dependency-plugin-3.8.0-source-release.zip > sha512: > > 12c1904e5b3aeb43097a5a5ab770c8b25971e419b66ba9e7d157e415bd

Re: [VOTE] Release Maven Dependency Plugin version 3.8.0

2024-08-20 Thread Olivier Lamy
itories/maven-2191/org/apache/maven/plugins/maven-dependency-plugin/3.8.0/maven-dependency-plugin-3.8.0-source-release.zip > > Source release checksum(s): > maven-dependency-plugin-3.8.0-source-release.zip > sha512: > 12c1904e5b3aeb43097a5a5ab770c8b25971e419b66ba9e7d157e415bd305661

Re: [VOTE] Release Maven Dependency Plugin version 3.8.0

2024-08-20 Thread Herve Boutemy
rg/content/repositories/maven-2191/ > https://repository.apache.org/content/repositories/maven-2191/org/apache/maven/plugins/maven-dependency-plugin/3.8.0/maven-dependency-plugin-3.8.0-source-release.zip > > Source release checksum(s): > ma

Re: [VOTE] Release Maven Dependency Plugin version 3.8.0

2024-08-19 Thread Sylwester Lachiewicz
ng repo: > > https://repository.apache.org/content/repositories/maven-2191/ > > https://repository.apache.org/content/repositories/maven-2191/org/ > > apache/maven/plugins/maven-dependency-plugin/3.8.0/maven-dependency- > > plugin-3.8.0-source-re

Re: [VOTE] Release Maven Dependency Plugin version 3.8.0

2024-08-19 Thread Michael Osipov
4847 There are still a couple of issues left in JIRA: https://issues.apache.org/jira/projects/MDEP/issues Staging repo: https://repository.apache.org/content/repositories/maven-2191/ https://repository.apache.org/content/repositories/maven-2191/org/ apache/maven/plugins/maven-dependency-plugin/3.8.0/m

[VOTE] Release Maven Dependency Plugin version 3.8.0

2024-08-18 Thread Michael Osipov
ttps://issues.apache.org/jira/projects/MDEP/issues Staging repo: https://repository.apache.org/content/repositories/maven-2191/ https://repository.apache.org/content/repositories/maven-2191/org/apache/maven/plugins/maven-dependency-plugin/3.8.0/maven-dependency-plugin-3.8.0-source-release.zip So

[ANN] Apache Maven Dependency Plugin 3.7.1 released

2024-06-21 Thread Slawomir Jaranowski
The Apache Maven team is pleased to announce the release of the Maven Dependency Plugin version 3.7.1 https://maven.apache.org/plugins/maven-dependency-plugin/ You should specify the version in your project's plugin configuration: org.apache.maven.plugins maven-dependency-plugin

[RESULT] [VOTE] Release Apache Maven Dependency Plugin version 3.7.1

2024-06-21 Thread Slawomir Jaranowski
Hi, The vote has passed with the following result: +1: Michael Osipov, Sylwester Lachiewicz, Slawomir Jaranowski, Tamás Cservenák PMC quorum: reached I will promote the source release zip file to the Apache distribution area and the artifacts to the central repo. -- Sławomir Jaranowski

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.7.1

2024-06-19 Thread Tamás Cservenák
he.org/jira/issues/?jql=project%20%3D%20MDEP%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC > > > Staging repo: > https://repository.apache.org/content/repositories/maven-2152/ > > https://repository.apache.org/content/repositories/maven-2152

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.7.1

2024-06-19 Thread Slawomir Jaranowski
org/jira/issues/?jql=project%20%3D%20MDEP%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC > > > Staging repo: > https://repository.apache.org/content/repositories/maven-2152/ > > https://repository.apache.org/content/repositories/maven-2152

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.7.1

2024-06-18 Thread Sylwester Lachiewicz
> > https://repository.apache.org/content/repositories/maven-2152/ > > > https://repository.apache.org/content/repositories/maven-2152/org/apache/maven/plugins/maven-dependency-plugin/3.7.1/maven-dependency-plugin-3.7.1-source-release.zip >

Re: [VOTE] Release Apache Maven Dependency Plugin version 3.7.1

2024-06-18 Thread Michael Osipov
?jql=project%20%3D%20MDEP%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC > > > Staging repo: > https://repository.apache.org/content/repositories/maven-2152/ > https://repository.apache.org/content/repositories/maven-2152/org/apache/maven/plu

[VOTE] Release Apache Maven Dependency Plugin version 3.7.1

2024-06-18 Thread Slawomir Jaranowski
DESC%2C%20updated%20DESC Staging repo: https://repository.apache.org/content/repositories/maven-2152/ https://repository.apache.org/content/repositories/maven-2152/org/apache/maven/plugins/maven-dependency-plugin/3.7.1/maven-dependency-plugin-3.7.1-source-release.zip Source release checksum(s): m

[ANN] Release Maven Dependency Plugin 3.7.0 released

2024-06-11 Thread Michael Osipov
The Apache Maven team is pleased to announce the release of the Maven Dependency Plugin version 3.7.0. https://maven.apache.org/plugins/maven-dependency-plugin/ You should specify the version in your project's plugin configuration: org.apache.maven.plugins maven-dependency-plugin

[RESULT] [VOTE] Release Maven Dependency Plugin version 3.7.0

2024-06-11 Thread Michael Osipov
Hi, The vote has passed with the following result: +1: Sylwester Lachiewicz, Michael Osipov, Slawomir Jaranowski PMC quorum: reached I will promote the artifacts to the central repo, the source release ZIP file and add this release the board report. -

Re: [VOTE] Release Maven Dependency Plugin version 3.7.0

2024-06-10 Thread Michael Osipov
/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-2144/ > https://repository.apache.org/content/repositories/maven-2144/org/apache/maven/plugins/maven-dependency-plugin/3.7.0/maven-dependency-plugin-3.7.0-source-release.zip > > Source release c

Re: [VOTE] Release Maven Dependency Plugin version 3.7.0

2024-06-10 Thread Sylwester Lachiewicz
pache.org/jira/projects/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-2144/ > > https://repository.apache.org/content/repositories/maven-2144/org/apache/maven/plugins/maven-dependency-plugin/3.7.0/maven-dependency-plugin-3.7.0-source-release.

Re: [VOTE] Release Maven Dependency Plugin version 3.7.0

2024-06-10 Thread Slawomir Jaranowski
rg/jira/projects/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-2144/ > https://repository.apache.org/content/repositories/maven-2144/org/apache/maven/plugins/maven-dependency-plugin/3.7.0/maven-dependency-plugin-3.7.0-source-release.zip > >

[VOTE] Release Maven Dependency Plugin version 3.7.0

2024-06-09 Thread Michael Osipov
2144/ https://repository.apache.org/content/repositories/maven-2144/org/apache/maven/plugins/maven-dependency-plugin/3.7.0/maven-dependency-plugin-3.7.0-source-release.zip Source release checksum(s): maven-dependency-plugin-3.7.0-source-release.zip sh

Re: [DISCUSS] Maven Dependency Plugin

2024-03-26 Thread Tamás Cservenák
ed all of them in different projects and I think all > >> of them are needed. > >> > >> Viele Grüße > >> > >> Oliver > >> > >> > >> Am 21.03.24 um 17:04 schrieb Tamás Cservenák: > >>> Howdy, > >>> > >>

Re: [DISCUSS] Maven Dependency Plugin

2024-03-23 Thread Oliver B. Fischer
be interested in how users and devs are using maven-dependency-plugin: https://maven.apache.org/plugins/maven-dependency-plugin/ I collected some basic questions I'd like to have answered (but feel free to add more info!): - which goals are "must have" for you - which goals are "

Re: [DISCUSS] Maven Dependency Plugin

2024-03-22 Thread Herve Boutemy
m in different projects and I think all > > of them are needed. > > > > Viele Grüße > > > > Oliver > > > > > > Am 21.03.24 um 17:04 schrieb Tamás Cservenák: > > > Howdy, > > > > > > I'd would be interested in how users a

Re: [DISCUSS] Maven Dependency Plugin

2024-03-21 Thread Elliotte Rusty Harold
Like a couple of other folks 90% of my usage is dependency:analyze and dependency:tree. Other goals I barely notice. On Thu, Mar 21, 2024 at 12:06 PM Tamás Cservenák wrote: > > Howdy, > > I'd would be interested in how users and devs are using > maven-depend

Re: [DISCUSS] Maven Dependency Plugin

2024-03-21 Thread Slawomir Jaranowski
> I'd would be interested in how users and devs are using > maven-dependency-plugin: > https://maven.apache.org/plugins/maven-dependency-plugin/ > > I collected some basic questions I'd like to have answered (but feel free > to add more info!): > - which goals are "

Re: [DISCUSS] Maven Dependency Plugin

2024-03-21 Thread Richard Eckart de Castilho
> On 21. Mar 2024, at 19:43, Tamás Cservenák wrote: > > I mean, I know what those goals do, I am just unsure WHY you needed those. The current Apache UIMA release guidelines still list them as suggested steps to perform before a local trial build to ensure locally cached artifacts do not inter

Re: [DISCUSS] Maven Dependency Plugin

2024-03-21 Thread Tamás Cservenák
; over the time I used all of them in different projects and I think all > of them are needed. > > Viele Grüße > > Oliver > > > Am 21.03.24 um 17:04 schrieb Tamás Cservenák: > > Howdy, > > > > I'd would be interested in how users and devs are using > &

Re: [DISCUSS] Maven Dependency Plugin

2024-03-21 Thread Oliver B. Fischer
Hi, over the time I used all of them in different projects and I think all of them are needed. Viele Grüße Oliver Am 21.03.24 um 17:04 schrieb Tamás Cservenák: Howdy, I'd would be interested in how users and devs are using maven-dependency-plugin: https://maven.apache.org/plugins/

Re: [DISCUSS] Maven Dependency Plugin

2024-03-21 Thread Richard Eckart de Castilho
Hi, I mostly use the "analyze" (mostly the "analyze-only") and "tree" goals, but I have also already used "copy/unpack-dependencies", "sources", "purge-local-repository" and "resolve". IMHO the "versions" plugin has a few functionalities that feel like could also belong to the dependencies plugi

Re: [DISCUSS] Maven Dependency Plugin

2024-03-21 Thread Romain Manni-Bucau
aa151ddabf7bc78/src/GenerateReadme.java#L74 > > On Thu, Mar 21, 2024 at 5:06 PM Tamás Cservenák > wrote: > > > Howdy, > > > > I'd would be interested in how users and devs are using > > maven-dependency-plugin: > > https://maven.apache.org/plugins/mave

Re: [DISCUSS] Maven Dependency Plugin

2024-03-21 Thread Christian Stein
ven-starter-projects/blob/c7839302f3552caa4de42bc97aa151ddabf7bc78/src/GenerateReadme.java#L74 On Thu, Mar 21, 2024 at 5:06 PM Tamás Cservenák wrote: > Howdy, > > I'd would be interested in how users and devs are using > maven-dependency-plugin: > https://maven.apache.or

Re: [DISCUSS] Maven Dependency Plugin

2024-03-21 Thread Jared Stehler
We mainly use in our builds: * analyze * analyze-only * analyze-duplicate as well as our own "fix" goal which runs on dev machines and auto-corrects used and declared; used and undeclared; unused and declared: https://github.com/HubSpot/maven-dependency-plugin/blob/hubspot/src/mai

Re: [DISCUSS] Maven Dependency Plugin

2024-03-21 Thread Gary Gregory
The one I use the most from the command line is "tree" ( https://maven.apache.org/plugins/maven-dependency-plugin/tree-mojo.html) I wish I could say "ignore test scope" to help me understand my runtime dependencies better. Gary On Thu, Mar 21, 2024, 12:06 PM Tamás Cserve

[DISCUSS] Maven Dependency Plugin

2024-03-21 Thread Tamás Cservenák
Howdy, I'd would be interested in how users and devs are using maven-dependency-plugin: https://maven.apache.org/plugins/maven-dependency-plugin/ I collected some basic questions I'd like to have answered (but feel free to add more info!): - which goals are "must have" for y

[ANN] Release Maven Dependency Plugin 3.6.1 released

2023-10-23 Thread Michael Osipov
The Apache Maven team is pleased to announce the release of the Maven Dependency Plugin version 3.6.1. https://maven.apache.org/plugins/maven-dependency-plugin/ You should specify the version in your project's plugin configuration: org.apache.maven.plugins maven-dependency-plugin

[RESULT] [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-23 Thread Michael Osipov
Hi, The vote has passed with the following result: +1: Sylwester Lachiewicz, Hervé Boutemy, Benjamin Marwell, Michael Osipov PMC quorum: reached I will promote the artifacts to the central repo, the source release ZIP file and add this release the board report. -

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-22 Thread Michael Osipov
ttps://repository.apache.org/content/repositories/maven-2013/ https://repository.apache.org/content/repositories/maven-2013/org/apache/maven/plugins/maven-dependency-plugin/3.6.1/maven-dependency-plugin-3.6.1-source-release.zip Source release checksum(s): maven-dependency-plugin-3.6.1-source-release.zip sh

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-21 Thread Benjamin Marwell
tory.apache.org/content/repositories/maven-2013/ > > https://repository.apache.org/content/repositories/maven-2013/org/apache/maven/plugins/maven-dependency-plugin/3.6.1/maven-dependency-plugin-3.6.1-source-release.zip > > Source release checksum(s): >

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-21 Thread Herve Boutemy
/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-2013/ > https://repository.apache.org/content/repositories/maven-2013/org/apache/maven/plugins/maven-dependency-plugin/3.6.1/maven-dependency-plugin-3.6.1-source-release.zip > > Source rel

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-21 Thread Sylwester Lachiewicz
rg/jira/projects/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-2013/ > > https://repository.apache.org/content/repositories/maven-2013/org/apache/maven/plugins/maven-dependency-plugin/3.6.1/maven-dependency-plugin-3.6.1-source-release.

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-21 Thread Elliotte Rusty Harold
sitories/maven-2013/org/apache/maven/plugins/maven-dependency-plugin/3.6.1/maven-dependency-plugin-3.6.1-source-release.zip > > Source release checksum(s): > maven-dependency-plugin-3.6.1-source-release.zip > sha512: > 6bdbd4cf4ff355d4e087ee5a7eef24b8812963c4372a6ba5116c8ea8dfdc529

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-21 Thread Elliotte Rusty Harold
> https://repository.apache.org/content/repositories/maven-2013/ > https://repository.apache.org/content/repositories/maven-2013/org/apache/maven/plugins/maven-dependency-plugin/3.6.1/maven-dependency-plugin-3.6.1-source-release.zip > > Source release checksum(s): > mav

[VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-20 Thread Michael Osipov
2013/ https://repository.apache.org/content/repositories/maven-2013/org/apache/maven/plugins/maven-dependency-plugin/3.6.1/maven-dependency-plugin-3.6.1-source-release.zip Source release checksum(s): maven-dependency-plugin-3.6.1-source-release.zip sh

[ANN] Release Maven Dependency Plugin 3.6.0 released

2023-05-22 Thread Michael Osipov
The Apache Maven team is pleased to announce the release of the Maven Dependency Plugin version 3.6.0. https://maven.apache.org/plugins/maven-dependency-plugin/ You should specify the version in your project's plugin configuration: org.apache.maven.plugins maven-dependency-plugin

[ANN] Release Maven Dependency Plugin 3.6.0 released

2023-05-22 Thread Michael Osipov
The Apache Maven team is pleased to announce the release of the Maven Dependency Plugin version 3.6.0. https://maven.apache.org/plugins/maven-dependency-plugin/ You should specify the version in your project's plugin configuration: org.apache.maven.plugins maven-dependency-plugin

[RESULT] [VOTE] Release Maven Dependency Plugin version 3.6.0

2023-05-22 Thread Michael Osipov
Hi, The vote has passed with the following result: +1: Slawomir Jaranowski, Sylwester Lachiewicz, Tamás Cservenák, Guillaume Nodet PMC quorum: reached I will promote the artifacts to the central repo, the source release ZIP file and add this release the board report. -

Re: [VOTE] Release Maven Dependency Plugin version 3.6.0

2023-05-19 Thread Guillaume Nodet
rg/jira/projects/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-1947/ > > https://repository.apache.org/content/repositories/maven-1947/org/apache/maven/plugins/maven-dependency-plugin/3.6.0/maven-dependency-plugin-3.6.0-source-release.zip > &g

Re: [VOTE] Release Maven Dependency Plugin version 3.6.0

2023-05-19 Thread Tamás Cservenák
rg/jira/projects/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-1947/ > > https://repository.apache.org/content/repositories/maven-1947/org/apache/maven/plugins/maven-dependency-plugin/3.6.0/maven-dependency-plugin-3.6.0-source-release.zip > &g

Re: [VOTE] Release Maven Dependency Plugin version 3.6.0

2023-05-19 Thread Sylwester Lachiewicz
> > > > https://repository.apache.org/content/repositories/maven-1947/org/apache/maven/plugins/maven-dependency-plugin/3.6.0/maven-dependency-plugin-3.6.0-source-relea

Re: [VOTE] Release Maven Dependency Plugin version 3.6.0

2023-05-19 Thread Slawomir Jaranowski
rg/jira/projects/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-1947/ > > https://repository.apache.org/content/repositories/maven-1947/org/apache/maven/plugins/maven-dependency-plugin/3.6.0/maven-dependency-plugin-3.6.0-source-release.zip > &g

[VOTE] Release Maven Dependency Plugin version 3.6.0

2023-05-19 Thread Michael Osipov
1947/ https://repository.apache.org/content/repositories/maven-1947/org/apache/maven/plugins/maven-dependency-plugin/3.6.0/maven-dependency-plugin-3.6.0-source-release.zip Source release checksum(s): maven-dependency-plugin-3.6.0-source-release.zip sh

Re: Some queries regarding maven-dependency plugin

2023-05-09 Thread Michael Osipov
Am 2023-05-09 um 12:53 schrieb Kamalpreet Kaur: Hi Everyone, I have been using maven-dependency-plugin for resolving artifact path (goal: properties) Wrong mailing list, use users@ - To unsubscribe, e-mail: dev-unsubscr

Some queries regarding maven-dependency plugin

2023-05-09 Thread Kamalpreet Kaur
Hi Everyone, I have been using maven-dependency-plugin for resolving artifact path (goal: properties) org.apache.maven.plugins maven-dependency-plugin 3.3.0 getArtifactPath properties And accessing the property ${*groupId:artifactId:jar} . * I am interested in knowing the

[ANN] Release Maven Dependency Plugin 3.5.0 released

2023-01-11 Thread Michael Osipov
The Apache Maven team is pleased to announce the release of the Maven Dependency Plugin version 3.5.0. https://maven.apache.org/plugins/maven-dependency-plugin/ You should specify the version in your project's plugin configuration: org.apache.maven.plugins maven-dependency-plugin

[RESULT] [VOTE] Release Maven Dependency Plugin version 3.5.0

2023-01-11 Thread Michael Osipov
Hi, The vote has passed with the following result: +1: Hervé Boutemy, Karl Heinz Marbaise, Slawomir Jaranowski PMC quorum: reached I will promote the artifacts to the central repo, the source release ZIP file and add this release the board report.

Re: [VOTE] Release Maven Dependency Plugin version 3.5.0

2023-01-09 Thread Karl Heinz Marbaise
jira/projects/MDEP/issues Staging repo: https://repository.apache.org/content/repositories/maven-1845/ https://repository.apache.org/content/repositories/maven-1845/org/apache/maven/plugins/maven-dependency-plugin/3.5.0/maven-dependency-plugin-3.5.0-source-release.zip Source release checksum(s): m

Re: [VOTE] Release Maven Dependency Plugin version 3.5.0

2023-01-08 Thread Herve Boutemy
ill a couple of issues left in JIRA: > https://issues.apache.org/jira/projects/MDEP/issues > > Staging repo: > https://repository.apache.org/content/repositories/maven-1845/ > https://repository.apache.org/content/repositories/maven-1845/org/apache/maven/plugins/maven-dependency-plugi

Re: [VOTE] Release Maven Dependency Plugin version 3.5.0

2023-01-08 Thread Jeremy Landis
Sunday, January 8, 2023 5:32:21 PM To: dev@maven.apache.org Subject: Re: [VOTE] Release Maven Dependency Plugin version 3.5.0 Am 2023-01-08 um 23:28 schrieb Slawomir Jaranowski: > +1 > > - parent 39 should be used > - master branch failed after release - fixed > - not sure if we need t

  1   2   3   4   5   6   >