[jira] [Updated] (MSHARED-992) maven-shared-components uses commons-io 2.5 which is vulnerable

2021-06-11 Thread Dwayne E Culbertson (Jira)
[ https://issues.apache.org/jira/browse/MSHARED-992?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Dwayne E Culbertson updated MSHARED-992: Description:   Note: This vulnerability has been assigned CVE-2021-29425. h4.

[jira] [Updated] (MNG-7168) maven-shared-utils package is vulnerable to Command Injection

2021-06-11 Thread Dwayne E Culbertson (Jira)
[ https://issues.apache.org/jira/browse/MNG-7168?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Dwayne E Culbertson updated MNG-7168: - Description:   Project:[https://github.com/apache/maven-shared-utils/pull/40]

[jira] [Closed] (MINDEXER-127) Maven repository indexing error: java.nio.channels.OverlappingFileLockException

2021-06-11 Thread Sylwester Lachiewicz (Jira)
[ https://issues.apache.org/jira/browse/MINDEXER-127?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sylwester Lachiewicz closed MINDEXER-127. - Resolution: Fixed > Maven repository indexing error: >

[jira] [Commented] (MJAVADOC-681) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Michael Osipov (Jira)
[ https://issues.apache.org/jira/browse/MJAVADOC-681?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361822#comment-17361822 ] Michael Osipov commented on MJAVADOC-681: - Maybe we can reconvince him referencing this issue?!

[jira] [Commented] (MJAVADOC-681) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Robert Scholte (Jira)
[ https://issues.apache.org/jira/browse/MJAVADOC-681?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361805#comment-17361805 ] Robert Scholte commented on MJAVADOC-681: - Ah, I didn't recognize ... as a timestamp. In that

[jira] [Comment Edited] (MJAVADOC-681) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Piotr Zygielo (Jira)
[ https://issues.apache.org/jira/browse/MJAVADOC-681?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361802#comment-17361802 ] Piotr Zygielo edited comment on MJAVADOC-681 at 6/11/21, 1:59 PM: --

[jira] [Commented] (MJAVADOC-681) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Piotr Zygielo (Jira)
[ https://issues.apache.org/jira/browse/MJAVADOC-681?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361802#comment-17361802 ] Piotr Zygielo commented on MJAVADOC-681: bq. AFAIK to have reproducible builds, you're already

[jira] [Commented] (MJAVADOC-681) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MJAVADOC-681?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361797#comment-17361797 ] Pavel Varchenko commented on MJAVADOC-681: -- I'll try to create a pull request via github. I'm

[jira] [Commented] (MJAVADOC-681) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Michael Osipov (Jira)
[ https://issues.apache.org/jira/browse/MJAVADOC-681?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361791#comment-17361791 ] Michael Osipov commented on MJAVADOC-681: - At least the javadoc would be consistent. Java 14 is

[jira] [Moved] (MJAVADOC-681) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Robert Scholte (Jira)
[ https://issues.apache.org/jira/browse/MJAVADOC-681?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Scholte moved MNG-7171 to MJAVADOC-681: -- Key: MJAVADOC-681 (was: MNG-7171) Affects

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Robert Scholte (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361772#comment-17361772 ] Robert Scholte commented on MNG-7171: - AFAIK to have reproducible builds, you're already forced to use

[jira] [Commented] (MNG-7170) Allow to associate pomFile/${basedir} with DefaultProjectBuilder.build(ModelSource, ...)

2021-06-11 Thread Mickael Istria (Jira)
[ https://issues.apache.org/jira/browse/MNG-7170?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361756#comment-17361756 ] Mickael Istria commented on MNG-7170: - I've implemented a workaround:

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Michael Osipov (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361755#comment-17361755 ] Michael Osipov commented on MNG-7171: - Isn't there? Even better, I did not try, honestly. >

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361753#comment-17361753 ] Pavel Varchenko commented on MNG-7171: -- What if just create a pull request here

[jira] [Comment Edited] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361753#comment-17361753 ] Pavel Varchenko edited comment on MNG-7171 at 6/11/21, 1:21 PM: What if

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361748#comment-17361748 ] Pavel Varchenko commented on MNG-7171: -- Looks like it was changed here but not sure

[jira] [Comment Edited] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Michael Osipov (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361688#comment-17361688 ] Michael Osipov edited comment on MNG-7171 at 6/11/21, 12:56 PM: Which JDK

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Piotr Zygielo (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361735#comment-17361735 ] Piotr Zygielo commented on MNG-7171: [~michael-o] why do you think there is such problem in jdk8? >

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Michael Osipov (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361713#comment-17361713 ] Michael Osipov commented on MNG-7171: - Pure crap, ignorant from Oracle. [~rfscholte], can you have this

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Piotr Zygielo (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361692#comment-17361692 ] Piotr Zygielo commented on MNG-7171: JDK-8261784 > Reproducible build does not work for

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Michael Osipov (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361688#comment-17361688 ] Michael Osipov commented on MNG-7171: - Which JDK bug exactly? Robert could as for a backport. >

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Piotr Zygielo (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361679#comment-17361679 ] Piotr Zygielo commented on MNG-7171: javadoc was 'fixed' in JDK14+. I doubt it would be ported back to

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Michael Osipov (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361676#comment-17361676 ] Michael Osipov commented on MNG-7171: - Show diffoscope diff. > Reproducible build does not work for

[jira] [Commented] (MNG-7170) Allow to associate pomFile/${basedir} with DefaultProjectBuilder.build(ModelSource, ...)

2021-06-11 Thread Robert Scholte (Jira)
[ https://issues.apache.org/jira/browse/MNG-7170?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361672#comment-17361672 ] Robert Scholte commented on MNG-7170: - I wouldn't gamble on any Maven 3 releases. Maven 3.8.1 was

[jira] [Commented] (MNG-7170) Allow to associate pomFile/${basedir} with DefaultProjectBuilder.build(ModelSource, ...)

2021-06-11 Thread Mickael Istria (Jira)
[ https://issues.apache.org/jira/browse/MNG-7170?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361669#comment-17361669 ] Mickael Istria commented on MNG-7170: - > The model itself shouldn't need this information. The Reader

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361662#comment-17361662 ] Pavel Varchenko commented on MNG-7171: -- This is not a problem to set notimestamp in the plugin

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Michael Osipov (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361609#comment-17361609 ] Michael Osipov commented on MNG-7171: - Not Java 11, but our deviation to provide {{notimestamp}} by

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361600#comment-17361600 ] Pavel Varchenko commented on MNG-7171: -- [~michael-o] do you mean default values for java 11? >

[jira] [Commented] (MNG-7170) Allow to associate pomFile/${basedir} with DefaultProjectBuilder.build(ModelSource, ...)

2021-06-11 Thread Robert Scholte (Jira)
[ https://issues.apache.org/jira/browse/MNG-7170?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361594#comment-17361594 ] Robert Scholte commented on MNG-7170: - By the way, I don't expect that we will spend time on

[jira] [Commented] (MNG-7170) Allow to associate pomFile/${basedir} with DefaultProjectBuilder.build(ModelSource, ...)

2021-06-11 Thread Robert Scholte (Jira)
[ https://issues.apache.org/jira/browse/MNG-7170?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361593#comment-17361593 ] Robert Scholte commented on MNG-7170: - I wanted to investigate if this field method is still required.

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Michael Osipov (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361591#comment-17361591 ] Michael Osipov commented on MNG-7171: - I talked about this with [~rfscholte] recently. [~hboutemy]

[jira] [Commented] (MNG-7170) Allow to associate pomFile/${basedir} with DefaultProjectBuilder.build(ModelSource, ...)

2021-06-11 Thread Mickael Istria (Jira)
[ https://issues.apache.org/jira/browse/MNG-7170?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361585#comment-17361585 ] Mickael Istria commented on MNG-7170: - Patch

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361541#comment-17361541 ] Pavel Varchenko commented on MNG-7171: -- Thank you! I tested on 11.0.11.hs-adpt. On 15.0.1.hs-adpt it

[jira] [Commented] (MNG-7161) Error thrown during uninstalling of JAnsi

2021-06-11 Thread Guy Brand (Jira)
[ https://issues.apache.org/jira/browse/MNG-7161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361527#comment-17361527 ] Guy Brand commented on MNG-7161: [~michael-o] [~gnodet] Are you ok with doing the proposed option #2 ? We

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Piotr Zygielo (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361504#comment-17361504 ] Piotr Zygielo commented on MNG-7171: I believe it's due to {quote} {quote} in {{index.html}}. I think

[jira] [Issue Comment Deleted] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Piotr Zygielo (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Piotr Zygielo updated MNG-7171: --- Comment: was deleted (was: I believe it's due to {quote} {quote} in {{index.html}}. I think you shall

[jira] [Commented] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Piotr Zygielo (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17361503#comment-17361503 ] Piotr Zygielo commented on MNG-7171: I believe it's due to {quote} {quote} in {{index.html}}. I think

[jira] [Updated] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Pavel Varchenko updated MNG-7171: - Description: I've created a project for reproducible build from this guide

[jira] [Updated] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Pavel Varchenko updated MNG-7171: - Description: I've created a project for reproducible build from this guide

[jira] [Updated] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Pavel Varchenko updated MNG-7171: - Description: I've created a project for reproducible build from this guide

[jira] [Updated] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Pavel Varchenko updated MNG-7171: - Description: I've created a project for reproducible build from this guide

[jira] [Updated] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Pavel Varchenko updated MNG-7171: - Description: I've created a project for reproducible build from this guide

[jira] [Updated] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
[ https://issues.apache.org/jira/browse/MNG-7171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Pavel Varchenko updated MNG-7171: - Description: I've created a project for reproducible build from this guide

[jira] [Created] (MNG-7171) Reproducible build does not work for maven-javadoc-plugin

2021-06-11 Thread Pavel Varchenko (Jira)
Pavel Varchenko created MNG-7171: Summary: Reproducible build does not work for maven-javadoc-plugin Key: MNG-7171 URL: https://issues.apache.org/jira/browse/MNG-7171 Project: Maven Issue