Re: [VOTE] Release Apache Maven Compiler Plugin version 3.12.0

2023-12-17 Thread Herve Boutemy
+1

Reproducible Builds ok: reference build done on *nix with JDK 21 and umask 022

see instructions to check RB yourself on a release:
https://maven.apache.org/developers/release/maven-project-release-procedure.html#call-the-vote

Regards,

Hervé

On 2023/12/15 21:04:29 Slawomir Jaranowski wrote:
> Hi,
> 
> We solved 22 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225=12353748
> 
> There are still a couple of issues left in JIRA:
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MCOMPILER%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC
> 
> Staging repo:
> https://repository.apache.org/content/repositories/maven-2049/
> https://repository.apache.org/content/repositories/maven-2049/org/apache/maven/plugins/maven-compiler-plugin/3.12.0/maven-compiler-plugin-3.12.0-source-release.zip
> 
> Source release checksum(s):
> maven-compiler-plugin-3.12.0-source-release.zip - SHA-512 :
> 026e4affea10983e11c0b951ecc75b45deae32b9938d03f962174416f79c0bf75f31985e7add2e5312ae1d2c6a9b26f1f7bb54da7a214a0c3db275e0f41bf572
> 
> Staging site:
> https://maven.apache.org/plugins-archives/maven-compiler-plugin-LATEST/
> 
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
> 
> Vote open for at least 72 hours.
> 
> [ ] +1
> [ ] +0
> [ ] -1
> 
> -- 
> Sławomir Jaranowski
> 

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: Maven profiles and dependency resolution

2023-12-17 Thread Hervé Boutemy
Hi Piotr,

Thinking at it carefully, AFAIK it is a design decision done in early Maven 2 
design time:
- POM properties don't influence dependencies
- profile activation influence dependencies
(I don't know for CLI properties)

The rationale is that:

1. POM properties are expected to be fixed once a release is done and designed 
as internal details: injecting from one project to its dependencies would 
create quite complex to detect collisions.

2. profiles have been thought as a way to define multiple variants of a 
project, 
with a limited number of supported value on each project: having dependencies 
influenced by profile (defined on CLI) makes sense

HTH

Hervé

Le vendredi 15 décembre 2023, 09:34:27 CET Piotr P. Karwasz a écrit :
> Hello,
> 
> While looking at differences in generated CycloneDX SBOMs[1] I
> stumbled upon an incoherence in the way Maven builds models of a
> project's dependencies.
> 
> On one hand the properties defined in a project have no effect on the
> effective models of dependencies. For example in:
> 
> 
>   3.0.0-beta1
> 
> 
>   
> 
>   org.springframework
>   spring-boot-dependencies
>   3.2.0
>   pom
>   import
> 
>   
> 
> 
> the `log4j2.version` property will have no effect on the resolved
> effective model of `spring-boot-dependencies`, even if the POM also
> uses a `log4j2.version` variable[2].
> 
> On the other hand profiles change the effective model of a dependency.
> E.g. using:
> 
> 
>   
> commons-pool
> commons-pool
> 1.5.4
>   
> 
> 
> the effective model of `commons-pool` will have a different
> `` element if I run the project with
> `-Prelease` or without it.
> 
> Is this an intentional choice or is it a bug? I suppose that profiles
> might influence the other artifacts in a Maven reactor, but I am not
> sure external dependencies should be influenced as well.
> 
> Piotr
> 
> [1] https://github.com/CycloneDX/cyclonedx-maven-plugin/issues/432
> [2]
> https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-depende
> ncies/3.2.0/
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org





-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: [VOTE] Release Apache Maven Compiler Plugin version 3.12.0

2023-12-17 Thread Slawomir Jaranowski
Hi  Elliotte

niedz., 17 gru 2023 o 14:18 Elliotte Rusty Harold 
napisał(a):

> Quick check of the repo shows two PRs from an external contributor
> that have been open and unaddressed since June:
>
> https://github.com/apache/maven-compiler-plugin/pull/192
> https://github.com/apache/maven-compiler-plugin/pull/191
>
> I haven't reviewed it yet — no one has — but at first glance it passes
> the CI and meets the bureaucratic requirements — JIRA issue, CLA, etc.
> — for acceptance so I think it's a serious contribution and worth a
> look. I'll review them now, but to support external contributors, it's
> helpful if PRs can be reviewed and good ones merged in advance of a
> release cut.
>
>
Generally you are right ... we should review and give an feedback for every
PR ... but we have limited time as volunteer for it ... and so on

So I cut as is after taking the decision that we have enough valuable
changes and fixes.

On the other side it is a very interesting topic - how to work with users
and contributors on issues, PR and releases ... of course to discuss on
separate thread.

On Fri, Dec 15, 2023 at 9:05 PM Slawomir Jaranowski
>  wrote:
> >
> > Hi,
> >
> > We solved 22 issues:
> >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225=12353748
> >
> > There are still a couple of issues left in JIRA:
> >
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MCOMPILER%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC
> >
> > Staging repo:
> > https://repository.apache.org/content/repositories/maven-2049/
> >
> https://repository.apache.org/content/repositories/maven-2049/org/apache/maven/plugins/maven-compiler-plugin/3.12.0/maven-compiler-plugin-3.12.0-source-release.zip
> >
> > Source release checksum(s):
> > maven-compiler-plugin-3.12.0-source-release.zip - SHA-512 :
> >
> 026e4affea10983e11c0b951ecc75b45deae32b9938d03f962174416f79c0bf75f31985e7add2e5312ae1d2c6a9b26f1f7bb54da7a214a0c3db275e0f41bf572
> >
> > Staging site:
> > https://maven.apache.org/plugins-archives/maven-compiler-plugin-LATEST/
> >
> > Guide to testing staged releases:
> > https://maven.apache.org/guides/development/guide-testing-releases.html
> >
> > Vote open for at least 72 hours.
> >
> > [ ] +1
> > [ ] +0
> > [ ] -1
> >
> > --
> > Sławomir Jaranowski
>
>
>
> --
> Elliotte Rusty Harold
> elh...@ibiblio.org
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>

-- 
Sławomir Jaranowski


Re: [VOTE] Release Apache Maven Compiler Plugin version 3.12.0

2023-12-17 Thread Elliotte Rusty Harold
Quick check of the repo shows two PRs from an external contributor
that have been open and unaddressed since June:

https://github.com/apache/maven-compiler-plugin/pull/192
https://github.com/apache/maven-compiler-plugin/pull/191

I haven't reviewed it yet — no one has — but at first glance it passes
the CI and meets the bureaucratic requirements — JIRA issue, CLA, etc.
— for acceptance so I think it's a serious contribution and worth a
look. I'll review them now, but to support external contributors, it's
helpful if PRs can be reviewed and good ones merged in advance of a
release cut.

On Fri, Dec 15, 2023 at 9:05 PM Slawomir Jaranowski
 wrote:
>
> Hi,
>
> We solved 22 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225=12353748
>
> There are still a couple of issues left in JIRA:
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MCOMPILER%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-2049/
> https://repository.apache.org/content/repositories/maven-2049/org/apache/maven/plugins/maven-compiler-plugin/3.12.0/maven-compiler-plugin-3.12.0-source-release.zip
>
> Source release checksum(s):
> maven-compiler-plugin-3.12.0-source-release.zip - SHA-512 :
> 026e4affea10983e11c0b951ecc75b45deae32b9938d03f962174416f79c0bf75f31985e7add2e5312ae1d2c6a9b26f1f7bb54da7a214a0c3db275e0f41bf572
>
> Staging site:
> https://maven.apache.org/plugins-archives/maven-compiler-plugin-LATEST/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for at least 72 hours.
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> --
> Sławomir Jaranowski



-- 
Elliotte Rusty Harold
elh...@ibiblio.org

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



[ANN] Maven Resolver 2.0.0-alpha-5 released

2023-12-17 Thread Tamás Cservenák
Howdy,

The Apache Maven team is pleased to announce the release of the
Maven Resolver 2.0.0-alpha-5.

https://maven.apache.org/resolver-archives/resolver-2.0.0-alpha-5/

This is a fourth *PREVIEW* (alpha-4 was scrubbed) release of upcoming Maven
Resolver 2.0.0 meant for users of Resolver to pick it up and adapt code if
needed.

Note: MRESOLVER-446 has been rolled back, client code should not depend on
the version scheme selector or version scheme scheme provider present in
alpha-5, as it is not to stay.

Release Notes - Maven Resolver - Version 2.0.0-alpha-5

** Bug
* [MRESOLVER-455] - JDK transport: Improper handling of ofInputStream
body handlers in case of error
** New Feature
* [MRESOLVER-415] - New transport: JDK11 HTTP/2 capable
* [MRESOLVER-416] - New transport: Jetty, HTTP/2 capable
* [MRESOLVER-446] - Version Scheme Provider
* [MRESOLVER-451] - Expose version range processing strategies
** Improvement
* [MRESOLVER-335] - Better resolver errors for Artifact Not Found
* [MRESOLVER-445] - Simplify session handling, move out logic from
session builder
* [MRESOLVER-447] - Expose flatten method on RepositorySystem
* [MRESOLVER-450] - Add a RepositoryCache#computeIfAbsent method
** Task
* [MRESOLVER-443] - Integrate "configuration page generator" tool into
build/site
* [MRESOLVER-448] - Align Jetty versions
* [MRESOLVER-449] - Make HTTP transports use common test and server
* [MRESOLVER-454] - Update page "Upgrading Resolver"
** Dependency upgrade
* [MRESOLVER-452] - Update to Maven 4.0.0-alpha-9

Have fun,
Maven Team


[RESULT][VOTE] Release Maven Resolver 2.0.0-alpha-5

2023-12-17 Thread Tamás Cservenák
Howdy,

The vote has passed with the following result:

+1b: Sylwester, Guillaume, Slawomir, Tamas

PMC quorum: reached

I will promote the artifacts to the central repo, the source release ZIP
file and add this release to the board report.

T


[ANN] Maven Site Plugin 4.0.0-M13 released

2023-12-17 Thread Michael Osipov
The Apache Maven team is pleased to announce the release of the Maven 
Site Plugin, version 4.0.0-M13.


https://maven.apache.org/plugins/maven-site-plugin/


Release Notes - Maven Site Plugin - Version 4.0.0-M13

** Bug
* [MSITE-997] - Non-localized site directory 
DocumentRenderingContext passed
* [MSITE-998] - MavenReport#setReportOutputDirectory(File) is 
called too late


** Dependency upgrade
* [MSITE-999] - Upgrade plugins and components (in ITs)


Please also note for this new major version: 
https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack


Enjoy,

-The Apache Maven team

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



[RESULT] [VOTE] Release Maven Site Plugin version 4.0.0-M13

2023-12-17 Thread Michael Osipov

Hi,

The vote has passed with the following result:

+1: Michael Osipov, Slawomir Jaranowski, Sylwester Lachiewicz, Tamás 
Cservenák


PMC quorum: reached

I will promote the artifacts to the central repo, the source release ZIP 
file

and add this release the board report.


Re: [VOTE] Release Maven Resolver 2.0.0-alpha-5

2023-12-17 Thread Slawomir Jaranowski
+1

czw., 14 gru 2023 o 18:58 Tamás Cservenák  napisał(a):

> Howdy,
>
> Note: This is a fourth (alpha-4 was scrubbed) preview release of Resolver
> 2.0.0, that would allow any downstream consumers to try it out and adapt.
> It contains session and transport related bug fixes and various other new
> features and improvements. The new HTTP/2 transports are now proclaimed
> "official".
>
> For configuration changes, see
>
> https://maven.apache.org/resolver-archives/resolver-LATEST/configuration.html
>
> IF the vote is successful, the staging site will NOT be moved to
> https://maven.apache.org/resolver/ but instead will be made reachable from
> https://maven.apache.org/resolver-archives/resolver-2.0.0-alpha-5/ only.
>
> The 1.9.18 is still the "latest stable" release of Maven Resolver.
>
> ===
>
> We solved 14 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12320628=12354032
>
> There are still some issues in JIRA:
> https://issues.apache.org/jira/projects/MRESOLVER/issues
>
> Staging repository:
> https://repository.apache.org/content/repositories/maven-2048
>
> Source release SHA512:
>
> d2c8e9e2f6f4d42e84dd5b301802aa1a98b4f36a1bbe850c2800d050495f3a0774fbc96f448d02007fe6b3062380f6eec62e326295b417ac68ff61c63c5535e5
>
> Staging site:
> https://maven.apache.org/resolver-archives/resolver-LATEST/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for 72 hours.
>
> [ ] +1
> [ ] +0
> [ ] -1
>


-- 
Sławomir Jaranowski