Re: [VOTE] Release maven-compiler-plugin 3.11.0

+1 On GitHub release notes section - "What's Changed" looks like duplicated with previous items inserted by release drafter. wt., 14 lut 2023 o 09:51 Guillaume Nodet napisał(a): > Hi, > I'd like to release Apache Maven Compiler Plugin 3.11.0 > > 7 issues fixed >

Re: [VOTE] Release maven-compiler-plugin 3.11.0

+1 Delany On Tue, 14 Feb 2023 at 10:51, Guillaume Nodet wrote: > Hi, > I'd like to release Apache Maven Compiler Plugin 3.11.0 > > 7 issues fixed > https://issues.apache.org/jira/projects/MCOMPILER/versions/12351444 > > draft github release notes (sadly only for people with write access as it's

JDK 20 Release Candidate and Deprecation

Welcome to the latest OpenJDK Quality Outreach update! The first Release Candidates of JDK 20 have been released [1] as per the schedule [2]. At this stage, only P1 issues will be evaluated. And with the JDK 20 General Availability sets for March 21st, it is now time to fully focus on JDK 21.

Re: [VOTE] Release maven-compiler-plugin 3.11.0

+1 Reproducible Build ok: reference build done with JDK 17 on *nix Regards, Hervé On 2023/02/14 08:51:00 Guillaume Nodet wrote: > Hi, > I'd like to release Apache Maven Compiler Plugin 3.11.0 > > 7 issues fixed > https://issues.apache.org/jira/projects/MCOMPILER/versions/12351444 > > draft

Re: [VOTE] Release maven-compiler-plugin 3.11.0

+1 wt., 14 lut 2023, 09:51 użytkownik Guillaume Nodet napisał: > Hi, > I'd like to release Apache Maven Compiler Plugin 3.11.0 > > 7 issues fixed > https://issues.apache.org/jira/projects/MCOMPILER/versions/12351444 > > draft github release notes (sadly only for people with write access as it's

[ANN] Maven Site Plugin 4.0.0-M5 released

The Apache Maven team is pleased to announce the release of the Maven Site Plugin, version 4.0.0-M5. https://maven.apache.org/plugins/maven-site-plugin/ Release Notes - Maven Site Plugin - Version 4.0.0-M5 ** Bug * [MSITE-220] - site:run mojo will not display Javadoc or JXR report

[ANN] Apache Maven Reporting Impl 4.0.0-M4 released

The Apache Maven team is pleased to announce the release of the Maven Reporting Impl version 4.0.0-M4. https://maven.apache.org/shared/maven-reporting-impl/ Release Notes - Maven Shared Components - Version maven-reporting-impl-4.0.0-M4 ** New Feature * [MSHARED-1168] - Add support for

Re: Maven 3.9.0 plexus-utils issue in extension

Maybe really a backport is the way to go. Please check in and out and I will happily merge if this fixes the problem for components like yours. I was able to backport and test it sucessfully, see https://github.com/apache/maven/pull/999 Btw, I'll explore a reflection hack to mitigate the

Re: [VOTE] Release maven-compiler-plugin 3.11.0

Am 2023-02-14 um 09:51 schrieb Guillaume Nodet: Hi, I'd like to release Apache Maven Compiler Plugin 3.11.0 7 issues fixed https://issues.apache.org/jira/projects/MCOMPILER/versions/12351444 draft github release notes (sadly only for people with write access as it's a draft:() :

Re: [VOTE] Release Maven Fluido Skin version 2.0.0-M3

Am 2023-02-12 um 19:49 schrieb Michael Osipov: IMPORTANT: Requires Maven Site Plugin 4.0.0-M5 vote/staging repo! Hi, We solved 5 issues: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317926=12352919 There are still a couple of issues left in JIRA:

[RESULT] [VOTE] Release Maven Site Plugin version 4.0.0-M5

Hi, The vote has passed with the following result: +1: Michael Osipov, Hervé Boutemy, Slawomir Jaranowski PMC quorum: reached I will promote the artifacts to the central repo, the source release ZIP file and add this release the board report.

[RESULT] [VOTE] Release Apache Maven Reporting Impl 4.0.0-M4

Hi, The vote has passed with the following result: +1: Michael Osipov, Hervé Boutemy, Slawomir Jaranowski PMC quorum: reached I will promote the artifacts to the central repo, the source release ZIP file and add this release the board report.

Re: CVEs in maven-compat via toolchains

On 15 Feb 2023, at 8:30, Tamás Cservenák wrote: This artifact ceased to exist (well, to be produced) since. Sweet - dropped the dependency and all good - and re-released. Cheers, Mark --- "The ease with which a change can be implemented has no relevance at all to whether it is the right

Re: CVEs in maven-compat via toolchains

No, it doesn't. Somewhere around 3.0-alpha-3 (?) the toolchains were pulled into maven https://github.com/apache/maven/commit/5377165201decef84c10ad00b0ecef18935e0539 And I guess some reshuffle happened, and finally it ended up in maven-core. This artifact ceased to exist (well, to be produced)

Re: CVEs in maven-compat via toolchains

On 15 Feb 2023, at 1:19, Elliotte Rusty Harold wrote: That's extremely old and seems unmaintained and never released. You probably want the maven-toolchains-plugin Isn't that for USING toolchains - not adding tool chain support to a plugin? Will do some more digging. --- "The ease with

Re: CVEs in maven-compat via toolchains

Hi, On 14.02.23 11:22, Mark Derricutt wrote: Hey all, I was alerted the other day about a security issue with my clojure-maven-plugin apparently pulling in log4j 1.2, but using the dependency:tree plugin showed nothing. Seems this is due to dependencies being overridden by newer maven

Re: CVEs in maven-compat via toolchains

On Tue, Feb 14, 2023 at 5:23 AM Mark Derricutt wrote: > > Hey all, > > I was alerted the other day about a security issue with my > clojure-maven-plugin apparently pulling in log4j 1.2, but using the > dependency:tree plugin showed nothing. Interesting discovery. It sounds like the security tool

Re: [VOTE] Release maven-compiler-plugin 3.11.0

+1 (non-binding) Tested on several projects (on Linux and JDK 19.0.2). No issue found. Petr --- Original Message --- On Tuesday, February 14th, 2023 at 09:51, Guillaume Nodet wrote: > > > Hi, > I'd like to release Apache Maven Compiler Plugin 3.11.0 > > 7 issues fixed >

CVEs in maven-compat via toolchains

Hey all, I was alerted the other day about a security issue with my clojure-maven-plugin apparently pulling in log4j 1.2, but using the dependency:tree plugin showed nothing. Seems this is due to dependencies being overridden by newer maven versions, anyway - I use toolchains in the plugin

Re: [VOTE] Release maven-compiler-plugin 3.11.0

+1 On Tue, Feb 14, 2023 at 9:51 AM Guillaume Nodet wrote: > Hi, > I'd like to release Apache Maven Compiler Plugin 3.11.0 > > 7 issues fixed > https://issues.apache.org/jira/projects/MCOMPILER/versions/12351444 > > draft github release notes (sadly only for people with write access as it's > a

Re: [VOTE] Release maven-compiler-plugin 3.11.0

Hi, +1 from me. Kind regards Karl Heinz Marbaise On 14.02.23 09:51, Guillaume Nodet wrote: Hi, I'd like to release Apache Maven Compiler Plugin 3.11.0 7 issues fixed https://issues.apache.org/jira/projects/MCOMPILER/versions/12351444 This link seemed to be incorrect. Try this one:

Re: [VOTE] Release maven-compiler-plugin 3.11.0

Hi, +1 from me. Kind regards Karl Heinz Marbaise On 14.02.23 09:51, Guillaume Nodet wrote: Hi, I'd like to release Apache Maven Compiler Plugin 3.11.0 7 issues fixed https://issues.apache.org/jira/projects/MCOMPILER/versions/12351444 This link seemed to be incorrect. Try this one:

[VOTE] Release maven-compiler-plugin 3.11.0

Hi, I'd like to release Apache Maven Compiler Plugin 3.11.0 7 issues fixed https://issues.apache.org/jira/projects/MCOMPILER/versions/12351444 draft github release notes (sadly only for people with write access as it's a draft:() :