Re: maven release process and Integration test artifact version tracking

2021-04-23 Thread Enrico Olivelli
Zos, you can also use preparationGoals and completionGoals in order to update any other file that it is not in the pom.xml file https://maven.apache.org/maven-release/maven-release-plugin/prepare-mojo.html This is an example of usage in Apache ZooKeeper project:

Re: maven release process and Integration test artifact version tracking

2021-04-23 Thread Benjamin Marwell
Hi Zos, you probably want to write @project.version@ for your artifact. It will get replaced with the version number of the enclosing module. It is listed in the usage page (as a side note): https://maven.apache.org/plugins/maven-invoker-plugin/usage.html Here is a random example of one of

CVE-2021-26291: Apache Maven: block repositories using http by default

2021-04-23 Thread Brian Fox
Apache Maven may follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository.