This is an automated email from the ASF dual-hosted git repository.
gnodet pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven.git
The following commit(s) were added to refs/heads/master by this push:
new 4bffb2a6bc Document deprecation rationale for Artifact version
constants (#11584)
4bffb2a6bc is described below
commit 4bffb2a6bc9f025d2674e2becee74cb0c69c68b5
Author: Anukalp Pandey <[email protected]>
AuthorDate: Wed Jun 17 15:47:36 2026 +0530
Document deprecation rationale for Artifact version constants (#11584)
* Document deprecation rationale for Artifact version constants
* Refine deprecation guidance for Artifact version constants
* docs: use non-alpha since version for Language API deprecation
* docs: mention supply chain risk in RELEASE version deprecation
* docs: clarify security risk of LATEST version in deprecation note
* docs: format @deprecated Javadoc for RELEASE/LATEST constants
* docs: align RELEASE deprecation comment formatting with LATEST
* Remove unrelated Language.java changes
* delete potential
---
.../src/main/java/org/apache/maven/artifact/Artifact.java | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git
a/compat/maven-artifact/src/main/java/org/apache/maven/artifact/Artifact.java
b/compat/maven-artifact/src/main/java/org/apache/maven/artifact/Artifact.java
index bbbdc14d82..7d4e62d5b0 100644
---
a/compat/maven-artifact/src/main/java/org/apache/maven/artifact/Artifact.java
+++
b/compat/maven-artifact/src/main/java/org/apache/maven/artifact/Artifact.java
@@ -37,9 +37,19 @@
*/
public interface Artifact extends Comparable<Artifact> {
+ /**
+ * @deprecated The use of the {@code RELEASE} version is discouraged
because it results
+ * in non-reproducible builds and exposes projects to supply chain attacks.
+ * Use explicit versions instead.
+ */
@Deprecated(since = "4.0.0")
String RELEASE_VERSION = "RELEASE";
+ /**
+ * @deprecated The use of the {@code LATEST} version is discouraged
because it results
+ * in non-reproducible builds and exposes projects to supply chain attacks.
+ * Use explicit versions instead.
+ */
@Deprecated(since = "4.0.0")
String LATEST_VERSION = "LATEST";
