This is an automated email from the ASF dual-hosted git repository.
jungm pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomee.git
The following commit(s) were added to refs/heads/main by this push:
new 9904b058e4 Pin Apache RAT to 0.16.1 for reliable parallel checks
9904b058e4 is described below
commit 9904b058e43b7ea0386d61a842b2d526a6f97e7d
Author: Markus Jung <[email protected]>
AuthorDate: Tue Oct 27 20:06:44 2026 +0100
Pin Apache RAT to 0.16.1 for reliable parallel checks
RAT 0.17 and 0.18 share mutable command-line option groups across module
checks. During parallel Maven builds, one check can reset another's
options and silently drop exclusions, causing generated target files to
be reported as having unapproved licenses.
Pin the plugin to 0.16.1 until the upstream fix is released. RAT-573
addresses the shared-state races and is fixed for RAT 1.0.0:
https://issues.apache.org/jira/browse/RAT-573
Verified with a reproduction in legacy-server, 320 parallel RAT checks
across eight modules, and the full 163-module reactor RAT check. An
unlicensed source-file control still fails as expected.
---
pom.xml | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 8ca7807bb6..7c8e17f9bd 100644
--- a/pom.xml
+++ b/pom.xml
@@ -278,7 +278,8 @@
<plugin>
<groupId>org.apache.rat</groupId>
<artifactId>apache-rat-plugin</artifactId>
- <version>0.18</version>
+ <!-- RAT 0.17/0.18 share mutable option groups across parallel
checks and can lose exclusions. -->
+ <version>0.16.1</version>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
