Danny, Sorry for so late reply. Personally I don't know how to help you, but I know that extensions have complete access to what's going on in Maven, even on plugin execution.
I hope that any expert in this field can give the right pointers to you Enrico Il Dom 2 Feb 2020, 17:48 Danny van Heumen <[email protected]> ha scritto: > Hi all, > > This is still an open issue. Can anyone provide any insight. Any > lead is welcome, also pointers in the direction of another plug-in > (source code). > > I have had a look at maven-dependency-plugin, but that seems to work > with the versions prescribed in the pom.xml file. In this case I'd say > that that is not reliable as a different version could be resolved at > execution time. > > Thanks in advance, > > Danny > > > > On Fri, 27 Dec 2019 14:29:22 +0100 > "Danny van Heumen" <[email protected]> wrote: > > > Hi, > > > > I've recently done a few contributions to pgpverify-maven-plugin. Some > > of these include verifying more maven artifacts at build time, more > > specifically: > > - build plug-ins, > > - build plug-in dependencies, > > - "dependencies in atypical locations", right now only annotation > > processors for maven-compiler-plugin. > > > > I'm stuck with an issue where build plug-in dependencies (and also the > > annotation processors) are only listed by maven's API, but no further > > resolution is performed. (AFAICT) > > > > My goal is to validate the totality of loaded jar files, for as far as > > reasonably possible. So, I would like to verify both the build plug-in > > dependencies as well as all of their (indirect) dependencies. > > > > So, I have a few questions regarding this goal: > > 1. Is there a specific part of the API where I can find all > > predetermined resolved versions of these artifacts? > > 2. Alternatively, is there an API that I can call that will perform > > dependency (conflict) resolution exactly as Maven would? > > 3. Alternatively, is there some in which I can find all resolved > > versions, such that I could manually generate a transitive closure of > > dependencies and then lookup the corresponding versions? > > > > Any recommendations would be very welcome. I'm not an experienced > > maven plug-in developers, so I may have missed important details. > > > > Kind regards, > > Danny > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [email protected] > > For additional commands, e-mail: [email protected] > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >
