On Sat, May 24, 2025 at 6:27 PM Manfred Moser <manf...@simpligility.ca> wrote:
> I also find it amazing that we have to justify and vote for upgrading. > Why not the inverse ... we always upgrade by default and we do a vote on > demand only. Then we decide for supporting old, outdated, and hence > often insecure stuff (runtime, dependencies and so on) instead because > ... well.. I don't know. I call FUD. Maven is mostly in control of its own dependencies, and those third party dependencies we do use generally are supported on Java 8. Spotless (build time only) is the only notable exception I can think of, and I'd be happy to ditch that. We don't run with outdated dependencies or unsupported JDKs. When we have outdated dependencies, it's because no one has pressed the Squash and Merge button on a dependabot PR. It has nothing to do with Java versions. -- Elliotte Rusty Harold elh...@ibiblio.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
