[
https://issues.apache.org/jira/browse/UIMA-5876?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16650744#comment-16650744
]
Marshall Schor commented on UIMA-5876:
--------------------------------------
I've temporarily gone the patch-jar route. I don't feel I could do an adequate
review of the whole release, and the patch-jar route more clearly shows the
(small) patch being done, I think. The build/parent-pom project has a new
src/resources folder that has both the patched jars and the patch.txt itself
for the two plugins; these are preserved in svn.
The logic for building / using: for building the parent pom: the patch jars are
copied to the target folder, and named as an attached artifact with classifier
"checksum-plugin-patch" and "gpg-plugin-patch", with type "jar". This allows
them to be signed/checksummed/deployed.
For use, the apache-release profile now has an install-the-patch step which
copies these from the local .m2 repo over the exact release version in the .m2.
I'll remove this stuff when the plugins get updated.
The other items changed are:
* update parent to current apache-wide pom (21)
* update versions for plugins
* update rat excludes to exclude the .sha512 checksums and the .patch.txt files
* Get compile / build to go under Java 11 (means running with Java 11, not
targeting Java 11) - See summary comment under UIMA-5753
* remove <prerequisites><maven>3.3.9 per warning from maven. replaced with
maven-enforcer-plugin.
* removed as superfluous: for running while building the parent-pom itself:
** special config for remote-resources
** dependency from maven-assembly-plugin to uima-build-resources
** special config for maven-changes-plugin
* for checksum (sha512) and gpg signing: within the apache-release profile:
** copy the pom to the target so it can be checksummed (the checksum plugin
skips attached things unless they're in the target)
** use the standard (but patched) maven-gpg-plugin and checksum-maven-plugin
to sign/checksum and attach the checksums/sigs.
> update uima-wide parent-pom
> ---------------------------
>
> Key: UIMA-5876
> URL: https://issues.apache.org/jira/browse/UIMA-5876
> Project: UIMA
> Issue Type: Improvement
> Components: Build, Packaging and Test
> Affects Versions: parent-pom-11
> Reporter: Marshall Schor
> Assignee: Marshall Schor
> Priority: Minor
> Fix For: parent-pom-12
>
>
> Additional updates beyond UIMA-5856. Remove redundant/outdated versioning
> now provided by current apache-wide parent-pom (21). add common configuration
> for api change report.
> Attempts to use the checksum-maven-plugin reveal that it doesn't work
> correctly, see [https://github.com/nicoulaj/checksum-maven-plugin/issues/63]
> ). Design a work-around that uses Ant scripts, and insure it works both for
> maven-deploy targets (e.g. .m2) and for normal apache distribution targets
> (e.g. project/target ).
> Due to bug in the current implementation of the maven-gpg-plugin ( MGPG-66 ),
> the gpg plugin needs to be run before doing the .sha512 checksumming
> (otherwise the checksums also get signed).
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
