[
https://issues.apache.org/jira/browse/VELOCITY-638?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Benjamin Bentmann updated VELOCITY-638:
---------------------------------------
Attachment: VELOCITY-638.patch
> Lock down version of reporting plugins in POM
> ---------------------------------------------
>
> Key: VELOCITY-638
> URL: https://issues.apache.org/jira/browse/VELOCITY-638
> Project: Velocity
> Issue Type: Improvement
> Components: Build, Engine
> Affects Versions: 1.6-beta1
> Reporter: Benjamin Bentmann
> Priority: Minor
> Attachments: VELOCITY-638.patch
>
>
> Leaving plugin versions unspecified (i.e. blindly relying on LATEST) is a bad
> practice as it sacrifies build reproducibility. Even if the POM itself is not
> used for the actual build, it would promote best practices to consumers when
> fixed.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
