nomis commented on issue #1422: URL: https://github.com/apache/maven-release/issues/1422#issuecomment-3612077119
> 1. With the release version > > Building 1. with regular CI often fails when it tries to deploy that (as it is not a SNAPSHOT). This means that the configured CI build doesn't distinguish between snapshot and release builds. I may also fail to do this in pull requests and then depending on available permissions be a vulnerability allowing a third party contributor to deploy releases. > Therefore I propose to include a tag in the commit message which makes most CI system skip building it. The purpose of the CI build is to verify the software builds and although the commit is likely to only be to the version string, it should be built by CI. It's inappropriate to disable CI builds by default on what is the _released_ version of the software (i.e. the one build that it is most important that it's successful). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
