Re: How to suppress meta tags 'generator', 'date' in Doxia Site Renderer?

2024-03-11 Thread Michael Osipov
Yes, read here please: 
https://lists.apache.org/thread/vj7twmhm4b10zk0smko4tw8b4klto4bj

On 2024/03/09 08:26:10 Alexander Kriegisch wrote:
> I would have mentioned Asciidoctor, had I believed that it was related
> to the problem. Besides, the Doxia version in the 'generator' tag is
> Doxia-related and so is the 'date' one. So, it came as somewhat of a
> surprise that Asciidoctor, while not messing with the former, overrules
> the setting for the latter, because it has its own timestamp setting.
> That it has it makes sense, because it is also a stand-alone docs
> generator with Doxia out of the picture. That setting just happens to
> write the identical tag. It was hard to diagnose, so it took me a while.
> 
> Do you think, you can do something about making the Doxia version or the
> whole 'generator' tag optional?
> 
> Regards
> --
> Alexander Kriegisch
> https://scrum-master.de
> 
> 
> Michael Osipov schrieb am 08.03.2024 um 20:48:
> > On 2024/03/07 10:24:07 Alexander Kriegisch wrote:
> >> Thanks, Michael,
> >>
> >> for challenging my problem description and asking for a reproducer. When
> >> trying to reproduce in a green-field project, skipGenerationDate=true
> >> was actually enough to suppress the timestamp meta tag on pages in
> >> default formats. As soon, however, as HTML pages generated from asciidoc
> >> sources using asciidoctor-maven-plugin come into play, the pages will
> >> contain timestamps. I think, I will investigate further in that
> >> direction about why that happens and whether it can be suppressed.
> > 
> > You should have mentioned Asciidoctor much much earlier then I would have 
> > told you that it completely circumvents the Doxia Sink API and does its own 
> > thing with direct passthrough. Therefore, the output is out of our control.
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
> 
> 

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org



[ANN] Apache Maven GPG Plugin 3.2.0 Released

2024-03-11 Thread Tamás Cservenák
Howdy,

The Apache Maven team is pleased to announce the release of the Apache
Maven GPG Plugin, version 3.2.0

This plugin signs all of the project's attached artifacts with GnuPG or BC.

https://maven.apache.org/plugins/maven-gpg-plugin/

You should specify the version in your project's plugin configuration:


  org.apache.maven.plugins
  maven-gpg-plugin
  3.2.0


You can download the appropriate sources etc. from the download page:

https://maven.apache.org/plugins/maven-gpg-plugin/download.cgi

Release Notes - Maven GPG Plugin - Version 3.2.0

** Bug
* [MGPG-85] - Regression in maven-metadata for SNAPSHOTs between 1.6
and 3.0.1
* [MGPG-98] - non-reproducible pom.xml
* [MGPG-99] - Passcode byte array provided to gpg executable on stdin
is not terminated
* [MGPG-100] - Fix Temporary File Information Disclosure Vulnerability
** New Feature
* [MGPG-106] - Introduce second signer implementation based on Bouncy
Castle
** Improvement
* [MGPG-101] - Switch to Junit5
* [MGPG-102] - Drop maven-artifact-transfer used by sign-and-deploy-file
* [MGPG-105] - Stop propagating bad practices; but allow for "compat
mode"
* [MGPG-110] - The sign-and-deploy-file mojo POM validation is off
** Task
* [MGPG-103] - Fix Windows CI
* [MGPG-107] - Settle on JUnit 5 assertions
* [MGPG-108] - Update plugin site doco
** Dependency upgrade
* [MGPG-104] - Update to 3.9.6, drop the cruft, minimum baseline
remains 3.2.5

Have fun,
-The Apache Maven team