Re: maven-gwt-plugin 1.2 documentation

2010-01-12 Thread Henri Gomez
Oups, right,it should be on mojo-dev.

Sorry

2010/1/11 Wayne Fay wayne...@gmail.com:
 It's not the wrong list, I reported some miss in the gwt plugin to Nicolas.
 Hopefully, he'll fix them quickly.

 I think Jason's point is that this discussion belongs on the mojo-dev
 or mojo-users list, not Maven dev, since this is a Mojo plugin...

 Wayne

 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: [VOTE] Release Maven SCM 1.3 (Take 2)

2010-01-12 Thread Mark Struberg
+1

LieGrue,
strub

--- On Mon, 1/11/10, Olivier Lamy ol...@apache.org wrote:

 From: Olivier Lamy ol...@apache.org
 Subject: [VOTE] Release Maven SCM 1.3 (Take 2)
 To: Maven Developers List dev@maven.apache.org
 Date: Monday, January 11, 2010, 5:42 PM
 Hi,
 
 In preparation of the Release Plugin release, I'd like to
 release Maven Scm 1.3.
 
 We solved 33 issues :
 http://jira.codehaus.org/secure/ReleaseNote.jspa?version=14523styleName=TextprojectId=10527Create=Create.
 
 Staging repo:
 https://repository.apache.org/content/repositories/maven-024/
 
 Staging site:
 Scm : http://maven.apache.org/scm-1.3
 Scm Plugin : http://maven.apache.org/scm-1.3/maven-scm-plugin
 
 Guide to testing staged releases:
 http://maven.apache.org/guides/development/guide-testing-releases.html
 
 Vote open for 72 hours.
 
 [ ] +1
 [ ] +0
 [ ] -1
 
 Here my +1.
 
 Thanks,
 --
 Olivier
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 
 


  

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Some Maven Philosophy

2010-01-12 Thread Jason van Zyl
I generally don't post my blog entries here, but if anyone has ever wondered 
where Maven comes from at a philosophical level this is it:

http://www.sonatype.com/people/2010/01/sonatype-and-the-foundations-of-the-maven-and-nexus-communities/

Thanks,

Jason

--
Jason van Zyl
Founder,  Apache Maven
http://twitter.com/jvanzyl
--


-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Stephen Connolly
For some reason the site descriptor does not get a signature generated
by the gpg plugin.

As r.a.o now requires all artifacts to be signed, it would appear to
be impossible to close a staged repository.

Or do other people have information to the contrary?

-Stephen

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Stephen Connolly
I've raised http://jira.codehaus.org/browse/MGPG-19 to track the root cause.

A temporary work around would be to disable GPG validation on r.a.o

-Stephen

P.S.

I'm blocked from releasing Surefire 2.5 due to this issue

2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
 For some reason the site descriptor does not get a signature generated
 by the gpg plugin.

 As r.a.o now requires all artifacts to be signed, it would appear to
 be impossible to close a staged repository.

 Or do other people have information to the contrary?

 -Stephen


-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Daniel Kulp
 
Why does the site descriptor need to be released as part of the plugin?  Why 
not release surefire without it?   

It's definitely a bug, but I'm failing to see why it's a blocker for now.

Dan



On Tue January 12 2010 11:56:28 am Stephen Connolly wrote:
 I've raised http://jira.codehaus.org/browse/MGPG-19 to track the root
  cause.
 
 A temporary work around would be to disable GPG validation on r.a.o
 
 -Stephen
 
 P.S.
 
 I'm blocked from releasing Surefire 2.5 due to this issue
 
 2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
  For some reason the site descriptor does not get a signature generated
  by the gpg plugin.
 
  As r.a.o now requires all artifacts to be signed, it would appear to
  be impossible to close a staged repository.
 
  Or do other people have information to the contrary?
 
  -Stephen
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 

-- 
Daniel Kulp
dk...@apache.org
http://www.dankulp.com/blog

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Jason van Zyl
The site stuff needs to be completely decoupled from releases. It such a 
horrible coupling and causes nothing but problems. Release and the 
documentation that goes along with it are completely separate.

On 2010-01-12, at 12:08 PM, Daniel Kulp wrote:

 
 Why does the site descriptor need to be released as part of the plugin?  
 Why 
 not release surefire without it?   
 
 It's definitely a bug, but I'm failing to see why it's a blocker for now.
 
 Dan
 
 
 
 On Tue January 12 2010 11:56:28 am Stephen Connolly wrote:
 I've raised http://jira.codehaus.org/browse/MGPG-19 to track the root
 cause.
 
 A temporary work around would be to disable GPG validation on r.a.o
 
 -Stephen
 
 P.S.
 
 I'm blocked from releasing Surefire 2.5 due to this issue
 
 2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
 For some reason the site descriptor does not get a signature generated
 by the gpg plugin.
 
 As r.a.o now requires all artifacts to be signed, it would appear to
 be impossible to close a staged repository.
 
 Or do other people have information to the contrary?
 
 -Stephen
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 
 
 -- 
 Daniel Kulp
 dk...@apache.org
 http://www.dankulp.com/blog
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 

Thanks,

Jason

--
Jason van Zyl
Founder,  Apache Maven
http://twitter.com/jvanzyl
--


-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Yves Van Steen is out of the office.

2010-01-12 Thread yves . vansteen

I will be out of the office starting  12/01/2010 and will not return until
14/01/2010.

I will respond to your message when I return.

Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Stephen Connolly
Fair enough, but we cannot make releases as things currently stand

2010/1/12 Jason van Zyl ja...@sonatype.com:
 The site stuff needs to be completely decoupled from releases. It such a 
 horrible coupling and causes nothing but problems. Release and the 
 documentation that goes along with it are completely separate.

 On 2010-01-12, at 12:08 PM, Daniel Kulp wrote:


 Why does the site descriptor need to be released as part of the plugin?  
 Why
 not release surefire without it?

 It's definitely a bug, but I'm failing to see why it's a blocker for now.

 Dan



 On Tue January 12 2010 11:56:28 am Stephen Connolly wrote:
 I've raised http://jira.codehaus.org/browse/MGPG-19 to track the root
 cause.

 A temporary work around would be to disable GPG validation on r.a.o

 -Stephen

 P.S.

 I'm blocked from releasing Surefire 2.5 due to this issue

 2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
 For some reason the site descriptor does not get a signature generated
 by the gpg plugin.

 As r.a.o now requires all artifacts to be signed, it would appear to
 be impossible to close a staged repository.

 Or do other people have information to the contrary?

 -Stephen

 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org


 --
 Daniel Kulp
 dk...@apache.org
 http://www.dankulp.com/blog

 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org


 Thanks,

 Jason

 --
 Jason van Zyl
 Founder,  Apache Maven
 http://twitter.com/jvanzyl
 --


 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Stephen Connolly
The root cause seems to be that m-gpg-p does not consider that
project.artifact may have multiple entries (specifically the site
metadata)

We can argue that the site needs to be decoupled from releasing, but
as the site descriptor is one of the artifacts of a project (as
opposed to the site) then the site descriptor needs to be pushed to
the repo too... therefore m-site-p is correct to attach it (but
possibly incorrect attaching it directly to project.artifact)

In any case MGPG-19 reflects this crazy model of attaching artifacts
to a project because m-gpg-p does not look in this (frankly unknown to
me) other way of attaching an artifact.

If we are to fix this it will require re-deploying all the parents
after deploying a new m-gpg-p... all of which I suspect will require
turning off gpg validation on r.a.o first

-Stephen

2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
 Fair enough, but we cannot make releases as things currently stand

 2010/1/12 Jason van Zyl ja...@sonatype.com:
 The site stuff needs to be completely decoupled from releases. It such a 
 horrible coupling and causes nothing but problems. Release and the 
 documentation that goes along with it are completely separate.

 On 2010-01-12, at 12:08 PM, Daniel Kulp wrote:


 Why does the site descriptor need to be released as part of the plugin?  
 Why
 not release surefire without it?

 It's definitely a bug, but I'm failing to see why it's a blocker for now.

 Dan



 On Tue January 12 2010 11:56:28 am Stephen Connolly wrote:
 I've raised http://jira.codehaus.org/browse/MGPG-19 to track the root
 cause.

 A temporary work around would be to disable GPG validation on r.a.o

 -Stephen

 P.S.

 I'm blocked from releasing Surefire 2.5 due to this issue

 2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
 For some reason the site descriptor does not get a signature generated
 by the gpg plugin.

 As r.a.o now requires all artifacts to be signed, it would appear to
 be impossible to close a staged repository.

 Or do other people have information to the contrary?

 -Stephen

 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org


 --
 Daniel Kulp
 dk...@apache.org
 http://www.dankulp.com/blog

 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org


 Thanks,

 Jason

 --
 Jason van Zyl
 Founder,  Apache Maven
 http://twitter.com/jvanzyl
 --


 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org




-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Jason van Zyl
You can use 3.x, I removed the site stuff from the lifecycle :-)

On 2010-01-12, at 12:42 PM, Stephen Connolly wrote:

 Fair enough, but we cannot make releases as things currently stand
 
 2010/1/12 Jason van Zyl ja...@sonatype.com:
 The site stuff needs to be completely decoupled from releases. It such a 
 horrible coupling and causes nothing but problems. Release and the 
 documentation that goes along with it are completely separate.
 
 On 2010-01-12, at 12:08 PM, Daniel Kulp wrote:
 
 
 Why does the site descriptor need to be released as part of the plugin?  
 Why
 not release surefire without it?
 
 It's definitely a bug, but I'm failing to see why it's a blocker for now.
 
 Dan
 
 
 
 On Tue January 12 2010 11:56:28 am Stephen Connolly wrote:
 I've raised http://jira.codehaus.org/browse/MGPG-19 to track the root
 cause.
 
 A temporary work around would be to disable GPG validation on r.a.o
 
 -Stephen
 
 P.S.
 
 I'm blocked from releasing Surefire 2.5 due to this issue
 
 2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
 For some reason the site descriptor does not get a signature generated
 by the gpg plugin.
 
 As r.a.o now requires all artifacts to be signed, it would appear to
 be impossible to close a staged repository.
 
 Or do other people have information to the contrary?
 
 -Stephen
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 
 
 --
 Daniel Kulp
 dk...@apache.org
 http://www.dankulp.com/blog
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 
 
 Thanks,
 
 Jason
 
 --
 Jason van Zyl
 Founder,  Apache Maven
 http://twitter.com/jvanzyl
 --
 
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 
 
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 

Thanks,

Jason

--
Jason van Zyl
Founder,  Apache Maven
http://twitter.com/jvanzyl
--


-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Daniel Kulp

Why is the site descriptor being generated for surefire?

The shade release two weeks ago didn't generate a site file:
http://repo1.maven.org/maven2/org/apache/maven/plugins/maven-shade-plugin/1.3/

and neither did the patch plugin:
http://repo1.maven.org/maven2/org/apache/maven/plugins/maven-patch-
plugin/1.1.1/


Dan



On Tue January 12 2010 12:51:55 pm Stephen Connolly wrote:
 The root cause seems to be that m-gpg-p does not consider that
 project.artifact may have multiple entries (specifically the site
 metadata)
 
 We can argue that the site needs to be decoupled from releasing, but
 as the site descriptor is one of the artifacts of a project (as
 opposed to the site) then the site descriptor needs to be pushed to
 the repo too... therefore m-site-p is correct to attach it (but
 possibly incorrect attaching it directly to project.artifact)
 
 In any case MGPG-19 reflects this crazy model of attaching artifacts
 to a project because m-gpg-p does not look in this (frankly unknown to
 me) other way of attaching an artifact.
 
 If we are to fix this it will require re-deploying all the parents
 after deploying a new m-gpg-p... all of which I suspect will require
 turning off gpg validation on r.a.o first
 
 -Stephen
 
 2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
  Fair enough, but we cannot make releases as things currently stand
 
  2010/1/12 Jason van Zyl ja...@sonatype.com:
  The site stuff needs to be completely decoupled from releases. It such a
  horrible coupling and causes nothing but problems. Release and the
  documentation that goes along with it are completely separate.
 
  On 2010-01-12, at 12:08 PM, Daniel Kulp wrote:
  Why does the site descriptor need to be released as part of the
  plugin?  Why not release surefire without it?
 
  It's definitely a bug, but I'm failing to see why it's a blocker for
  now.
 
  Dan
 
  On Tue January 12 2010 11:56:28 am Stephen Connolly wrote:
  I've raised http://jira.codehaus.org/browse/MGPG-19 to track the root
  cause.
 
  A temporary work around would be to disable GPG validation on r.a.o
 
  -Stephen
 
  P.S.
 
  I'm blocked from releasing Surefire 2.5 due to this issue
 
  2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
  For some reason the site descriptor does not get a signature
  generated by the gpg plugin.
 
  As r.a.o now requires all artifacts to be signed, it would appear to
  be impossible to close a staged repository.
 
  Or do other people have information to the contrary?
 
  -Stephen
 
  -
  To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
  For additional commands, e-mail: dev-h...@maven.apache.org
 
  --
  Daniel Kulp
  dk...@apache.org
  http://www.dankulp.com/blog
 
  -
  To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
  For additional commands, e-mail: dev-h...@maven.apache.org
 
  Thanks,
 
  Jason
 
  --
  Jason van Zyl
  Founder,  Apache Maven
  http://twitter.com/jvanzyl
  --
 
 
  -
  To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
  For additional commands, e-mail: dev-h...@maven.apache.org
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 

-- 
Daniel Kulp
dk...@apache.org
http://www.dankulp.com/blog

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Stephen Connolly
Then project site generation will be borked (even more than usual)

I've no issues using 3.0-SNAPSHOT

2010/1/12 Jason van Zyl ja...@sonatype.com:
 You can use 3.x, I removed the site stuff from the lifecycle :-)

 On 2010-01-12, at 12:42 PM, Stephen Connolly wrote:

 Fair enough, but we cannot make releases as things currently stand

 2010/1/12 Jason van Zyl ja...@sonatype.com:
 The site stuff needs to be completely decoupled from releases. It such a 
 horrible coupling and causes nothing but problems. Release and the 
 documentation that goes along with it are completely separate.

 On 2010-01-12, at 12:08 PM, Daniel Kulp wrote:


 Why does the site descriptor need to be released as part of the plugin?  
 Why
 not release surefire without it?

 It's definitely a bug, but I'm failing to see why it's a blocker for now.

 Dan



 On Tue January 12 2010 11:56:28 am Stephen Connolly wrote:
 I've raised http://jira.codehaus.org/browse/MGPG-19 to track the root
 cause.

 A temporary work around would be to disable GPG validation on r.a.o

 -Stephen

 P.S.

 I'm blocked from releasing Surefire 2.5 due to this issue

 2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
 For some reason the site descriptor does not get a signature generated
 by the gpg plugin.

 As r.a.o now requires all artifacts to be signed, it would appear to
 be impossible to close a staged repository.

 Or do other people have information to the contrary?

 -Stephen

 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org


 --
 Daniel Kulp
 dk...@apache.org
 http://www.dankulp.com/blog

 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org


 Thanks,

 Jason

 --
 Jason van Zyl
 Founder,  Apache Maven
 http://twitter.com/jvanzyl
 --


 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org



 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org


 Thanks,

 Jason

 --
 Jason van Zyl
 Founder,  Apache Maven
 http://twitter.com/jvanzyl
 --


 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Jason van Zyl
Look at the POM lifecycle. The site stuff is wedged in there. I removed this in 
3.x.

http://svn.apache.org/repos/asf/maven/maven-2/tags/maven-2.2.0/maven-core/src/main/resources/META-INF/plexus/components.xml

On 2010-01-12, at 12:59 PM, Daniel Kulp wrote:

 
 Why is the site descriptor being generated for surefire?
 
 The shade release two weeks ago didn't generate a site file:
 http://repo1.maven.org/maven2/org/apache/maven/plugins/maven-shade-plugin/1.3/
 
 and neither did the patch plugin:
 http://repo1.maven.org/maven2/org/apache/maven/plugins/maven-patch-
 plugin/1.1.1/
 
 
 Dan
 
 
 
 On Tue January 12 2010 12:51:55 pm Stephen Connolly wrote:
 The root cause seems to be that m-gpg-p does not consider that
 project.artifact may have multiple entries (specifically the site
 metadata)
 
 We can argue that the site needs to be decoupled from releasing, but
 as the site descriptor is one of the artifacts of a project (as
 opposed to the site) then the site descriptor needs to be pushed to
 the repo too... therefore m-site-p is correct to attach it (but
 possibly incorrect attaching it directly to project.artifact)
 
 In any case MGPG-19 reflects this crazy model of attaching artifacts
 to a project because m-gpg-p does not look in this (frankly unknown to
 me) other way of attaching an artifact.
 
 If we are to fix this it will require re-deploying all the parents
 after deploying a new m-gpg-p... all of which I suspect will require
 turning off gpg validation on r.a.o first
 
 -Stephen
 
 2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
 Fair enough, but we cannot make releases as things currently stand
 
 2010/1/12 Jason van Zyl ja...@sonatype.com:
 The site stuff needs to be completely decoupled from releases. It such a
 horrible coupling and causes nothing but problems. Release and the
 documentation that goes along with it are completely separate.
 
 On 2010-01-12, at 12:08 PM, Daniel Kulp wrote:
 Why does the site descriptor need to be released as part of the
 plugin?  Why not release surefire without it?
 
 It's definitely a bug, but I'm failing to see why it's a blocker for
 now.
 
 Dan
 
 On Tue January 12 2010 11:56:28 am Stephen Connolly wrote:
 I've raised http://jira.codehaus.org/browse/MGPG-19 to track the root
 cause.
 
 A temporary work around would be to disable GPG validation on r.a.o
 
 -Stephen
 
 P.S.
 
 I'm blocked from releasing Surefire 2.5 due to this issue
 
 2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
 For some reason the site descriptor does not get a signature
 generated by the gpg plugin.
 
 As r.a.o now requires all artifacts to be signed, it would appear to
 be impossible to close a staged repository.
 
 Or do other people have information to the contrary?
 
 -Stephen
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 
 --
 Daniel Kulp
 dk...@apache.org
 http://www.dankulp.com/blog
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 
 Thanks,
 
 Jason
 
 --
 Jason van Zyl
 Founder,  Apache Maven
 http://twitter.com/jvanzyl
 --
 
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 
 
 -- 
 Daniel Kulp
 dk...@apache.org
 http://www.dankulp.com/blog
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 

Thanks,

Jason

--
Jason van Zyl
Founder,  Apache Maven
http://twitter.com/jvanzyl
--


-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Dennis Lundberg
Jason van Zyl wrote:
 The site stuff needs to be completely decoupled from releases. It such a 
 horrible coupling and causes nothing but problems. Release and the 
 documentation that goes along with it are completely separate.

That might be so, but the site descriptor is needed for (site)
inheritance reasons and therefor needs to be deployed to the repo.

 On 2010-01-12, at 12:08 PM, Daniel Kulp wrote:
 
 Why does the site descriptor need to be released as part of the plugin?  
 Why 
 not release surefire without it?   

 It's definitely a bug, but I'm failing to see why it's a blocker for now.

 Dan



 On Tue January 12 2010 11:56:28 am Stephen Connolly wrote:
 I've raised http://jira.codehaus.org/browse/MGPG-19 to track the root
 cause.

 A temporary work around would be to disable GPG validation on r.a.o

 -Stephen

 P.S.

 I'm blocked from releasing Surefire 2.5 due to this issue

 2010/1/12 Stephen Connolly stephen.alan.conno...@gmail.com:
 For some reason the site descriptor does not get a signature generated
 by the gpg plugin.

 As r.a.o now requires all artifacts to be signed, it would appear to
 be impossible to close a staged repository.

 Or do other people have information to the contrary?

 -Stephen
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org

 -- 
 Daniel Kulp
 dk...@apache.org
 http://www.dankulp.com/blog

 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org

 
 Thanks,
 
 Jason
 
 --
 Jason van Zyl
 Founder,  Apache Maven
 http://twitter.com/jvanzyl
 --
 
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 
 


-- 
Dennis Lundberg

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: [VOTE] Release Maven Clean Plugin 2.4

2010-01-12 Thread Olivier Lamy
+1

2010/1/10 Benjamin Bentmann benjamin.bentm...@udo.edu:
 Hi,

 We solved 2 issues:
 http://jira.codehaus.org/secure/ReleaseNote.jspa?projectId=11128version=14882

 There are still a couple of issues left in JIRA:
 http://jira.codehaus.org/secure/IssueNavigator.jspa?reset=truepid=11128status=1

 Staging repo:
 https://repository.apache.org/content/repositories/maven-022/

 Staging site:
 http://maven.apache.org/plugins/maven-clean-plugin-2.4/

 Guide to testing staged releases:
 http://maven.apache.org/guides/development/guide-testing-releases.html

 Vote open for 72 hours.

 [ ] +1
 [ ] +0
 [ ] -1

 +1 from me.


 Benjamin

 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org





-- 
Olivier

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Brett Porter

On 13/01/2010, at 4:59 AM, Daniel Kulp wrote:

 
 Why is the site descriptor being generated for surefire?

Because it has an inherited site descriptor to share across the subprojects:

http://svn.apache.org/viewvc/maven/surefire/tags/surefire-2.5/src/site/site.xml?view=log

For Stephen to work around this, he could remove that from target/checkout and 
then run release:perform again (And put it back for site deployment).

We should look into why GPG isn't going the right thing regardless, otherwise 
it may affect other projects (in which case, Brian may need to implemented some 
exclusion rule for site descriptors on the check).

- Brett

--
Brett Porter
br...@apache.org
http://brettporter.wordpress.com/





-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: site descriptor and the lifecycle (was: repository.apache.org, gpg signatures and site:attach-descriptor)

2010-01-12 Thread Brett Porter

On 13/01/2010, at 7:53 AM, Dennis Lundberg wrote:

 Jason van Zyl wrote:
 The site stuff needs to be completely decoupled from releases. It such a 
 horrible coupling and causes nothing but problems. Release and the 
 documentation that goes along with it are completely separate.
 
 That might be so, but the site descriptor is needed for (site)
 inheritance reasons and therefor needs to be deployed to the repo.

Yep, that's right.

It's not actually coupled to the release, it is coupled to the POM lifecycle. I 
agree with Jason that that isn't the best, so probably in 3.0 that goal needs 
to be added to your POM by hand when you have a site descriptor to deploy (or 
the site plugin might change how it does things in some other way).

I don't agree with the statement release and the documentation that goes along 
with it are completely separate, as I find that a useful way to work in 
general, and it is fundamental to publishing things like Javadoc and JXR, 
however it isn't really relevant to this problem as you've said.

- Brett

--
Brett Porter
br...@apache.org
http://brettporter.wordpress.com/





-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Wendy Smoak
On Tue, Jan 12, 2010 at 9:43 AM, Stephen Connolly
stephen.alan.conno...@gmail.com wrote:
 For some reason the site descriptor does not get a signature generated
 by the gpg plugin.

 As r.a.o now requires all artifacts to be signed, it would appear to
 be impossible to close a staged repository.

If it's going in the repo, I'd like to see it signed... but this
hasn't been happening up to now, so it probably shouldn't block this
release.

The archetype catalog is another file that may be a problem, I noticed
it wasn't signed in a recent Struts release.

Is the list of files that require a signature configurable?

-- 
Wendy

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: site descriptor and the lifecycle (was: repository.apache.org, gpg signatures and site:attach-descriptor)

2010-01-12 Thread Jason van Zyl

On 2010-01-12, at 5:52 PM, Brett Porter wrote:

 
 On 13/01/2010, at 7:53 AM, Dennis Lundberg wrote:
 
 Jason van Zyl wrote:
 The site stuff needs to be completely decoupled from releases. It such a 
 horrible coupling and causes nothing but problems. Release and the 
 documentation that goes along with it are completely separate.
 
 That might be so, but the site descriptor is needed for (site)
 inheritance reasons and therefor needs to be deployed to the repo.
 
 Yep, that's right.
 

No. It doesn't. I'm not planning on using the site plugin or Maven 3 and no one 
should have this stuff baked in by default. So now we can't use PGP validation 
because the site descriptor doesn't work which has nothing to do with trying to 
get the build deployed.

 It's not actually coupled to the release, it is coupled to the POM lifecycle. 
 I agree with Jason that that isn't the best, so probably in 3.0 that goal 
 needs to be added to your POM by hand when you have a site descriptor to 
 deploy (or the site plugin might change how it does things in some other way).
 
 I don't agree with the statement release and the documentation that goes 
 along with it are completely separate, as I find that a useful way to work 
 in general, and it is fundamental to publishing things like Javadoc and JXR, 
 however it isn't really relevant to this problem as you've said.
 

I'll qualify that and say completely separate actions. In many cases 
documentation is not necessarily generated by Maven. Another process may tie 
these things together but it should not happen in the build.

 - Brett
 
 --
 Brett Porter
 br...@apache.org
 http://brettporter.wordpress.com/
 
 
 
 
 
 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org
 

Thanks,

Jason

--
Jason van Zyl
Founder,  Apache Maven
http://twitter.com/jvanzyl
--


-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Brian Fox
We should definitely fix this, both in the GPG and in Nexus. Currently
it expects all files to be signed and this is the first one we've come
across that wasn't signed. I'll disable the rule now until it's sorted
out and close the repo for you.

Stephen, what ended up being the fix for the rest of the sigs? This
morning it was complaining about all the sigs.

On Tue, Jan 12, 2010 at 5:53 PM, Wendy Smoak wsm...@gmail.com wrote:
 On Tue, Jan 12, 2010 at 9:43 AM, Stephen Connolly
 stephen.alan.conno...@gmail.com wrote:
 For some reason the site descriptor does not get a signature generated
 by the gpg plugin.

 As r.a.o now requires all artifacts to be signed, it would appear to
 be impossible to close a staged repository.

 If it's going in the repo, I'd like to see it signed... but this
 hasn't been happening up to now, so it probably shouldn't block this
 release.

 The archetype catalog is another file that may be a problem, I noticed
 it wasn't signed in a recent Struts release.

 Is the list of files that require a signature configurable?

 --
 Wendy

 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: site descriptor and the lifecycle (was: repository.apache.org, gpg signatures and site:attach-descriptor)

2010-01-12 Thread Brett Porter

On 13/01/2010, at 1:23 PM, Jason van Zyl wrote:

 
 On 2010-01-12, at 5:52 PM, Brett Porter wrote:
 
 
 On 13/01/2010, at 7:53 AM, Dennis Lundberg wrote:
 
 Jason van Zyl wrote:
 The site stuff needs to be completely decoupled from releases. It such a 
 horrible coupling and causes nothing but problems. Release and the 
 documentation that goes along with it are completely separate.
 
 That might be so, but the site descriptor is needed for (site)
 inheritance reasons and therefor needs to be deployed to the repo.
 
 Yep, that's right.
 
 
 No. It doesn't. I'm not planning on using the site plugin or Maven 3 and no 
 one should have this stuff baked in by default. So now we can't use PGP 
 validation because the site descriptor doesn't work which has nothing to do 
 with trying to get the build deployed.

I think we've crossed the streams - Dennis is talking about about how it works 
today, with Maven 2.2.1 - something needs to be fixed for that. It looks like 
this was a bug in the way the site descriptor was attached (otherwise it could 
have affected other use cases you might consider more legitimate :)

As for Maven 3, I already agreed with you on decoupling it by default.

 
 It's not actually coupled to the release, it is coupled to the POM 
 lifecycle. I agree with Jason that that isn't the best, so probably in 3.0 
 that goal needs to be added to your POM by hand when you have a site 
 descriptor to deploy (or the site plugin might change how it does things in 
 some other way).
 
 I don't agree with the statement release and the documentation that goes 
 along with it are completely separate, as I find that a useful way to work 
 in general, and it is fundamental to publishing things like Javadoc and JXR, 
 however it isn't really relevant to this problem as you've said.
 
 
 I'll qualify that and say completely separate actions. In many cases 
 documentation is not necessarily generated by Maven. Another process may tie 
 these things together but it should not happen in the build.

Sure... by default. Flipping to user mode - I would still like to use Maven to 
tie those things together, and in the instance where the documentation is 
generated by a Maven plugin (whether it be the site, dependency pulling docs 
from a repository, docbook, whatever), I'd like to retain the ability to have 
that in a single versioned build. Having them as some kind of sub-build where 
each is a separate action but you can still tie it all together is a possible 
alternative to the lifecycle interweaving mess.

But this is way off in the future stuff - as long as Maven 3 can still do what 
I do today in some way it's all good.

- Brett

--
Brett Porter
br...@apache.org
http://brettporter.wordpress.com/





-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: Nexus Indexer code donation

2010-01-12 Thread Brian Fox
The Maven PMC has voted to move forward with the Indexer code
donation. We will need to move next into the ip clearance phase. We
have also voted to add Brian Demers, Damian Bradicich and Tamas
Cservanak as Maven committers to help support the new code.

--Brian Fox
Maven PMC Char

On Thu, Jan 7, 2010 at 9:55 AM, Brian Fox bri...@infinity.nu wrote:

 What is your proposal here - did you want to vote those 3 people in as 
 committers on the basis of the contribution, or will the existing committers 
 apply patches until the rest of us get to know them? (I don't know who they 
 are, so we may already). Funnily enough these alternatives have been a 
 current topic on gene...@incubator for other projects :)

 I was intentionally vague because I didn't want to imply any type of
 contingency on the committers coming with the code. The committers are
 Tamas Cservanak, Damian Bradicich and Brian Demers. They've all been
 around the periphery of Maven for a while now, on the lists and irc
 etc. It would certainly make maintenance easier if they had commit
 access, but we can judge that on merits separate from the code.

 I did review the incubator threads and it seemed to be the consensus
 that the incubator has it's hands full and that projects should
 incubate subproject code where applicable. I see no value in trying to
 bring this code in through the full incubator since any new committers
 are already familiar with the process and we have proper mentors
 available.


-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: repository.apache.org, gpg signatures and site:attach-descriptor

2010-01-12 Thread Stephen Connolly
2010/1/13 Brian Fox bri...@infinity.nu:
 We should definitely fix this, both in the GPG and in Nexus. Currently
 it expects all files to be signed and this is the first one we've come
 across that wasn't signed. I'll disable the rule now until it's sorted
 out and close the repo for you.

 Stephen, what ended up being the fix for the rest of the sigs? This
 morning it was complaining about all the sigs.


I'm not sure, you'd need to ask Juven.

 On Tue, Jan 12, 2010 at 5:53 PM, Wendy Smoak wsm...@gmail.com wrote:
 On Tue, Jan 12, 2010 at 9:43 AM, Stephen Connolly
 stephen.alan.conno...@gmail.com wrote:
 For some reason the site descriptor does not get a signature generated
 by the gpg plugin.

 As r.a.o now requires all artifacts to be signed, it would appear to
 be impossible to close a staged repository.

 If it's going in the repo, I'd like to see it signed... but this
 hasn't been happening up to now, so it probably shouldn't block this
 release.

 The archetype catalog is another file that may be a problem, I noticed
 it wasn't signed in a recent Struts release.

 Is the list of files that require a signature configurable?

 --
 Wendy

 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org



 -
 To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
 For additional commands, e-mail: dev-h...@maven.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



[VOTE] Release Surefire 2.5 (take 3)

2010-01-12 Thread Stephen Connolly
Hi,

We solved 16 issues:
http://jira.codehaus.org/secure/ReleaseNote.jspa?projectId=10541version=14119styleName=Html

There are still a couple of issues left in JIRA:
http://jira.codehaus.org/secure/IssueNavigator.jspa?reset=truepid=10541status=1

Staging repo:
https://repository.apache.org/content/repositories/maven-034/

Staging site(s):
http://maven.apache.org/plugins/maven-surefire-plugin-2.5/
http://maven.apache.org/plugins/maven-failsafe-plugin-2.5/
http://maven.apache.org/plugins/maven-surefire-report-plugin-2.5/
http://maven.apache.org/surefire/staging/

Guide to testing staged releases:
http://maven.apache.org/guides/development/guide-testing-releases.html

Vote open for 72 hours.

[ ] +1
[ ] +0
[ ] -1

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org