Re: Maven JXR 2.4 site.

2014-09-30 Thread Karl Heinz Marbaise
Hi James, On 9/29/14 6:11 PM, James Nord (jnord) wrote: Hi all, The default google page when you search for maven-jxr-plugin is http://maven.apache.org/plugins/maven-jxr-plugin/ which is version 2.3 rather than the up-to-date http://maven.apache.org/jxr/maven-jxr-plugin/ This confused me

RE: Maven JXR 2.4 site.

2014-09-30 Thread James Nord (jnord)
Hi Karl -Original Message- From: Karl Heinz Marbaise [mailto:khmarba...@gmx.de] Sent: 30 September 2014 07:28 To: Maven Users List Subject: Re: Maven JXR 2.4 site. I have created a redirect http://maven.apache.org/plugins/maven-jxr-plugin/ to

RE: Maven JXR 2.4 site.

2014-09-30 Thread James Nord (jnord)
Sorry don’t know what happened with my mailer there - hadn't finished writing and wasn't ready for sending. The re-direct works - but shouldn't it redirect to the plugin page rather than the top level jxr page? ie. Would the redirect not be better as

Re: Can I alter packaging with Maven?

2014-09-30 Thread Anders Hammar
It is possible. One way is to use a generic packaging plugin like the maven-assembly-plugin. If that doesn't fit your desires, or you want a nicer solution, writting your own plugin is a different way. For example, have a look at the Android Maven Plugin which creates android archives. That being

Re: Can I alter packaging with Maven?

2014-09-30 Thread Stephen Connolly
In general, if you are building different things, you should have multiple modules. Do not fear having more than one module. The common code goes in a common module Then the other two modules build the desktop app and the web app with a dependency on the common module. To paraphrase a movie

Re: Can I alter packaging with Maven?

2014-09-30 Thread Tamás Cservenák
... just don't end up as maj. Kong https://www.youtube.com/watch?v=JlSQAZEp3PA On Tue, Sep 30, 2014 at 11:38 AM, Stephen Connolly stephen.alan.conno...@gmail.com wrote: In general, if you are building different things, you should have multiple modules. Do not fear having more than one

Re: Can I alter packaging with Maven?

2014-09-30 Thread Les Hartzman
Thanks Anders. I'll take a look at Jenkins. Sounds like an interesting learning experience. Les On Tue, Sep 30, 2014 at 2:33 AM, Anders Hammar and...@hammar.net wrote: It is possible. One way is to use a generic packaging plugin like the maven-assembly-plugin. If that doesn't fit your

Re: Can I alter packaging with Maven?

2014-09-30 Thread Les Hartzman
Cute :-) I was thinking about this as well. I'm dealing with people that don't know what maven is (or spring or svn or git ...), so I'm looking for what options I can present. On Tue, Sep 30, 2014 at 2:38 AM, Stephen Connolly stephen.alan.conno...@gmail.com wrote: In general, if you are

Re: Can I alter packaging with Maven?

2014-09-30 Thread Stephen Connolly
Of course one of my long term goals is to teach KK how to use Maven... He keeps going to maven expecting a fight... And lo he gets one. I keep trying to unwind his battles but every time I unwind one he's started two more... In short, do not use the way Jenkins abuses maven as a way to learn how

Maven, Dependencies and Vulnerabilities

2014-09-30 Thread David Dillard
Hi, I've been working on an internal presentation on how letting Maven's dependency mediation feature select versions of transitive dependencies can introduce vulnerabilities into a product and how to deal with that problem. Unfortunately, it's a very manual process and I was thinking that

Re: Can I alter packaging with Maven?

2014-09-30 Thread Anders Hammar
I was only referring to Jenkins as to look at how a war file could be used both as a normal war file being installed in a web container as well as a jar file (with a war extension) to be used as a standalone application. Look at it purely from a Java perspective and not how Maven might be abused

Re: Can I alter packaging with Maven?

2014-09-30 Thread Laird Nelson
On Tue, Sep 30, 2014 at 11:03 AM, Stephen Connolly stephen.alan.conno...@gmail.com wrote: In short, do not use the way Jenkins abuses maven as a way to learn how to use maven... Is there a laundry list of abuses somewhere? I've always been made faintly queasy by the Jenkins Maven job but it

Re: Maven, Dependencies and Vulnerabilities

2014-09-30 Thread Paul Benedict
There is a Maven Changes Plugin which projects can use to list out changes to their project. http://maven.apache.org/plugins/maven-changes-plugin/ Regarding CVE, Redhat has a Maven plugin to find victim dependencies:

Re: Maven, Dependencies and Vulnerabilities

2014-09-30 Thread Jeremy Long
There are commercial solutions (sonatype, contrast, blackduck, palamida, etc.) and FOSS solutions (dependency-check, victims, retire.js, etc.) to identify and report on known vulnerabilities. I would recommend looking at these solutions (note, I am the main contributed to dependency-check). A

Re: Maven, Dependencies and Vulnerabilities

2014-09-30 Thread Ron Wheeler
A side note: you can specify version ranges if you want to leave it up to Maven to select the latest version. It makes it harder to have a repeatable build or to determine what version was used to build your artifact. I generally like to pick the versions of dependencies and Eclipse/STS's

Re: Maven site:deploy hosting providers??

2014-09-30 Thread Hervé BOUTEMY
it works with multi-modules: http://maven.apache.org/plugins/maven-scm-publish-plugin/examples/multi-module-configuration.html Regards, Hervé Le lundi 29 septembre 2014 11:45:28 Kevin Burton a écrit : I got that working.. but I think it would not work with multi-modules? I have it working

Re: Maven JXR 2.4 site.

2014-09-30 Thread Hervé BOUTEMY
update done Regards, Hervé Le mardi 30 septembre 2014 07:39:00 James Nord a écrit : Sorry don’t know what happened with my mailer there - hadn't finished writing and wasn't ready for sending. The re-direct works - but shouldn't it redirect to the plugin page rather than the top level jxr

Re: Maven, Dependencies and Vulnerabilities

2014-09-30 Thread Mark Derricutt
On 1 Oct 2014, at 7:44, David Dillard wrote: Hi, I've been working on an internal presentation on how letting Maven's dependency mediation feature select versions of transitive dependencies can introduce vulnerabilities into a product and how to deal with that problem. Unfortunately, it's

Re: Maven JXR 2.4 site.

2014-09-30 Thread Karl Heinz Marbaise
Hi James, On 9/30/14 9:39 AM, James Nord (jnord) wrote: Sorry don’t know what happened with my mailer there - hadn't finished writing and wasn't ready for sending. The re-direct works - but shouldn't it redirect to the plugin page rather than the top level jxr page? ie. Would the redirect

RE: Maven JXR 2.4 site.

2014-09-30 Thread James Nord (jnord)
Thanks again. /James -Original Message- From: Hervé BOUTEMY [mailto:herve.bout...@free.fr] Sent: 30 September 2014 22:00 To: Maven Users List Subject: Re: Maven JXR 2.4 site. update done Regards, Hervé Le mardi 30 septembre 2014 07:39:00 James Nord a écrit : Sorry

Re: Can I alter packaging with Maven?

2014-09-30 Thread Manfred Moser
Thank you Stephen for that note. You just made my day and gave me a good laugh. Good luck with teaching KK ;-) Stephen Connolly wrote on 30.09.2014 11:03: Of course one of my long term goals is to teach KK how to use Maven... He keeps going to maven expecting a fight... And lo he gets one.

SunCertPathBuilderException on release:perform goal when we have Maven Proxy settings?

2014-09-30 Thread Shaik Baji
Hi, I am new to maven-release-plugin. I am using maven-release-plugin 2.5.1 and it is working fine when I don't have any proxy configuration in my maven *setting.xml* file. But if I configured my proxy setting then it is throwing *SunCertPathBuilderException *on executing *release:perform* goal.

Re: SunCertPathBuilderException on release:perform goal when we have Maven Proxy settings?

2014-09-30 Thread JE
unsubscribe On Tue, Sep 30, 2014 at 2:07 PM, Shaik Baji shaikbaji.for...@gmail.com wrote: Hi, I am new to maven-release-plugin. I am using maven-release-plugin 2.5.1 and it is working fine when I don't have any proxy configuration in my maven *setting.xml* file. But if I configured my proxy

maven dependency issue (sqljdbc4.jar not picked up during junit test)

2014-09-30 Thread ghostwolf59
Hi, I am scratching my head on this one. Have this component that rely on MSSQL Server 2008. The one developed this rely on sqljdbc4.jar (v3.0) being added to the local java installation (JAVA_HOME/jre/lib/etc/ I found this a bit silly that each developer working on this component need to tweak