Re: How to download an artifact with sources and/or javadocs ?

2010-11-14 Thread Brian Fox
mvn dependency:sources and/or mvn dependency:resolve -Dclassifier=sources or -Dclassifier=javadoc if you use m2eclipse, then it will get the sources/javadocs automatically as needed. On Sun, Nov 14, 2010 at 12:26 PM, piloupy GOTTAPIL wrote: > Hi, > > I've search for nearly half a day, and I did

Re: FYI Repo "hacked"?

2010-11-29 Thread Brian Fox
Lets look at this closely: On Mon, Nov 29, 2010 at 8:36 AM, Jon Strayer wrote: > On the 24th of November my reports build failed.  The failure message is: > Unable to read local copy of metadata: Cannot read metadata from > 'e:\repo\org\apache\maven\skins\maven-default-skin\maven-metadata-java.ne

Re: Maven Central Repository & Bad Checksums

2010-12-02 Thread Brian Fox
We do a little bit of sleuthing when resolving these types of issues to make sure the file hasn't been changed, which is why automatic correction isn't implemented. We are working on process to ensure that no new things come in this way. It can only happen today via the old rsync mechanisms and tho

Re: maven-dependency-plugin 2.2 release?

2010-12-02 Thread Brian Fox
Soon. I resolved a ton of issues at ApacheCon and just ran out of time to wrap it up. I'll be getting back to it in the next week or so. On Wed, Dec 1, 2010 at 10:19 PM, Dan Tran wrote: > me too :-) > > On Wed, Dec 1, 2010 at 10:04 AM, Jim McCaskey > wrote: >> Hello all, >> >> I ran across a pro

Re: webservice for maven artifact search?

2010-12-02 Thread Brian Fox
Repository.apache.org exposes nexus' rest interface --mobile On Dec 2, 2010, at 4:44 PM, Russ Tremain wrote: > anyone know of a web-service interface to any of the public maven artifact > lookup services? > > tia, > -russ > >

Re: How to download transitive dependencies

2010-12-03 Thread Brian Fox
dependency:copy-dependencies sounds like what you want. On Fri, Dec 3, 2010 at 7:41 AM, amaresh mourya wrote: > Hi, > > >     >       >       >        ${project.groupId} >        maven-utils >        ${project.version} >       > >       >       >        log4j >        log4j >        1.2.14 >    

Re: SNAPSHOT with latest timestamp is used, right?

2010-12-06 Thread Brian Fox
You shouldn't mix unique and non-unique versions of the same snapshot artifact --mobile On Dec 6, 2010, at 5:22 PM, "KARR, DAVID (ATTSI)" wrote: > If I have an artifact with version "n.n.n-SNAPSHOT" in my "user" repo > and the same artifact with version "n.n.n-SNAPSHOT" in the "local" nexus > r

Re: How to resolve 'LATEST'

2010-12-17 Thread Brian Fox
Don't use RELEASE or LATEST. On Fri, Dec 17, 2010 at 7:43 AM, Asmann, Roland wrote: > Hi all, > > I'm writing an enforcer-rule, that should check if my parent is the > LATEST version. How can I get the actual version for 'LATEST'? > > Thanks! > > -- > Roland Asmann > Senior Software Engineer > >

Welcome Wayne Fay to the Maven PMC

2011-01-14 Thread Brian Fox
mentation since he's so good at answering questions ;-) Welcome Wayne! --Brian Fox Apache Maven PMC Chair - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org

Re: Maven 3: deploy-file error 500 on Nexus Repo

2011-01-14 Thread Brian Fox
The 500 is an internal error on the Nexus side. We'll need to see your Nexus logs to see what happened. You should send those to the nexus user list for a quicker answer. On Fri, Jan 14, 2011 at 9:01 AM, martib wrote: > > I'm facing a problem under M3.0.2 or 3.0.1 with Nexus Repository >  mvn dep

Re: dependency:build-classpath seems to ignore configuration

2011-01-17 Thread Brian Fox
i don't think the classpath is filtered based on those values in this goal, it just dumps the actual classpath that would match the desired scope. On Mon, Jan 17, 2011 at 10:52 AM, John Anderson wrote: > I am trying to use dependency:build-classpath. If I run "mvn > dependency:analyze" all seems

uk.maven.org mirror ip change

2011-01-19 Thread Brian Fox
AIRN is requiring that Contegix renumber our machines in the UK so tonight one of them will change and tomorrow the other will change. As always, you should address them using http://uk.maven.org to allow failover but I know occasionally people have to poke holes in their firewalls based on ip. --

Re: Using Apache parent pom

2011-02-02 Thread Brian Fox
Hi Craig, there's also release-disc...@apache.org to talk about release processes specific to Apache. On Tue, Feb 1, 2011 at 5:54 PM, Craig L Russell wrote: > Thanks Kalle, looks like the right level for me to master before I ask more > detailed questions. > > Craig > > On Feb 1, 2011, at 2:48 PM

Re: Dependencies get unpacked over and over again

2011-02-03 Thread Brian Fox
fyi, I'll try to cut the release this weekend. On Thu, Feb 3, 2011 at 2:31 PM, Wayne Fay wrote: >> Good news.  I delved into this last week and came up with an even >> better patch, and the developer Brian Fox just applied it! > > Great job, Phillip. We need more

Re: Adding upward compat to maven 2.2.x for settings.xml

2011-02-11 Thread Brian Fox
What new features specifically? On Fri, Feb 11, 2011 at 10:56 AM, Benson Margulies wrote: > Would there be any sympathy for a JIRA asking for a maven 2.2.x change > so that the new features of settings.xml (e.g. mirrors) would be > tolerated by maven 2? Since you all didn't change the conventiona

Re: java.net versus central

2011-02-12 Thread Brian Fox
We are working on this already --mobile On Feb 11, 2011, at 8:34 PM, Benson Margulies wrote: > I am hoping that some person who works at Sonatype will have pity on me. > > People who work for Oracle seem to have strong feeling that they are > only supposed to deliver things to the java.net repo

Re: Deployment in Repository without version in file name?

2011-02-16 Thread Brian Fox
you can also use the dependency plugin to copy/fetch files and strip off the version. On Wed, Feb 16, 2011 at 3:37 AM, Marc Rohlfs wrote: > Another idea might be: > 1. In Your Maven project, create a text file with the following content: > http://your-nexus/your-nexus-repo/${project.artifactId}-$

[Announce] Maven Dependency Plugin 2.2

2011-02-22 Thread Brian Fox
The Maven team is pleased to announce the 2.2 release of the Maven Dependency Plugin: http://maven.apache.org/plugins/maven-dependency-plugin Release Notes - Maven 2.x Dependency Plugin - Version 2.2 ** Bug * [MDEP-138] - unpack of tar files fail with ArchiverException: chmod exit code was

Re: Build Site for parent module, but skip the children?

2011-03-01 Thread Brian Fox
mvn -N site-deploy On Tue, Mar 1, 2011 at 4:50 PM, Brian Ferris wrote: > I have a large multi-module project that I wish to build a site for using > Maven's site functionality.  The trick is that I'd like to avoid building > the sub-module sites as well.  Building the individuals sites for each >

Re: Central Repository IP Address Change?

2011-03-10 Thread Brian Fox
The ip change is part of some networking and hosting upgrades that we've undertaken to ensure the stability of the repository. We actually have 4 systems now that could be serving Central at any given time. There are 2 hosts in the UK and two virtual machines in the US (served from a 6 node cluster

Re: maven-dependency-plugin uses target dir instead of artifacts from repository

2011-04-08 Thread Brian Fox
It's not a hack, the plugin asks maven core to resolve the artifacts and the objects it gets back have file handles. In reactor builds with sibling dependencies, those handles point to the sibling target folder. If you do a compile reactor build, those handles will point to the /target/classes fold

Re: maven-dependency-plugin uses target dir instead of artifacts from repository

2011-04-11 Thread Brian Fox
ect I get target/classes. > > That seems to be the opposite to what you have described? > > /Lucas > > > On 04/08/2011 07:52 PM, Brian Fox wrote: > > It's not a hack, the plugin asks maven core to resolve the artifacts and the > objects it gets back have file han

Re: Enforcer banned dependencies... Not working ?

2011-04-18 Thread Brian Fox
The warning is talking about the plugin versions rule. Off hand nothing jumps out as being wrong with the config to me. It's been too long since I wrote this rule to recall off the top of my head how it's processed. Take a look at the code and see how includes, excludes are handled. There may be so

Re: central repo?

2011-05-05 Thread Brian Fox
This was an attempt to block the constant scrapers that are attempting to crawl the entire repository for no good reason, and the bandwidth isn't free. The index used to serve the search is not the same index used by M2e. Fwiw, the m2e indexes are updated daily now, but I need to see why this inde

Re: central repo?

2011-05-05 Thread Brian Fox
#x27;t anticipate huge numbers of downloads through the search system. > Regards, > >        /james > > -Original Message- > From: Brian Fox [mailto:bri...@infinity.nu] > Sent: 05 May 2011 12:06 > To: Maven Users List > Subject: Re: central repo? > > This was

Re: central repo?

2011-05-05 Thread Brian Fox
On Thu, May 5, 2011 at 7:09 AM, Anders Hammar wrote: > Regarding the "m2e indexes", at what time are they updated? 3:22 CST daily. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: use

Re: central repo?

2011-05-05 Thread Brian Fox
wse > > I had a friend try his system with IE8 and it worked fine.  Needless to say > Chrome and FF work just fine. > > -Jim > > -Original Message- > From: Brian Fox [mailto:bri...@infinity.nu] > Sent: Thursday, May 05, 2011 8:50 AM > To: Maven Users List &g

Re: Problem resolving snapshot version of plugin thru a Mirror

2011-05-05 Thread Brian Fox
> > After debuging Maven I noticed that even having the mirror defined, > SNAPSTHOP version of plugins always were resolved agains Maven`s central > repository (repo1.apache.org). So we found a workaround  overriding central > and snapshot repositories in the setting xml. After that, it worked. > >

Re: central repo?

2011-05-06 Thread Brian Fox
ated. > > -o > > On 2011-05-05, at 12:52 PM, Brian Fox wrote: > >> Than you, i'll let the team know. >> >> Also, we've adjusted how the redirects work and included a static page >> so people don't feel like the repo was hijacked: >> ht

Re: central repo?

2011-05-06 Thread Brian Fox
iving on Central and appearing on Search is minimal. > > Just don't want it forgotten that just as it is in repo1.m.o it may not be in > uk.m.o  (and if it is in the process of being synced could be only be > partially there?) > > Thanks for the quick workaroun

Improvements to Central failover: Temporary IP Change to Central on Monday Night

2011-05-09 Thread Brian Fox
In short, we're moving to a clustered IP for the US Central machines to improve the reliability and get automatic failover. We know some users have firewall rules locked to the existing IP, if that's you, pay attention: We're failing over to the backover IP tonight so we can install the clustered

Re: why I love the maven-dependency plugin

2011-05-18 Thread Brian Fox
On Tue, May 17, 2011 at 3:50 PM, Russ Tremain wrote: > I use the maven-dependency plugin for jar and war packaging. > > It is flexible and non-judgmental. > > This is particularly important when you are converting a large project over > to maven and cannot follow some maven conventions - you may b

Re: Bootstraping a repository manager

2011-05-18 Thread Brian Fox
You don't need to bootsrap it, just setup a repo like Nexus and let it proxy on demand the things you need. In that case a bootstrap might simply mean run all our builds and/or run mvn dependency:go-offline to resolve everything you need. On Wed, May 18, 2011 at 5:21 PM, Heck, Gus (Patrick) wrote

Re: central repo?

2011-05-18 Thread Brian Fox
I just wanted to close the loop on this, http://search.maven.org is now updated incrementally in lockstep with the contents of Central. On Fri, May 6, 2011 at 9:53 AM, Brian Fox wrote: > On Fri, May 6, 2011 at 3:54 AM, Nord, James wrote: >> Hi Brian, >> >> "we i

Re: Bootstraping a repository manager

2011-05-19 Thread Brian Fox
It's also worth mentioning that Nexus Professional's Procurement feature is built for exactly the use case you have. It's meant to have a hard firewall like separation between internal and external artifacts and rules that allow you to approve whitelist/blacklist style, or by wildcard or other runt

Re: Local repo or central repo

2011-05-24 Thread Brian Fox
local first, then it starts looking in configured repositories (from settings, pom, super-pom) On Tue, May 24, 2011 at 10:45 AM, uday shankar wrote: > Hi, > Where does maven pick the jars from (first) local repo or central repo? > > Regards, > Uday > > -- > View this message in context: > http:/

Re: How does one mirror a maven repository?

2012-06-06 Thread Brian Fox
Nexus Pro has functionality that would allow you to do mirroring, we have a bunch of customers doing exactly what you ask. On Fri, Jun 1, 2012 at 12:53 PM, Phillip Hellewell wrote: > Hi, > > Our company would like to mirror our Maven repository at a remote > location. Currently we've been using

Re: why is commons-math3 jar missing from sonatype mirror of central?

2012-06-06 Thread Brian Fox
Found the email Russ ;-) Anyway, repository.s.o isn't intended to be a mirror, it's just a proxy used primarily by us for internal use and for oss users building our stuff. http://search.maven.org has replaced the need to use rso's search as well. Regarding why the files aren't in the repository,

Re: any public nexus repo manager I can use for my project

2012-06-20 Thread Brian Fox
If it's an oss project, then you can use https://docs.sonatype.org/display/Repository/Sonatype+OSS+Maven+Repository+Usage+Guide On Wed, Jun 20, 2012 at 11:37 AM, fachhoch wrote: > we dont a local nexus repo mamnager installed , and we are developers > working in remote locations , our project

Re: Maven Enforcer plugin: can I make it be quiet?

2012-07-19 Thread Brian Fox
Which rule spits that out? This seems unusual. On Thu, Jul 19, 2012 at 6:11 PM, Laird Nelson wrote: > The Maven Enforcer plugin version 1.1.1 outputs a ton of information at the > INFO level that seems to me to be repetitive and uninteresting. Here is an > excerpt from a normal run: > > [INFO]

Central is now being served from a CDN

2012-07-20 Thread Brian Fox
Just over a year ago we evolved the Central architecture to be globally load balanced with 2 servers in the US and 2 more in the UK. This year, we've gone even futher to increase reliability and delivery performance. We evaluated several options and ultimately settled with Edgecast as the delivery

Re: Maven/Nexus metadata interaction question

2012-08-24 Thread Brian Fox
On Fri, Aug 24, 2012 at 5:27 PM, Laird Nelson wrote: > On Fri, Aug 24, 2012 at 1:52 PM, David Hoffer wrote: > >> We have been having nothing but trouble with Nexus and >> Maven3 with the time-stamped snapshots and all the various metadata >> files that Nexus spits out (which confuse Maven and IDE

Re: Maven/Nexus metadata interaction question

2012-08-24 Thread Brian Fox
On Fri, Aug 24, 2012 at 5:43 PM, David Hoffer wrote: > I can't say the whole problem is with Nexus. I can say that the > requirement in Maven3 to always use timestamped snapshots has not be > addressed in a complete way with tools like Nexus and my beloved IDE > IntelliJ. We have hundreds if not

Re: Maven/Nexus metadata interaction question

2012-08-25 Thread Brian Fox
On Sat, Aug 25, 2012 at 6:48 AM, Robert Scholte wrote: > > This sounds like https://jira.codehaus.org/browse/MNG-5324 Agree, that looks like the same thing. I tested all different forms of this with Nexus and the metadata was verified to be correct each time. I didn't check with Maven though, I w

Re: How to optimize maven dependencies to get better performance?

2012-10-16 Thread Brian Fox
The problem below is because your configuration is inside an execution, which when run from the command line like mvm enforcer:enforce won't be activated. Either bind this plugin to a phase as part of your build, or move the configuration element outside the executions block. On Thu, Oct 11, 2012

Re: Can not get a jar from maven central

2012-11-05 Thread Brian Fox
N oone has been blacklisted in a while. Can you give us the headers like shown here: $ curl -I http://repo1.maven.org/maven2/org/apache/avalon/framework/avalon-framework-api/4.3.1/avalon-framework-api-4.3.1.jar HTTP/1.1

Re: snapshot versions and classpath stored in manifest

2013-01-09 Thread Brian Fox
Are you positive you are using jar plugin version 2.3? On Mon, Jan 7, 2013 at 11:26 AM, Anthony Dahanne wrote: > Hello all, > I am using Maven 3 with Nexus 2. > I am building a cli tool (let's call it cli) , which has dependencies on > some other libraries (let's call them dependencyA and depend

Re: Dependency resolution kicks in too early

2013-02-11 Thread Brian Fox
You've run into a non-supported edge case. On Mon, Feb 11, 2013 at 4:17 AM, Reinhard Nägele < reinhard.naeg...@mgm-tp.com> wrote: > Hello, > > A couple of years ago I used a plugin execution in the validate phase to > bootstrap jars that were not available on Maven Central as suggested in > [1].

Re: [ANN] Apache Maven 3.0.5 released

2013-02-24 Thread Brian Fox
Just wanted to bring this to the users list and ensure that those reading the release notes see the security alert for 3.0.4: CVE-2013-0253 Apache Maven Severity: Medium Vendor: The Apache Software Foundation Versions Affected: - Apache Maven 3.0.4 - Apache Maven Wagon 2.1, 2.2, 2.3 Descripti

Fwd: [SECURITY] CVE-2013-0253 Apache Maven 3.0.4

2013-02-24 Thread Brian Fox
-- Forwarded message -- From: Olivier Lamy Date: Sat, Feb 23, 2013 at 9:59 AM Subject: [SECURITY] CVE-2013-0253 Apache Maven 3.0.4 To: annou...@apache.org, annou...@maven.apache.org Cc: Maven Developers List VE-2013-0253 Apache Maven Severity: Medium Vendor: The Apache Softwar

Re: Maven Central Stats: re Most downloaded Maven plugins?

2013-03-18 Thread Brian Fox
Barrie, the stats for all maven artifacts are available to maven committers by logging in to the https://repository.apache.org instance and clicking on "Central Stats" On Thu, Mar 14, 2013 at 9:06 PM, Barrie Treloar wrote: > http://maven.40175.n5.nabble.com/Unpacking-jars-into-target-classes-td57

Re: Unpacking jars into target/classes

2013-03-20 Thread Brian Fox
I haven't had time lately to follow a lot of the user list threads, but this one got my attention so I read the whole thing last night. Without having any background on Joachim's previous threads, and judging everything only based on this one, I was kind of surprised...not in a good way. If this wa

Re: My view on the relative merits of different ways to unpack jars into target/classes

2013-03-21 Thread Brian Fox
That's a good post to sum up all the options. On Thu, Mar 21, 2013 at 8:15 AM, Stephen Connolly wrote: > I think mailing lists are not the best way to explain why different > solutions are to be preferred when ranking against what is best for the > Maven ecosystem as a whole. > > So I wrote a blo

Re: maven deploy artifacts to Nexus repository

2013-03-25 Thread Brian Fox
SCP to Nexus isn't supported, and writing directly to the storage underneath Nexus isn't really supported either. If the concern is about having a password in the settings.xml, take a look at User Token[1]. Ironically this feature started out with a desire to support SCP but for a number of reasons

<    1   2   3   4   5