Le mer. 12 févr. 2025 à 15:57, sebb <seb...@gmail.com> a écrit : >> [...] > > > > It's possible to setup GH to push snapshots but that requires setting up > > secrets and makes the workflows more complex. I think infra might need to > > get involved for the secrets part, not aure. > > My point is that it should not be necessary to publish or install > snapshots merely to extract dependencies within a project. > Further, if publication/installation is needed, then one cannot rely > 100% on the output: the poms might have changed since last push.
Maybe the Maven people see it differently: Tell what really is in the output of the build rather than rely on what the POM says (the input to the build). IIUC, here the information to rely on is the one that is the result of the CI after some commit. And (I guess that) the same can be achieved in a local build where "install" would update the "~/.m2" directory. Gilles --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
