Re: [all] stopping dependabot and security analyses on dormant components

2023-10-04 Thread Phil Steitz
On Tue, Oct 3, 2023 at 1:42 PM Emmanuel Bourg wrote: > > Le 03/10/2023 à 20:18, Bruno Kinoshita a écrit : > > Same for me, I prefer to know ahead of time if there are any issues with > > dependencies. > > But the Commons components are mostly dependency-less, we are flooded by > dependabot request

Re: [ALL] pom.xml should not contain RM details

2023-10-04 Thread Phil Steitz
On Tue, Oct 3, 2023 at 1:26 AM sebb wrote: > > The properties are used by the release plugin. > > But since they are unique to the user, they do not belong in the shared pom. So they should be blank in the component pom? Why do they need to be there at all? Can't they just be provided on the co