available in the artifact itself. Any
ideas?
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
inistic? If not, can we
> make it deterministic so that it is easier to discover and debug dependency
> issues?
>
> Thanks!
> Dagang
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsub
it should be. Parent POMs are one issue, but
that's expected. What may not be obvious is that many real world
pom.xml files omit the namespace declarations. This require s lot of
contortions in your code to handle cases both with and without
namespaces.
from the validate phase?
If not, we're probably going to have to rewrite our enforcer rule as
an independent maven plugin.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.or
reasons of backwards compatibility.
However it is an Apache project today.
No comment one way or the other on the licensing. I'm not familiar with that.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail
y, using the ~/.m2/repository as cache, as
> usual. The ArtifactRepository interface
> (https://maven.apache.org/ref/3.6.0/apidocs/index.html) seems perfect
> for this. How can I get an object that implements it?
>
> Thanks!
>
> - Michael
>
that nobody really uses it and I shouldn't care about it and
> rather use org.eclipse.aether. Is this correct?
>
> - Michael
>
>
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
ges from Java source code." Is
that accurate? That sounds like the JXR plugin.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
Is this page still accurate or should it be deleted?
https://maven.apache.org/developers/java6.html
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands
33371924c36d21f4756d97126d4/plugins/com.google.cloud.tools.eclipse.util/src/com/google/cloud/tools/eclipse/util/DependencyResolver.java
https://github.com/GoogleCloudPlatform/google-cloud-eclipse/issues/3428
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
these changes.
> What else I should do to advance this proposal?
>
> Thanks!
> Tony Homer
>
> [1] https://nvd.nist.gov/vuln/detail/CVE-2018-1000632
> [2] https://issues.apache.org/jira/browse/ARCHETYPE-567
> [3] https://dom4j.github.io
> [4] https://github.com/apache/mave
I agree that this should be fixed. I'm not yet convinced that
requiring Java 8 and upgrading to dom4j 2.1 is the bets fix.
On Mon, Jun 3, 2019 at 10:24 AM Enrico Olivelli wrote:
>
> Elliotte,
>
> Il giorno lun 3 giu 2019 alle ore 15:59 Elliotte Rusty Harold <
> elh...@
va 8 and 11 only these days. Java 7 is
> in the distant past. Most people can't even get Java 7 updates since it is
> EOL unless you pay.
>
> Gary
>
> On Mon, Jun 3, 2019 at 10:35 AM Elliotte Rusty Harold
> wrote:
>
> > I agree that this should be fixed. I
r me.
> If some code was broken in that version, it would be an argument. But it
> is
> not an argument to infinitely grow versions only because somebody in CVE
> wants to. This really is pushing hard to sell technologies and not a
> common
> sense.
>
> T
7;d like to stop doing this and use the
> > > upstream version instead.
> > > In order to achieve this, I logged the issue with m2e-core and opened a
> > PR
> > > (as mentioned above), then logged an issue with maven-archetype and
> > opened
> > > a PR (which i
wrote:
>
> Just wondering: what stops you developing on more modern java, and
> targeting older java? Or in other words, why is using target java a must on
> development? Just curious.
>
> Ps: sry for jumping the thread
>
> On Mon, Jun 3, 2019, 16:48 Elliotte Rusty Harold
Could someone push the docs for
https://maven.apache.org/plugins/maven-install-plugin/?
I noticed a 404 from this page. When I went to fix it in Github, I
realized it had already been fixed 6 months ago, but the page doesn't
seem to have been updated since the fix.
--
Elliotte Rusty Harol
bert
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
ore we do a new
> release.
>
> WDTY,
> Robert
>
> [1] https://issues.apache.org/jira/browse/MNG-6656
> [2] https://github.com/apache/maven/compare/MNG-6656?expand=1
>
> ---------
>
that runs Java 7 is required.
On Thu, Oct 3, 2019 at 8:25 AM Paul Hammant wrote:
>
> Would jdk 8 for maven itself and a target of 7 for the compiler (etc) for
> maven-using projects be ok?
>
> On Thu, Oct 3, 2019 at 1:15 PM Elliotte Rusty Harold
> wrote:
>
> > Strong -1
is usually
> deployed to remote repositories
>
> In alternative to source/public I have imagined other couples:
> - source/shared
> - original/result
> - source/result
> - source/sharable
> - source/visible
> - source/effective
> .
>
> Thoughts ?
>
we actually explain what a soft or
a "Hard" requirement is. If someone can clarify this for me, I'll
update the docs accordingly.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-uns
r than
or equal to 1.2, but not 1.1. Multiple requirements are comma-separated
* <<<(,1.1),(1.1,)>>>: Soft requirement on any version except 1.1;
for example because
it is known not to have a critical vulnerability.
On Fri, Oct 25, 2019 at 4:43 PM Stephen Connolly
wro
Thanks. I've rewritten the PR under the assumption that all version
ranges are "hard". Please take another look. (PTAL)
On Fri, Nov 1, 2019 at 7:54 PM Stephen Connolly
wrote:
>
> On Fri 1 Nov 2019 at 21:37, Elliotte Rusty Harold
> wrote:
>
> > Pass 1:
> &g
--
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-
. So i put the
> prefix in the system property and that's what i break, a little. It was
> just an example, but this is the principle that i understand and we
> untilize it in the milestones.
>
> T
>
> On Mon, Nov 11, 2019 at 7:55 PM Elliotte Rusty Harold
> wrote:
>
> &
t; We can propose more alternatives and finally the result will be naming
> conventions, when/how to use them
>
> T
>
> On Tue, Nov 12, 2019 at 1:01 PM Elliotte Rusty Harold
> wrote:
>
> > I'm a little nervous about this is being messages to and being
> >
d the
change, but it seems to be working well. The Maven project might want
to consider whether something similar could work for us.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apach
Is anyone working on the assembly plugin? There are eight open PRs in
the repo, the oldest of which hasn't been touched for almost two
years:
https://github.com/apache/maven-assembly-plugin/pulls
--
Elliotte Rusty Harold
elh...@ibibli
the protocol for clearing
these out?
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
Robert
> On 20-11-2019 14:28:36, Tibor Digana wrote:
> You should contact the INFRA team in Jira and ask them for your permissions
> in Maven.
> I also had similar problem like you in the beginning and i had to do it
> this way.
> So you should ask them whether you are already in c
reimplement any method in those
classes." The same applies to commons lang.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
hich can be
> less important in many cases.
>
> Thanks for taking the time for reading this, and if this approach can be
> feasible,
> I can be reached at the following email address dikugabri...@yahoo.com for
> more details.
>
> Sent from Mail for Windows 10
>
--
Ell
gt;
>
> Release Notes - Maven Shared Components - Version
> maven-artifact-transfer-0.12.0
>
> ** Bug
> * [MSHARED-818] - Issue management URL in maven-artifact-transfer returns
> 404
>
> ** Improvement
> * [MSHARED-811] - Improve handling of Metadata
> * [MSH
; Please also raise your voice if you have anything to discuss.
>
> If the issue is not modified or no objection has been raised, I will
> autoclose those issues with a comment by 2019-12-30.
>
> Michael
>
> -
>
On Mon, Dec 9, 2019 at 3:18 PM Michael Osipov wrote:
>
> Am 2019-12-08 um 18:08 schrieb Elliotte Rusty Harold:
> > Please don't. There are certainly some real and important issues in
> > there. More importantly, users spent a great deal of effort and time
> > to
On Thu, Dec 12, 2019 at 6:56 PM Stephen Connolly
wrote:
> I think we have some crazy permissions that Brian manages. Ldap just fixes
> the account name to match across systems AIUI
>
That's probably true. As of an hour ago, I did not seem able to close issues.
--
Elliotte Ru
NVM, I seem to have access now. I think I just needed to logout with
my old credentials and back in with the new ones.
On Fri, Dec 13, 2019 at 9:56 AM Elliotte Rusty Harold
wrote:
>
> On Thu, Dec 12, 2019 at 6:56 PM Stephen Connolly
> wrote:
> > I think we have some crazy permiss
mentation for new important features
> - license files related issues (we are now adding OpenSSL for instance)
> - upgrade of dependencies flagged by OWASP or any other public directory
> .
>
> As soon as I create the branch-3.6 please ping me on every patch you want
teral decision or should be discussed on
the mailing list first?
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
n version 3.7.0-SNAPSHOT not in range [3.5.3-SNAPSHOT,3.5.4-SNAPSHOT]
> mng6352PrintVersion(itShouldPrintVersionInAllLines).SKIPPED -
> Maven version 3.7.0-SNAPSHOT not in range [3.5.3-SNAPSHOT,3.5.4-SNAPSHOT]
>
>
> whic
ache infrastructure, but if 30 minutes
spent triaging bugs locks one out, I might perhaps have an idea why we
have too many open issues in our Jira. :-)
On Sun, Dec 15, 2019 at 6:10 AM Elliotte Rusty Harold
wrote:
>
> I'm seeing a lot of forward progress on triaging bugs, especially in
t;
Jira will autocomplete project names.
Thanks.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
x27;t happen.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
line 113Java Problem
when I import them into Eclipse. m2e seems really confused about
missing lifecycle configurations.
Is there something I'm missing here?
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscri
or no objection has been raised, I will
> autoclose those issues with a comment by 2019-12-30.
>
> Michael
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
--
0, 2019 at 6:29 AM Elliotte Rusty Harold
wrote:
>
> While working through the bugs I found this interesting bit of history:
>
> https://cwiki.apache.org/confluence/display/MAVEN/The+Great+JIRA+Cleanup+of+2014
>
> It seems like we've been here before. Some of the bugs that we
d
one truly scary security issue someone badly needs to look at.
On Fri, Dec 20, 2019 at 6:42 AM Michael Osipov wrote:
>
> I will exlude those. It does not makes sense to close/reopen again.
>
> Am 2019-12-20 um 12:29 schrieb Elliotte Rusty Harold:
> > While working throug
hours.
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> Kind regards
> Karl Heinz Marbaise
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.o
gt; be closed be the version has not been proposed yet.
> >
> > On Fri, Dec 20, 2019 at 12:49 PM Elliotte Rusty Harold
> > wrote:
> >
> >> One thing we should try going forward is be more ready to won't fix
> >> and close bugs and RFEs we disagree wit
can figure out how to fix the
autogenerated test instead that would be even better. Details at
https://issues.apache.org/jira/browse/DOXIATOOLS-64
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev
ls]
>
>
> for some reason only the doxia-converter and doxia-linkchecker got their own
> repo, the doxia-book-renderer and doxia-book-maven-plugin not.
>
> Before having a look at this, we need to know the status of it.
>
> thanks,
> Robert
>
> On 23-12-2019 23:38:43,
>
> org.apache.httpcomponents-httpclient-4.4.1.jar unaccounted for in LICENSE
>
> org.apache.httpcomponents-httpcore-4.4.1.jar unaccounted for in LICENSE
>
> org.apache.thrift-libthrift-0.9.3.jar unaccounted for in LICENSE
--
Elliotte Rusty Harold
elh...@ibiblio.
hat makes small changes far more work
to implement than they would be if the code Modello provides had been
written by hand and committed to the Maven repos.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mai
in on
setting this up. However there might be contractual issues between the
vendors and the Apache Foundation. Does anyone happen to know if this
is something Apache does? Or if there's a another type of CI other
projects are using for Github?
--
Ellio
t; but I can't find a reason why some pull requests passed validation
> > >
> > > Enrico
> > >
> > > INFO] Total time: 08:22 min
> > >
> > > [INFO] Finished at: 2019-12-24T17:58:44Z
> > >
> > > [INFO]
> > ----
> >
s://issues.apache.org/jira/browse/MNG-6036
I was exploring the possibility of fixing some issues with the
MavenXpp3Reader. One thing that surprised me is that Modello appears
to use string literals to create the generated code, not something
more easily edited such as Velocity templates.
--
ason only the doxia-converter and doxia-linkchecker got their own
> repo, the doxia-book-renderer and doxia-book-maven-plugin not.
>
> Before having a look at this, we need to know the status of it.
>
> thanks,
> Robert
>
> On 23-12-2019 23:38:43, Elliotte Rusty Harold wro
is is something we should fix. It's a
breaking change but I expect the high majority of devs who encounter
this would classify the existing behavior as a bug.
My main question is what version of Maven should we fix this in?
3.6.5? 3.7? 4.0? Thoughts?
--
Elliot
ything after the version starting with an alphabetic character
> is a classifier, used to classify a pre-production version. The
> classifiers being in alphabetical order.
>
> That is why i never understood Spring working with versions like
> 2.1.RELEASE (being < 2.1).
>
&
;
> TIA
>
> Clemens
>
> Am 07.01.2020 um 16:16 schrieb Clemens Quoss:
> > Consider this artifact:
> >
> > artifactId-1.0-alpha1-classifier.jar
> >
> > How to separate version (1.0-alpha1) from classifier (classifier), then?
> >
> > TIA
ogle-cloud-firestore-0.41.0-beta.jar has the version
0.41.0-beta and no classifier or the version 0.41.0 and the classifier
beta.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apach
based release schedule
>
>
> I image the big work you did for splitting all of the 100 git repositories
> from svnbut I think this move can give more vitality to the project
>
> We would have to think about jira, websitesI
plugin is not supported
> now, or just nobody had enough time to look into it?
>
> Alexander
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
issue here:
> https://github.com/paypal/merchant-sdk-java/issues/46
> but nobody seems to take a notice.
> Is there any official way to contact Paypal and ask them to fix it?
>
> --
> Regards, Petar!
> Karlovo, Bulgaria.
> ---
> Public
Ping. Any progress on getting Doxia migrated into Github?
On Mon, Dec 23, 2019 at 5:38 PM Elliotte Rusty Harold
wrote:
>
> Anyone working on Doxia these days? If so, your review of
> https://github.com/apache/maven-doxia-tools/pull/3 would be
> appreciated. This PR effectively disa
https://github.com/apache/maven-doxia-linkcheck
>
> Le mercredi 22 janvier 2020, 18:12:30 CET Elliotte Rusty Harold a écrit :
> > Ping. Any progress on getting Doxia migrated into Github?
> >
> > On Mon, Dec 23, 2019 at 5:38 PM Elliotte Rusty Harold
> >
> > wrote
reuse my migration script to prepare the 2 components dedicated Git
> > repositories and let you know
> >
> > Regards,
> >
> > Hervé
> >
> > [1]
> > https://cwiki.apache.org/confluence/display/MAVEN/Git+Migration#GitMigratio
> > n-Migratinganaggregatortree
ependency_Scope>)
> *and
> AFAIK this is not currently supported, but I have a specific reason for
> wanting this.
>
>
> *I'd really appreciate if someone can add that for me and let me know when
> it's done.*
>
> *Please let me know if you hav
the attached pom and see if there's anything I can do to make this
> work? He was using gson in this example.
>
> Scott
>
>
>
> On Fri, Jan 24, 2020 at 5:02 AM Elliotte Rusty Harold
> wrote:
>>
>> That's a really interesting idea and I can s
d about dependencies. Profiles can change
dependencies, so the runtime and compile time classpath might depend
on the active profile.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@
re abandoned
> nowadays.
>
> Are there any plans to make them an Apache Project? I guess there probably
> must have been a discussion on this list, but I haven't found any.
>
> Recent example:
> https://github.com/mojohaus/buildnumber-maven-plugin/issues/93
--
El
> reproducible plexus/components.xml
> * [MPOM-234] - Upgrade apache-rat-plugin to 0.13
>
> Enjoy,
>
> -The Apache Maven team
>
>
>
> ---------
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.a
this,
where/what do I need to add to the doxia-site pom.xml? That is I want
to reconfigure the rat plugin. None of the obvious things I tried
seemed to have any effect.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscri
my projects yesterday to 3.1.0/8.29 and didn't notice
any issues:
https://github.com/GoogleCloudPlatform/appengine-plugins-core/pull/830/files
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubsc
I feel it is a
> good step forward to let them move forward with changes in Checkstyle
>
> Enrico
>
> Il giorno gio 6 feb 2020 alle ore 15:41 Elliotte Rusty Harold
> ha scritto:
> >
> > On Thu, Feb 6, 2020 at 9:33 AM Enrico Olivelli wrote:
> > >
> > >
configure the rat plugin. None of the obvious things I tried
> > seemed to have any effect.
>
>
>
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
--
Elliotte Rusty Harold
elh...@ibiblio.org
---
egards,
>
> Hervé
>
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
--
Elliotte Rusty Harold
elh...@ibiblio.org
---
> for almost every sub-project within its scope. Many of them simply
> > > starting with the word "commons" instead of "org.apache.commons". Does
> > the
> > > PMC have any ideas on how to combat this?
> > >
On Fri, Feb 14, 2020 at 5:12 PM Hervé BOUTEMY wrote:
>
> Le vendredi 14 février 2020, 14:11:07 CET Elliotte Rusty Harold a écrit :
> > Changing group IDs of existing projects is a very bad idea.
> there is relocation strategy:
> https://maven.apache.org/guides/mini/guide-rel
because no one wants to build two jars for pre
> and post J9.
>
True enough, but a Java 8 jar can still have an explicit module name.
It's just one more entry in the MANIFEST.MF that pre-9 VMs are happy
to ignore. We can't go back and add module names to old jars but it's
wort
>
I really don't think Maven works like that, but feel free to point me
to the code in Github that proves me wrong.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apach
es relocation is
possible.
If this does work, I can see a lot of use cases for it, but I'm
currently working with the assumption it is not.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr
b.com/codehaus-plexus/modello/tree/modello-1.10.0/ as
indicated on the web site?
Seems like the latter redirects to the former so Im guessing github is
now preferred.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e
iendly language such as
> XML or JSON.
>
> I will be happy to supply PR, if this is something that the Maven community
> is interested in.
>
> Best regards,
>
> Loïc Ledoyen
--
Elliotte Rusty Harold
elh...@ibiblio.org
--
> > As jlink has been released with java9 I wonder if this java7 minimum
> > really
> > > makes sense?
> > >
> > > cheers
> > > --
> > > Olivier Lamy
> > > http://twitter.com/olamy | http://linkedin.com/in/olamy
> > >
> &
2/javax/xml/jaxb-api/1.0.1/jaxb-api-1.0.1.pom
>
> testing relocation was on my todo list for years, but I never really test
>
> Regards,
>
> Hervé
>
> Le dimanche 16 février 2020, 15:18:17 CET Elliotte Rusty Harold a écrit :
> > On Sun, Feb 16, 2020 at 2:35 AM wrote:
&g
-
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
this error, I can't reproduce and ASF Jenkins can't
> reproduce either:
> https://builds.apache.org/view/M-R/view/Maven/job/maven-box/job/maven-doxia-sitetools/job/master/
>
> Regards,
>
> Hervé
>
> Le mercredi 19 février 2020, 21:21:22 CET Elliotte Rusty Harold a
Is it possible to integrate the Jenkins builds with Github as Traivs
and CircleCI do? That is, to have Jenkins report build status on a PR
back to Github as a hook?
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe
shade packages in gson library.
> Although it contains the Apache 2.0 license but it contains Copyright (C)
> 2010 Google Inc. as well, see:
> https://github.com/google/gson/blob/master/gson/src/main/java/com/google/gson/stream/JsonReader.java
>
> --
> Cheers
> Tibor
--
mpletely separate
classpaths for user code and your product’s code.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
binding packages that
caused more trouble than they were worth. Plain old reliable SAX and
DOM are still bundled as are XPath and XSLT.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...
his dependency (though it's yet to
be demonstrated here) but I suspect the pot roast principle might be
in play here:
https://www.psychologytoday.com/us/blog/thinking-makes-it-so/201402/the-pot-roast-principle
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
or security reasons, you cannot trust pull
> requests to have malicious code. The Jenkins builds are not that isolated.
>
> Gruss
> Bernd
>
>
> --
> http://bernd.eckenfels.net
> ________
> Von: Elliotte Rusty Harold
> Gesendet: Thursd
n the XML parsing code. :-)
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
I may have to generate such a bad example and see what
happens, though I'm hesitant to take the risk that it might slip
through.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.a
t.com/graphics/2020/world/national-security/cia-crypto-encryption-machines-espionage/>
and most open source projects could be had for a lot less.
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
verify-maven-plugin/
--
Elliotte Rusty Harold
elh...@ibiblio.org
-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
1 - 100 of 608 matches
Mail list logo
