You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maven.apache.org by mt...@apache.org on 2021/09/29 07:16:34 UTC

[maven-dependency-plugin] branch MGPG-44-gpg-sign-remove-target-prefix-in-output-directory created (now 829971c)

This is an automated email from the ASF dual-hosted git repository.

mthmulders pushed a change to branch MGPG-44-gpg-sign-remove-target-prefix-in-output-directory
in repository https://gitbox.apache.org/repos/asf/maven-dependency-plugin.git.


      at 829971c  [MGPG-44] Format test and improve readability

This branch includes the following new commits:

     new 671661b  o little gpg signing mojo
     new 3248dd3  o sign project artifact o sign POM o sign all attached artifacts
     new af83c42  Don't generate signature on artifact when the project is a pom
     new 2cc24fe  o just run in the verify phase
     new 3344e28  o some hacks to make all the signatures come out directory, this case doesn't seem to be easily handled where you just want to add some extension to the existing artifact like a signature.
     new 2bce821  o don't sign the POM then change the name, change the name of the file first and then sign or   you will end up with a bad signnature. Thanks to Bernd Bohmann.
     new 9ab1ded  o Fix typos.
     new b930d2f  o Add license.
     new faea11d  o Add prerequisites. o Remove url, which is inherited.
     new cf91680  o Remove non-gpg related info. o Update configuration example so that it uses the maven-gpg-plugin.
     new aa1865b  o Adjust whitespace.
     new ea621df  o Use the normal Maven plugin menu structure. o Add example, FAQ and index pages.
     new ae3136a  o Set issue management to MNG until the plugin gets its own project in JIRA.
     new 53c1d9d  [maven-release-plugin] prepare release maven-gpg-plugin-1.0-alpha-1
     new 8404257  [maven-release-plugin] prepare for next development iteration
     new 75a9d55  o fixing use with classifiers and make thigns works like WARs and RARs
     new fbd4684  o updating to latest released parent
     new a0e04cf  o put the license header in there
     new f09ef2b  - move plugin-plugin out of 'reporting' for plugins. It's a required part of the site, and does not cause any issues with the reactor or site generation - update to snapshots
     new 2119551  MGPG-1, MGPG-2 - remove requirement of password being passed
     new 1a8c8e2  More for MGPG-1 * Prefix properties with "gpg." * Add gpg.skip * Add --batch-mode support * Query password once per project (instead of once per artifact)
     new 738137d  Provide a way to "store" passphrase in reactor build.
     new c88a5cb  Set back to alpha-3 version number
     new 5c0bacc  Consume any garbage on System.in before asking for the passphrase
     new 35f6578  [maven-release-plugin] prepare release maven-gpg-plugin-1.0-alpha-3
     new 5f7373b  [maven-release-plugin] prepare for next development iteration
     new 0148dbe  Update usage for the right -D flag
     new a0a03f2  Update parent version to 8, as 8-SNAPSHOT is never deployed and 8 is released
     new 9d15981  Add more docs to mention some issues folks have had.
     new 70410bf  [MGPG-3, MGPG-5, MGPG-6, MGPG-8] Bunch of fixes that have been sitting on my hard disk for way too long. Update pom to declare all depenencies explicitely.
     new 4bd9cd4  Update pre-req to maven 2.0.5 (2.0.4 doesn't allow proper signing of the poms)
     new ae52db4  o Use the new issueManagement url.
     new 8656332  o Use the correct name in pom.xml, which means that it can also be removed from site.xml.
     new 76d8169  [MGPG-3, MGPG-6, MGPG-7, MGPG-5] Bunch of fixes for GPG that have been sitting on my hard drive. (Patch from Christian Schulte of MGPG-3 is in there)
     new 2beb7e6  [MGPG-10] Patch from Christian Schulte reworked for current structure
     new b1b3a3c  [maven-release-plugin] prepare release maven-gpg-plugin-1.0-alpha-4
     new 60609d0  [maven-release-plugin] prepare for next development iteration
     new cbb16a7  Minor javadoc/plugin doc updates
     new 1292a32  o Fix typo in Javadoc.
     new f59c3c0  [MGPG-11] upgrade to last plexus-utils (1.4.8) to work on platform without /bin/bash
     new a55eea5  Bumping all parent versions to 11, to allow deployment to alternative locations.
     new 5953d6b  clean up some imports and licenses
     new a24e385  Try to use the 12-SNAPSHOT parent
     new 3c29ef2  o Added stub IT profile to highlight plugins during CI
     new 8c100a9  o Reordered POM
     new 99e7a16  o Added project description
     new fdcd188  o Updated index page of plugin site
     new 0801400  o Unified plugin name
     new 9ab0bc6  o Changed encoding of site descriptor to UTF-8 just like used for POMs o Updated/added license headers
     new 15a3b57  o Explicitly stated UTF-8 as file encoding o Updated license header
     new 8408da2  o Updated index page of plugin site
     new 0a7e221  o Inherited from maven-plugins:12
     new a8c4ad0  o Formatted/reordered POM
     new 2a5956f  o Avoided deprecated syntax @parameter expression="${component...}"
     new a8a3f92  use the latest parents
     new 0b6b449  o Inherited from maven-plugins:13
     new 1317aaf  used http://maven.apache.org/xsd/* for schema location
     new d7e4267  Remove calls to deprecated methods.   Use the non-deprecated methods.
     new b4079f6  o Added plugin version to POM snippets in documentation
     new 4f489a6  o filtering version in doc
     new 6aaf3cd  o fixed ambiguous links o added Doxia xsd
     new 151ad89  o Formatted code
     new 600be35  o Polished mojo annotations
     new b828ee2  [MGPG-16] Allow to configure homedir for gpg invocation
     new ed64130  o Added basic IT
     new 9e98c6e  o Made tests use a clone of the ready-made GPG home dir to avoid modifications to the version-controlled files
     new 4a59c41  o Unhide GPG files on *nix
     new 071ba15  upgrade parent version to ensure source-release is automatic.
     new de1a5b6  o Updated to maven-invoker-plugin:1.4
     new 1a92e49  o Inherited from maven-plugins:16
     new 2c827fb  o Inherited from maven-plugins:17 o Cleaned up dependencies
     new 5361991  [MGPG-12] sign-and-deploy does not sign pom.xml
     new 6222753  [MGPG-21] Make name for signature output directory consistent among goals
     new 599803f  [MGPG-18] NPE in GpgSigner
     new 1c46d7c  o Fixed formatting
     new 473fc51  [maven-release-plugin] prepare release maven-gpg-plugin-1.0
     new fe40c71  [maven-release-plugin] prepare for next development iteration
     new eab9625  Add useagent doc note on gpg2.
     new d46359d  [MGPG-24] Mark gpg plugin as @trheadSafe
     new addcd96  [MGPG-17] password is specified, but still promting
     new 76cc1d9  [MGPG-9] gpg plugin hangs when it should prompt for the secret key passphrase hangs
     new a57678c  [MGPG-19] Site descriptor does not get signed
     new d6e06a5  [MGPG-23] Allow gpg executable name and path to be specified
     new 3161290  [MGPG-20] Signing fails if project has no main artifact but only attached artifacts with classifiers
     new acc9e86  o Simplified code
     new 900b3b1  o Fixed typos
     new 3da1536  o Simplified code
     new 11235cf  [maven-release-plugin] prepare release maven-gpg-plugin-1.1
     new 8ca4983  [maven-release-plugin] prepare for next development iteration
     new 6400a4e  [MGPG-26] sign-and-deploy-file does not work with javadoc and sources artifcats
     new 646b0a9  [MGPG-30] Support alternative location of secret keyring
     new cca25d1  o Fixed typos
     new 6efff7e  fix relativePath to plugins parent and bump to latest parent for all plugins
     new ece822e  o Add a property to define mavenVersion.
     new 115b969  o Inherit version of maven-invoker-plugin from parent.
     new b0bd115  o Tweak the site.
     new 39f00cd  o Add missing license headers.
     new b5b6ee2  o Add an experimental way of sending the release announcement, so that I can test it on a real release. If all goes well I will move this into maven-plugins-parent and add the relevant documentation to our release documents.
     new a489bd9  [maven-release-plugin] prepare release maven-gpg-plugin-1.2
     new ee2fd3d  [maven-release-plugin] prepare for next development iteration
     new 8541b6d  Move resources used in sending the release announcement to a shared component.
     new 1a92945  Add a dependency on maven-shared-resources, which contains the resources used to create the announcement, to maven-changes-plugin.
     new 2f10376  Document the Changes Plugin configuration.
     new b8335bf  Use release version of maven-shared-resources.
     new b4b1aba  Move configuration for maven-changes-plugin to maven-plugins.
     new 4c790e9  use released parent pom
     new f2eb59c  [MGPG-35] and [MGPG-36]
     new c6f7687  picking up some comments from Brett on r1126367
     new 603a3eb  [maven-release-plugin] prepare release maven-gpg-plugin-1.3
     new d9f21c6  [maven-release-plugin] prepare for next development iteration
     new c9e5eac  [MGPG-73] retryFailedDeploymentCount
     new 77b9bfa  [MGPG-38] Allow deployment of multiple side artifacts at the same time via the CLI
     new 0def060  upgrade plugins to latest parent 21
     new cc48cd0  update parent to 22
     new f4a0119  [maven-release-plugin] prepare release maven-gpg-plugin-1.4
     new f8560c5  [maven-release-plugin] prepare for next development iteration
     new 2ccebbf  fix borked release
     new 86cf4bd  [maven-release-plugin] prepare release maven-gpg-plugin-1.4
     new 0140e75  [maven-release-plugin] prepare for next development iteration
     new 339333b  avoid it tests running twice
     new 4ced900  [MGPG-39] use maven-plugin-tools' java 5 annotations Submitted by Tony Chemit.
     new b9541b8  move plugin-plugin version to a property
     new b1a4dde  use last plugin parent snapshot to use last compiler plugin to improve build time on jenkins build.
     new bd25d2e  annotations are not needed for plugin execution so mark dependency as provided
     new ee9cdae  use released parent pom
     new 639d681  replace StringBuffer by StringBuilder
     new 79bb6c5  use last p-u version 3.0.7 which is faster for file copy
     new 127df94  Disable ITs for Windows, since it doesn't have a gpg-executable
     new 5056161  update maven-plugin-plugin to 3.2
     new 8fdba04  upgrade all to last parent 24
     new 831f4dd  Follow ASF branding rules.
     new 0d50436  Add documentation.
     new 3c3f314  Refactoring: extract method.
     new feb1257  Refactoring: extract class. Move the non-implementation specific code (most of it) to an abstract super class. I increased visibility for most of the fields from private to protected, so that they can be used from the sub class just as before.
     new 9d3816f  Add subversion keywords.
     new 3b28a2c  Start using the new super class, instead of the implementation specific GpgSigner. That requires that the implementation specific fields are initialized in the constructor.
     new 2b551f4  Improve Javadoc.
     new 39fc09d  If you want to run the ITs for this plugin, you'd better install gpg if you are on Windows.
     new 6ffa0a5  Expose the log to the signer.
     new cedeae9  Remove @version tags using Subversion keywords.
     new fb40575  And even more plexus updates
     new bef4488  Oh, look at that button. Does that convert everything to correct java5 ??
     new 16cb645  Further code analysis improvements
     new 33eeb6e  More code analysis fixes
     new 1b99c51  Reformatted to code style
     new 581a022  Revert "Reformatted to code style"
     new 1c9f550  Add missing license headers. This plugin now passes the checks done by RAT.
     new 25467e2  configured site deploy to /plugins-archives/<artifactId>-LATEST
     new 4e65476  [MGPG-49] Add support for --lock-* command line options
     new 7836ae7  [MGPG-48] useAgent=true by default
     new ffa0888  [MGPG-41] Passphrase revealed when backspacing at prompt
     new fe23032  [maven-release-plugin] prepare release maven-gpg-plugin-1.5
     new 633a65d  [maven-release-plugin] prepare for next development iteration
     new 1db94c3  [maven-release-plugin] prepare release maven-gpg-plugin-1.5
     new 9416549  [maven-release-plugin] prepare for next development iteration
     new 076b1d6  upgraded parent pom (compiler, assembly, doap not upgraded because of a failure: need to investigate)
     new 8241614  [MNGSITE-152]  - Added appropriate links to download site and license location    to fulfill the ASF requirements.
     new b7a403a  [MNGSITE-152]  - Added missing download.cgi and xdoc/download.xml.vm
     new 5270629  added license header
     new 02cf295  [MGPG-50]  - Injections by @Parameter instead of @Component
     new 60b13ed  [MGPG-51]  - Upgrade to Maven 2.2.1
     new 5a6bafc  - Added to all plugins LICENSE file - Added to all plugins NOTICE file with copyright year 2007-2014
     new b17831e  - Undone the commit r1630358 which means to remove   all LICENSE/NOTICE files until the ASF is clear about   what to do.
     new f66b253  Updated to p-u .20
     new 23ccafd  [MGPG-52] Upgrade to maven-plugins parent version 27  - Cleaned up pom to let the parent do it's work.  - Fixed checkstyle reported issues.
     new 9373d09  removed configuration inherited from parent and added rat excludes causing failure on ASF Jenkins
     new fff6a97  [MGPG-31] Add ability to store passphase under settings.xml in clear or encrypted text
     new 96f341a  [MGPG-31] add a missing @since tag
     new 46e2aba  [MGPG-31] fix typos from previous commit
     new 1abe32f  [MGPG-31] IT settings.xml location correction
     new 57a56a2  [MGPG-31] fix typos from last commit
     new d3da233  [MGPG-31] add one more usage example how to discover keyname and passphrase using settings.xml
     new 5a38c46  [maven-release-plugin] prepare release maven-gpg-plugin-1.6
     new 8f7de1e  [maven-release-plugin] prepare for next development iteration
     new 58bd454  - Undone release steps based on failure.
     new dd61b35  [maven-release-plugin] prepare release maven-gpg-plugin-1.6
     new 2a470f0  [maven-release-plugin] prepare for next development iteration
     new faac99e  [MGPG-31] rename passphraseServerKey to passphraseServerId. Back to 1.6-SNAPSHOT for re-vote
     new 9aa0eb8  [MGPG-31] Fix some typos
     new f7adb32  [maven-release-plugin] prepare release maven-gpg-plugin-1.6
     new 254ff33  [maven-release-plugin] prepare for next development iteration
     new a865543  changed svnpubsub url from /content to /components
     new dd91b9a  moved Jira from Codehaus to Apache
     new c8718fa  [MNGSITE-243] Fixed link to How to use Mirros for Repositories
     new cbb8cbd  Result of mvn versions:update-child-modules -DallowSnapshots -N
     new 3845c27  use released version of plugin parent, i.e 28
     new a3a3d59  [MPOM-95] updated parent pom location
     new f17941b  o Updated to 'plexus-utils-3.0.23'. o Updated to stop suppressing exceptions incorrectly when closing resources.   Most of the time the 'IOUtils.closeQuietly' methods of 'commons-io' and   the 'IOUtil.close' method of 'plexus-utils' are used incorrectly. They   are meant to be used in 'finally' blocks to not suppress an exception   already thrown in the 'try' block. The documentation of the   'IOUtils.closeQuietly' methods explicitly contains usage examples.   As soon as [...]
     new 9cb4e74  o Updated to 'plexus-utils' 3.0.24.
     new f5c0fdf  updated Jira url
     new e8d53ab  updated Jira url
     new 02a7ca2  [MGPG-55] Upgrade maven-shared-components parent to version 30
     new a7212e1  [MGPG-56] Use defaults of maven-invoker-plugin  o Remove special configuration for pomIncludes cause    this is handled by the default of maven-invoker-plugin.
     new 21b5b27  o Updated to latest parent SNAPSHOT.
     new c2ed050  o Reverted last commit to reset to release version parent's.
     new aa4cce4  moved to git
     new 26e4663  [MGPG-62] - Upgrade parent to 31
     new 9ee3c87  Added .checkstyle to .gitignore
     new 275f721  [MGPG-63] - Upgrade plexus-utils 3.1.0
     new 23af802  [MNGSITE-332] - Changed download templates of plugins not to reference .md5 anymore
     new a2d179e  [INFRA-16467] move components documentation out of CMS space
     new 67b670a  [MNGSITE-341] use https for sigs, hashes and KEYS
     new e87b57e  [MPOM-205] use sha512 checksums instead of sha1
     new 72b5a42  Update parent to 33
     new a3196f2  Switch to asfMavenTlpPlgnBuild
     new 6f540ac  Add README.md and CONTRIBUTING.md
     new 11aca38  [MGPG-59] GPG Plugin: "gpg: signing failed: Inappropriate ioctl for device"
     new 73347cf  [MGPG-70] Require Java 7
     new 58d6496  [MGPG-71] Plugin does not work with GPG on OSX with version string "gpg (GnuPG/MacGPG2) 2.2.10"
     new 0142937  [MGPG-61] Missing profile id at usage page
     new 8b1ef75  [MGPG-69] Drop Maven 2 support (require Maven 3)
     new 814cdfa  Remove empty invoker.properties Introduce constant for gpg.passphrase Apply generics
     new f74feb5  fixed javadoc issues
     new 6741146  [MGPG-77] prepare Reproducible build
     new 0dca17b  Bump junit from 4.12 to 4.13
     new 71b01f4  added link to plugin's reference documentation
     new 22ec423  added badge point to project's Jira MGPG
     new 82d1072  [MGPG-64] Exclude sha256/sha512
     new 3ba88f4  [MGPG-64] updated javadoc
     new f6e9223  fixed link to mailing lists and global consistency
     new e0d6d2a  removed CONTRIBUTING.md, duplicates README
     new 69dd5a1  [maven-release-plugin] prepare release maven-gpg-plugin-3.0.0
     new e6afe13  [maven-release-plugin] prepare for next development iteration
     new acf9ded  fixed broken links (MPIR 3)
     new a0ae80a  update plexus-utils
     new 973fd98  [MNGSITE-393] remove pre-Maven 3 workarounds
     new b245b80  Merge pull request #5 from apache/elharo-patch-1
     new eb9099f  Merge pull request #4 from apache/plex
     new 97d31f9  update hamcrest and aether
     new e85bc8a  added GitHub description
     new 305be60  fixed typos
     new d0e6f78  Merge pull request #6 from apache/latest
     new cc45d3c  README improvement
     new cc34149  [maven-release-plugin] prepare release maven-gpg-plugin-3.0.1
     new 17ec35b  [maven-release-plugin] prepare for next development iteration
     new d8461fb  Revert "[maven-release-plugin] prepare for next development iteration"
     new 1611991  Revert "[maven-release-plugin] prepare release maven-gpg-plugin-3.0.1"
     new 4c0ed19  replace deprecated method
     new 1169a69  Merge pull request #7 from apache/latest
     new cd0f6d3  [MGPG-78] gpg version parsing failure on Windows
     new 25bae43  added a test for GpgVersion.isBefore() in GpgVersionTest
     new 57ba716  update ASF CI url
     new fc4b543  update ASF CI url
     new 9808611  Bump junit from 4.13 to 4.13.1
     new 64e1d4e  [MGPG-81] refactor GpgVersion
     new b38c638  Merge pull request #11 from Syquel/bugfix/MGPG-80
     new 7438b37  [MGPG-80] implement GpgVersion equality in adherence to comparibility
     new 26aa5b3  [MGPG-66] fix handling of excluded files
     new fba2c39  [MGPG-66] add test for handling of excluded files
     new 4016721  Merge pull request #12 from Syquel/bugfix/MGPG-80_equality
     new 4da6921  [MGPG-66] fix handling of excluded files on linux
     new 12fbd63  Merge pull request #10 from Syquel/bugfix/MGPG-66
     new 5902b2b  deps: update JUnit
     new e4dc062  [MGPG-79] fix handling of external pinentry programs in case the passphrase is not given (#9)
     new 5255080  [maven-release-plugin] prepare release maven-gpg-plugin-3.0.1
     new 878edef  [maven-release-plugin] prepare for next development iteration
     new 3194af1  update CI url
     new 129f459  [MGPG-44] gpg:sign fix non-default output directory Submitted by: Giovanni van der Schelde
     new 44d5502  [MGPG-44] Make it-test order agnostic
     new 829971c  [MGPG-44] Format test and improve readability

The 260 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.