You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@maven.apache.org by Slawomir Jaranowski <s....@gmail.com> on 2022/02/09 22:50:46 UTC
Upcoming release of maven-dependency-plugin
Hi,
There are 17 issues resolved
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12340588
Some of them are critical.
Do we have plans to resolve more issues in the near future?
Last release was about 7 months ago.
If there are no objections I can take care of it next week.
--
Sławomir Jaranowski
Re: Upcoming release of maven-dependency-plugin
Posted by Slawomir Jaranowski <s....@gmail.com>.
Hi all
Issue MDEP-791 looks more complicated and I don't see a consensus on how to
resolve this.
As a workaround we have a new option: ignoredNonTestScopedDependencies
which allows us to exclude some or all artifacts from non-test-scoped.
We have resolved many other issues .... so I will release the next version
in the next few days - of course if there will be no new objections.
śr., 16 lut 2022 o 16:07 Slawomir Jaranowski <s....@gmail.com>
napisał(a):
> Hi,
>
> I updated issue [1] with test project and describe steps what I did ...
> Can anyone else try the same .... maybe I don't see something
>
> [1] https://issues.apache.org/jira/browse/MDEP-791
>
> wt., 15 lut 2022 o 21:37 Elliotte Rusty Harold <el...@ibiblio.org>
> napisał(a):
>
>> On Tue, Feb 15, 2022 at 5:53 PM Slawomir Jaranowski
>> <s....@gmail.com> wrote:
>>
>> > Simply the problem is that dependencies present as transitive for any
>> > dependency in compile scope should be not reported as "Non-test scoped".
>> > So we should check if dependency listed as "Non-test scoped" are not
>> > present as transitive dependency for other used in compile scope.
>> >
>>
>> Can you elaborate on that? It seems to me that a normal unflattened
>> pom.xml should not declare transitive dependencies. In fact it's
>> pretty important that it not do so. For instance, if A's src/test
>> depend on Guava but A's src/java does not depend on Guava, then A
>> should only declare a test scope dependency on Guava, even if it also
>> depends on something else at compile time that does depend on Guava.
>>
>> --
>> Elliotte Rusty Harold
>> elharo@ibiblio.org
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> For additional commands, e-mail: dev-help@maven.apache.org
>>
>>
>
> --
> Sławomir Jaranowski
>
--
Sławomir Jaranowski
Re: Upcoming release of maven-dependency-plugin
Posted by Slawomir Jaranowski <s....@gmail.com>.
Hi,
I updated issue [1] with test project and describe steps what I did ...
Can anyone else try the same .... maybe I don't see something
[1] https://issues.apache.org/jira/browse/MDEP-791
wt., 15 lut 2022 o 21:37 Elliotte Rusty Harold <el...@ibiblio.org>
napisał(a):
> On Tue, Feb 15, 2022 at 5:53 PM Slawomir Jaranowski
> <s....@gmail.com> wrote:
>
> > Simply the problem is that dependencies present as transitive for any
> > dependency in compile scope should be not reported as "Non-test scoped".
> > So we should check if dependency listed as "Non-test scoped" are not
> > present as transitive dependency for other used in compile scope.
> >
>
> Can you elaborate on that? It seems to me that a normal unflattened
> pom.xml should not declare transitive dependencies. In fact it's
> pretty important that it not do so. For instance, if A's src/test
> depend on Guava but A's src/java does not depend on Guava, then A
> should only declare a test scope dependency on Guava, even if it also
> depends on something else at compile time that does depend on Guava.
>
> --
> Elliotte Rusty Harold
> elharo@ibiblio.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
>
--
Sławomir Jaranowski
Re: Upcoming release of maven-dependency-plugin
Posted by Elliotte Rusty Harold <el...@ibiblio.org>.
On Tue, Feb 15, 2022 at 5:53 PM Slawomir Jaranowski
<s....@gmail.com> wrote:
> Simply the problem is that dependencies present as transitive for any
> dependency in compile scope should be not reported as "Non-test scoped".
> So we should check if dependency listed as "Non-test scoped" are not
> present as transitive dependency for other used in compile scope.
>
Can you elaborate on that? It seems to me that a normal unflattened
pom.xml should not declare transitive dependencies. In fact it's
pretty important that it not do so. For instance, if A's src/test
depend on Guava but A's src/java does not depend on Guava, then A
should only declare a test scope dependency on Guava, even if it also
depends on something else at compile time that does depend on Guava.
--
Elliotte Rusty Harold
elharo@ibiblio.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: Upcoming release of maven-dependency-plugin
Posted by Slawomir Jaranowski <s....@gmail.com>.
Hi,
After community testing current snapshot version of plugin, we have new
important issue: https://issues.apache.org/jira/browse/MDEP-791
Simply the problem is that dependencies present as transitive for any
dependency in compile scope should be not reported as "Non-test scoped".
So we should check if dependency listed as "Non-test scoped" are not
present as transitive dependency for other used in compile scope.
IMHO it should be done in maven-dependency-analyzer.
Questions how to discover if project dependency is also present as
transitive for another dependency?
The next challenge is that maven-dependency-analyzer still use Maven Api in
version 2.0.5 upgrade to 3.x is blocked by using maven-plugin-testing-tools
in version 1.3 ...
Any hint how to resolve such issue?
niedz., 13 lut 2022 o 23:31 Falko Modler <f....@gmx.net> napisał(a):
> Hi,
>
> my experiments failed.
>
> Maven is just too eager to validate versions (which is a good thing in
> general), so setting such version properties via a plugin (even without
> requiresDependencyResolution) won't help with the cases I had in my mind.
>
> I think https://issues.apache.org/jira/browse/MNG-6378 comes close to
> what I'd actually need. I'll leave a comment there.
>
> Long story short: No delay for doing a release from my side!
>
> Cheers,
>
> Falko
>
>
> Am 10.02.2022 um 12:39 schrieb Tibor Digana:
> > Hi Falco, do not keep it in your mind, file a Jira ticket. If you post a
> PR
> > in progress, it would be worth to give a feedback in advance. Somebody
> may
> > guide you in the right direction rather sooner than later. T
> >
> > Dňa št 10. 2. 2022, 11:45 Falko Modler <f....@gmx.net> napísal(a):
> >
> >> TBH, I haven't created an issue yet. I wanted to create a working draft
> >> first and play around with it to see whether it meets my needs.
> >>
> >> I might be able to finish it on Sunday.
> >>
> >> Cheers,
> >>
> >> Falko
> >>
> >> Am 10.02.2022 um 09:40 schrieb Slawomir Jaranowski:
> >>> Hi Falko
> >>>
> >>> Which issue are you working on?
> >>> How much time do you need to finish your work?
> >>>
> >>> czw., 10 lut 2022 o 01:07 Falko Modler <f....@gmx.net> napisał(a):
> >>>
> >>>> Hi Slawomir,
> >>>>
> >>>> a few weeks ago I started working on extending the "properties" goal
> to
> >>>> create a version property per dependency.
> >>>>
> >>>> This would be very useful for projects like Quarkus that have a big
> BOM
> >>>> and would like to reuse versions from that BOM for various things in
> >>>> integration tests etc.
> >>>>
> >>>> It would be nice to have more time to finish that, but I wouldn't call
> >>>> this "critical".
> >>>>
> >>>> Cheers,
> >>>>
> >>>> Falko
> >>>>
> >>>> Am 09.02.2022 um 23:50 schrieb Slawomir Jaranowski:
> >>>>> Hi,
> >>>>>
> >>>>> There are 17 issues resolved
> >>>>>
> >>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12340588
> >>>>> Some of them are critical.
> >>>>>
> >>>>> Do we have plans to resolve more issues in the near future?
> >>>>>
> >>>>> Last release was about 7 months ago.
> >>>>>
> >>>>> If there are no objections I can take care of it next week.
> >>>>>
> >>>> ---------------------------------------------------------------------
> >>>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> >>>> For additional commands, e-mail: dev-help@maven.apache.org
> >>>>
> >>>>
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> >> For additional commands, e-mail: dev-help@maven.apache.org
> >>
> >>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
>
--
Sławomir Jaranowski
Re: Upcoming release of maven-dependency-plugin
Posted by Falko Modler <f....@gmx.net>.
Hi,
my experiments failed.
Maven is just too eager to validate versions (which is a good thing in
general), so setting such version properties via a plugin (even without
requiresDependencyResolution) won't help with the cases I had in my mind.
I think https://issues.apache.org/jira/browse/MNG-6378 comes close to
what I'd actually need. I'll leave a comment there.
Long story short: No delay for doing a release from my side!
Cheers,
Falko
Am 10.02.2022 um 12:39 schrieb Tibor Digana:
> Hi Falco, do not keep it in your mind, file a Jira ticket. If you post a PR
> in progress, it would be worth to give a feedback in advance. Somebody may
> guide you in the right direction rather sooner than later. T
>
> Dňa št 10. 2. 2022, 11:45 Falko Modler <f....@gmx.net> napísal(a):
>
>> TBH, I haven't created an issue yet. I wanted to create a working draft
>> first and play around with it to see whether it meets my needs.
>>
>> I might be able to finish it on Sunday.
>>
>> Cheers,
>>
>> Falko
>>
>> Am 10.02.2022 um 09:40 schrieb Slawomir Jaranowski:
>>> Hi Falko
>>>
>>> Which issue are you working on?
>>> How much time do you need to finish your work?
>>>
>>> czw., 10 lut 2022 o 01:07 Falko Modler <f....@gmx.net> napisał(a):
>>>
>>>> Hi Slawomir,
>>>>
>>>> a few weeks ago I started working on extending the "properties" goal to
>>>> create a version property per dependency.
>>>>
>>>> This would be very useful for projects like Quarkus that have a big BOM
>>>> and would like to reuse versions from that BOM for various things in
>>>> integration tests etc.
>>>>
>>>> It would be nice to have more time to finish that, but I wouldn't call
>>>> this "critical".
>>>>
>>>> Cheers,
>>>>
>>>> Falko
>>>>
>>>> Am 09.02.2022 um 23:50 schrieb Slawomir Jaranowski:
>>>>> Hi,
>>>>>
>>>>> There are 17 issues resolved
>>>>>
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12340588
>>>>> Some of them are critical.
>>>>>
>>>>> Do we have plans to resolve more issues in the near future?
>>>>>
>>>>> Last release was about 7 months ago.
>>>>>
>>>>> If there are no objections I can take care of it next week.
>>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>>>> For additional commands, e-mail: dev-help@maven.apache.org
>>>>
>>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> For additional commands, e-mail: dev-help@maven.apache.org
>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: Upcoming release of maven-dependency-plugin
Posted by Tibor Digana <ti...@apache.org>.
Hi Falco, do not keep it in your mind, file a Jira ticket. If you post a PR
in progress, it would be worth to give a feedback in advance. Somebody may
guide you in the right direction rather sooner than later. T
Dňa št 10. 2. 2022, 11:45 Falko Modler <f....@gmx.net> napísal(a):
> TBH, I haven't created an issue yet. I wanted to create a working draft
> first and play around with it to see whether it meets my needs.
>
> I might be able to finish it on Sunday.
>
> Cheers,
>
> Falko
>
> Am 10.02.2022 um 09:40 schrieb Slawomir Jaranowski:
> > Hi Falko
> >
> > Which issue are you working on?
> > How much time do you need to finish your work?
> >
> > czw., 10 lut 2022 o 01:07 Falko Modler <f....@gmx.net> napisał(a):
> >
> >> Hi Slawomir,
> >>
> >> a few weeks ago I started working on extending the "properties" goal to
> >> create a version property per dependency.
> >>
> >> This would be very useful for projects like Quarkus that have a big BOM
> >> and would like to reuse versions from that BOM for various things in
> >> integration tests etc.
> >>
> >> It would be nice to have more time to finish that, but I wouldn't call
> >> this "critical".
> >>
> >> Cheers,
> >>
> >> Falko
> >>
> >> Am 09.02.2022 um 23:50 schrieb Slawomir Jaranowski:
> >>> Hi,
> >>>
> >>> There are 17 issues resolved
> >>>
> >>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12340588
> >>> Some of them are critical.
> >>>
> >>> Do we have plans to resolve more issues in the near future?
> >>>
> >>> Last release was about 7 months ago.
> >>>
> >>> If there are no objections I can take care of it next week.
> >>>
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> >> For additional commands, e-mail: dev-help@maven.apache.org
> >>
> >>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
>
Re: Upcoming release of maven-dependency-plugin
Posted by Falko Modler <f....@gmx.net>.
TBH, I haven't created an issue yet. I wanted to create a working draft
first and play around with it to see whether it meets my needs.
I might be able to finish it on Sunday.
Cheers,
Falko
Am 10.02.2022 um 09:40 schrieb Slawomir Jaranowski:
> Hi Falko
>
> Which issue are you working on?
> How much time do you need to finish your work?
>
> czw., 10 lut 2022 o 01:07 Falko Modler <f....@gmx.net> napisał(a):
>
>> Hi Slawomir,
>>
>> a few weeks ago I started working on extending the "properties" goal to
>> create a version property per dependency.
>>
>> This would be very useful for projects like Quarkus that have a big BOM
>> and would like to reuse versions from that BOM for various things in
>> integration tests etc.
>>
>> It would be nice to have more time to finish that, but I wouldn't call
>> this "critical".
>>
>> Cheers,
>>
>> Falko
>>
>> Am 09.02.2022 um 23:50 schrieb Slawomir Jaranowski:
>>> Hi,
>>>
>>> There are 17 issues resolved
>>>
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12340588
>>> Some of them are critical.
>>>
>>> Do we have plans to resolve more issues in the near future?
>>>
>>> Last release was about 7 months ago.
>>>
>>> If there are no objections I can take care of it next week.
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> For additional commands, e-mail: dev-help@maven.apache.org
>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: Upcoming release of maven-dependency-plugin
Posted by Slawomir Jaranowski <s....@gmail.com>.
Hi Falko
Which issue are you working on?
How much time do you need to finish your work?
czw., 10 lut 2022 o 01:07 Falko Modler <f....@gmx.net> napisał(a):
> Hi Slawomir,
>
> a few weeks ago I started working on extending the "properties" goal to
> create a version property per dependency.
>
> This would be very useful for projects like Quarkus that have a big BOM
> and would like to reuse versions from that BOM for various things in
> integration tests etc.
>
> It would be nice to have more time to finish that, but I wouldn't call
> this "critical".
>
> Cheers,
>
> Falko
>
> Am 09.02.2022 um 23:50 schrieb Slawomir Jaranowski:
> > Hi,
> >
> > There are 17 issues resolved
> >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12340588
> > Some of them are critical.
> >
> > Do we have plans to resolve more issues in the near future?
> >
> > Last release was about 7 months ago.
> >
> > If there are no objections I can take care of it next week.
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
>
--
Sławomir Jaranowski
Re: Upcoming release of maven-dependency-plugin
Posted by Falko Modler <f....@gmx.net>.
Hi Slawomir,
a few weeks ago I started working on extending the "properties" goal to
create a version property per dependency.
This would be very useful for projects like Quarkus that have a big BOM
and would like to reuse versions from that BOM for various things in
integration tests etc.
It would be nice to have more time to finish that, but I wouldn't call
this "critical".
Cheers,
Falko
Am 09.02.2022 um 23:50 schrieb Slawomir Jaranowski:
> Hi,
>
> There are 17 issues resolved
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12340588
> Some of them are critical.
>
> Do we have plans to resolve more issues in the near future?
>
> Last release was about 7 months ago.
>
> If there are no objections I can take care of it next week.
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org