important: dependency confidence status

[Brett Porter <br...@apache.org>]

Hi,

As of today, m2 checks daily for updates to POMs that have a confidence
level that is not "deployed" or "verified".

We should start to mark common ones as verified. However, if you are
doing this - be very careful. Once done, there's no going back :)

Something, to be mark verified should:
- be syntactically correct
- have all its dependencies specified correctly and they be present
- have correct scopes
- if it was converted, all the expressions and parent information must
have been incorporated

we need to do a few things in the repo management:
- ensure it never writes over a pom already verified
- make sure it flags poms as "converted"

The relevant element is:
<distributionManagement>
  <status>verified</status>
</distributionManamgent>

Cheers,
brett

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org