You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "Herve Boutemy (Jira)" <ji...@apache.org> on 2021/07/12 09:34:00 UTC

[jira] [Created] (MARTIFACT-25) add pom.xml to the output files being verified

Herve Boutemy created MARTIFACT-25:
--------------------------------------

             Summary: add pom.xml to the output files being verified
                 Key: MARTIFACT-25
                 URL: https://issues.apache.org/jira/browse/MARTIFACT-25
             Project: Maven Artifact Plugin
          Issue Type: Improvement
          Components: artifact:buildinfo, artifact:compare
    Affects Versions: 3.1.0
            Reporter: Herve Boutemy
             Fix For: 3.2.0


pom.xml fingerprint is not checked until now: this is a bad idea for multiple reasons:
- depending on release manager OS, pom.xml deployed to remote repository may be different from rebuilder output, even if they use the same Git repository and commit
- in the future, with Maven 4 differentiating build and consumer POMs, output pom.xml is consumer POM, may be different from pom.xml in Git (with more differences than just newlines)
- for consistency with buildinfo from other build tools, because the purely generate their pom.xml then absolutely consider it as an output to be checked



--
This message was sent by Atlassian Jira
(v8.3.4#803005)