You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Bukama (via GitHub)" <gi...@apache.org> on 2026/05/15 19:53:45 UTC
[PR] Update to parent 48, Maven 3.9.15 [maven-artifact-plugin]
Bukama opened a new pull request, #214:
URL: https://github.com/apache/maven-artifact-plugin/pull/214
(no comment)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update to parent 48, Maven 3.9.15 [maven-artifact-plugin]
Posted by "Bukama (via GitHub)" <gi...@apache.org>.
Bukama commented on PR #214:
URL: https://github.com/apache/maven-artifact-plugin/pull/214#issuecomment-4631658475
> 0xEA23DB1360D9029481E7F2EFECDFEA3CB4493B94
Took me a time to understand it's a local file in the project -added. Thanks for explain
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update to parent 48, Maven 3.9.15 [maven-artifact-plugin]
Posted by "slawekjaranowski (via GitHub)" <gi...@apache.org>.
slawekjaranowski commented on PR #214:
URL: https://github.com/apache/maven-artifact-plugin/pull/214#issuecomment-4586211031
> Fails due invalid signature key from plexus dependency
>
> > [ERROR] Not allowed artifact org.codehaus.plexus:plexus-utils:jar:4.0.3 and keyID:
> > org.codehaus.plexus:plexus-utils:4.0.3 = 0xEA23DB1360D9029481E7F2EFECDFEA3CB4493B94
> > https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0x0181A4828FA27B6BE6F1F5A68611CD28F472E006
so should be fixed
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update to parent 48, Maven 3.9.15 [maven-artifact-plugin]
Posted by "gnodet (via GitHub)" <gi...@apache.org>.
gnodet commented on PR #214:
URL: https://github.com/apache/maven-artifact-plugin/pull/214#issuecomment-4587812104
The key is already uploaded to public keyservers (both keys.openpgp.org and keyserver.ubuntu.com).
The artifact `plexus-utils:4.0.3` was signed with my EdDSA subkey `0x0181A4828FA27B6BE6F1F5A68611CD28F472E006` (created 2024-07-19), which is a subkey of my primary key `0xEA23DB1360D9029481E7F2EFECDFEA3CB4493B94`.
The trusted keys list for `org.codehaus.plexus` currently includes my other EdDSA subkey `0x073F7A9345756F3B40CDB99E6C70A3B7599C5736` (created 2022-12-12), but not the primary key `0xEA23DB1360D9029481E7F2EFECDFEA3CB4493B94` which is what the verification reports.
The fix is to add `0xEA23DB1360D9029481E7F2EFECDFEA3CB4493B94` to the trusted keys for `org.codehaus.plexus` in the `pgp-keys-map.list`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update to parent 48, Maven 3.9.16 [maven-artifact-plugin]
Posted by "Bukama (via GitHub)" <gi...@apache.org>.
Bukama merged PR #214:
URL: https://github.com/apache/maven-artifact-plugin/pull/214
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update to parent 48, Maven 3.9.15 [maven-artifact-plugin]
Posted by "slawekjaranowski (via GitHub)" <gi...@apache.org>.
slawekjaranowski commented on code in PR #214:
URL: https://github.com/apache/maven-artifact-plugin/pull/214#discussion_r3362966782
##########
pom.xml:
##########
@@ -60,11 +62,12 @@
</distributionManagement>
<properties>
- <mavenVersion>3.9.14</mavenVersion>
+ <mavenVersion>3.9.15</mavenVersion>
Review Comment:
3.9.16
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update to parent 48, Maven 3.9.15 [maven-artifact-plugin]
Posted by "Bukama (via GitHub)" <gi...@apache.org>.
Bukama commented on PR #214:
URL: https://github.com/apache/maven-artifact-plugin/pull/214#issuecomment-4462977095
Fails due invalid signature key from plexus dependency
> [ERROR] Not allowed artifact org.codehaus.plexus:plexus-utils:jar:4.0.3 and keyID:
org.codehaus.plexus:plexus-utils:4.0.3 = 0xEA23DB1360D9029481E7F2EFECDFEA3CB4493B94
https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0x0181A4828FA27B6BE6F1F5A68611CD28F472E006
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org