You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-issues@jackrabbit.apache.org by "Chetan Mehrotra (JIRA)" <ji...@apache.org> on 2017/01/16 07:04:26 UTC

[jira] [Commented] (OAK-5455) Specify versions for maven plugins used in build for ensuring stable builds

    [ https://issues.apache.org/jira/browse/OAK-5455?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15823550#comment-15823550 ] 

Chetan Mehrotra commented on OAK-5455:
--------------------------------------

Other updates suggested

{noformat}
[INFO] Require Maven 2.0.1 to use the following plugin updates:
[INFO]   maven-release-plugin ..................................... 2.0-beta-7
[INFO] 
[INFO] Require Maven 2.0.2 to use the following plugin updates:
[INFO]   maven-checkstyle-plugin ......................................... 2.1
[INFO]   maven-javadoc-plugin ............................................ 2.2
[INFO]   maven-site-plugin ........................................ 2.0-beta-7
[INFO] 
[INFO] Require Maven 2.0.4 to use the following plugin updates:
[INFO]   maven-project-info-reports-plugin ............................. 2.0.1
[INFO]   org.apache.rat:apache-rat-plugin ................................ 0.8
[INFO] 
[INFO] Require Maven 2.0.5 to use the following plugin updates:
[INFO]   org.codehaus.mojo:findbugs-maven-plugin ......................... 1.2
[INFO] 
[INFO] Require Maven 2.0.6 to use the following plugin updates:
[INFO]   maven-checkstyle-plugin ......................................... 2.8
[INFO]   maven-deploy-plugin ........................................... 2.8.1
[INFO]   maven-jar-plugin ................................................ 2.4
[INFO]   maven-javadoc-plugin ............................................ 2.3
[INFO]   maven-project-info-reports-plugin ............................. 2.1.2
[INFO]   maven-release-plugin ..................................... 2.0-beta-9
[INFO]   maven-resources-plugin .......................................... 2.6
[INFO]   maven-site-plugin ............................................. 2.0.1
[INFO]   maven-surefire-plugin ......................................... 2.4.3
[INFO] 
[INFO] Require Maven 2.0.7 to use the following plugin updates:
[INFO]   org.codehaus.mojo:findbugs-maven-plugin ......................... 2.1
[INFO] 
[INFO] Require Maven 2.0.8 to use the following plugin updates:
[INFO]   maven-javadoc-plugin ............................................ 2.4
[INFO]   org.codehaus.mojo:findbugs-maven-plugin ....................... 2.3.1
[INFO] 
[INFO] Require Maven 2.0.9 to use the following plugin updates:
[INFO]   maven-compiler-plugin ........................................... 3.1
[INFO]   maven-failsafe-plugin .......................................... 2.12
[INFO]   maven-javadoc-plugin .......................................... 2.8.1
[INFO]   maven-release-plugin .......................................... 2.2.2
[INFO]   maven-surefire-plugin .......................................... 2.17
[INFO] 
[INFO] Require Maven 2.1.0 to use the following plugin updates:
[INFO]   maven-project-info-reports-plugin ............................... 2.2
[INFO]   maven-site-plugin ............................................. 2.1.1
[INFO]   org.codehaus.mojo:findbugs-maven-plugin ....................... 2.3.3
[INFO]   org.jacoco:jacoco-maven-plugin ................... 0.6.3.201306030806
[INFO] 
[INFO] Require Maven 2.2.0 to use the following plugin updates:
[INFO]   maven-project-info-reports-plugin ............................... 2.6
[INFO]   maven-site-plugin ............................................... 3.0
[INFO] 
[INFO] Require Maven 2.2.1 to use the following plugin updates:
[INFO]   maven-checkstyle-plugin ....................................... 2.9.1
[INFO]   maven-compiler-plugin ........................................... 3.3
[INFO]   maven-deploy-plugin ........................................... 2.8.2
[INFO]   maven-javadoc-plugin ............................................ 2.9
[INFO]   maven-project-info-reports-plugin ............................. 2.8.1
[INFO]   maven-release-plugin .......................................... 2.3.2
[INFO]   maven-resources-plugin .......................................... 2.7
[INFO]   maven-site-plugin ............................................... 3.1
[INFO]   maven-surefire-plugin ........................................ 2.19.1
[INFO]   org.apache.rat:apache-rat-plugin ............................... 0.11
[INFO]   org.codehaus.mojo:animal-sniffer-maven-plugin .................. 1.15
[INFO]   org.codehaus.mojo:findbugs-maven-plugin ....................... 2.5.5
[INFO]   org.jacoco:jacoco-maven-plugin ................... 0.7.6.201602180812
[INFO] 
[INFO] Require Maven 3.0 to use the following plugin updates:
[INFO]   maven-compiler-plugin ......................................... 3.5.1
[INFO]   maven-project-info-reports-plugin ............................... 2.9
[INFO]   maven-resources-plugin ........................................ 3.0.1
[INFO]   maven-scm-publish-plugin ........................................ 1.1
[INFO]   org.jacoco:jacoco-maven-plugin ................................ 0.7.8
[INFO] 
[INFO] Require Maven 3.0.1 to use the following plugin updates:
[INFO]   org.codehaus.mojo:findbugs-maven-plugin ....................... 3.0.4
[INFO] 
[INFO] Require Maven 3.0.5 to use the following plugin updates:
[INFO]   org.apache.felix:maven-bundle-plugin .......................... 3.2.0
[INFO]   org.apache.rat:apache-rat-plugin ............................... 0.12
[INFO] 
{noformat}

Of these I think we can safely apply most except maven-bundle-plugin and maven-scr-plugin at this time of release

> Specify versions for maven plugins used in build for ensuring stable builds
> ---------------------------------------------------------------------------
>
>                 Key: OAK-5455
>                 URL: https://issues.apache.org/jira/browse/OAK-5455
>             Project: Jackrabbit Oak
>          Issue Type: Task
>          Components: parent
>            Reporter: Chetan Mehrotra
>             Fix For: 1.6
>
>
> Running a check for plugin versions used in oak build 
> {noformat}
> mvn versions:display-plugin-updates
> {noformat}
> leads to following warning
> {noformat}
> [INFO] The following plugin updates are available:
> [INFO]   org.apache.felix:maven-scr-plugin .................. 1.16.0 -> 1.21.0
> [INFO] 
> [WARNING] The following plugins do not have their version specified:
> [WARNING]   maven-compiler-plugin ...................................... 2.0.2
> [WARNING]   maven-deploy-plugin ......................... (from super-pom) 2.4
> [WARNING]   maven-failsafe-plugin ..................................... 2.12.4
> [WARNING]   maven-jar-plugin ............................................. 2.1
> [WARNING]   maven-javadoc-plugin ......................................... 2.0
> [WARNING]   maven-release-plugin ................. (from super-pom) 2.0-beta-4
> [WARNING]   maven-resources-plugin ....................................... 2.2
> [WARNING]   maven-surefire-plugin ...................................... 2.4.2
> [INFO] 
> [WARNING] Project does not define minimum Maven version, default is: 2.0
> [INFO] Plugins require minimum Maven version of: 3.0.5
> [INFO] Note: the super-pom from Maven 3.3.9 defines some of the plugin
> [INFO]       versions and may be influencing the plugins required minimum Maven
> [INFO]       version.
> [INFO] 
> [ERROR] Project does not define required minimum version of Maven.
> [ERROR] Update the pom.xml to contain
> [ERROR]     <prerequisites>
> [ERROR]       <maven>3.0.5</maven>
> [ERROR]     </prerequisites>
> {noformat}
> As a fix we should
> # Specify version for all maven plugin in use
> # Specify minimum version of maven to be used (version used in CI is 3.2.1)
> # Configure enforcer plugin to ensure that in future no plugin is used without specifying the version [1]
> [1] http://maven.apache.org/enforcer/enforcer-rules/requirePluginVersions.html



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)