You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maven.apache.org by gn...@apache.org on 2026/09/01 21:11:04 UTC

(maven) branch pr/legacy-compat-credential-scope-4.0.x updated (de2b905687 -> 4b74bb4294)

This is an automated email from the ASF dual-hosted git repository.

gnodet pushed a change to branch pr/legacy-compat-credential-scope-4.0.x
in repository https://gitbox.apache.org/repos/asf/maven.git


 discard de2b905687 Validate relocation coordinates in DistributionManagementArtifactRelocationSource
 discard 19d3c58498 Scope server credentials and validate legacy relocation coordinates
     add 6d0cd5233f Bump net.sourceforge.pmd:pmd-core from 7.26.0 to 7.27.0 (#12980)
     add 0ede700bf9 [MNG-8450] Report BOM import warnings only at declaration sites (#12959) (#13003)
     add c64fa36849 Validate coordinates and repository precedence during artifact resolution (#12944)
     add a20edb5dda Output, transport and consumer POM robustness fixes (#12946)
     add 25b3b04ac4 Validate metadata inputs across legacy and new API paths, clone proxies before decryption (#12945)
     add 4b74bb4294 Scope server credentials and validate legacy relocation coordinates

This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version.  This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:

 * -- * -- B -- O -- O -- O   (de2b905687)
            \
             N -- N -- N   refs/heads/pr/legacy-compat-credential-scope-4.0.x (4b74bb4294)

You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.

Any revisions marked "omit" are not gone; other references still
refer to them.  Any revisions marked "discard" are gone forever.

No new revisions were added by this update.

Summary of changes:
 .../main/java/org/apache/maven/api/Constants.java  |  17 +++
 .../org/apache/maven/api/feature/Features.java     |   9 ++
 .../repository/LegacyLocalRepositoryManager.java   |  28 +++-
 .../metadata/AbstractRepositoryMetadata.java       |  28 +++-
 .../metadata/DefaultRepositoryMetadataManager.java |  83 ++++++++++-
 .../maven/repository/DefaultMirrorSelector.java    |  53 ++++---
 .../repository/legacy/LegacyRepositorySystem.java  |  35 ++++-
 .../LegacyLocalRepositoryManagerTest.java          |  58 ++++++++
 .../metadata/AbstractRepositoryMetadataTest.java   |  70 +++++++++
 .../DefaultRepositoryMetadataManagerTest.java      |  81 ++++++++++
 ...ultRepositoryMetadataManagerValidationTest.java |  63 ++++++++
 .../MavenMetadataSourceRelocationTest.java         |   2 +-
 .../repository/DefaultMirrorSelectorTest.java      |  36 +++++
 .../maven/repository/MirrorProcessorTest.java      |   6 +-
 .../legacy/LegacyRepositorySystemTest.java         |  25 ++++
 .../metadata-invalid-timestamp}/maven-metadata.xml |  13 +-
 .../metadata-invalid-token}/maven-metadata.xml     |  10 +-
 .../transfer/AbstractMavenTransferListener.java    |  45 +++++-
 .../cli/transfer/ConsoleMavenTransferListener.java |   2 +-
 .../cli/transfer/Slf4jMavenTransferListener.java   |  27 ++--
 .../repository/internal/DefaultModelResolver.java  |  15 ++
 .../internal/DefaultVersionRangeResolver.java      |  36 ++++-
 .../internal/DefaultVersionResolver.java           |  39 ++++-
 ...ributionManagementArtifactRelocationSource.java |  37 +++--
 .../internal/DefaultModelResolverTest.java         |  45 ++++++
 .../internal/DefaultVersionRangeResolverTest.java  |  47 ++++++
 .../internal/DefaultVersionResolverTest.java       |  28 ++++
 ...tionManagementArtifactRelocationSourceTest.java | 109 ++++++++++++++
 .../its/dep-invalid-range}/maven-metadata.xml      |  17 ++-
 .../1.0-SNAPSHOT}/maven-metadata.xml               |  21 +--
 .../1.0-SNAPSHOT/maven-metadata.xml}               |  22 +--
 .../settings/crypto/DefaultSettingsDecrypter.java  |   5 +
 .../crypto/DefaultSettingsDecrypterTest.java       |  62 ++++++++
 .../mvnup/goals/AbstractUpgradeStrategy.java       | 102 +++++++++----
 .../mvnup/goals/CompatibilityFixStrategy.java      |  21 ++-
 .../invoker/mvnup/goals/PluginUpgradeStrategy.java |  42 ++++--
 .../transfer/AbstractMavenTransferListener.java    |  45 +++++-
 .../transfer/ConsoleMavenTransferListener.java     |   2 +-
 .../cling/transfer/Slf4jMavenTransferListener.java |  27 ++--
 .../mvnup/goals/RemoteResolutionGateTest.java      | 164 +++++++++++++++++++++
 .../cling/transfer/TransferListenerOutputTest.java |  80 ++++++++++
 .../apache/maven/bridge/MavenRepositorySystem.java |  55 ++++---
 .../impl/DefaultConsumerPomBuilder.java            | 100 +++++++++++--
 .../maven/bridge/MavenRepositorySystemTest.java    |  64 ++++++++
 .../impl/ConsumerPomBuilderTest.java               | 105 ++++++++++++-
 .../consumer/bom-repo-scope/child/pom.xml          |  25 ++++
 .../test/resources/consumer/bom-repo-scope/pom.xml |  17 +++
 .../apache/maven/impl/DefaultSettingsBuilder.java  | 159 +++++++++++++++-----
 .../org/apache/maven/impl/DefaultTransport.java    |  46 ++++--
 .../model/DefaultDependencyManagementImporter.java |   3 +-
 .../maven/impl/model/DefaultModelBuilder.java      | 146 +++++++++++++++++-
 .../impl/resolver/DefaultVersionRangeResolver.java |   7 +-
 .../impl/resolver/DefaultVersionResolver.java      |   6 +-
 .../impl/resolver/MetadataInputValidator.java      |  96 ++++++++++++
 ...ributionManagementArtifactRelocationSource.java |  49 +++---
 .../apache/maven/impl/standalone/ApiRunner.java    |  43 +++++-
 .../impl/DefaultSettingsBuilderDecryptTest.java    | 104 +++++++++++++
 .../apache/maven/impl/DefaultTransportTest.java    |  34 +++++
 .../maven/impl/model/DefaultModelBuilderTest.java  |  99 +++++++++++++
 .../impl/resolver/MetadataInputValidatorTest.java  | 155 +++++++++++++++++++
 .../MetadataVersionTokenValidationTest.java        | 110 ++++++++++++++
 ...tionManagementArtifactRelocationSourceTest.java | 116 +++++++++++++++
 .../maven/its/dep-invalid-range/maven-metadata.xml |  15 ++
 .../dep-invalid-sv/1.0-SNAPSHOT/maven-metadata.xml |  20 +++
 .../1.0-SNAPSHOT/maven-metadata.xml                |   8 +-
 .../mng-8450-profile-context/bom-one/pom.xml       |  14 +-
 .../mng-8450-profile-context/bom-two/pom.xml       |  14 +-
 .../factory/mng-8450-profile-context/child/pom.xml |  11 ++
 .../mng-8450-profile-context/parent/pom.xml        |  34 +++++
 .../poms/factory/mng-8450-profile-context/pom.xml  |  14 ++
 .../poms/factory/mng-8450-standalone/child/pom.xml |  11 ++
 .../factory/mng-8450-standalone/parent/pom.xml     |  26 ++++
 .../1.0.0/standalone-bom-one-1.0.0.pom             |  14 +-
 .../1.0.0/standalone-bom-two-1.0.0.pom             |  14 +-
 .../poms/factory/mng-8450/bom-one/pom.xml          |  14 +-
 .../poms/factory/mng-8450/bom-two/pom.xml          |  14 +-
 .../poms/factory/mng-8450/child-one/pom.xml        |  10 ++
 .../poms/factory/mng-8450/child-two/pom.xml        |  10 ++
 .../poms/factory/mng-8450/independent/pom.xml      |  26 ++++
 .../test/resources/poms/factory/mng-8450/pom.xml   |  41 ++++++
 .../settings/settings-security-decrypt.xml         |   2 +-
 .../settings/settings-servers-decrypt-fail.xml     |   8 +-
 .../it/MavenITgh10210SettingsXmlDecryptTest.java   |   9 +-
 pom.xml                                            |   2 +-
 84 files changed, 3169 insertions(+), 358 deletions(-)
 create mode 100644 compat/maven-compat/src/test/java/org/apache/maven/artifact/repository/LegacyLocalRepositoryManagerTest.java
 create mode 100644 compat/maven-compat/src/test/java/org/apache/maven/artifact/repository/metadata/AbstractRepositoryMetadataTest.java
 create mode 100644 compat/maven-compat/src/test/java/org/apache/maven/artifact/repository/metadata/DefaultRepositoryMetadataManagerTest.java
 create mode 100644 compat/maven-compat/src/test/java/org/apache/maven/artifact/repository/metadata/DefaultRepositoryMetadataManagerValidationTest.java
 copy compat/maven-compat/src/test/{remote-repo/org/apache/maven/its/a => resources/metadata-invalid-timestamp}/maven-metadata.xml (79%)
 copy compat/maven-compat/src/test/{remote-repo/org/apache/maven/its/a => resources/metadata-invalid-token}/maven-metadata.xml (85%)
 create mode 100644 compat/maven-resolver-provider/src/test/java/org/apache/maven/repository/internal/DefaultVersionRangeResolverTest.java
 create mode 100644 compat/maven-resolver-provider/src/test/java/org/apache/maven/repository/internal/relocation/DistributionManagementArtifactRelocationSourceTest.java
 copy compat/maven-resolver-provider/src/test/resources/repo/{ut/simple/parent => org/apache/maven/its/dep-invalid-range}/maven-metadata.xml (70%)
 copy compat/maven-resolver-provider/src/test/resources/repo/org/apache/maven/its/{dep-mng5324/07.20.3-SNAPSHOT => dep-invalid-sv/1.0-SNAPSHOT}/maven-metadata.xml (63%)
 copy compat/maven-resolver-provider/src/test/resources/repo/{ut/simple/dependency/1.0/dependency-1.0.pom => org/apache/maven/its/dep-invalid-ts/1.0-SNAPSHOT/maven-metadata.xml} (68%)
 create mode 100644 compat/maven-settings-builder/src/test/java/org/apache/maven/settings/crypto/DefaultSettingsDecrypterTest.java
 create mode 100644 impl/maven-cli/src/test/java/org/apache/maven/cling/invoker/mvnup/goals/RemoteResolutionGateTest.java
 create mode 100644 impl/maven-cli/src/test/java/org/apache/maven/cling/transfer/TransferListenerOutputTest.java
 create mode 100644 impl/maven-core/src/test/java/org/apache/maven/bridge/MavenRepositorySystemTest.java
 create mode 100644 impl/maven-core/src/test/resources/consumer/bom-repo-scope/child/pom.xml
 create mode 100644 impl/maven-core/src/test/resources/consumer/bom-repo-scope/pom.xml
 create mode 100644 impl/maven-impl/src/main/java/org/apache/maven/impl/resolver/MetadataInputValidator.java
 create mode 100644 impl/maven-impl/src/test/java/org/apache/maven/impl/DefaultSettingsBuilderDecryptTest.java
 create mode 100644 impl/maven-impl/src/test/java/org/apache/maven/impl/resolver/MetadataInputValidatorTest.java
 create mode 100644 impl/maven-impl/src/test/java/org/apache/maven/impl/resolver/MetadataVersionTokenValidationTest.java
 create mode 100644 impl/maven-impl/src/test/java/org/apache/maven/impl/resolver/relocation/DistributionManagementArtifactRelocationSourceTest.java
 create mode 100644 impl/maven-impl/src/test/remote-repo/org/apache/maven/its/dep-invalid-range/maven-metadata.xml
 create mode 100644 impl/maven-impl/src/test/remote-repo/org/apache/maven/its/dep-invalid-sv/1.0-SNAPSHOT/maven-metadata.xml
 copy {its/core-it-suite/src/test/resources/mng-3092/repo/org/apache/maven/its/mng3092/b => impl/maven-impl/src/test/remote-repo/org/apache/maven/its/dep-invalid-ts}/1.0-SNAPSHOT/maven-metadata.xml (52%)
 copy its/core-it-suite/src/test/resources/gh-11767-consumer-pom-bom-from-settings-repo/repo/org/apache/maven/its/cpbom/the-bom/1.0/the-bom-1.0.pom => impl/maven-impl/src/test/resources/poms/factory/mng-8450-profile-context/bom-one/pom.xml (55%)
 copy its/core-it-suite/src/test/resources/gh-11767-consumer-pom-bom-from-settings-repo/repo/org/apache/maven/its/cpbom/the-bom/1.0/the-bom-1.0.pom => impl/maven-impl/src/test/resources/poms/factory/mng-8450-profile-context/bom-two/pom.xml (55%)
 create mode 100644 impl/maven-impl/src/test/resources/poms/factory/mng-8450-profile-context/child/pom.xml
 create mode 100644 impl/maven-impl/src/test/resources/poms/factory/mng-8450-profile-context/parent/pom.xml
 create mode 100644 impl/maven-impl/src/test/resources/poms/factory/mng-8450-profile-context/pom.xml
 create mode 100644 impl/maven-impl/src/test/resources/poms/factory/mng-8450-standalone/child/pom.xml
 create mode 100644 impl/maven-impl/src/test/resources/poms/factory/mng-8450-standalone/parent/pom.xml
 copy its/core-it-suite/src/test/resources/gh-11767-consumer-pom-bom-from-settings-repo/repo/org/apache/maven/its/cpbom/the-bom/1.0/the-bom-1.0.pom => impl/maven-impl/src/test/resources/poms/factory/mng-8450-standalone/repo/org/apache/maven/test/standalone-bom-one/1.0.0/standalone-bom-one-1.0.0.pom (55%)
 copy its/core-it-suite/src/test/resources/gh-11767-consumer-pom-bom-from-settings-repo/repo/org/apache/maven/its/cpbom/the-bom/1.0/the-bom-1.0.pom => impl/maven-impl/src/test/resources/poms/factory/mng-8450-standalone/repo/org/apache/maven/test/standalone-bom-two/1.0.0/standalone-bom-two-1.0.0.pom (55%)
 copy its/core-it-suite/src/test/resources/gh-11767-consumer-pom-bom-from-settings-repo/repo/org/apache/maven/its/cpbom/the-bom/1.0/the-bom-1.0.pom => impl/maven-impl/src/test/resources/poms/factory/mng-8450/bom-one/pom.xml (55%)
 copy its/core-it-suite/src/test/resources/gh-11767-consumer-pom-bom-from-settings-repo/repo/org/apache/maven/its/cpbom/the-bom/1.0/the-bom-1.0.pom => impl/maven-impl/src/test/resources/poms/factory/mng-8450/bom-two/pom.xml (55%)
 create mode 100644 impl/maven-impl/src/test/resources/poms/factory/mng-8450/child-one/pom.xml
 create mode 100644 impl/maven-impl/src/test/resources/poms/factory/mng-8450/child-two/pom.xml
 create mode 100644 impl/maven-impl/src/test/resources/poms/factory/mng-8450/independent/pom.xml
 create mode 100644 impl/maven-impl/src/test/resources/poms/factory/mng-8450/pom.xml
 copy its/core-it-suite/src/test/resources/gh-10210-settings-xml-decrypt/HOME/.m2/settings-security.xml => impl/maven-impl/src/test/resources/settings/settings-security-decrypt.xml (80%)
 copy its/core-it-suite/src/test/resources/it0113/settings.xml => impl/maven-impl/src/test/resources/settings/settings-servers-decrypt-fail.xml (78%)