Commit Graph

10764 Commits

Author SHA1 Message Date
Michael Osipov f164ab5f89 [MNG-7513] Address commons-io_commons-io vulnerability found in maven latest version
We can safely remove Commons IO altogether because it is not used in any direct or
transitive usecase at compile time or runtime.

This closes #771
2022-07-18 17:31:06 +02:00
Michael Osipov 9b876fa90b [MNG-7506] Upgrade Maven Wagon to 3.5.2 2022-06-27 13:33:07 +02:00
Hervé Boutemy c9a3e0e45b [MNG-7501] add relative path to pom.xml in module build start output 2022-06-26 18:38:40 +02:00
Sylwester Lachiewicz e4f347ed85 [MNG-6965] Extensions suddenly have org.codehaus.plexus:plexus-utils:jar:1.1 on their classpath
This closes #367
2022-06-24 19:10:33 +02:00
Slawomir Jaranowski b3e7e57e4b [MNG-7504] Don't print warning unsupported reportPlugins for m-site-p 2022-06-20 23:59:02 +02:00
Michael Osipov f0cef23c6e [MNG-7499] Upgrade Maven Resolver to 1.8.1
This closes #754
2022-06-18 12:30:43 +02:00
Guillaume Nodet 115febf29b [MNG-7160] Ability to customize core extensions classloaders (#616) 2022-06-18 12:30:40 +02:00
Michael Osipov bb6bbf882d Update DOAP with Maven 3.8.6 release 2022-06-11 17:17:51 +02:00
Slawomir Jaranowski 0504c361b4 [MNG-7468] Check unsupported plugins parameters in configuration - 3.9
(cherry picked from commit 54f9d91ebb)
2022-06-06 17:23:15 +02:00
Tamas Cservenak ca479180c5
[MNG-7491] Update parent POM 36 (3.9.x) (#748)
Update parent POM to v 36, remove redundant bits.
2022-06-02 12:57:18 +02:00
Hervé Boutemy ac9132e4f4 deploy master, 3.8.x and 3.9.x 2022-05-31 09:22:36 +02:00
Michael Osipov d0c387b7bd [MNG-7489] Upgrade JUnit to 4.13.2 2022-05-30 23:23:31 +02:00
Michael Osipov 8a928e59ac [MNG-7488] Upgrade SLF4J to 1.7.36 2022-05-30 22:50:54 +02:00
Guillaume Nodet 0a94ff769c [MNG-7476] Display a warning when an aggregator mojo is locking other mojos executions 2022-05-30 13:10:42 +02:00
Guillaume Nodet 0b0a96782e [MNG-7487] Fix deadlock during forked lifecycle executions
# Conflicts:
#	maven-core/src/main/java/org/apache/maven/lifecycle/internal/MojoExecutor.java
2022-05-30 13:10:25 +02:00
Guillaume Nodet aec341a7a9 [MNG-7486] Create a multiline message helper for boxed log messages
This closes #746
2022-05-29 13:34:53 +02:00
Karl Heinz Marbaise 5002a0b0b8 [MNG-7448] Don't ignore bin/ otherwise bin/ in apache-maven module cannot be readded
This closes #742
2022-05-27 22:07:09 +02:00
Tamas Cservenak 70e9381a74 [MNG-7478] Transport selection should use config properties (#739)
Instead of user properties, as this allows making "permanent" the
selection by using MAVEN_OPTS and other places as well. Currently
only via command line works.

Also, do not modify existing Maven behavior, so introduce "default" branch
in selection. See comment in code
2022-05-17 08:58:21 +02:00
Tamas Cservenak 4de39476ff [MNG-7471] Make Resolver util and connector-basic provided (#732)
Problem: resolver spi, impl and connector-basic has changes in 1.8.0 (SPI interface RepositoryLayout got new method, that is implemented in connector-basic, and code from impl is using it). But, Maven core exports only resolver api, spi and impl packages, while the rest is at mercy of a plugin. This means ,that these artifacts (api, spi and impl) will always come from Maven core, whatever version plugin declares, while the "rest" (connector-basic and util) will be of version that plugin declares. The current state hence prevented ANY KIND of changes on SPI interfaces that would be implemented in connector-basic (which is the case in Resolver 1.8.0).

Solution: make all these resolver artifacts "provided" (to behave like maven-core or maven-plugin-api is behaving): simply put, whatever resolver artifact plugin depends on, it should NOT use it's own version, but the version from Maven. This ensures that api-spi-impl-connector-basic as "aligned" and are same version.

Details:

The change is to make util is exportedArtifact AND exportedPackage, while connector-basic is only exportedArtifact.

Reasoning:
* exportedArtifact -- prevents "own" artifact to be added to realm
* exportedPackage -- makes it "visible" in realm

So, this basically prevents bad versions of util and connector-basic
enter the plugin realm (as they will be not added to it), while
util remains "visible" to plugins, as the intent was, most
common due GenericVersions etc.

This change also results in simpler expectations to plugin developers:
resolver libraries should really behave like maven-core or maven-compat:
when plugin declares dependency on these (w/ scope provided as best
practice), they really get version of these that are of version that
maven runs in, not version they declare. So same thing happens now with
resolver: you will get same version of resolver that maven uses your plugin
runs in.

Before this change, it was a mixed bag: api, spi and impl was from maven,
while util and connector-basic was version you pulled in as dep.
2022-05-11 16:06:37 +02:00
Guillaume Nodet 89237dd74d Revert "[MNG-7347] SessionScoped beans should be singletons for a given session (#653)" (#715)
This reverts commit b4518b5fe4.
2022-05-09 10:04:54 +02:00
Slawomir Jaranowski 74eba2968b [MNG-7464] Warn about using read-only parameters for Mojo in configuration
(cherry picked from commit 3dd0afd897)
2022-05-06 23:05:12 +02:00
Tamas Cservenak 229cfc8bf6 [MNG-7466] Align assembly XSD version with plugin used (#728)
The component.xml was missed from original change.
2022-04-27 15:18:50 +02:00
Tamas Cservenak 7b86ce8534 [MNG-7466] Align assembly XSD version with plugin used (#728)
As title says, XSD is ancient old 2.0.0, while all
latest assembly plugins uses 2.1.0.

Not that this matters or changes anything at all,
this is more about correctness.
2022-04-27 15:17:03 +02:00
Slawomir Jaranowski dd0ddef8f6 [MNG-7457] Warn about deprecated plugin Mojo
(cherry picked from commit 702f52d0ea)
2022-04-24 13:49:26 +02:00
Slawomir Jaranowski 28c763c72c [MNG-5222] Improvement in deprecated params detection
This is backport of commit 9ac2d08dc7 from master to maven-3.9.x branch.
2022-04-23 12:29:41 +02:00
Tamas Cservenak 4c9dc5abb2
[MNG-7055] Fix G level metadata handling in 3.9.x (#691)
Maven Artifact Transfer silently prevents group level metadata to reach Resolver and causes metadata loss on install/deploy.
Fix is to "bridge" this from maven-resolver-provider (and core) by reusing the actual metadata that
m-plugin-p:addPluginArtifactMetadata mojo adds, but m-a-t filters out.

This is backport of commit d141957ff5 from master to maven-3.9.x branch.
2022-04-22 17:51:07 +02:00
Tamas Cservenak aa0607301f
[MNG-7453] Update Resolver to 1.8.0 (#724)
Updates Maven Resolver to 1.8.0.
2022-04-22 16:50:57 +02:00
Tamas Cservenak 85caf98029 [MNG-7454] Include resolver-transport-http in Maven (#720)
Addendum to 1ad5a1b1e9bb0a17fc12bbe0314564a616078602:
* fix property name to align with existing ones
* fix logging configuration as no more shaded httpClient
* fix constant names
2022-04-16 18:21:48 +02:00
Hervé Boutemy 3c6009cbf4 [MNG-7438] add execution id to "configuring mojo" debug message
[DEBUG] Configuring mojo execution
'org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M5:test:default-test'
with basic configurator

rephrase "Configuring" to "Loading" mojo "from plugin realm"
to differentiate from "configuring mojo" = apply configuration

rename populatePluginFields(..) private method
to populateMojoExecutionFields(..) to better match the intent
2022-04-15 18:40:52 +02:00
Tamas Cservenak 1ad5a1b1e9
[MNG-7454] Include resolver-transport-http in Maven 3.9.x (#710)
But keep Wagon as default transport. This PR merely includes
resolver http and file transport and switches wagon-http
to non-shaded one.

Changes:
* switch to non-shaded wagon-http (as httpClient is now shared)
* include resolver http and file transport
* override resolver default behaviour (native transport preferred over wagon, when both on classpath)
* provide simplistic means to choose transport

The chosen transport can be seen in debug (-X) output on line
`[DEBUG] Using transporter XXX...`

The `-Dmaven.transport` simplistic switch can be used to choose transport:
* not set: default, that is Wagon
* `wagon`: explicitly sets Wagon
* `resolver`: explicitly sets resolver native transports (file and http)
* `auto`: relies on resolver "auto discovery" (priorities, etc). This is MUST to keep transport pluggable with 3rd party transports. In fact, this was the default so far in Maven, along with the fact that native resolver transports were not included (as resolver prefers native ones over Wagon).
2022-04-13 12:51:19 +02:00
Gabriel Belingueres ff0300b7cf
[MNG-5222] Maven 3 no longer logs warnings about deprecated plugin parameters
- Added warning when setting deprecated parameter with value different
than the default.
- Changed Logger to SLF4J.

(cherry picked from commit c99028b9fb)
2022-04-12 22:49:03 +02:00
Tamas Cservenak 08dff22a41
[MNG-7447] Fix ReactorReader unintended change (#709)
The commit c604db3c3a
changed ReactorReader to use MavenSession#getAllProjects()
instead of deprecated MavenSession#getProjectMap() that
is equivalent of MavenSession#getProjects().

This undoes this unintended change.
2022-04-08 18:24:03 +02:00
Tamas Cservenak 263cf9542b [MNG-7432] Resolver session contains non-MavenWorkspaceReader (#695)
As Resolver session contains non-MavenWorkspaceReader, the reactor models (already resolved w/ profiles applied) are re-built when using Resolver within Mojo, instead to get them via ReactorReader as expected. The rebuilt models will lack explicit (-P on CLI) profiles applied, as resolver itself is not maven aware, hence there is no way to "tell" resolver to apply them. Building reactor models w/ profiles applied is NOT done using resolver, but by Maven when loading up reactor, as profiles are NOT applied for downstream transitive dependencies (see discussion on MNG-1388 why).

Signed-off-by: Christoph Läubrich <christoph@laeubi-soft.de>
Co-authored-by: Christoph Läubrich <christoph@laeubi-soft.de>
Co-authored-by: Tamas Cservenak <tamas@cservenak.net>
2022-04-08 10:32:15 +02:00
Tamas Cservenak 083423fd50 [MNG-7441] Update version of loback
This issue is fluke, as logback is actually optional
dependency, but still, to cut reports like these from
root, let's do this update.
2022-04-08 10:02:40 +02:00
Karl Heinz Marbaise a116f25002
[MNG-7452] - Remove JDK7 run on Maven 3.9.X Branch 2022-04-05 21:57:14 +02:00
Karl Heinz Marbaise c604db3c3a
[MNG-7447] - Several Improvements by using Stream API 2022-04-05 21:24:58 +02:00
Jacky f7b073f3eb
[MNG-7445] - Refactoring, remove the useless line
Contribution by JakcyHu Gakiii

Signed-off-by: Karl Heinz Marbaise <khmarbaise@apache.org>
2022-04-01 22:21:36 +02:00
Hervé Boutemy 88d29675ae [MNG-7413] fix anchor for XML elements with same name but not content 2022-03-27 14:25:47 +02:00
Guillaume Nodet 3a5a40c6d2
[MNG-7391] Fix MojosExecutionStrategy lookup to be able to look into the SessionScope (#692) 2022-03-15 06:55:50 +01:00
Michael Osipov 5220420212 Update DOAP with Maven 3.8.5 release 2022-03-13 13:04:58 +01:00
Guillaume Nodet 14ca723438 [MNG-7350] Introduce a factory for ModelCache 2022-03-09 13:33:45 +01:00
Guillaume Nodet 1954d51ff2 [MNG-7391] add execution strategy+runner required by Maven Build Cache 2022-03-09 10:33:40 +01:00
mickroll a55300a588 [MNG-6972] Allow access to org.apache.maven.graph
This is, for example, needed for rebuilding the dependency graph during build
extension execution after changing dependencies.

This closes #368
2022-03-06 21:12:47 +01:00
Michael Osipov 6b7beb4db8 [MNG-7019] Notify also at start when profile is missing 2022-03-06 21:12:47 +01:00
Karl Heinz Marbaise 7d6f281fe3 [MNG-6826] Remove condition check for JDK8+ in FileSizeFormatTest 2022-03-06 21:12:40 +01:00
boris-unckel e1b46e2339 [MNG-7068] Active dependency management for Google Guice/Guava
This closes #462
2022-03-06 20:46:56 +01:00
Michael Osipov e820dbb24e [MNG-6878] Upgrade Guice to 4.2.3 2022-03-06 12:16:03 +01:00
Michael Osipov 6ddb75138d Remove unnecessary plugin dependency 2022-03-06 11:57:53 +01:00
Michael Osipov 453c173713 [MNG-7247] Upgrade Maven Resolver to 1.7.2 2022-03-06 10:52:28 +01:00
Michael Osipov 52b718614a [MNG-6399] Lift JDK minimum to JDK 8 2022-03-06 10:47:38 +01:00