Jason van Zyl 4567c8319e MNG-5818: Disallow the programmatic injection of project dependencies ...

The first step here is deprecating the publicly accessible method that allows
plugins to inject dependencies. The only plugin I currently know of that does
this is the cobertura-maven-plugin. Looking at that plugin it appears the user
can specify the cobertura dependency for the instrumentation process but if
they do not the plugin attempts to inject the dependency. I believe the path
forward here is making sure these types of plugins instruct their users to
add the dependency explicitly.

I'm going to try and create a call-graph for all of Maven Central with my
first test to see if I can accurately detect all usages of MavenProject.setDependencyArtifacts
of artifact in Maven Central.

2015-04-30 21:39:28 -04:00

..

src

MNG-5818: Disallow the programmatic injection of project dependencies

2015-04-30 21:39:28 -04:00

lifecycle-executor.txt

Trimmed trailing whitespace

2014-11-23 13:04:30 +01:00

plugin-manager.txt

Trimmed trailing whitespace

2014-11-23 13:04:30 +01:00

pom.xml

[maven-release-plugin] prepare for next development iteration

2015-04-22 07:54:54 -04:00

project-builder.txt

o disable the tests in the bootstrap so ben and i can go all the way through to the embedder

2009-05-04 15:32:10 +00:00