head 1.13; access; symbols pkgsrc-2023Q4:1.13.0.10 pkgsrc-2023Q4-base:1.13 pkgsrc-2023Q3:1.13.0.8 pkgsrc-2023Q3-base:1.13 pkgsrc-2023Q2:1.13.0.6 pkgsrc-2023Q2-base:1.13 pkgsrc-2023Q1:1.13.0.4 pkgsrc-2023Q1-base:1.13 pkgsrc-2022Q4:1.13.0.2 pkgsrc-2022Q4-base:1.13 pkgsrc-2022Q3:1.12.0.8 pkgsrc-2022Q3-base:1.12 pkgsrc-2022Q2:1.12.0.6 pkgsrc-2022Q2-base:1.12 pkgsrc-2022Q1:1.12.0.4 pkgsrc-2022Q1-base:1.12 pkgsrc-2021Q4:1.12.0.2 pkgsrc-2021Q4-base:1.12 pkgsrc-2021Q3:1.11.0.10 pkgsrc-2021Q3-base:1.11 pkgsrc-2021Q2:1.11.0.8 pkgsrc-2021Q2-base:1.11 pkgsrc-2021Q1:1.11.0.6 pkgsrc-2021Q1-base:1.11 pkgsrc-2020Q4:1.11.0.4 pkgsrc-2020Q4-base:1.11 pkgsrc-2020Q3:1.11.0.2 pkgsrc-2020Q3-base:1.11 pkgsrc-2020Q2:1.10.0.16 pkgsrc-2020Q2-base:1.10 pkgsrc-2020Q1:1.10.0.12 pkgsrc-2020Q1-base:1.10 pkgsrc-2019Q4:1.10.0.14 pkgsrc-2019Q4-base:1.10 pkgsrc-2019Q3:1.10.0.10 pkgsrc-2019Q3-base:1.10 pkgsrc-2019Q2:1.10.0.8 pkgsrc-2019Q2-base:1.10 pkgsrc-2019Q1:1.10.0.6 pkgsrc-2019Q1-base:1.10 pkgsrc-2018Q4:1.10.0.4 pkgsrc-2018Q4-base:1.10 pkgsrc-2018Q3:1.10.0.2 pkgsrc-2018Q3-base:1.10 pkgsrc-2018Q2:1.9.0.2 pkgsrc-2018Q2-base:1.9 pkgsrc-2018Q1:1.8.0.8 pkgsrc-2018Q1-base:1.8 pkgsrc-2017Q4:1.8.0.6 pkgsrc-2017Q4-base:1.8 pkgsrc-2017Q3:1.8.0.4 pkgsrc-2017Q3-base:1.8 pkgsrc-2017Q2:1.7.0.22 pkgsrc-2017Q2-base:1.7 pkgsrc-2017Q1:1.7.0.20 pkgsrc-2017Q1-base:1.7 pkgsrc-2016Q4:1.7.0.18 pkgsrc-2016Q4-base:1.7 pkgsrc-2016Q3:1.7.0.16 pkgsrc-2016Q3-base:1.7 pkgsrc-2016Q2:1.7.0.14 pkgsrc-2016Q2-base:1.7 pkgsrc-2016Q1:1.7.0.12 pkgsrc-2016Q1-base:1.7 pkgsrc-2015Q4:1.7.0.10 pkgsrc-2015Q4-base:1.7 pkgsrc-2015Q3:1.7.0.8 pkgsrc-2015Q3-base:1.7 pkgsrc-2015Q2:1.7.0.6 pkgsrc-2015Q2-base:1.7 pkgsrc-2015Q1:1.7.0.4 pkgsrc-2015Q1-base:1.7 pkgsrc-2014Q4:1.7.0.2 pkgsrc-2014Q4-base:1.7 pkgsrc-2014Q3:1.6.0.4 pkgsrc-2014Q3-base:1.6 pkgsrc-2014Q2:1.6.0.2 pkgsrc-2014Q2-base:1.6 pkgsrc-2014Q1:1.5.0.10 pkgsrc-2014Q1-base:1.5 pkgsrc-2013Q4:1.5.0.8 pkgsrc-2013Q4-base:1.5 pkgsrc-2013Q3:1.5.0.6 pkgsrc-2013Q3-base:1.5 pkgsrc-2013Q2:1.5.0.4 pkgsrc-2013Q2-base:1.5 pkgsrc-2013Q1:1.5.0.2 pkgsrc-2013Q1-base:1.5 pkgsrc-2012Q4:1.3.0.30 pkgsrc-2012Q4-base:1.3 pkgsrc-2012Q3:1.3.0.28 pkgsrc-2012Q3-base:1.3 pkgsrc-2012Q2:1.3.0.26 pkgsrc-2012Q2-base:1.3 pkgsrc-2012Q1:1.3.0.24 pkgsrc-2012Q1-base:1.3 pkgsrc-2011Q4:1.3.0.22 pkgsrc-2011Q4-base:1.3 pkgsrc-2011Q3:1.3.0.20 pkgsrc-2011Q3-base:1.3 pkgsrc-2011Q2:1.3.0.18 pkgsrc-2011Q2-base:1.3 pkgsrc-2011Q1:1.3.0.16 pkgsrc-2011Q1-base:1.3 pkgsrc-2010Q4:1.3.0.14 pkgsrc-2010Q4-base:1.3 pkgsrc-2010Q3:1.3.0.12 pkgsrc-2010Q3-base:1.3 pkgsrc-2010Q2:1.3.0.10 pkgsrc-2010Q2-base:1.3 pkgsrc-2010Q1:1.3.0.8 pkgsrc-2010Q1-base:1.3 pkgsrc-2009Q4:1.3.0.6 pkgsrc-2009Q4-base:1.3 pkgsrc-2009Q3:1.3.0.4 pkgsrc-2009Q3-base:1.3 pkgsrc-2009Q2:1.3.0.2 pkgsrc-2009Q2-base:1.3 pkgsrc-2009Q1:1.1.1.1.0.4 pkgsrc-2009Q1-base:1.1.1.1 pkgsrc-2008Q4:1.1.1.1.0.2 pkgsrc-2008Q4-base:1.1.1.1 pkgsrc-base:1.1.1.1 TNF:1.1.1; locks; strict; comment @# @; 1.13 date 2022.12.08.12.28.41; author schmonz; state Exp; branches; next 1.12; commitid 4ZrYKPOtaAg7GK4E; 1.12 date 2021.10.08.15.08.21; author wiz; state Exp; branches; next 1.11; commitid 6wyIVBma5c0Of1cD; 1.11 date 2020.06.29.12.39.54; author yyamano; state Exp; branches 1.11.10.1; next 1.10; commitid 8aCRrkGhE5hjp7eC; 1.10 date 2018.08.21.15.22.01; author prlw1; state Exp; branches; next 1.9; commitid KUqPnEhX24Fg50PA; 1.9 date 2018.06.04.08.23.11; author yyamano; state Exp; branches; next 1.8; commitid htKxOJbrc2P0iWEA; 1.8 date 2017.09.06.10.17.50; author fhajny; state Exp; branches; next 1.7; commitid QyhJ3bX99i2vD76A; 1.7 date 2014.12.09.11.43.40; author fhajny; state Exp; branches; next 1.6; commitid ksYW2LQYBTw6jm1y; 1.6 date 2014.05.15.11.17.29; author fhajny; state Exp; branches; next 1.5; commitid rEwnm7JdJ8GlRCAx; 1.5 date 2013.03.03.16.53.42; author yyamano; state Exp; branches; next 1.4; 1.4 date 2013.02.17.17.37.41; author fhajny; state Exp; branches; next 1.3; 1.3 date 2009.06.14.18.48.08; author joerg; state Exp; branches; next 1.2; 1.2 date 2009.06.14.17.48.33; author joerg; state Exp; branches; next 1.1; 1.1 date 2008.12.16.07.39.41; author yyamano; state Exp; branches 1.1.1.1; next ; 1.11.10.1 date 2021.10.16.20.29.42; author tm; state Exp; branches; next ; commitid AJDUzTFB3yqaM4dD; 1.1.1.1 date 2008.12.16.07.39.41; author yyamano; state Exp; branches; next ; desc @@ 1.13 log @Update to 3.8.6. From the changelog: 3.8.6: ** Bug * [[MNG-7432](https://issues.apache.org/jira/browse/MNG-7432)] - [REGRESSION] Resolver session contains non-MavenWorkspaceReader * [[MNG-7433](https://issues.apache.org/jira/browse/MNG-7433)] - [REGRESSION] Multiple maven instances working on same source tree can lock each other * [[MNG-7441](https://issues.apache.org/jira/browse/MNG-7441)] - Update Version of (optional) Logback to Address CVE-2021-42550 * [[MNG-7448](https://issues.apache.org/jira/browse/MNG-7448)] - Don't ignore bin/ otherwise bin/ in apache-maven module cannot be readded * [[MNG-7455](https://issues.apache.org/jira/browse/MNG-7455)] - [REGRESSION] IllegalStateException in SessionScope during guice injection in multithreaded build * [[MNG-7459](https://issues.apache.org/jira/browse/MNG-7459)] - Revert MNG-7347 (SessionScoped beans should be singletons for a given session) * [[MNG-7467](https://issues.apache.org/jira/browse/MNG-7467)] - [REGRESSION] Compilation failure with relocated transitive dependency * [[MNG-7487](https://issues.apache.org/jira/browse/MNG-7487)] - Fix deadlock during forked lifecycle executions * [[MNG-7493](https://issues.apache.org/jira/browse/MNG-7493)] - [REGRESSION] Resolving dependencies between submodules fails ** New Feature * [[MNG-7486](https://issues.apache.org/jira/browse/MNG-7486)] - Create a multiline message helper for boxed log messages ** Improvement * [[MNG-7445](https://issues.apache.org/jira/browse/MNG-7445)] - to refactor some useless code * [[MNG-7476](https://issues.apache.org/jira/browse/MNG-7476)] - Display a warning when an aggregator mojo is locking other mojo executions ** Task * [[MNG-7466](https://issues.apache.org/jira/browse/MNG-7466)] - Align Assembly Descriptor NS versions ** Dependency upgrade * [[MNG-7488](https://issues.apache.org/jira/browse/MNG-7488)] - Upgrade SLF4J to 1.7.36 * [[MNG-7489](https://issues.apache.org/jira/browse/MNG-7489)] - Upgrade JUnit to 4.13.2 * [[MNG-7490](https://issues.apache.org/jira/browse/MNG-7490)] - Upgrade Plexus Utils to 3.3.1 3.8.5: ** Bug * [[MNG-5180](https://issues.apache.org/jira/browse/MNG-5180)] - Versioning's snapshot version list is not included in metadata merge * [[MNG-5561](https://issues.apache.org/jira/browse/MNG-5561)] - Plugin relocation loses configuration * [[MNG-5982](https://issues.apache.org/jira/browse/MNG-5982)] - The POM for ... is invalid, transitive dependencies ... while property was overriden * [[MNG-6326](https://issues.apache.org/jira/browse/MNG-6326)] - Build continues when core extensions aren't found * [[MNG-6727](https://issues.apache.org/jira/browse/MNG-6727)] - Using version range in parent and CI Friendly Version fails * [[MNG-6802](https://issues.apache.org/jira/browse/MNG-6802)] - FileProfileActivator changes FileProfileActivator.exists which lets flattened resolveCiFriendliesOnly depending fail activating profile * [[MNG-7156](https://issues.apache.org/jira/browse/MNG-7156)] - Parallel build can cause issues between clean and forked goals * [[MNG-7335](https://issues.apache.org/jira/browse/MNG-7335)] - [Regression] Parallel build fails due to missing JAR artifacts in compilePath * [[MNG-7347](https://issues.apache.org/jira/browse/MNG-7347)] - SessionScoped beans should be singletons for a given session * [[MNG-7357](https://issues.apache.org/jira/browse/MNG-7357)] - All Maven Core JARs have unusual entry order * [[MNG-7362](https://issues.apache.org/jira/browse/MNG-7362)] - DefaultArtifactResolver has spurious "Failure detected" INFO log * [[MNG-7374](https://issues.apache.org/jira/browse/MNG-7374)] - Mutating RelocatedArtifact does not retain type * [[MNG-7386](https://issues.apache.org/jira/browse/MNG-7386)] - ModelMerger$MergingList is not serializable * [[MNG-7402](https://issues.apache.org/jira/browse/MNG-7402)] - BuildListCalculator never detaches the classloader * [[MNG-7417](https://issues.apache.org/jira/browse/MNG-7417)] - Several classes do not set properties properly for building requests ** New Feature * [[MNG-7395](https://issues.apache.org/jira/browse/MNG-7395)] - Support interpolation in extensions.xml * [[MNG-7407](https://issues.apache.org/jira/browse/MNG-7407)] - Introduce a ModelVersionProcessor component to make CI Friendly Versions pluggable ** Improvement * [[MNG-6960](https://issues.apache.org/jira/browse/MNG-6960)] - Use RuntimeInformation instead of reading properties * [[MNG-7349](https://issues.apache.org/jira/browse/MNG-7349)] - Limit relocation warning message to direct dependencies only * [[MNG-7380](https://issues.apache.org/jira/browse/MNG-7380)] - Don't log non-threadsafe warning if only building a single module * [[MNG-7381](https://issues.apache.org/jira/browse/MNG-7381)] - Shorten parallel builder thread name to artifactId, conditionally with groupId * [[MNG-7385](https://issues.apache.org/jira/browse/MNG-7385)] - Improve documentation on repository metadata * [[MNG-7400](https://issues.apache.org/jira/browse/MNG-7400)] - Allow more WorkspaceReaders to participate * [[MNG-7408](https://issues.apache.org/jira/browse/MNG-7408)] - Explain reporting plugin version automatic selection (in Maven 3) ** Dependency upgrade * [[MNG-7370](https://issues.apache.org/jira/browse/MNG-7370)] - Upgrade Maven Wagon to 3.5.1 * [[MNG-7384](https://issues.apache.org/jira/browse/MNG-7384)] - Upgrade Maven JAR Plugin to 3.2.2 * [[MNG-7428](https://issues.apache.org/jira/browse/MNG-7428)] - Upgrade Maven Parent to 35 3.8.4: ** Bug * [[MNG-7270](https://issues.apache.org/jira/browse/MNG-7270)] - Maven startup script (init) calls which(1) which is an external command * [[MNG-7285](https://issues.apache.org/jira/browse/MNG-7285)] - [Regression] MavenProject.getArtifacts() not returning correct value across multiple threads * [[MNG-7300](https://issues.apache.org/jira/browse/MNG-7300)] - [Regression] Reloading web application (Enter) fails due to java.lang.ClassNotFoundException ** Task * [[MNG-7312](https://issues.apache.org/jira/browse/MNG-7312)] - Revert ThreadLocal approach from MNG-6843 and MNG-7251 ** Dependency upgrade * [[MNG-7331](https://issues.apache.org/jira/browse/MNG-7331)] - Upgrade Jansi to 2.4.0 @ text @@@comment $NetBSD$ bin/mvn lib/java/maven/boot/plexus-classworlds-2.6.0.jar lib/java/maven/commons-cli-1.4.jar lib/java/maven/commons-io-2.6.jar lib/java/maven/commons-lang3-3.8.1.jar lib/java/maven/guava-25.1-android.jar lib/java/maven/guice-4.2.2-no_aop.jar lib/java/maven/jansi-2.4.0.jar lib/java/maven/javax.annotation-api-1.2.jar lib/java/maven/javax.inject-1.jar lib/java/maven/jcl-over-slf4j-1.7.36.jar lib/java/maven/maven-artifact-${PKGVERSION}.jar lib/java/maven/maven-builder-support-${PKGVERSION}.jar lib/java/maven/maven-compat-${PKGVERSION}.jar lib/java/maven/maven-core-${PKGVERSION}.jar lib/java/maven/maven-embedder-${PKGVERSION}.jar lib/java/maven/maven-model-${PKGVERSION}.jar lib/java/maven/maven-model-builder-${PKGVERSION}.jar lib/java/maven/maven-plugin-api-${PKGVERSION}.jar lib/java/maven/maven-repository-metadata-${PKGVERSION}.jar lib/java/maven/maven-resolver-api-1.6.3.jar lib/java/maven/maven-resolver-connector-basic-1.6.3.jar lib/java/maven/maven-resolver-impl-1.6.3.jar lib/java/maven/maven-resolver-provider-${PKGVERSION}.jar lib/java/maven/maven-resolver-spi-1.6.3.jar lib/java/maven/maven-resolver-transport-wagon-1.6.3.jar lib/java/maven/maven-resolver-util-1.6.3.jar lib/java/maven/maven-settings-${PKGVERSION}.jar lib/java/maven/maven-settings-builder-${PKGVERSION}.jar lib/java/maven/maven-shared-utils-3.3.4.jar lib/java/maven/maven-slf4j-provider-${PKGVERSION}.jar lib/java/maven/org.eclipse.sisu.inject-0.3.5.jar lib/java/maven/org.eclipse.sisu.plexus-0.3.5.jar lib/java/maven/plexus-cipher-2.0.jar lib/java/maven/plexus-component-annotations-2.1.0.jar lib/java/maven/plexus-interpolation-1.26.jar lib/java/maven/plexus-sec-dispatcher-2.0.jar lib/java/maven/plexus-utils-3.3.1.jar lib/java/maven/slf4j-api-1.7.36.jar lib/java/maven/wagon-file-3.5.1.jar lib/java/maven/wagon-http-3.5.1-shaded.jar lib/java/maven/wagon-provider-api-3.5.1.jar share/doc/java/maven/LICENSE share/doc/java/maven/NOTICE share/doc/java/maven/README.txt share/examples/maven/logging/simplelogger.properties share/examples/maven/m2.conf share/examples/maven/settings.xml @@pkgdir etc/maven @ 1.12 log @apache-maven: update to 3.8.3. 3.8.3 ** Bug * [MNG-7045] - Drop CDI API from Maven * [MNG-7214] - Bad transitive dependency parent from CDI API * [MNG-7215] - [Regression] Maven Site Plugin cannot resolve parent site descriptor without locale * [MNG-7216] - Revert MNG-7170 * [MNG-7218] - [Regression] o.a.m.model.Build.getSourceDirectory() incorrectly returns absolute dir on 3.8.2 * [MNG-7219] - [Regression] plexus-cipher missing from transitive dependencies * [MNG-7220] - [REGRESSION] test-classpath incorrectly resolved * [MNG-7251] - Fix threadLocalArtifactsHolder leaking into cloned project * [MNG-7253] - Relocation message is never shown ** New Feature * [MNG-7164] - Add constructor MojoExecutionException(Throwable) ** Improvement * [MNG-7235] - Speed improvements when calculating the sorted project graph * [MNG-7236] - The DefaultPluginVersionResolver should cache results for the session ** Task * [MNG-7252] - Fix warnings issued by dependency:analyze * [MNG-7254] - Expand Windows native libraries for Jansi due to JDK-8195129 (workaround) 3.8.2 ** Sub-task * [MNG-6281] - ArrayIndexOutOfBoundsException caused by pom.xml with invalid/duplicate XML ** Bug * [MNG-4706] - Multithreaded building can create bad files for downloaded artifacts in local repository * [MNG-5307] - NPE during resolution of dependencies - parallel mode * [MNG-5315] - Artifact resolution sporadically fails in parallel builds * [MNG-5838] - Maven on No-File-Lock Systems * [MNG-5868] - Adding serval times the same artifact via MavenProjectHelper (attachArtifact) keep adding to the List duplicate artifacts * [MNG-6071] - GetResource ('/) returns 'null' if build is started with -f * [MNG-6216] - ArrayIndexOutOfBoundsException when parsing POM * [MNG-6239] - Jansi messes up System.err and System.out * [MNG-6380] - Option -Dstyle.color=always doesn't force color output * [MNG-6604] - Intermittent failures while downloading GAVs from Nexus * [MNG-6648] - 'mavenrc_pre' script does not receive arguments like mavenrc in Bourne shell does * [MNG-6719] - mvn color output escape keys w/ "| tee xxx.log" on Win with git/bash * [MNG-6737] - StackOverflowError when version ranges are unsolvable and graph contains a cycle * [MNG-6767] - Plugin with ${project.groupId} resolved improperly * [MNG-6819] - NullPointerException for DefaultArtifactDescriptorReader.loadPom * [MNG-6828] - DependencyResolutionException breaks serialization * [MNG-6842] - ProjectBuilderTest uses Guava, but Guava is not defined in dependencies * [MNG-6843] - Parallel build fails due to missing JAR artifacts in compilePath * [MNG-6850] - Prevent printing the EXEC_DIR when it's just a disk letter * [MNG-6921] - Maven compile with properties ${artifactId} and ${project.build.finalName} occurs java.lang.NullPointerException * [MNG-6937] - StringSearchModelInterpolatorTest fails on symlinked paths * [MNG-6964] - Maven version sorting is internally inconsistent * [MNG-6983] - Plugin key can get out of sync with artifactId and groupId * [MNG-7000] - metadata.mdo contains invalid link to schema * [MNG-7032] - Option -B still showing formatting when used with --version * [MNG-7034] - StackOverflowError thrown if a cycle exists in BOM imports * [MNG-7090] - mvnDebug does not work on Java 11+ * [MNG-7127] - NullPointerException in MavenCliTest.testStyleColors in JDK 16 * [MNG-7155] - make sources jar reproducible (upgrade maven-source-plugin to 3.2.1) * [MNG-7161] - Error thrown during uninstalling of JAnsi ** New Feature * [MNG-7149] - Introduce MAVEN_DEBUG_ADDRESS in mvnDebug scripts ** Improvement * [MNG-2802] - Concurrent-safe access to local Maven repository * [MNG-6471] - Parallel builder should use the module name as thread name * [MNG-6754] - Set the same timestamp in multi module builds * [MNG-6810] - Remove profiles in maven-model * [MNG-6811] - Remove unnecessary filtering configuration * [MNG-6816] - Prefer System.lineSeparator() over system properties * [MNG-6827] - Replace deprecated StringUtils#defaultString() from Plexus Utils * [MNG-6837] - Simplify detection of the MAVEN_HOME and make it fully qualified on Windows * [MNG-6844] - Use StandardCharsets and remove outdated @@SuppressWarnings * [MNG-6853] - Don't box primitives where it's not needed * [MNG-6859] - Build not easily reproducible when built from source release archive * [MNG-6873] - Inconsistent library versions notice * [MNG-6967] - Improve the command line output from maven-artifact * [MNG-6987] - Reorder groupId before artifactId when writing an exclusion using maven-model * [MNG-7010] - Omit "NB: JAVA_HOME should point to a JDK not a JRE" except when that is the problem * [MNG-7064] - Use HTTPS for schema location in global settings.xml * [MNG-7080] - Add a --color option * [MNG-7170] - Allow to associate pomFile/${basedir} with DefaultProjectBuilder.build(ModelSource, ...) * [MNG-7180] - Make --color option behave more like BSD/GNU grep's --color option * [MNG-7181] - Make --version support -q * [MNG-7185] - Describe explicit and recommended version for VersionRange.createFromVersionSpec() * [MNG-7190] - Load mavenrc from /usr/local/etc also in Bourne shell script ** Task * [MNG-6598] - Maven 3.6.0 and Surefire problem * [MNG-6884] - Cleanup POM File after version upgrade * [MNG-7172] - Remove expansion of Jansi native libraries * [MNG-7184] - document .mavenrc/maven_pre.bat|cmd scripts and MAVEN_SKIP_RC environment variable 3.8.1 This release with CVE fixes is a result based on the findings and feedback of Jonathan Leitschuh and Olaf Flebbe. One of the changes that might impact your builds is the way custom repositories defined in dependency POMs will be handled. By default external insecure repositories will now be blocked (localhost over HTTP will still work). Configuration can be adjusted via the conf/settings.xml. Release Notes - Maven - Version 3.8.1 ** Bug * [MNG-7128] - improve error message when blocked repository defined in build POM ** New Feature * [MNG-7116] - Add support for mirror selector on external:http:* * [MNG-7117] - Add support for blocking mirrors * [MNG-7118] - Block external HTTP repositories by default ** Dependency upgrade * [MNG-7119] - Upgrade Maven Wagon to 3.4.3 * [MNG-7123] - Upgrade Maven Resolver to 1.6.2 @ text @d9 1 a9 1 lib/java/maven/jansi-2.3.4.jar d12 1 a12 1 lib/java/maven/jcl-over-slf4j-1.7.32.jar d39 5 a43 5 lib/java/maven/plexus-utils-3.3.0.jar lib/java/maven/slf4j-api-1.7.32.jar lib/java/maven/wagon-file-3.4.3.jar lib/java/maven/wagon-http-3.4.3-shaded.jar lib/java/maven/wagon-provider-api-3.4.3.jar @ 1.11 log @Update apache-maven to 3.6.3. Closes PR pkg/55221. The patch is provided by Vicente Chaves. Thank you! Changes from Maven 3.6.2 to 3.6.3 * This is a regression release to fix some critical issues shipped with 3.6.2. * Some license issues on binary distribution have been fixed. * This Maven distribution is now Reproducible: if you download Maven source archive (apache-maven-3.6.3-src.zip or .tar.gz), build it on Windows with JDK 8 using following command: See https://maven.apache.org/docs/3.6.3/release-notes.html for the detailed issue list. Changes from Maven 3.6.1 to 3.6.2 * This release focuses mostly performance improvements, better memory footprint, and less CPU usage. * We are continuing to convert Maven Core to use JSR 330 annotations instead of Plexus (still not finished, see MNG-5577). * New support for 'release' qualifier (see MNG-6655). * The toolchain.xml file supports environment variables (see MNG-6665). See https://maven.apache.org/docs/3.6.2/release-notes.html for the detailed issue list. Changes from Maven 3.6.0 to 3.6.1 * An issue has been fixed causing multiple executions of plugin goals, related to using parallel build options like mvn plugin:goal -T 4. This resulted in duplicated executions of phases. This has been fixed with MNG-5965. * NullPointerException related to call in parallel build like mvn -T 1C clean javadoc:aggregate MNG-5705 * A performance issue related to artifact transfer has been found related to WAGON-537. It has been solved via the update to Maven Wagon 3.3.1. * There had been issues related calling Maven script like this: mvn -f .. * Having parentheses within the path, which has been fixed with MNG-6346. * Script can break having special characters as part of the path, which has been solved with MNG-6256. * Issue related to the Maven Resolver API which broke some IDEs (for example https://youtrack.jetbrains.com/issue/IDEA-201282); this has been fixed by MNG-6538. * Issue related to missing event for ToolchainsBuildingResult on EventSpy MNG-6558. * Issue related to support Java 9+ ClassLoader.findClass(String moduleName, String name) in Mojos. This has been fixed with MNG-6543. * Improvement about the memory consumption has been done with MNG-6571. * Issue related to relative parent POM resolution failing in 3.5.0 with complex multimodule builds has been fixed with MNG-6261. * Missing export for org.slf4j.event.Level has been done with MNG-6618 See https://maven.apache.org/docs/3.6.1/release-notes.html for the detailed issue list. # Changes from Maven 3.5.4 to 3.6.0 * There had been issues related to the project discoverytime which has been increased in previous version which influenced some of our users. This should have been fixed MNG-6311, MNG-6383 and MNG-6412. * The output in the reactor summary has been improved MNG-6391 cause it confused people. * There was an issue related to the classpath ordering MNG-6415 in Maven which can cause issues which has been fixed. See https://maven.apache.org/docs/3.6.0/release-notes.html for the detailed issue list. @ text @a3 1 lib/java/maven/cdi-api-1.0.jar d5 1 a5 1 lib/java/maven/commons-io-2.5.jar d8 3 a10 2 lib/java/maven/guice-4.2.1-no_aop.jar lib/java/maven/jansi-1.17.1.jar d12 1 a12 3 lib/java/maven/jcl-over-slf4j-1.7.29.jar lib/java/maven/jsoup-1.12.1.jar lib/java/maven/jsr250-api-1.0.jar d22 3 a24 3 lib/java/maven/maven-resolver-api-1.4.1.jar lib/java/maven/maven-resolver-connector-basic-1.4.1.jar lib/java/maven/maven-resolver-impl-1.4.1.jar d26 3 a28 3 lib/java/maven/maven-resolver-spi-1.4.1.jar lib/java/maven/maven-resolver-transport-wagon-1.4.1.jar lib/java/maven/maven-resolver-util-1.4.1.jar d31 1 a31 1 lib/java/maven/maven-shared-utils-3.2.1.jar d33 3 a35 3 lib/java/maven/org.eclipse.sisu.inject-0.3.4.jar lib/java/maven/org.eclipse.sisu.plexus-0.3.4.jar lib/java/maven/plexus-cipher-1.7.jar d37 7 a43 7 lib/java/maven/plexus-interpolation-1.25.jar lib/java/maven/plexus-sec-dispatcher-1.4.jar lib/java/maven/plexus-utils-3.2.1.jar lib/java/maven/slf4j-api-1.7.29.jar lib/java/maven/wagon-file-3.3.4.jar lib/java/maven/wagon-http-3.3.4-shaded.jar lib/java/maven/wagon-provider-api-3.3.4.jar @ 1.11.10.1 log @Pullup ticket #6518 - requested by wiz devel/apache-maven: security fix Revisions pulled up: - devel/apache-maven/Makefile 1.18 - devel/apache-maven/PLIST 1.12 - devel/apache-maven/distinfo 1.20 - devel/apache-maven/patches/patch-bin_mvn 1.9 --- Module Name: pkgsrc Committed By: wiz Date: Fri Oct 8 15:08:21 UTC 2021 Modified Files: pkgsrc/devel/apache-maven: Makefile PLIST distinfo pkgsrc/devel/apache-maven/patches: patch-bin_mvn Log Message: apache-maven: update to 3.8.3. 3.8.3 ** Bug * [MNG-7045] - Drop CDI API from Maven * [MNG-7214] - Bad transitive dependency parent from CDI API * [MNG-7215] - [Regression] Maven Site Plugin cannot resolve parent site descriptor without locale * [MNG-7216] - Revert MNG-7170 * [MNG-7218] - [Regression] o.a.m.model.Build.getSourceDirectory() incorrectly returns absolute dir on 3.8.2 * [MNG-7219] - [Regression] plexus-cipher missing from transitive dependencies * [MNG-7220] - [REGRESSION] test-classpath incorrectly resolved * [MNG-7251] - Fix threadLocalArtifactsHolder leaking into cloned project * [MNG-7253] - Relocation message is never shown ** New Feature * [MNG-7164] - Add constructor MojoExecutionException(Throwable) ** Improvement * [MNG-7235] - Speed improvements when calculating the sorted project graph * [MNG-7236] - The DefaultPluginVersionResolver should cache results for the session ** Task * [MNG-7252] - Fix warnings issued by dependency:analyze * [MNG-7254] - Expand Windows native libraries for Jansi due to JDK-8195129 (workaround) 3.8.2 ** Sub-task * [MNG-6281] - ArrayIndexOutOfBoundsException caused by pom.xml with invalid/duplicate XML ** Bug * [MNG-4706] - Multithreaded building can create bad files for downloaded artifacts in local repository * [MNG-5307] - NPE during resolution of dependencies - parallel mode * [MNG-5315] - Artifact resolution sporadically fails in parallel builds * [MNG-5838] - Maven on No-File-Lock Systems * [MNG-5868] - Adding serval times the same artifact via MavenProjectHelper (attachArtifact) keep adding to the List duplicate artifacts * [MNG-6071] - GetResource ('/) returns 'null' if build is started with -f * [MNG-6216] - ArrayIndexOutOfBoundsException when parsing POM * [MNG-6239] - Jansi messes up System.err and System.out * [MNG-6380] - Option -Dstyle.color=always doesn't force color output * [MNG-6604] - Intermittent failures while downloading GAVs from Nexus * [MNG-6648] - 'mavenrc_pre' script does not receive arguments like mavenrc in Bourne shell does * [MNG-6719] - mvn color output escape keys w/ "| tee xxx.log" on Win with git/bash * [MNG-6737] - StackOverflowError when version ranges are unsolvable and graph contains a cycle * [MNG-6767] - Plugin with ${project.groupId} resolved improperly * [MNG-6819] - NullPointerException for DefaultArtifactDescriptorReader.loadPom * [MNG-6828] - DependencyResolutionException breaks serialization * [MNG-6842] - ProjectBuilderTest uses Guava, but Guava is not defined in dependencies * [MNG-6843] - Parallel build fails due to missing JAR artifacts in compilePath * [MNG-6850] - Prevent printing the EXEC_DIR when it's just a disk letter * [MNG-6921] - Maven compile with properties ${artifactId} and ${project.build.finalName} occurs java.lang.NullPointerException * [MNG-6937] - StringSearchModelInterpolatorTest fails on symlinked paths * [MNG-6964] - Maven version sorting is internally inconsistent * [MNG-6983] - Plugin key can get out of sync with artifactId and groupId * [MNG-7000] - metadata.mdo contains invalid link to schema * [MNG-7032] - Option -B still showing formatting when used with --version * [MNG-7034] - StackOverflowError thrown if a cycle exists in BOM imports * [MNG-7090] - mvnDebug does not work on Java 11+ * [MNG-7127] - NullPointerException in MavenCliTest.testStyleColors in JDK 16 * [MNG-7155] - make sources jar reproducible (upgrade maven-source-plugin to 3.2.1) * [MNG-7161] - Error thrown during uninstalling of JAnsi ** New Feature * [MNG-7149] - Introduce MAVEN_DEBUG_ADDRESS in mvnDebug scripts ** Improvement * [MNG-2802] - Concurrent-safe access to local Maven repository * [MNG-6471] - Parallel builder should use the module name as thread name * [MNG-6754] - Set the same timestamp in multi module builds * [MNG-6810] - Remove profiles in maven-model * [MNG-6811] - Remove unnecessary filtering configuration * [MNG-6816] - Prefer System.lineSeparator() over system properties * [MNG-6827] - Replace deprecated StringUtils#defaultString() from Plexus Utils * [MNG-6837] - Simplify detection of the MAVEN_HOME and make it fully qualified on Windows * [MNG-6844] - Use StandardCharsets and remove outdated @@SuppressWarnings * [MNG-6853] - Don't box primitives where it's not needed * [MNG-6859] - Build not easily reproducible when built from source release archive * [MNG-6873] - Inconsistent library versions notice * [MNG-6967] - Improve the command line output from maven-artifact * [MNG-6987] - Reorder groupId before artifactId when writing an exclusion using maven-model * [MNG-7010] - Omit "NB: JAVA_HOME should point to a JDK not a JRE" except when that is the problem * [MNG-7064] - Use HTTPS for schema location in global settings.xml * [MNG-7080] - Add a --color option * [MNG-7170] - Allow to associate pomFile/${basedir} with DefaultProjectBuilder.build(ModelSource, ...) * [MNG-7180] - Make --color option behave more like BSD/GNU grep's --color option * [MNG-7181] - Make --version support -q * [MNG-7185] - Describe explicit and recommended version for VersionRange.createFromVersionSpec() * [MNG-7190] - Load mavenrc from /usr/local/etc also in Bourne shell script ** Task * [MNG-6598] - Maven 3.6.0 and Surefire problem * [MNG-6884] - Cleanup POM File after version upgrade * [MNG-7172] - Remove expansion of Jansi native libraries * [MNG-7184] - document .mavenrc/maven_pre.bat|cmd scripts and MAVEN_SKIP_RC environment variable 3.8.1 This release with CVE fixes is a result based on the findings and feedback of Jonathan Leitschuh and Olaf Flebbe. One of the changes that might impact your builds is the way custom repositories defined in dependency POMs will be handled. By default external insecure repositories will now be blocked (localhost over HTTP will still work). Configuration can be adjusted via the conf/settings.xml. Release Notes - Maven - Version 3.8.1 ** Bug * [MNG-7128] - improve error message when blocked repository defined in build POM ** New Feature * [MNG-7116] - Add support for mirror selector on external:http:* * [MNG-7117] - Add support for blocking mirrors * [MNG-7118] - Block external HTTP repositories by default ** Dependency upgrade * [MNG-7119] - Upgrade Maven Wagon to 3.4.3 * [MNG-7123] - Upgrade Maven Resolver to 1.6.2 @ text @d4 1 d6 1 a6 1 lib/java/maven/commons-io-2.6.jar d9 2 a10 3 lib/java/maven/guice-4.2.2-no_aop.jar lib/java/maven/jansi-2.3.4.jar lib/java/maven/javax.annotation-api-1.2.jar d12 3 a14 1 lib/java/maven/jcl-over-slf4j-1.7.32.jar d24 3 a26 3 lib/java/maven/maven-resolver-api-1.6.3.jar lib/java/maven/maven-resolver-connector-basic-1.6.3.jar lib/java/maven/maven-resolver-impl-1.6.3.jar d28 3 a30 3 lib/java/maven/maven-resolver-spi-1.6.3.jar lib/java/maven/maven-resolver-transport-wagon-1.6.3.jar lib/java/maven/maven-resolver-util-1.6.3.jar d33 1 a33 1 lib/java/maven/maven-shared-utils-3.3.4.jar d35 3 a37 3 lib/java/maven/org.eclipse.sisu.inject-0.3.5.jar lib/java/maven/org.eclipse.sisu.plexus-0.3.5.jar lib/java/maven/plexus-cipher-2.0.jar d39 7 a45 7 lib/java/maven/plexus-interpolation-1.26.jar lib/java/maven/plexus-sec-dispatcher-2.0.jar lib/java/maven/plexus-utils-3.3.0.jar lib/java/maven/slf4j-api-1.7.32.jar lib/java/maven/wagon-file-3.4.3.jar lib/java/maven/wagon-http-3.4.3-shaded.jar lib/java/maven/wagon-provider-api-3.4.3.jar @ 1.10 log @Update apache-maven to 3.5.4 Overview about the changes This release is primarily aimed to resolve the two regressions introduced in the 3.5.3 release, specifically MNG-6372 and MNG-6388. There are some additional minor improvements, the most notable of which is: * The Maven Super POM changes the default execution of the maven-source-plugin jar goal into jar-no-fork which should resolve some issues complex projects had running releases. The detailed issue list Bugs * MNG-6370 ConcurrencyDependencyGraph#getNumberOfBuilds() does not remove finished projects from unfinished ones * MNG-6372 On Windows Maven can output spurious ANSI escapes such as [0m [0m * MNG-6382 JANSI fails frequently with NumberFormatException when building in parallel * MNG-6386 ${project.baseUri} is not a valid URI (according to RFC 3986) * MNG-6388 Error Fetching Artifacts: “[B cannot be cast to java.lang.String” * MNG-6403 Artifact#VERSION_FILE_PATTERN does not escape period between date and time * MNG-6410 Add groupId to --resume-from suggestion if artifactId is not unique in reactor Improvements * MNG-5756 Java home output in mvn -v is misleading * MNG-5940 Change the maven-source-plugin jar goal into jar-no-fork in Maven Super POM * MNG-6362 Add documentation information for GitHub * MNG-6363 Remove secret thread configuration property from code * MNG-6364 Enhanced Jenkinsfile to test Core with JDK 9 * MNG-6411 Improve readability of project list returned when --resume-from option value is invalid Tasks * MNG-6377 switch from Git-WIP to Gitbox Dependency upgrades * MNG-6344 Upgrade Guice to 4.2.0 * MNG-6423 Upgrade to Wagon 3.1.0 https://maven.apache.org/docs/3.5.4/release-notes.html @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.9 2018/06/04 08:23:11 yyamano Exp $ d3 1 a3 2 lib/java/maven/aopalliance-1.0.jar lib/java/maven/boot/plexus-classworlds-2.5.2.jar d7 3 a9 3 lib/java/maven/commons-lang3-3.5.jar lib/java/maven/guava-20.0.jar lib/java/maven/guice-4.2.0-no_aop.jar d12 2 a13 1 lib/java/maven/jcl-over-slf4j-1.7.25.jar d24 3 a26 3 lib/java/maven/maven-resolver-api-1.1.1.jar lib/java/maven/maven-resolver-connector-basic-1.1.1.jar lib/java/maven/maven-resolver-impl-1.1.1.jar d28 3 a30 3 lib/java/maven/maven-resolver-spi-1.1.1.jar lib/java/maven/maven-resolver-transport-wagon-1.1.1.jar lib/java/maven/maven-resolver-util-1.1.1.jar d35 2 a36 2 lib/java/maven/org.eclipse.sisu.inject-0.3.3.jar lib/java/maven/org.eclipse.sisu.plexus-0.3.3.jar d38 2 a39 2 lib/java/maven/plexus-component-annotations-1.7.1.jar lib/java/maven/plexus-interpolation-1.24.jar d41 5 a45 5 lib/java/maven/plexus-utils-3.1.0.jar lib/java/maven/slf4j-api-1.7.25.jar lib/java/maven/wagon-file-3.1.0.jar lib/java/maven/wagon-http-3.1.0-shaded.jar lib/java/maven/wagon-provider-api-3.1.0.jar d52 1 @ 1.9 log @Update devel/apache-maven to 3.5.3. https://maven.apache.org/docs/3.5.3/release-notes.html Release Notes - Maven - Version 3.5.3 ***Known issues***: * [MNG-6372] - On Windows with -T option, Maven can output spurious ANSI escapes such as [0m [0m Bug: * [MNG-6188] - Console color not properly reset when interrupting build process * [MNG-6255] - Maven script cannot parse jvm.config with CRLF * [MNG-6282] - Console output has no colors in shell (both Git Bash and Cygwin) [regression in Jansi 1.16 / Maven 3.5.1] * [MNG-6296] - New option -Dstyle.color is not working * [MNG-6298] - 3.5.2: ClassNotFoundException: javax.annotation.security. RolesAllowed * [MNG-6300] - Multi module release creates empty directories in war file instead of jars * [MNG-6305] - Validation of CI friendly version incorrect * [MNG-6320] - Apparently wrong encoding of non-ascii java class filename in error messages in the maven log * [MNG-6323] - Deadlock in multithreaded dependency resolution * [MNG-6330] - [regression] Parents relativePath not verified anymore New Feature: * [MNG-6302] - Provide some "progress" hints Improvement: * [MNG-5992] - Git passwords are exposed as the Super POM still uses Maven Release Plugin 2.3.2 * [MNG-6306] - Replace use of Guava in maven-resolver-provider with a lighter weight alternative * [MNG-6308] - display packaging & groupId:artifactId when building a module * [MNG-6332] - Cleaned up mvn.cmd Script * [MNG-6340] - [Performance]To make System.gc() call configurable in target summary code * [MNG-6342] - Emit a WARNING about LATEST/RELEASE in parent * [MNG-6352] - Printout version information at the end of the build Task: * [MNG-6331] - Remove maven-bundle-pugin from build pluginManagement Dependency upgrade: * [MNG-6312] - Update Maven Wagon dependency * [MNG-6335] - Update test framework Mockito from 1.10 to 2.12 * [MNG-6353] - Upgrade maven-shared-utils to 3.2.1 https://maven.apache.org/docs/3.5.2/release-notes.html Release Notes - Maven - Version 3.5.2 Sub-tasks: * [MNG-6186] - switch to improved HawtJNI * [MNG-6280] - ArrayIndexOutOfBoundsException caused by pom.xml with process instructions Bugs: * [MNG-5935] - Optional true getting lost in managed dependencies when transitive * [MNG-6127] - Fix plugin execution configuration interference * [MNG-6148] - Can't package and assemble with JDK9/Jigsaw * [MNG-6149] - MetadataResolutionResult#getGraph() never resolves request type 'test' * [MNG-6205] - Non-ascii chars in name element are displayed as question marks in Win CLI output (regression) * [MNG-6210] - can't load @@SessionScoped/@@MojoExecutionScoped components from .mvn/extensions.xml * [MNG-6223] - mvn -f outputs invalid error when specifying POM directory * [MNG-6233] - maven-resolver-provider mixes JRS 330 and Plexus annotations * [MNG-6234] - Regression 6182a208: library.jansi.path does not point to proper directory * [MNG-6240] - Duplicate components in plugin extension realm when plugin depends on maven-aether-resolver * [MNG-6242] - No color for maven on Cygwin Improvements: * [MNG-5457] - Show repository id when downloading or uploading from/to a remote repository * [MNG-6025] - Add a ProjectArtifactsCache similar to PluginArtifactsCache * [MNG-6123] - detect self references in POM and fail fast * [MNG-6174] - Clean Up Maven Model * [MNG-6196] - Update slf4j and simplify its color integration * [MNG-6203] - Minor cleanup in MavenCli.java * [MNG-6206] - We should produce a WARNING by using RELEASE, LATEST as versions * [MNG-6207] - Create WARNINGs in case of using system scope * [MNG-6228] - Optionality not displayed in dependency tree when run in debug mode New Features: * [MNG-6084] - Support JSR 250 annotations * [MNG-6220] - Add CLI options to control color output Tasks: * [MNG-6167] - Clean up dependency mess (reported by dependency:analyze) * [MNG-6258] - Upgrade to Maven Resolver 1.1.0 @ text @d1 1 a1 1 @@comment $NetBSD$ d10 2 a11 2 lib/java/maven/guice-4.0-no_aop.jar lib/java/maven/jansi-1.17.jar d43 3 a45 3 lib/java/maven/wagon-file-3.0.0.jar lib/java/maven/wagon-http-3.0.0-shaded.jar lib/java/maven/wagon-provider-api-3.0.0.jar @ 1.8 log @Update devel/apache-maven to 3.5.0. 3.5.0 Bugs - Site should tell 'prerequisites.maven is deprecated' - UnsupportedOperationException thrown when version range is not correct in dependencyManagement definitions - ClosedChannelException from DefaultUpdateCheckManager.read - "mvn.cmd" does not indicate failure properly when using "&&" - mvnDebug doesn't work with M2_HOME with spaces - missing quotes - mvn shell script fails with syntax error on Solaris 10 - logging config is overridden by $M2_HOME/lib/ext/*.jar - mvn shell script invokes /bin/sh but requires Bash functions - Problem with CI friendly usage of '${..}'' which is already defined via property in pom file. - java.lang.String cannot be cast to org.apache.maven.lifecycle.mapping.LifecyclePhase - Maven possibly not aware of log4j2 - mvn.cmd fails when the current directory has spaces in between - mvn.cmd does not return ERROR_CODE - mvn.cmd fails if directory contains an ampersand (&) - Unsafe System Properties copy in MavenRepositorySystemUtils, causing NPEs - Problem with CI friendly usage of '${..} reactor order is changed - CI friendly properties break submodule builds - properties.internal.SystemProperties.addSystemProperties() is not really thread-safe - PluginDescriptor doesn't read since value of parameter - ${session.parallel} not correctly set - DefaultWagonManagerTest#testGetMissingJarForced() passed incorrect value - mvn dependency:go-offline fails due to missing transitive dependency jdom:jdom:jar:1.1 - Fix unclosed streams - NPE in cases using Multithreaded -T X versions:set -DnewVersion=1.0-SNAPSHOT - REGRESSION: WARNING about usage of a non threadsafe marked plugin is not showed anymore - Precedence of command-line system property options has changed - MavenSession.getAllProjects() should return all projects in the reactor - Javadoc errors prevent release with Java 8 - The --file command line option of the Windows and Unix launchers does not work for directory names like "Spaces & Special Char" - groupId has plain color when goal fails - HttpClient produces a lot of noise at debug loglevel - Dependency management debug message corrections. - maven-resolver-provider's DefaultArtifactDescriptorReader has mismatched constructor and initService methods - mvn -f complains about illegal readlink option under macOS - distribution zip file has unordered entries - Use consistent quoting forms in mvn launcher script - mvn script fails to locate .mvn directory when pom.xml location specified with -f Dependency upgrade - Dependency updates - Upgrade Aether to Maven Resolver Improvements - Unify error output/check logic from shell and batch scripts - Don't use M2_HOME in mvn shell/command scripts anymore - Silence unnecessary legacy local repository warning - .mvn directory should be picked when using --file - Remove the whole Ant build - Fixing documentation - String handling issues identified by PMD - Fix links etc. in README.txt which is part of the delivery - Default plugin version updates - Use Java 7's SimpleDateFormat in CLIReportingUtils#formatTimestamp - Improve output readability of our MavenTransferListener implementations - Confusing error message in case of missing/empty artifactId and version in pluginManagement - Replace %HOME% with %USERPROFILE% in mvn.cmd - Drastically reduce JAVA_HOME discovery code - Removing ArtifactHandler for ejb3 lifecycle - Removing ArtifactHandler for par lifecycle - ReactorModelCache not used effectively after maven version 3.0.5 which cause a large memory footprint - WARNING during build based on absolute path in assembly-descriptor. - Document default scope compile in pom XSD and reference documentation - Can't overwrite properties which have been defined in .mvn/maven.config - Log refactoring - Method Invocation Replaced By Variable - Introduce ${maven.conf} in m2.conf - Add Jansi native library search path to our start scripts to avoid extraction to temp file on each run - Remove non-existent m2 include in component.xml - Several small stylistic and spelling improvements to code and documentation - 'MetadataResolutionResult#getGraph()'' contains duplicate if clause - Javadoc improvements for 3.5.0 - Introduce CLASSWORLDS_JAR in shell startup scripts - Deprecate and replace incorrectly spelled public API - Remove unused prerequisites - Replace doclettag explanation with annotations in AbstractMojo javadoc - WARN if maven-site-plugin configuration contains reportPlugins element New Features - ANSI color logging for improved output visibility - add support for module name != artifactId in every calculated URLs (project, SCM, site): special project.directory property - create a slf4j-simple provider extension that supports level color rendering - ModelResolver interface enhancement: addition of resolveModel(Dependency) supporting version ranges Tasks - Remove outdated maven-embedder/src/main/resources/META-INF/MANIFEST.MF - Remove maven.home default value setter from m2.conf - Upgrade Maven Wagon from 2.10 to 2.12 - Clean up duplicate dependencies caused by incomplete Wagon HTTP Provider exclusions - Remove obsolete message_*.properties from maven-core - update documentation's dependency graph with resolver + resolver-provider + slf4j-provider - Force Push master from 737de43e392fc15a0ce366db98d70aa18b3f6c03 - Add a Jenkinsfile so that builds.apache.org can use multibranch pipeline Wishes - Support version ranges in parent elements - after forked execution success, add an empty line - warn if prerequisites.maven is used for non-plugin projects 3.3.9 Bug - default-value on mojo parameter of type collection or array effectively make parameter read-only - Properties on command line with leading or trailing quotes are stripped - Possible NullPointerException in org.apache.maven.repository. MetadataResolutionResult - Variable maven.multiModuleProjectDirectory may be set incorrectly - Moving from Maven 3.0.5 to 3.3.3 breaks plugins with some dependencies on the class path - mvn fails when the current directory is a root drive on Windows - Project base dir not fully working in Cygwin - Make MAVEN_OPTS env variable with mvnDebug correctly - Empy maven.config cause Maven to exit with failure - is used if the groupId and artifactId match irrespective of the version - mvn script fails to locate .mvn in current directory - maven-aether-provider/maven-compat does not always generate snapshot versions using Gregorian calendar year - Nonportable shell constructs cause bin/mvn errors on Debian - mvn script doesn't handle directories containing spaces - Broken link of ' Building Maven' in README.md on Github - Log file command line option description contains an extra word - Multi-module build with ear fails to resolve war in 3.3.3 - org.apache.maven.repository.internal.RemoteSnapshotMetadataTest fails to start at midnight - Maven selects wrong JVM Improvement - Use Commons Lang's Validate to intercept invalid input - Custom packaging types: configuring DefaultLifecycleMapping mojo executions - Close IO Streams in finally or try-with-resource statement - make url inheritance algorithm more visible - Update used modello version from 1.8.1 to 1.8.3 - Removing par lifecycle from default life cycle bindings - Make used plugin version for maven-resources-plugin in default-bindings.xml consistent - Removed binding for maven-ejb3-plugin from default binding - Maven build does not work with Maven 2.2.1 - Use canonical name for UTC timezone - Upgrade maven-parent to version 27 - Upgrade Wagon version to 2.10 - Upgraded to plexus-component-* 1.6 that uses asm 5.x - Upgrade plexus-utils to 3.0.22 to support combine.id as configuration attribute for Map merging - Switch to official Guice 4.0 - Upgrade to Eclipse/Sisu 0.3.2 - Update animal-sniffer-maven-plugin to 1.14. MANIMALSNIFFER-49 required when building with JDK9 3.3.3 Bug - ssh-wagon hangs - same class realm registered both with plugin and extensions realm caches - Maven extensions can not be retrieved from authenticated repositories - 'mvn deploy' sends HTTP User-Agent twice Improvement - Warn about Proxies with duplicate id, but different protocols - Upgrade Maven to use Wagon 2.9 3.3.1 Bug - mvn cannot execute /usr/libexec/java_home/bin/java on OS X. - mvn script is not compatible with OSX (Darwin) - PATCH ATTACHED - Wrong reactor summary output while using -T option - inconsistent classloading for extensions=true plugins - Add example of toolchains.xml to Maven distribution - DefaultMavenExecutionRequest.copy() doesn't keep useLegacyLocalRepository - DefaultMavenExecutionRequest.copy() doesn't keep builderId - execution request populate ignores plugin repositories - LifecycleModuleBuilder effectively swallows runtime exceptions and errors - NoClassDefFoundError: org/slf4j/spi/LocationAwareLogger when generating javadoc during site reporting - cobertura-maven-plugin:instrument failing NoClassDefFoundError: org/slf4j/LoggerFactory Improvement - Modify maven-toolchain to look in ${maven.home}/conf/toolchains.xml and in ${user.home}/.m2/toolchains.xml - Empty module entry should fail instead of just producing a WARNING - avoid hardcoded system classloader references - Toolchains should be read during initialization - project-specific default jvm options and command line parameters - specify execution-id for direct plugin goal invocation from command line - improved user-configurable core extensions mechanism - upgrade to sisu 0.3.0 and sisu guice 3.2.5 New Feature - Add module maven-builder-support - Allow plugin implementors to choose how they want the configuration created for a particular MojoExecution - Access toolchains without maven-toolchain-plugin - Provide an extension point to provide alternate CLI configuration mechanism - Provide extension point for alternate implementations to construct build graph Task - update aether to 1.0.2 - Drop support for Win9x in mvn launch scripts - switch from 3.2.x to 3.3.x - upgrade Java minimum version prerequisite from Java 6 to Java 7 3.2.5 Bug - [Regression] resolveAlways does not force dependency resolution in Maven 3.0.4 - ComparableVersion's breaks contract for Comparable, in some edgecases the comparisons are not transitive - Maven dependency resolution locks up - mvn -U crashes with IBM JDK - java.lang.UnsupportedOperationException on DefaultProjectBuilder.build - Parallel Builds can build in wrong order - inconsistent custom scope bindings - Remove dependency on Easymock - Update to plexus-interpolation 1.21 to avoid potential thread safety problems - spell mistake, Log4JLoggerFactory should be Log4jLoggerFactory - LinkageError org.apache.maven.surefire.shade.org.apache.maven.shared.utils.io.IOUtil - ToolchainManagerPrivate.getToolchainsForType() returns toolchains that are not of expected type - Maven downloads same artifact from all repositories defined in POM - unexpected InvalidArtifactRTException from ProjectBuilder#build Improvement - Improve toolchains descriptor documentation - Improve Toolchains API description - Enrich toolchain xml with merge information - Change 'provides' from Object to Properties in toolchains.xml - Upgrade to last Wagon 2.8 New Feature - Add Merger for Maven Toolchain - Provide a tool to test Maven version parsing and comparison Task - Upgrade Aether 1.0 when available - Upgrade JUnit (for tests only) Wish - rename JavaToolChain to JavaToolchain for consistency and don't declare it as Plexus component @ text @d11 1 a11 1 lib/java/maven/jansi-1.13.jar d13 1 a13 1 lib/java/maven/jcl-over-slf4j-1.7.22.jar d24 3 a26 3 lib/java/maven/maven-resolver-api-1.0.3.jar lib/java/maven/maven-resolver-connector-basic-1.0.3.jar lib/java/maven/maven-resolver-impl-1.0.3.jar d28 3 a30 3 lib/java/maven/maven-resolver-spi-1.0.3.jar lib/java/maven/maven-resolver-transport-wagon-1.0.3.jar lib/java/maven/maven-resolver-util-1.0.3.jar d33 1 a33 1 lib/java/maven/maven-shared-utils-3.1.0.jar d41 5 a45 5 lib/java/maven/plexus-utils-3.0.24.jar lib/java/maven/slf4j-api-1.7.22.jar lib/java/maven/wagon-file-2.12.jar lib/java/maven/wagon-http-2.12-shaded.jar lib/java/maven/wagon-provider-api-2.12.jar @ 1.7 log @Update apache-maven to 3.2.3. pkgsrc changes: - Add missing $PKG_SYSCONFDIR/logging directory and config file - Improve Makefile readability Changes in 3.2.3: - Switch access to Maven Central to HTTPS (MNG-5672) Changes in 3.2.2: - Support version ranges in parent elements (MNG-2199) - Requiring multiple profile activation conditions to be true does not work (MNG-4565) - Support resolution of Import Scope POMs from Repo that contains a ${parameter} (MNG-5639) - Update maven-plugin-plugin:descriptor default binding from generate-resources phase to process-classes (MNG-5346) - ${maven.build.timestamp} should use UTC instead of local timezone (or be configurable) (MNG-5452) - ${maven.build.timestamp} uses incorrect ISO datetime separator (MNG-5647) @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.6 2014/05/15 11:17:29 fhajny Exp $ a2 5 lib/java/maven/aether-api-0.9.0.M2.jar lib/java/maven/aether-connector-wagon-0.9.0.M2.jar lib/java/maven/aether-impl-0.9.0.M2.jar lib/java/maven/aether-spi-0.9.0.M2.jar lib/java/maven/aether-util-0.9.0.M2.jar d4 1 a4 1 lib/java/maven/boot/plexus-classworlds-2.5.1.jar d6 6 a11 4 lib/java/maven/commons-cli-1.2.jar lib/java/maven/commons-io-2.2.jar lib/java/maven/commons-lang-2.6.jar lib/java/maven/guava-14.0.1.jar d13 1 a13 1 lib/java/maven/jsoup-1.7.2.jar a14 1 lib/java/maven/maven-aether-provider-${PKGVERSION}.jar d16 1 d24 7 d33 4 a36 2 lib/java/maven/org.eclipse.sisu.inject-0.0.0.M5.jar lib/java/maven/org.eclipse.sisu.plexus-0.0.0.M5.jar d38 8 a45 11 lib/java/maven/plexus-component-annotations-1.5.5.jar lib/java/maven/plexus-interpolation-1.19.jar lib/java/maven/plexus-sec-dispatcher-1.3.jar lib/java/maven/plexus-utils-3.0.17.jar lib/java/maven/sisu-guice-3.1.3-no_aop.jar lib/java/maven/slf4j-api-1.7.5.jar lib/java/maven/slf4j-simple-1.7.5.jar lib/java/maven/wagon-file-2.6.jar lib/java/maven/wagon-http-2.6-shaded.jar lib/java/maven/wagon-http-shared-2.6.jar lib/java/maven/wagon-provider-api-2.6.jar @ 1.6 log @Update apache-maven to 3.2.1. Release notes for 3.2.1 Bug [MNG-5075] - MavenProject.getParent throws undocumented ISE [MNG-5389] - AbstractMavenLifecycleParticipant need a afterSessionEnd [MNG-5467] - intermittent "ProtocolException: The server failed to respond with a valid HTTP response" [MNG-5479] - ExecutionEvent.Type.SessionEnded omited when runtime exception thrown [MNG-5494] - Add a license file that corresponds to each GAV in the distribution [MNG-5528] - Help text confuses people [MNG-5550] - MojoExecution source is never set to LIFECYCLE [MNG-5553] - ${map(some.key)} is not properly interpolated [MNG-5557] - Limit the reactor to the projects that are specified using --projects [MNG-5559] - upgrade to last wagon 2.6 [MNG-5572] - Warn for building plugins with extensions in a reactor Improvement [MNG-3526] - Small change to artifact version parsing. [MNG-4099] - Password encryption CLI switches should prompt for password if missing [MNG-5176] - Print build times in an ISO 8601-style manner [MNG-5530] - mojo execution guice scope [MNG-5549] - Provide before/after callbacks for project and mojo execution [MNG-5574] - Write error/warning messages from mvn shell and batch scripts to stderr [MNG-5575] - Separate build strategies into their own implementations [MNG-5576] - Allow continuous delivery friendly versions [MNG-5578] - Make the ReactorReader pluggable in the core [MNG-5581] - Provide a way to customize lifecycle mapping logic [MNG-5582] - Continue to track all the projects in the reactor even if the set is constrained by --projects New Feature [MNG-2315] - Add option to exclude all transitive dependencies for a particular one [MNG-3832] - Allow wildcards in dependency exclusions [MNG-5230] - Command line option to exclude modules from reactor Release notes for 3.1.1 Bug [MNG-5459] - failure to resolve pom artifact from snapshotVersion in maven-metadata.xml [MNG-5495] - API incompatibility causes Swagger Maven Plugin (and others) to fail under Maven 3.1.0 [MNG-5499] - maven-aether-provider leaks Sisu Plexus and ObjectWeb classes onto the classpath when they are not required [MNG-5500] - help for --legacy-local-repository option explains _maven.repositories instead of _remote.repositories [MNG-5503] - Maven 3.1.0 fails to resolve artifacts produced by reactor build [MNG-5509] - org.apache.maven.repository.legacy.DefaultWagonManager should set User-Agent Release notes for 3.1.0 Major Changes - The use of JSR330 in the core for extensions and in Maven plugins. You can read more about it in the Maven and JSR330 document. - The use of SLF4J in the core for logging. You can read more about it in the Maven and SLF4J document. - The switch in the core from Sonatype Aether to Eclipse Aether. Known Incompatibilities with Maven 3.0.x - The significant change in Eclipse Aether with respect to API changes and package relocation will likely cause issues with plugins that directly depend on Aether. Bug [MNG-3131] - Error message is misleading if a missing plugin parameter is of a type like List [MNG-5016] - A mirror's layout setting should default to 'default' since thats' the only layout supported lay in maven 3 [MNG-5206] - plexus container never disposed [MNG-5208] - Parallel (-T option) multi module build fires wrong "project failed event" [MNG-5209] - MavenProject.getTestClasspathElements can return null elements [MNG-5212] - DefaultPluginDescriptorCache does not retain pluginDescriptor dependencies [MNG-5214] - Dependency resolution substitutes g:a:v:jar for j:a:v:something-else when something-else isn't in the reactor [MNG-5233] - ArtifactMetadataRetrievalException from org.apache.maven.artifact.metadata is not anymore binary compatible. [MNG-5258] - localRepository in settings.xml does not handle ~ as home.dir [MNG-5261] - upgrade wagon version to 2.3 to fix issues with redirect [MNG-5270] - README.bootstrap.txt says "Ant 1.6.5 or later" BUT 1.8 or later is needed [MNG-5280] - Inconsistent order of repositories and pluginRepositories from profiles in settings (regression Maven 3) [MNG-5289] - -Dmaven.repo.local not honored [MNG-5312] - MavenProject.getParent intolerably slow when import scope used heavily [MNG-5313] - Unnecessary DefaultModelBuilder.build overload [MNG-5314] - DefaultModelValidator misuses String.matches [MNG-5336] - Descriptor Reference for settings.xml is incorrect [MNG-5387] - Add ability to replace an artifact in mid-build [MNG-5390] - mvn -rf (no argument) results in NPE [MNG-5395] - logger name for plugins should not be DefaultMavenPluginManager [MNG-5396] - logger name for execution events should not be MavenCli [MNG-5398] - scriptSourceDirectory in superpom is not prefixed with /usr/home/cmsslave/slave15/maven-site-staging/build/trunk/ [MNG-5403] - tar.gz release artifacts have wrong permissions on directories [MNG-5418] - Can't activate a profile by checking for the presence of a file in $myProperty [MNG-5430] - use wagon 2.4 [MNG-5444] - ModelSource API is not sufficient to resolve project hierachies [MNG-5445] - Missing PathTranslator @@Requirement in org.apache.maven.project.interpolation.StringSearchModelInterpolator [MNG-5456] - Maven skips modules and reports success if parallel build encounters java.lang.Error [MNG-5477] - "malformed POM" warning issued when no version in reporting section Improvement [MNG-4505] - use slf4j to control various logging frameworks [MNG-5181] - New resolution from local repository is very confusing [MNG-5239] - Maven integration developers would like to be able to override the maven logging appender. [MNG-5245] - upgrade default plugins versions [MNG-5338] - Accept a directory with -f/--file [MNG-5350] - improve @@threadSafe error message: tell which goal [MNG-5399] - Upgrade version of maven-release-plugin in superpom to 2.3.2 [MNG-5400] - Upgrade version of maven-dependency-plugin in superpom to 2.5 [MNG-5402] - Better build number for git [MNG-5480] - document in POM descriptor reference how urls are interpolated from parent [MNG-5482] - Catch NoClassDefFoundError org/sonatype/aether New Feature [MNG-519] - Timestamps on messages [MNG-5306] - for IDE embedding have ways of collecting model problems without failing the process [MNG-5343] - Allow the use of JSR330 annotation in Maven extensions and plugins [MNG-5344] - Allow the SLF4J loggers to be @@Injected [MNG-5354] - Integrate Eclipse Aether 0.9.0.M2 [MNG-5380] - Cannot preserve whitespace in Maven plugin configuration [MNG-5381] - Restore MavenSession.getRepositoryCache() [MNG-5382] - Add an IT for @@Inject used in plugins [MNG-5386] - Dispose of ClassRealms after invocation to prevent out of Permgen errors [MNG-5388] - Restore embedded integration tests [MNG-5391] - Update the default WAR plugin version to avoid version 2.3 [MNG-5393] - Look at Sonar's use of SLF4J and Logback [MNG-5397] - Use SLF4J for logging [MNG-5407] - Change MavenITmng1830ShowVersionTest to account for SHA1 as version Task [MNG-5279] - add CLI options to documentation [MNG-5365] - Replace Aether's deprecated ConfigurationProperties with ConfigUtils [MNG-5372] - remove classes that were added during Maven 3 alpha and beta but were deprecated before 3.0 final release [MNG-5373] - Document the usage and benefits of JSR330 [MNG-5374] - Fix transfer listener after the JSR330 merge [MNG-5375] - Document use of SLF4J [MNG-5376] - Account for changes between the Apple and Oracle JDKs on OSX [MNG-5453] - Update Maven 3 build to use Eclipse/Sisu Wish [MNG-5370] - separate artifact-handlers configuration from plugin bindings to default lifecycle [MNG-5461] - rename _maven.repositories tracking file to _remote.repositories @ text @d1 1 a1 1 @@comment $NetBSD$ d46 1 @ 1.5 log @Update apache maven to 3.0.5. http://maven.apache.org/docs/3.0.5/release-notes.html Apache Maven 3.0.5 is a maintenance release to fix a security issue CVE-2013-0253 Apache Maven 3.0.4 http://maven.apache.org/security.html CVE-2013-0253 Apache Maven 3.0.4 Apache Maven 3.0.4 (with Apache Maven Wagon 2.1) has introduced a non-secure SSL mode by default. This mode disables all SSL certificate checking, including: host name verification , date validity, and certificate chain. Not validating the certificate introduces the possibility of a man-in-the-middle attack. All users are recommended to upgrade to Apache Maven 3.0.5 and Apache Maven Wagon 2.4. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.4 2013/02/17 17:37:41 fhajny Exp $ d3 8 a10 6 lib/java/maven/aether-api-1.13.1.jar lib/java/maven/aether-connector-wagon-1.13.1.jar lib/java/maven/aether-impl-1.13.1.jar lib/java/maven/aether-spi-1.13.1.jar lib/java/maven/aether-util-1.13.1.jar lib/java/maven/boot/plexus-classworlds-2.4.jar d12 6 d29 2 d33 1 a33 1 lib/java/maven/plexus-interpolation-1.14.jar d35 10 a44 10 lib/java/maven/plexus-utils-2.0.6.jar lib/java/maven/sisu-guava-0.9.9.jar lib/java/maven/sisu-guice-3.1.0-no_aop.jar lib/java/maven/sisu-inject-bean-2.3.0.jar lib/java/maven/sisu-inject-plexus-2.3.0.jar lib/java/maven/wagon-file-2.4.jar lib/java/maven/wagon-http-2.4-shaded.jar lib/java/maven/wagon-provider-api-2.4.jar share/doc/java/maven/LICENSE.txt share/doc/java/maven/NOTICE.txt @ 1.4 log @Update maven to 3.0.4. Too many changes since 2.2.1. Apache Maven 3.0.4 should be backwards compatibility with 2.x. For compatibility issues, see https://cwiki.apache.org/MAVEN/maven-3x-compatibility-notes.html @ text @d1 1 a1 1 @@comment $NetBSD$ d30 3 a32 3 lib/java/maven/wagon-file-2.2.jar lib/java/maven/wagon-http-2.2-shaded.jar lib/java/maven/wagon-provider-api-2.2.jar @ 1.3 log @Convert @@exec/@@unexec to @@pkgdir or drop it. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.2 2009/06/14 17:48:33 joerg Exp $ d3 30 a32 4 etc/maven/m2.conf etc/maven/settings.xml lib/java/maven/boot/classworlds-1.1.jar lib/java/maven/maven-${PKGVERSION}-uber.jar d36 2 @ 1.2 log @Remove @@dirrm entries from PLISTs @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.1.1.1 2008/12/16 07:39:41 yyamano Exp $ a9 2 @@unexec ${RMDIR} %D/lib/java 2>/dev/null || ${TRUE} @@unexec ${RMDIR} %D/share/doc/java 2>/dev/null || ${TRUE} @ 1.1 log @Initial revision @ text @d1 1 a1 1 @@comment $NetBSD$ a9 4 @@dirrm share/doc/java/maven @@dirrm lib/java/maven/boot @@dirrm lib/java/maven @@dirrm etc/maven @ 1.1.1.1 log @Import apache-maven-2.0.9 as devel/apache-maven Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information. @ text @@