Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 998F5200D31 for ; Sat, 4 Nov 2017 18:34:46 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id 98196160BE9; Sat, 4 Nov 2017 17:34:46 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id B6A051609EE for ; Sat, 4 Nov 2017 18:34:45 +0100 (CET) Received: (qmail 92077 invoked by uid 500); 4 Nov 2017 17:34:44 -0000 Mailing-List: contact dev-help@maven.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Help: List-Post: List-Id: "Maven Developers List" Reply-To: "Maven Developers List" Delivered-To: mailing list dev@maven.apache.org Received: (qmail 92064 invoked by uid 99); 4 Nov 2017 17:34:44 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 04 Nov 2017 17:34:44 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id A8C9E1A03A1 for ; Sat, 4 Nov 2017 17:34:43 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.68 X-Spam-Level: * X-Spam-Status: No, score=1.68 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KAM_ASCII_DIVIDERS=0.8, KAM_NUMSUBJECT=0.5, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id U-kvscmmMevg for ; Sat, 4 Nov 2017 17:34:41 +0000 (UTC) Received: from mail-yw0-f169.google.com (mail-yw0-f169.google.com [209.85.161.169]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 985516112D for ; Sat, 4 Nov 2017 17:34:41 +0000 (UTC) Received: by mail-yw0-f169.google.com with SMTP id q1so4862520ywh.5 for ; Sat, 04 Nov 2017 10:34:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-transfer-encoding; bh=J41Ez1fK8xglilSV3Gd29kMYFlq4ok6gj8TO1H13mPk=; b=UcamlaOFwAIXJ2ZYjIxWUfxzPwTEe8kDLtXSNb0HLK6fgTx6S3HwZ2Q4GhlI/pV6iY v5Jx0yARqNAEJJiAQhH1ZMRHz3nlOojrgI3b/y0qJc7BPSLt1jnck5fsMGvDAwK1qxp0 7BgFmAwDI5WB1HwljsouagLx1d1QsvJKIOBmfSMLNcZfwrUHmHUgDMw1D4K+gxJxz1zx +wpSxiauTLRMH0/0h/QNghXyiccBJBVv9XUUGvKkrLZJFFg8ymPHM1VFxu1mIqYc+PBB rT/tTaGtOzz1WEqV+A/TB5HwCeu4+hH68K/jt9Co4EMCmDC8OeULYygNsKt49v3Dr/+9 RySg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:content-transfer-encoding; bh=J41Ez1fK8xglilSV3Gd29kMYFlq4ok6gj8TO1H13mPk=; b=K5PcVLMjQY+qKsjthsDpcC1qseD/1BNmLFLXOHWAGgqSD7tgaz+473UvRSiR2QnJdn F4gtdyh5bVLaERXVNsdWVrV2hK/e3KqzZgW+7F52VkUrD/3CBtsGewkrh0ur8SNVse6m xI4Ys11dhkW8ISuftdpOYIb7K3mwP3zYRVQk4yWMvkj0+VzZsninJ08N7+N2ztuUXNp5 k0pivmtzAqj9h8SOq0gEa2RsnGsvr2bGY0ItgwS/OJ8bK05kkgKuWTlaL6BC7TFMK5P+ ZkRWKVZf/w7XmAZ9Pgu+7/fl6TocvJGu1EEMElNS6D63mrsNBawJ0weWr858MKDfw6vZ x16A== X-Gm-Message-State: AMCzsaWIJ45WLRwOemaR4HjAOSeFd9h2qnGwnaKAKo0dSek30NpBKdwN mUln/GatBTTKKSb1wi9aJNsvFYTYKJ3eCnmC4KY= X-Google-Smtp-Source: ABhQp+SGYieqKOEKuB0GqSRQjP8J+PSMYEIZPGDMPhbpjqJpe56bfFZBFRTIFIhAyC8/ZuzBdQAb1gRzUmjiT/2U11E= X-Received: by 10.129.122.85 with SMTP id v82mr6811512ywc.127.1509816874967; Sat, 04 Nov 2017 10:34:34 -0700 (PDT) MIME-Version: 1.0 Received: by 10.37.5.149 with HTTP; Sat, 4 Nov 2017 10:34:14 -0700 (PDT) In-Reply-To: References: <1549856.He1MSBx3US@giga> From: Romain Manni-Bucau Date: Sat, 4 Nov 2017 18:34:14 +0100 Message-ID: Subject: Re: Maven 4.0.0 To: Maven Developers List Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable archived-at: Sat, 04 Nov 2017 17:34:46 -0000 2017-11-04 18:17 GMT+01:00 Stephen Connolly : > On Sat 4 Nov 2017 at 17:11, Romain Manni-Bucau > wrote: > >> My wishlist as a user would be: >> >> - incremental build (based on scm is fine) >> - some built in scripting (groovy based?) > > > I have a worry for groovy with Java 9+ Understand, here is the long version of that wish: 1. java -> groovy is very doable (compared to other language) so it is the natural language for maven IMHO 2. groovy will have to support Java 9 - to be honest I worry as much for a plain java lib than for groovy so guess it is 1-1 3. I'm happy to have a java scripting alternative (src/build/java) which is not available outside the scope of a plugin (=3D no inherited in compile or test scopes) > > And scripting is the path to the dark side of imperative builds... but > proposals welcome This is true but this is also mandatory today. There is a small alternative to that and I would be as happy if maven can do it: support mojo from the reactor (ie having a project with this layout: parent/[module1, my-maven-plugin]). If this works then no need of scripting but today you must release the mojo before using it in your build which imposes to use scripting. > > >> - plugin sorting from the pom (current rules are deterministic but too h= ard >> to use so defining a dependency between two executions in the same phase >> would be very handy - depends-on tag?) >> >> As a plugin developper: >> >> - programmatic component lookup api (it is deprecated at the moment) >> - ability to contribute dependencies for next plugins/phases >> (resolvedArtifacts) >> >> Le 4 nov. 2017 17:03, "Stephen Connolly" >> a =C3=A9crit : >> >> > On 4 November 2017 at 07:30, Herv=C3=A9 BOUTEMY >> wrote: >> > >> > > Le samedi 4 novembre 2017, 14:43:46 CET John Patrick a =C3=A9crit : >> > > > I've got a few updates I feel would be useful for the next major >> > > version; >> > > > >> > > > 1) Packaging type generic 'archive', or specific zip or tar.gz >> > > > - maybe a user property to enable zip and/or tar.gz >> > > > >> > > > 2) Packaging type generic 'application', or specific rpm or deb >> > > > - in future could be extended for windows installers too >> > > > >> > > > Over the past 6 years I've mainly created jar, war or ear, but for >> > > > deployment the standard is bundle it up into a tar.gz or zip, alon= g >> > > > with the ansible scripts or custom scripts. So I usually use pom >> > > > packaging then adding assembly plugin, just feels strange doing th= at >> > > > all the time and it might make it more simpler for everyone. >> > > do you have some demos of such packagings? >> > > >> > >> > This feels like plugin level functionality. I am unclear how this need= s >> > core changes. Could you provide details where you feel we need to modi= fy >> > core for this (or is it you want to be able to fetch some artifacts fr= om >> > within the zip, iow a zip with the other artifacts embedded and we "re= ach >> > in"? >> > >> > >> > > >> > > > >> > > > 3) Checksum, switch to SHA3, drop md5 and sha1. If we care about >> > > > security, we should keep up to date with what is considered secure >> > > > still. >> > > -1 >> > > checksums are checksums, not security >> > > if you want security, don't look at checksums but at signatures >> > > >> > > This makes me think that we should find a way to show security (with >> > these >> > > signatures): I don't know precisely how, but that would definitely b= e >> > > useful >> > > >> > > > >> > > > 3) Debian style repo management. Instead of having a massive bucke= t >> of >> > > > artefacts, start having repo's either based upon java class versio= n, >> > > > or maven major release version. Also split more than just release = and >> > > > snapshot, maybe core, plugins, general... >> > > > >> > > > Not sure exactly the best solution, but as maven central has stuff >> > > > going back years and years. How much of the old stuff will be used >> for >> > > > new projects going forward. >> > > what's the objective? >> > > with Linux distributions, there are compatibility issues that requir= e >> > > different artifacts, and an objective to keep distro on one CD/DVD >> > > But Java and central don't have such considerations >> > > >> > > > >> > > > Anyway, those are some of my thoughts, if their is a more formal w= ay >> > > > of suggesting them let me know and I'll be happy to raise them >> > > > separately for consideration and maybe also do some pull requests = for >> > > > them. >> > > I think the packaging ideas deserve some demos to see if something c= an >> be >> > > made >> > > generic enough >> > > >> > > Regards, >> > > >> > > Herv=C3=A9 >> > > >> > > > >> > > > John >> > > > >> > > > On 4 November 2017 at 13:18, Paul Hammant wrote= : >> > > > >> > *3. More pluggable dependency resolver:* >> > > > >> >> > > > >> I am willing to let this be optional scope for now. May be yank= ed >> if >> > > too >> > > > >> risky or not ready in time >> > > > > >> > > > > I don't see how you can even make it optional without a pom >> specified >> > > way >> > > > > of saying "not maven central, this way/place instead" >> > > > >> > > > ------------------------------------------------------------------= --- >> > > > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org >> > > > For additional commands, e-mail: dev-help@maven.apache.org >> > > >> > > >> > > >> > > --------------------------------------------------------------------= - >> > > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org >> > > For additional commands, e-mail: dev-help@maven.apache.org >> > > >> > > >> > >> > -- > Sent from my phone --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org For additional commands, e-mail: dev-help@maven.apache.org