Elliotte Rusty Harold
Elliotte Rusty Harold
Ideally things wouldn't be built on several platforms but if they were, the binaries could be copied from one machine to another before deployment. As soon as a build process...
Probably worth discussing on the dev list to see what everyone thinks. Maven has gotten a lot of mileage out of the principle that an "artifact" is uniquely identified by...
Not sure what CVEs has to do with anything. We absolutely do **NOT** want to address CVEs with the same pom.xml. A fix for a CVE should and MUST have...
CVEs are not tracked in the repo.
No, do not assume that. No one has approved this yet, and there does not seem to be agreement that this feature is desirable.
@Logofile what's the status on this? Issue should remain open until fixed. (and that bot really needs to be turned off. It's actively rude to volunteer contributors.)
Please don't. We are using this with Java 8. I expect others are too. Also note that Oracle != Java. Java 8 is fully supported by multiple vendors
But Maven 3.9 is continuing, and I expect many projects will stick with that for compatibility reasons. Java 8 will go away eventually but not for multiple years yet.
There are incompatibilities. One I recently noticed was that jdeprscan 17 can't analyze java 8.