Guillaume Nodet

> Point 4 is about "client should not try to interpret ANY command, just pass it to daemon and let it interpret (and return any error if params are bad)"....

@dependabot reopen

> Looks like [the gpg key used to sign 4.0.0 alpha](https://downloads.apache.org/maven/maven-4/4.0.0-alpha-4/binaries/apache-maven-4.0.0-alpha-4-bin.tar.gz.asc) is not in the apache maven [`KEYS`](https://svn.apache.org/repos/asf/maven/project/KEYS) file @bmarwell ? > > ``` > # gpg: key D433A5AD: accepted...

> > Looks like [the gpg key used to sign 4.0.0 alpha](https://downloads.apache.org/maven/maven-4/4.0.0-alpha-4/binaries/apache-maven-4.0.0-alpha-4-bin.tar.gz.asc) is not in the apache maven [`KEYS`](https://svn.apache.org/repos/asf/maven/project/KEYS) file @bmarwell ? > > ``` > > # gpg: key...

> this PR needs to fix in the components as commented above In theory yes, in practice, no component is affected. The reason is that the `K` generic type in...