apache / apache/maven-release

[MRELEASE-378] Check snapshots phase ignores plugin dependencies

Open
#518 6 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Java
Stars
128
Forks
145
Avg merge
7h 7m
Merged PRs (30d)
3

Description

**[Mark Hobson](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=mihobson)** opened **[MRELEASE-378](https://issues.apache.org/jira/browse/MRELEASE-378?redirect=false)** and commented

The check snapshots phase ignores snapshot plugin dependencies and the project can be released. For example:

```

...



myPluginGroup
myPluginArtifact


myGroup
myArtifact
1.0-SNAPSHOT





...

```

---

**Affects:** 2.0-beta-7

**Attachments:**
- [MRELEASE-378.patch](https://issues.apache.org/jira/secure/attachment/12718241/MRELEASE-378.patch) (_3.44 kB_)

**Issue Links:**
- [MRELEASE-833](https://issues.apache.org/jira/browse/MRELEASE-833) release:prepare allows SNAPSHOT Plugin Dependencies
(_**"is duplicated by"**_)
- [MRELEASE-163](https://issues.apache.org/jira/browse/MRELEASE-163) Dependencies in build.plugins section of pom do not have thier versions updated.

7 votes, 8 watchers

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the check snapshots phase with the sample Maven project and inspect the release plugin's snapshot-checking entry point. Done means a project with a SNAPSHOT plugin dependency is prevented from being released; review MRELEASE-833 and the attached MRELEASE-378.patch before proceeding.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system, release
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.