On 20 Oct 2011, at 17:57, Pete Muir wrote:
On 20 Oct 2011, at 17:52, Sanne Grinovero wrote:
> right, sounds a reasonable requirement. Any suggestion to automate this check?
Use regexp and parse the transformed-for-release (i.e. with their own versions swapped
out) for SNAPSHOT? That's what I've used before and it works.
Actually a better approach is:
1) Make sure snapshot repos are explicitly disabled on release (this is good practice)
2) Run the build against an empty maven repo (this is good practice as it ensures the
build is reproducible without your local junk). To do this use
-Dmaven.repo.local=/some/tmp/path
This will then ensure we don't have any snapshots at all in the build.
BTW the eventual goal is to be able to have POMs that don't reference any repositories
at all. However the Maven guys are willing to overlook this whilst we get more stuff
sync'd to central. So if we do this, it's critically important that we don't
add any repositories to POMs. Anything must be proxied through
JBoss.org.
We should also do a proper dependency analysis at some point.
I'm also trying to find out if we can get artifact level filters applied, so we can
exclude stuff like jclouds (as it pulls in so much stuff) and focus on syncing core etc.
for now.
> Since we use scripts for the release anyway, it shouldn't be hard to
> add an extra step and sign the artifacts too: that's appreciated by
> some.
Yes. Here is my guide to using signing -
http://seamframework.org/Weld/WeldReleasesGettingStarted#H-PublishingBuil... - and
here is the plugin config I used in the release profile
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-gpg-plugin</artifactId>
<configuration>
<passphrase>${gpg.passphrase}</passphrase>
<useAgent>${gpg.useAgent}</useAgent>
</configuration>
<executions>
<execution>
<id>sign-artifacts</id>
<phase>verify</phase>
<goals>
<goal>sign</goal>
</goals>
</execution>
</executions>
</plugin>
_______________________________________________
infinispan-dev mailing list
infinispan-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/infinispan-dev