[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
Re: [equinox-dev] Maven snapshot repository available ?
|
Hi Stephan.,
> Let me directly add some words of caution:
all good advice...
> When pushing Eclipse artifacts to Maven Central we convert
> OSGi 4 part versions to 3 part versions as suitable for a Maven Release.
>
> When anybody starts to publish snapshots they should be very
> careful in testing that snapshots don't interfere with builds
> requesting a release version. Example: [4.6.0,4.7.0) should
> select any of 4.6.1, 4.6.2 ... but *not* 4.7.0.
> As soon as a snapshot exists, e.g., as 4.7.0.v2017040112000
> then this version would be considered (by some maven versions)
> as < 4.7.0 and thus be picked via the above version range.
> Client builds using Maven may not customarily use such version
> ranges, but dependencies among Eclipse artifacts do make use
> of semantic versioning and thus could be wired in incompatible
> ways.
...but why does publishing to central use version ranges in Maven
dependencies on the first place?
I get that these are a more truthful translation of the original OSGi
manifests *but* AFAIK they not only suffer from the above problem but
also make you build irreproducible; as Maven's "target platform" is
"whatever is in Maven Central" at the moment, what a version range
resolves to may change over time. IIRC, using version ranges are
considered to be a bad practice by the Maven developers themselves for
the latter reason.
Best wishes,
Andreas
--
Codetrails GmbH
The knowledge transfer company
Robert-Bosch-Str. 7, 64293 Darmstadt
Phone: +49-6151-276-7092
Mobile: +49-170-811-3791
http://www.codetrails.com/
Managing Director: Dr. Marcel Bruch
Handelsregister: Darmstadt HRB 91940
Attachment:
signature.asc
Description: OpenPGP digital signature