aboutsummaryrefslogtreecommitdiffstats
path: root/pom.xml
Commit message (Collapse)AuthorAgeFilesLines
* Revert "[releng] Bump Bouncy Castle to 1.78"Thomas Wolf2024-04-101-1/+1
| | | | | | | | | | | | This reverts commit 718d121bb38860e66f6e34a4045aa6d5d9490e8a. Bouncy Castle 1.78 has broken OSGi metadata: the package imports in MANIFEST.MF are missing. See also [1] and [2]. [1] https://github.com/bcgit/bc-java/issues/1621 [2] https://github.com/eclipse-platform/eclipse.platform.releng.aggregator/pull/1968#issuecomment-2048151288 Change-Id: Iedec921215dabe0b63fb0dd7f6a4b28c18f854a0 Signed-off-by: Thomas Wolf <twolf@apache.org>
* [releng] Bump Bouncy Castle to 1.78Thomas Wolf2024-04-091-1/+1
| | | | | | | | | | Update version in pom.xml; update target platforms; update bazel workspace. Also update the p2 repository; the Bouncy Castle bundle symbolic names have changed from plain "bc*" to "bc*-jdk18on". Change-Id: I07a5709c791f644d2247c76404a36ba7d0625a1c Signed-off-by: Thomas Wolf <twolf@apache.org>
* [releng] Bump japicmp base version to 6.9.0.202403050737-rThomas Wolf2024-03-071-1/+1
| | | | Change-Id: I6008ef632e6cd88d337ac5b888b52a4b1d3ca85f Signed-off-by: Thomas Wolf <twolf@apache.org>
* Prepare 6.10.0-SNAPSHOT buildsMatthias Sohn2024-03-051-1/+1
| | | | Change-Id: Ie728ef9a7d3c6430a5da30f6a61afd2176015748
* Prepare 6.9.1-SNAPSHOT buildsMatthias Sohn2024-03-051-1/+1
| | | | Change-Id: I10f901209be2faa34ebb9355c86c2106bac38ba5
* JGit v6.9.0.202403050737-rv6.9.0.202403050737-rMatthias Sohn2024-03-051-1/+1
| | | | | Signed-off-by: Matthias Sohn <matthias.sohn@sap.com> Change-Id: I70494c0c69ac549dea9b4cf7c5b25e94c1b4b250
* JGit v6.9.0.202403050045-rv6.9.0.202403050045-rMatthias Sohn2024-03-051-1/+1
| | | | | Signed-off-by: Matthias Sohn <matthias.sohn@sap.com> Change-Id: I4c7a6542ad4252c5a9499e69f68650d2026bde40
* Prepare 6.9.0-SNAPSHOT buildsMatthias Sohn2024-03-051-1/+1
| | | | Change-Id: Ifadeead735c8772e58dd4e5c7381b44c5221a295
* JGit v6.9.0.202402281855-rc1v6.9.0.202402281855-rc1Matthias Sohn2024-02-281-1/+1
| | | | | Signed-off-by: Matthias Sohn <matthias.sohn@sap.com> Change-Id: I23d489ccdc257a8c25da4b90dc51d4a8951d320c
* Prepare 6.9.0-SNAPSHOT buildsMatthias Sohn2024-02-221-1/+1
| | | | Change-Id: I11f4871bfdf6c6c0de5d5ed577edf16bac8cf681
* JGit v6.9.0.202402211805-m3v6.9.0.202402211805-m3Matthias Sohn2024-02-211-1/+1
| | | | | Signed-off-by: Matthias Sohn <matthias.sohn@sap.com> Change-Id: Id2f3934947d6d1e94feeb9e73ad7282ae089b682
* Update jetty to 10.0.20Matthias Sohn2024-02-201-1/+1
| | | | Change-Id: Ic79c5ce718fe1345f75c4254a9ee2aa7d91af359
* Update maven pluginsMatthias Sohn2024-02-201-6/+10
| | | | | | | | | | | | | | | | | - build-helper-maven-plugin to 3.5.0 - cyclonedx-maven-plugin to 2.7.11 - eclipse-jarsigner-plugin to 1.4.3 - git-commit-id-maven-plugin to 7.0.0 - japicmp-maven-plugin to 0.18.5 - maven-clean-plugin to 3.3.2 - maven-compiler-plugin to 3.12.1 - maven-enforcer-plugin to 3.4.1 - maven-jxr-plugin to 3.3.2< - maven-site-plugin to 4.0.0-M13 - spotbugs-maven-plugin to 4.8.3.1 - tycho plugins to 4.0.6 Change-Id: Ie792f783b8b8453a37743f10f8c4162932e5ff85
* Update org.assertj:assertj-core to 3.25.3Matthias Sohn2024-02-201-1/+1
| | | | Change-Id: I3fd8adf3c1cc3f2c8826602b11d1d11fdfe29bfb
* Update org.mockito:mockito-core to 5.10.0Matthias Sohn2024-02-201-1/+1
| | | | Change-Id: I35dbb2402e65753e10bef4617b7e1683f9900406
* Update org.apache.commons:commons-compress to 1.26.0Matthias Sohn2024-02-201-1/+1
| | | | | | | The new version now requires commons-io for the tests. Hence adding dependency to commons-io:commons-io:2.15.1. Change-Id: Ieb50ef559a119c89f90d700ab95a73c0fcae85a8
* Update byte-buddy to 1.14.12Matthias Sohn2024-02-201-1/+1
| | | | Change-Id: Idc56efd1ee6d9d1e039ccfffd5e16803b727f6dc
* [ssh] Bump Apache MINA sshd 2.11.0 -> 2.12.0Thomas Wolf2024-01-201-1/+1
| | | | | | | | | | | This includes the upstream fix for CVE-2023-48795[1] ("strict KEX" protocol extension mitigating the "Terrapin attack"[2]) in JGit. [1] https://nvd.nist.gov/vuln/detail/CVE-2023-48795 [2] https://www.terrapin-attack.com/ Bug: jgit-16 Change-Id: Ie9aa5b903ea6795bd1511afea0bebdb537b56148 Signed-off-by: Thomas Wolf <twolf@apache.org>
* Update jna to 5.14.0Matthias Sohn2024-01-121-1/+1
| | | | Change-Id: Ie60f618fabd1c35815a7fe2775b7fe059baba8b4
* Update maven pluginsMatthias Sohn2023-12-231-18/+18
| | | | | | | | | | | | | | | | | | | | | | | - com.github.siom79.japicmp:japicmp-maven-plugin to 0.18.3 - com.github.spotbugs:spotbugs-maven-plugin to 4.8.2.0 - io.github.git-commit-id:git-commit-id-maven-plugin to 7.0.0 - org.apache.maven.plugins:maven-clean-plugin to 3.3.2 - org.apache.maven.plugins:maven-compiler-plugin to 3.12.0 - org.apache.maven.plugins:maven-dependency-plugin to 3.6.1 - org.apache.maven.plugins:maven-enforcer-plugin to 3.4.1 - org.apache.maven.plugins:maven-javadoc-plugin to 3.6.3 - org.apache.maven.plugins:maven-jxr-plugin to 3.3.1 - org.apache.maven.plugins:maven-pmd-plugin to 3.21.2 - org.apache.maven.plugins:maven-project-info-reports-plugin to 3.5.1 - org.apache.maven.plugins:maven-shade-plugin to 3.5.1 - org.apache.maven.plugins:maven-site-plugin to 4.0.0-M13 - org.apache.maven.plugins:maven-surefire-plugin to 3.2.3 - org.codehaus.mojo:build-helper-maven-plugin to 3.5.0 - org.cyclonedx:cyclonedx-maven-plugin to 2.7.10 - org.eclipse.cbi.maven.plugins:eclipse-jarsigner-plugin to 1.4.3 - org.jacoco:jacoco-maven-plugin to 0.8.11 Change-Id: Ie146085f567f0bcfe0124627939382fe5a764e6c
* Update org.eclipse.dash:license-tool-plugin to 1.1.0Matthias Sohn2023-12-231-1/+1
| | | | Change-Id: I039e10fc6790d54c30cfd85a53c05604351996e0
* Update mockito to 5.8.0Matthias Sohn2023-12-221-1/+1
| | | | Change-Id: I70d33b7af25fcb4754fb048dd9054eef7356f00c
* Add 4.31 target platform and update orbit to 4.31Matthias Sohn2023-12-221-1/+1
| | | | | | and update bytebuddy to 1.14.10. Change-Id: I145776a31d806f7e6dcc90263650109b3eb19067
* Update ecj to 3.36.0Matthias Sohn2023-12-221-1/+1
| | | | Change-Id: I803de19e8086239ebbae9877121946fdddfbaa89
* Merge "Remove invalid spotbugs configuration"Matthias Sohn2023-12-221-1/+0
|\
| * Remove invalid spotbugs configurationMichael Keppler2023-12-171-1/+0
| | | | | | | | | | | | | | | | | | | | * findbugsXmlOutput was renamed to spotbugsXmlOutput long ago * spotbugsXmlOutput has a default value of true and is deprecated, therefore removing the entire line seems most reasonable See https://spotbugs.github.io/spotbugs-maven-plugin/check-mojo.html#spotbugsXmlOutput Change-Id: I83c0bbce1fb3622accb13978319b4313b0121655
* | Fix PMD plugin configurationMichael Keppler2023-12-171-1/+1
|/ | | | | | | The configuration element has been renamed in release 3.18, see https://github.com/apache/maven-pmd-plugin/releases/tag/maven-pmd-plugin-3.18.0 Change-Id: Ia6ec6992c4348d77d4b61f34190a57775cc30cec
* Bump last release version to 6.8.0.202311291450-rMatthias Sohn2023-12-041-1/+1
| | | | | | | This is the version used to compare API changes against to detect breaking API changes. Change-Id: I005b6a24c98c507656ebab415492a4127f08d471
* Prepare 6.9.0-SNAPSHOT buildsMatthias Sohn2023-12-041-1/+1
| | | | Change-Id: Id1d784ec4870cfb53c4b140fe0bb3fad9eef651d
* Prepare 6.8.1-SNAPSHOT buildsMatthias Sohn2023-11-291-1/+1
| | | | Change-Id: I56458c5345dcd9544868c948e90c9827d25c6850
* JGit v6.8.0.202311291450-rv6.8.0.202311291450-rMatthias Sohn2023-11-291-1/+1
| | | | | Signed-off-by: Matthias Sohn <matthias.sohn@sap.com> Change-Id: Iecfe3f628cfdc437ee0d63fe52653ef952c8c494
* Prepare 6.8.0-SNAPSHOT buildsMatthias Sohn2023-11-221-1/+1
| | | | Change-Id: I89178175549541111cddb88da401899960c0ecac
* JGit v6.8.0.202311212206-rc1v6.8.0.202311212206-rc1Matthias Sohn2023-11-211-1/+1
| | | | | Signed-off-by: Matthias Sohn <matthias.sohn@sap.com> Change-Id: I6a40cdef68538fa769f4525eb2ff1ed4a810f11c
* Update org.apache.commons:commons-compress to 1.25.0Matthias Sohn2023-11-171-1/+1
| | | | Change-Id: Ic9c6910853ad00075501aa3e03888fefbe634bf6
* Update bouncycastle to 1.77Matthias Sohn2023-11-161-1/+1
| | | | Change-Id: I2dc011247ace2eeea8c46587cae55a39be086f36
* Update jetty to 10.0.18Matthias Sohn2023-11-151-1/+1
| | | | Change-Id: I34c9f7c062400bb69849812d57390dd2e7b04cac
* SSH: bump org.apache.sshd to 2.11.0Thomas Wolf2023-11-151-1/+1
| | | | | | | | | | Update maven build, bazel build, and target platform. Also remove a file in a ./bin directory that got committed by mistake in commit f5f4bf0ad. Change-Id: Ia653c71643f8fad290874d723dacdafbef25c13f Signed-off-by: Thomas Wolf <twolf@apache.org>
* Update mockito to 5.7.0 and bytebuddy to 1.14.9Matthias Sohn2023-11-091-0/+21
| | | | Change-Id: I7c93847054050a0af0d2c16e724e5755f9fa33bf
* Enable Maven reproducible buildsMatthias Sohn2023-11-091-3/+125
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - configure Maven to run build reproducibly [1] - use UTC timestamp of checked out commit as build timestamp - add git-describe, git-commit-id, git-commit-id, git-tags, git-remote-origin-url to MANIFEST.MF files - configure cyclonedx-maven-plugin to also use UTC timestamp of checked out commit - for packaging build use tycho-buildtimestamp-jgit [2] to ensure version uses the timestamp of the last commit - SBOMs are not reproducible by design [3] they should have a build timestamp matching the time when the build was executed and a serial number which is a unique UUID per build run. Hence exclude them from comparison [4]. - Use gmavenplus-plugin to format build timestamps. Maven expects build timestamp in ISO-8601 format, to replace the qualifier in versions the timestamp format must be compatible with rules for OSGi version numbers. Didn't find a way to read the properties set by the git-commit-id-maven-plugin from another plugin. Hence use JGit in a groovy script to get the commit time of the current HEAD and provide it in these two formats. TODO: packaging build (features and p2 repository) is not yet binary reproducible since that's not yet supported by Tycho [5], artefacts have reproducible version numbers but file lastModified timestamps are not yet reproducible. Test plan for Maven build: - build using mvn clean install" - verify second build is reproducible: mvn -T1 clean verify artifact:compare verification seems not to be thread-safe, hence run it with a single thread using option -T1 For packaging build (still fails due to non-reproducible file timestamps): - build using mvn -f org.eclipse.jgit.packaging/pom.xml clean install - verify second build is reproducible: mvn -T1 -f org.eclipse.jgit.packaging/pom.xml clean verify artifact:compare [1] https://maven.apache.org/guides/mini/guide-reproducible-builds.html [2] https://wiki.eclipse.org/Tycho/Reproducible_Version_Qualifiers [3] https://github.com/CycloneDX/cyclonedx-maven-plugin/issues/84 [4] https://maven.apache.org/plugins/maven-artifact-plugin/compare-mojo.html [5] https://github.com/eclipse-tycho/tycho/issues/233 Change-Id: I0202f55a1b6ae0edd922cfef638beb39d2ce9417
* Generate SBOMs using cyclonedx maven pluginMatthias Sohn2023-10-181-35/+31
| | | | | | | | and specify JGit's license using its SPDX identifier. See https://gitlab.eclipse.org/eclipsefdn/emo-team/sbom/-/blob/main/docs/sbom.adoc#sbom-maven Change-Id: I8f022002c84200ea430325916fa38c3764979c02
* Update orbit to orbit-aggregation/2023-12Matthias Sohn2023-10-051-1/+1
| | | | | | | - add target platform for Eclipse 4.30 (2023-12) - update org.apache.ant to 1.10.14 Change-Id: Ib7fa7cb79e93ecd6009784bc0ad4269bfa71cb29
* Update jetty to 10.0.16Matthias Sohn2023-09-221-1/+1
| | | | Change-Id: I918e308e71fa978c9f25e3fad63c5f2e94ec3be7
* Update org.eclipse.jdt:ecj to 3.35.0Matthias Sohn2023-09-151-1/+1
| | | | Change-Id: Ic1d7fe65a0255bc0cdaf7a7285dd3532277ec07b
* Update org.apache.commons:commons-compress to 1.24.0Matthias Sohn2023-09-151-1/+1
| | | | Change-Id: I896298f9e94b50dda6c6396e652f4a191a722a68
* OSGi: move plugin localization to subdirectoryThomas Wolf2023-09-121-0/+14
| | | | | | | | | | | | | | | | | | | | | | OSGi can have its plugin localization at an arbitrary place; there is no need to have it in a top-level plugin.properties file. In non-OSGi environments having the files at the root level may mean that these files clash with each other, or, as in the referenced bug, with some third-party plug-in's plugin.properties, which may not even have anything to do with localization. Move our OSGi localization to a subfolder OSGI-INF/l10n. For OSGi environments, that's just as good, and for non-OSGi environments it avoid clashes with other root level items on the classpath or in a fat JAR. For fragments, use neither plugin.properties (which would clash with the host plug-in's plugin.properties) nor fragment.properties (which might clash with other fragments for the same fragment host bundle). Instead use names "relative" to the host bundle. Bug: 582394 Change-Id: Ifbcd046d912e2cfe86c0f7259c5ca8de599d9aa1 Signed-off-by: Thomas Wolf <twolf@apache.org>
* [releng] Bump japicmp base version to 6.7.0.202309050840-rThomas Wolf2023-09-081-1/+1
| | | | Change-Id: I8ccf8472a8bf06669ebdcd3d59d24f7d5567d89e Signed-off-by: Thomas Wolf <twolf@apache.org>
* Prepare 6.8.0-SNAPSHOT buildsMatthias Sohn2023-09-071-1/+1
| | | | Change-Id: Ifc81f0a96c2ced0b25926b9daa539d9cfc951925
* Prepare 6.7.1-SNAPSHOT buildsMatthias Sohn2023-09-071-1/+1
| | | | Change-Id: I96097ef8c6f198220f513bbc6d5f8881834a1491
* Switch back to wagon-ssh-externalMatthias Sohn2023-09-071-1/+1
| | | | | Bug: https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/issues/2818 Change-Id: Ic283e5229b1a8a0b1ae349555ac7cfb7b046d7be
* Fix generation of maven siteMatthias Sohn2023-09-071-4/+29
| | | | | | | | | - update maven-site-plugin to 4.0.0-M9 - use wagon-ssh extension for deployment - disable doclint - don't fail the build for javadoc warnings Change-Id: I81f7229deaf6892416ce4cebd6c122f00a857d51
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-24 01:55:38 +0000