Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revert "Bump maven-plugin from 3.16 to 3.21" #181

Conversation

MarkEWaite
Copy link
Contributor

@MarkEWaite MarkEWaite commented Apr 20, 2023

Reverts #174

See discussion in jenkinsci/bom#1978 for the detailed motivation for this change.

It is generally good to upgrade dependencies, but in this case, the upgraded dependency complicates the Jenkins plugin bill of materials. Rather than complicate something that is widely used in the Jenkins project, let's intentionally retain this optional dependency at its older version.

This pull request is ready for review because the incremental build of the pull request evaluated successfully in the Jenkins plugin bill of materials. @allancth, once this is merged, it will generate a new release.

jenkinsci/bom#1978 notes that the upgrade of
the optional dependency on the maven plugin from 3.16 to 3.21 caused
the Jenkins plugin bill of materials to need an explicit inclusion of
the Jenkins maven plugin into the plugin BOM.

That's not a desired change because the Jenkins maven plugin tests do
not pass when run in the Jenkins plugin BOM test suites.  We don't
want to invest the effort in the Jenkins maven plugin tests to make
them work in the Jenkins plugin BOM.

The #174
dependabot proposed upgrade is being reverted to avoid the problem.
When dependabot next proposes an upgrade of this dependency, it can be
closed or evaluated as an incremental build in the Jenkins plugin BOM
before the upgrade is approved.
MarkEWaite added a commit to MarkEWaite/bom that referenced this pull request Apr 20, 2023
@MarkEWaite MarkEWaite marked this pull request as ready for review April 21, 2023 04:15
@MarkEWaite MarkEWaite requested a review from a team as a code owner April 21, 2023 04:15
Copy link
Contributor

@allancth allancth left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot squash and merge

@allancth
Copy link
Contributor

@MarkEWaite The commands to dependabot to squash and merge seems to have no effect. Shall I merge this?

@timja
Copy link
Member

timja commented Apr 21, 2023

@MarkEWaite The commands to dependabot to squash and merge seems to have no effect. Shall I merge this?

This isn’t a dependabot PR but yes please merge

@allancth allancth merged commit 393f578 into master Apr 21, 2023
15 checks passed
@allancth allancth deleted the revert-174-dependabot/maven/org.jenkins-ci.main-maven-plugin-3.21 branch April 21, 2023 06:43
@allancth
Copy link
Contributor

@timja Squashed and merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
3 participants