Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Using a BOM #95

Merged
merged 7 commits into from
Feb 26, 2020
Merged

Using a BOM #95

merged 7 commits into from
Feb 26, 2020

Conversation

jglick
Copy link
Member

@jglick jglick commented Jul 23, 2019

@oleg-nenashev this case is of interest since it is applied to a plugin which is itself mentioned in the BOM. See apache/maven-integration-testing#25.

pom.xml Outdated Show resolved Hide resolved
@jglick jglick marked this pull request as ready for review July 24, 2019 15:02
@dwnusbaum
Copy link
Member

Are there any problems with using the BOM in the context of security releases or when working with incremental/snapshot versions of dependencies? Or would you just have to temporarily add an explicit <version>, add the new version to the BOM once it gets released, and then update the version of the BOM used by the plugin and remove the explicit uses of <version>?

@jglick
Copy link
Member Author

jglick commented Aug 6, 2019

would you just have to…

Yes.

@jglick jglick added the on-hold label Sep 26, 2019
@jglick
Copy link
Member Author

jglick commented Sep 26, 2019

On hold pending jenkinsci/bom#107.

@jglick jglick removed the on-hold label Sep 27, 2019
@jglick jglick requested a review from dwnusbaum September 27, 2019 00:15
pom.xml Outdated Show resolved Hide resolved
jglick and others added 2 commits January 23, 2020 14:48
Co-Authored-By: Liam Newman <bitwiseman@gmail.com>
@jglick jglick requested a review from bitwiseman January 23, 2020 21:45
@bitwiseman bitwiseman merged commit f5586e7 into jenkinsci:master Feb 26, 2020
@jglick jglick deleted the bom branch February 27, 2020 01:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants