@@ -97,113 +97,164 @@ mvn io.github.chains-project:maven-lockfile:generate -DincludeMavenPlugins=true
9797
9898## Format
9999
100- An example lockfile is shown below:
100+ An example lockfile is shown below. Note that large parts of it has been minimzed to ` {...} ` for readability.
101101For a full example, see the [ lockfile.json] ( /maven_plugin/lockfile.json ) file in this repository.
102102``` json
103103{
104104 "artifactId" : " single-dependency" ,
105105 "groupId" : " com.mycompany.app" ,
106106 "version" : " 1" ,
107107 "pom" : {
108- "path" : " pom.xml" ,
108+ "groupId" : " com.mycompany.app" ,
109+ "artifactId" : " single-dependency" ,
110+ "version" : " 1" ,
111+ "relativePath" : " pom.xml" ,
109112 "checksumAlgorithm" : " SHA-256" ,
110- "checksum" : " 769c9ca78c22cd41728e76bf04377d1362da16063bd225c8ba8593ee28382507 "
113+ "checksum" : " 2152cc00c16d72fbf9430e6a95a56e9edf0180a500155490bf33a7349df75a1b "
111114 },
112115 "lockFileVersion" : 1 ,
113116 "dependencies" : [
114117 {
115- "groupId" : " org.junit.jupiter " ,
116- "artifactId" : " junit-jupiter-api " ,
117- "version" : " 5.9.2 " ,
118+ "groupId" : " fr.inria.gforge.spoon " ,
119+ "artifactId" : " spoon-core " ,
120+ "version" : " 10.3.0 " ,
118121 "checksumAlgorithm" : " SHA-256" ,
119- "checksum" : " f767a170f97127b0ad3582bf3358eabbbbe981d9f96411853e629d9276926fd5 " ,
120- "scope" : " test " ,
121- "resolved" : " https://repo.maven.apache.org/maven2/org/junit/jupiter/junit-jupiter-api/5.9.2/junit-jupiter-api-5.9.2 .jar" ,
122+ "checksum" : " 37a43de039cf9a6701777106e3c5921e7131e5417fa707709abf791d3d8d9174 " ,
123+ "scope" : " compile " ,
124+ "resolved" : " https://repo.maven.apache.org/maven2/fr/inria/gforge/spoon/spoon-core/10.3.0/spoon-core-10.3.0 .jar" ,
122125 "repositoryId" : " central" ,
123- "selectedVersion" : " 5.9.2 " ,
126+ "selectedVersion" : " 10.3.0 " ,
124127 "included" : true ,
125- "id" : " org.junit.jupiter:junit-jupiter-api:5.9.2 " ,
128+ "id" : " fr.inria.gforge.spoon:spoon-core:10.3.0 " ,
126129 "children" : [
127130 {
128- "groupId" : " org.apiguardian " ,
129- "artifactId" : " apiguardian-api " ,
130- "version" : " 1.1 .2" ,
131+ "groupId" : " com.fasterxml.jackson.core " ,
132+ "artifactId" : " jackson-databind " ,
133+ "version" : " 2.14 .2" ,
131134 "checksumAlgorithm" : " SHA-256" ,
132- "checksum" : " b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38 " ,
133- "scope" : " test " ,
134- "resolved" : " https://repo.maven.apache.org/maven2/org/apiguardian/apiguardian-api/1.1 .2/apiguardian-api-1.1 .2.jar" ,
135+ "checksum" : " 501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424 " ,
136+ "scope" : " compile " ,
137+ "resolved" : " https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.14 .2/jackson-databind-2.14 .2.jar" ,
135138 "repositoryId" : " central" ,
136- "selectedVersion" : " 1.1 .2" ,
139+ "selectedVersion" : " 2.14 .2" ,
137140 "included" : true ,
138- "id" : " org.apiguardian:apiguardian-api:1.1.2" ,
139- "parent" : " org.junit.jupiter:junit-jupiter-api:5.9.2" ,
140- "children" : []
141- },
142- {
143- "groupId" : " org.junit.platform" ,
144- "artifactId" : " junit-platform-commons" ,
145- "version" : " 1.9.2" ,
146- "checksumAlgorithm" : " SHA-256" ,
147- "checksum" : " 624a3d745ef1d28e955a6a67af8edba0fdfc5c9bad680a73f67a70bb950a683d" ,
148- "scope" : " test" ,
149- "resolved" : " https://repo.maven.apache.org/maven2/org/junit/platform/junit-platform-commons/1.9.2/junit-platform-commons-1.9.2.jar" ,
150- "repositoryId" : " central" ,
151- "selectedVersion" : " 1.9.2" ,
152- "included" : true ,
153- "id" : " org.junit.platform:junit-platform-commons:1.9.2" ,
154- "parent" : " org.junit.jupiter:junit-jupiter-api:5.9.2" ,
141+ "id" : " com.fasterxml.jackson.core:jackson-databind:2.14.2" ,
142+ "parent" : " fr.inria.gforge.spoon:spoon-core:10.3.0" ,
155143 "children" : [
156144 {
157- "groupId" : " org.apiguardian" ,
158- "artifactId" : " apiguardian-api" ,
159- "version" : " 1.1.2" ,
145+ "groupId" : " com.fasterxml.jackson.core" ,
146+ "artifactId" : " jackson-annotations" ,
147+ "version" : " 2.14.2" ,
148+ "checksumAlgorithm" : " SHA-256" ,
149+ "checksum" : " 2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d" ,
150+ "scope" : " compile" ,
151+ "resolved" : " https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.14.2/jackson-annotations-2.14.2.jar" ,
152+ "repositoryId" : " central" ,
153+ "selectedVersion" : " 2.14.2" ,
154+ "included" : true ,
155+ "id" : " com.fasterxml.jackson.core:jackson-annotations:2.14.2" ,
156+ "parent" : " com.fasterxml.jackson.core:jackson-databind:2.14.2" ,
157+ "children" : []
158+ },
159+ {
160+ "groupId" : " com.fasterxml.jackson.core" ,
161+ "artifactId" : " jackson-core" ,
162+ "version" : " 2.14.2" ,
160163 "checksumAlgorithm" : " SHA-256" ,
161- "checksum" : " b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38 " ,
162- "scope" : " test " ,
163- "resolved" : " https://repo.maven.apache.org/maven2/org/apiguardian/apiguardian-api/1.1 .2/apiguardian-api-1.1 .2.jar" ,
164+ "checksum" : " b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a " ,
165+ "scope" : " compile " ,
166+ "resolved" : " https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-core/2.14 .2/jackson-core-2.14 .2.jar" ,
164167 "repositoryId" : " central" ,
165- "selectedVersion" : " 1.1 .2" ,
166- "included" : false ,
167- "id" : " org.apiguardian:apiguardian-api:1.1 .2" ,
168- "parent" : " org.junit.platform:junit-platform-commons:1.9 .2" ,
168+ "selectedVersion" : " 2.14 .2" ,
169+ "included" : true ,
170+ "id" : " com.fasterxml.jackson.core:jackson-core:2.14 .2" ,
171+ "parent" : " com.fasterxml.jackson.core:jackson-databind:2.14 .2" ,
169172 "children" : []
170173 }
171174 ]
172175 },
173176 {
174- "groupId" : " org.opentest4j " ,
175- "artifactId" : " opentest4j " ,
176- "version" : " 1.2.0 " ,
177+ "groupId" : " com.martiansoftware " ,
178+ "artifactId" : " jsap " ,
179+ "version" : " 2.1 " ,
177180 "checksumAlgorithm" : " SHA-256" ,
178- "checksum" : " 58812de60898d976fb81ef3b62da05c6604c18fd4a249f5044282479fc286af2 " ,
179- "scope" : " test " ,
180- "resolved" : " https://repo.maven.apache.org/maven2/org/opentest4j/opentest4j/1.2.0/opentest4j-1.2.0 .jar" ,
181+ "checksum" : " 331746fa62cfbc3368260c5a2e660936ad11be612308c120a044e120361d474e " ,
182+ "scope" : " compile " ,
183+ "resolved" : " https://repo.maven.apache.org/maven2/com/martiansoftware/jsap/2.1/jsap-2.1 .jar" ,
181184 "repositoryId" : " central" ,
182- "selectedVersion" : " 1.2.0 " ,
185+ "selectedVersion" : " 2.1 " ,
183186 "included" : true ,
184- "id" : " org.opentest4j:opentest4j:1.2.0 " ,
185- "parent" : " org.junit.jupiter:junit-jupiter-api:5.9.2 " ,
187+ "id" : " com.martiansoftware:jsap:2.1 " ,
188+ "parent" : " fr.inria.gforge.spoon:spoon-core:10.3.0 " ,
186189 "children" : []
187- }
190+ },
191+ {... }
188192 ]
189193 }
190194 ],
191- "mavenPlugins" : [],
195+ "mavenPlugins" : [
196+ {
197+ "groupId" : " org.apache.maven.plugins" ,
198+ "artifactId" : " maven-clean-plugin" ,
199+ "version" : " 3.2.0" ,
200+ "checksumAlgorithm" : " SHA-256" ,
201+ "checksum" : " b657bef2e1eb11e029a70cd688bde6adad29e4e99dacb18516bf651ecca32435" ,
202+ "resolved" : " https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-clean-plugin/3.2.0/maven-clean-plugin-3.2.0.jar" ,
203+ "repositoryId" : " central" ,
204+ "dependencies" : [
205+ {
206+ "groupId" : " org.apache.maven" ,
207+ "artifactId" : " maven-core" ,
208+ "version" : " 3.2.5" ,
209+ "checksumAlgorithm" : " SHA-256" ,
210+ "checksum" : " 4f1a0af8997e1daf778b91c5ae9e973f92df699439d909fdec7fc6055c09de12" ,
211+ "scope" : " provided" ,
212+ "resolved" : " https://repo.maven.apache.org/maven2/org/apache/maven/maven-core/3.2.5/maven-core-3.2.5.jar" ,
213+ "repositoryId" : " central" ,
214+ "selectedVersion" : " 3.2.5" ,
215+ "included" : true ,
216+ "id" : " org.apache.maven:maven-core:3.2.5" ,
217+ "children" : [
218+ {
219+ "groupId" : " org.apache.maven" ,
220+ "artifactId" : " maven-aether-provider" ,
221+ "version" : " 3.2.5" ,
222+ "checksumAlgorithm" : " SHA-256" ,
223+ "checksum" : " 703944b922d5351aad53b842f7dd38439b7213425f13c6c7f034b8b699b7d578" ,
224+ "scope" : " provided" ,
225+ "resolved" : " https://repo.maven.apache.org/maven2/org/apache/maven/maven-aether-provider/3.2.5/maven-aether-provider-3.2.5.jar" ,
226+ "repositoryId" : " central" ,
227+ "selectedVersion" : " 3.2.5" ,
228+ "included" : true ,
229+ "id" : " org.apache.maven:maven-aether-provider:3.2.5" ,
230+ "parent" : " org.apache.maven:maven-core:3.2.5" ,
231+ "children" : [
232+ {... }
233+ ]
234+ },
235+ {... }
236+ ]
237+ },
238+ {... }
239+ ]
240+ },
241+ {... }
242+ ],
192243 "metaData" : {
193244 "environment" : {
194- "osName" : " Mac OS X " ,
195- "mavenVersion" : " 3.9.11 " ,
245+ "osName" : " Linux " ,
246+ "mavenVersion" : " 3.9.12 " ,
196247 "javaVersion" : " 21.0.8"
197248 },
198249 "config" : {
199- "includeMavenPlugins" : false ,
250+ "includeMavenPlugins" : true ,
200251 "allowValidationFailure" : false ,
201252 "allowPomValidationFailure" : false ,
202253 "allowEnvironmentalValidationFailure" : false ,
203254 "includeEnvironment" : true ,
204255 "reduced" : false ,
205- "mavenLockfileVersion" : " 5.9 .1-SNAPSHOT " ,
206- "checksumMode" : " local " ,
256+ "mavenLockfileVersion" : " 5.14 .1-beta-1 " ,
257+ "checksumMode" : " remote " ,
207258 "checksumAlgorithm" : " SHA-256"
208259 }
209260 }
@@ -237,7 +288,7 @@ jobs:
237288 runs-on : ubuntu-latest
238289 steps :
239290 - name : run maven-lockfile
240- uses : chains-project/maven-lockfile@dbd9538eaf1bc297225b74f5e891af7d2faf61a1 # v5.5.2
291+ uses : chains-project/maven-lockfile@2d2ed1462246005ae3aafaf2d0bc619f521eadf6 # 5.14.0
241292 with :
242293 github-token : ${{ secrets.JRELEASER_GITHUB_TOKEN }}
243294 include-maven-plugins : true
@@ -258,7 +309,7 @@ It still works for pull requests from the same repository. Renovate also works w
258309Extended github actions example with all available options:
259310
260311` ` ` yml
261- - uses : chains-project/maven-lockfile@dbd9538eaf1bc297225b74f5e891af7d2faf61a1 # v5.5.2
312+ - uses : chains-project/maven-lockfile@2d2ed1462246005ae3aafaf2d0bc619f521eadf6 # 5.14.0
262313 with :
263314 # Required. The GitHub token used to commit the updated lockfile to the repository.
264315 - github-token : ${{ secrets.JRELEASER_GITHUB_TOKEN }}
0 commit comments