Skip to content

Add 'org.eclipse.m2e:lifecycle-mapping:1.0.0' to maven central #1412

@hazendaz

Description

@hazendaz

Hi, see discussion over at renovatebot/renovate#22579 (reply in thread).

Here is the situation.

There are some 27k repos that call out 'org.eclipse.m2e:lifecycle-mapping:1.0.0' based on check done there. I don't see that as actually deprecated here.

My ask over there was to make Renovate ignore the warning since that does not exist. Some things came to light out of this. First, there is better syntax since m2e 1.7.0 but don't think outside a visual change log it was even noticed. I've never seen any repo use it that way nor ever noticed until it was called out. The second option is to push up a dummy solution to central. Well that one I think only your team could do given the groupId. And final option was where we started in asking Renovate to possibly just ignore that one. But what about other similar tools?

So my thinking is that if m2e still supports that mechanism, has the ability to release on that group id, then releasing a fake jar out there as that would suffice for all use cases.

Open to any other suggestions? In the past this came up on a separate initiative I was working with regarding blackduck scanning. It too ended up having us require adding a bunch of stuff externally to all the pieces to make it presume to be approved at our workpace even though its not actually real. This would at least make it real and maybe even in that dummy jar, add resource samples that show all the variations, maybe ;)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions