-
Notifications
You must be signed in to change notification settings - Fork 125
Description
Hi, see discussion over at renovatebot/renovate#22579 (reply in thread).
Here is the situation.
There are some 27k repos that call out 'org.eclipse.m2e:lifecycle-mapping:1.0.0' based on check done there. I don't see that as actually deprecated here.
My ask over there was to make Renovate ignore the warning since that does not exist. Some things came to light out of this. First, there is better syntax since m2e 1.7.0 but don't think outside a visual change log it was even noticed. I've never seen any repo use it that way nor ever noticed until it was called out. The second option is to push up a dummy solution to central. Well that one I think only your team could do given the groupId. And final option was where we started in asking Renovate to possibly just ignore that one. But what about other similar tools?
So my thinking is that if m2e still supports that mechanism, has the ability to release on that group id, then releasing a fake jar out there as that would suffice for all use cases.
Open to any other suggestions? In the past this came up on a separate initiative I was working with regarding blackduck scanning. It too ended up having us require adding a bunch of stuff externally to all the pieces to make it presume to be approved at our workpace even though its not actually real. This would at least make it real and maybe even in that dummy jar, add resource samples that show all the variations, maybe ;)