[java-identity-provider] 02/03: Turn on dependency checker in the enforcer.

[Rod Widdowson]

This is an automated email from the git hooks/post-receive script.

rdw pushed a commit to branch maint-4.1
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=1bfe7b826fac02227f008dda49f7d155638859cb

commit 1bfe7b826fac02227f008dda49f7d155638859cb
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Wed Dec 29 13:52:49 2021 +0000

    Turn on dependency checker in the enforcer.
    
    Requires the latest (SNAPSHOT) enforcer plugin and hence
    an additional repository.
    
    We supress compileRuntimeArtifactFatal (because the IdP
    does this) and pomVersionMismatchFatal (because in 4.1
    we override Spring versions)
---
 idp-distribution/pom.xml | 23 +++++++++++++++++++++--
 1 file changed, 21 insertions(+), 2 deletions(-)

diff --git a/idp-distribution/pom.xml b/idp-distribution/pom.xml
index 6acc79bdc..4c20b0c36 100644
--- a/idp-distribution/pom.xml
+++ b/idp-distribution/pom.xml
@@ -253,7 +253,7 @@
                     <dependency>
                         <groupId>net.shibboleth.maven.enforcer.rules</groupId>
                         <artifactId>maven-dist-enforcer</artifactId>
-                        <version>3.0.0</version>
+                        <version>3.1.0-SNAPSHOT</version>
                     </dependency>
                 </dependencies>
                 <executions>
@@ -274,7 +274,9 @@
                                     <zipFiles>${project.build.directory}/${idp.finalName}.zip</zipFiles>
                                     <tgzFiles>${project.build.directory}/${idp.finalName}.tar.gz</tgzFiles>
                                     <checkSignatures>true</checkSignatures>
-                                    <checkDependencies>false</checkDependencies>
+                                    <checkDependencies>true</checkDependencies>
+                                    <compileRuntimeArtifactFatal>false</compileRuntimeArtifactFatal>
+                                    <pomVersionMismatchFatal>false</pomVersionMismatchFatal>
                                     <listJarSources>false</listJarSources>
                                     <checkM2>false</checkM2>
                                 </jarEnforcer>
@@ -285,4 +287,21 @@
             </plugin>
         </plugins>
     </build>
+
+    <!-- Add the snap shot repository which allows us to specify the SNAPSHOT jar enforcer above -->
+    <pluginRepositories>
+        <pluginRepository>
+            <id>shib-snapshot</id>
+            <url>https://build.shibboleth.net/nexus/content/repositories/snapshots</url>
+            <releases>
+                <enabled>false</enabled>
+            </releases>
+            <snapshots>
+                <enabled>true</enabled>
+                <checksumPolicy>fail</checksumPolicy>
+            </snapshots>
+        </pluginRepository>
+    </pluginRepositories>
+
+
 </project>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.