Bug Scrub for Maven 3.2.0

A bug scrub is a review of all the bugs/issues for a specific target version to decide what issues will be addressed for the release.

Summary

http://jira.codehaus.org/browse/MNG-1977 Global dependency exclusions
http://jira.codehaus.org/browse/MNG-3397 Change the POM to use attributes
http://jira.codehaus.org/browse/MNG-5102 Mixin POM fragments
http://jira.codehaus.org/browse/MNG-2199 Version ranges not supported for parent artifacts
http://jira.codehaus.org/browse/MNG-2216 Add default encodings section to POM
http://jira.codehaus.org/browse/MNG-3826 Add profile activation when project version matches a regex
http://jira.codehaus.org/browse/MNG-2316 Add info to the poms for dependencies that implement an API or provide other dependencies
http://jira.codehaus.org/browse/MNG-3326 Profile Deactivation Configuration
http://jira.codehaus.org/browse/MNG-2557 Various enhancements to profiles
http://jira.codehaus.org/browse/MNG-2598 Profile element in POM should support overriding project.build.directory (WONTFIX candidate?)
http://jira.codehaus.org/browse/MNG-3726 Extend POM model to support declaration of IRC channels
http://jira.codehaus.org/browse/MNG-624 Automatic parent versioning
http://jira.codehaus.org/browse/MNG-4506 Split site deployment URLs into release vs. snapshot, just like artifacts

http://jira.codehaus.org/browse/MNG-2916 Default message and profile help messages
http://jira.codehaus.org/browse/MNG-2478 add filtered resource directories to super POM
http://jira.codehaus.org/browse/MNG-5356 Make encrypt/decrypt logic pluggable
http://jira.codehaus.org/browse/MNG-656 lazily resolve extensions
http://jira.codehaus.org/browse/MNG-5366 [Regression] resolveAlways does not force dependency resolution in Maven 3.0.4
http://jira.codehaus.org/browse/MNG-4622 Throw Validation Error if pom contains a dependency with two different versions.
http://jira.codehaus.org/browse/MNG-683 Lifecycle mappings should specify phase bindings in terms of general functionality type
http://jira.codehaus.org/browse/MNG-841 Support customization of default excludes
http://jira.codehaus.org/browse/MNG-193 symmetry for outputs of a plugin
http://jira.codehaus.org/browse/MNG-3695 Allow dependencies' scopes to be managed without explicit versions
http://jira.codehaus.org/browse/MNG-3825 Dependencies with classifier should not always require a version.
http://jira.codehaus.org/browse/MNG-3321 Skip plugin and/or execution
http://jira.codehaus.org/browse/MNG-1569 Make build process info read-only to mojos, and provide mechanism for explicit out-params for mojos to declare
http://jira.codehaus.org/browse/MNG-1867 deprecate system scope, analyse other use cases
http://jira.codehaus.org/browse/MNG-4508 No way to avoid adding artifactId to site urls

http://jira.codehaus.org/browse/MNG-2381 Improved control over the repositories in the POM
Unsure what the ask is here
http://jira.codehaus.org/browse/MNG-3474 Add parameter --internet to test Internet access with and without using proxy defined in settings.xml
Any takers... looks like a nice small feature to add

http://jira.codehaus.org/browse/MNG-2893 Update the DefaultPluginManager to not use a project depMan for controlling it's transitive dependencies

Seems like a legitimate bug we should consider?
http://jira.codehaus.org/browse/MNG-426 create "maxmem" setting for all plugins to refer to
I think this is now out of scope for core... but I would be interested in what others think
http://jira.codehaus.org/browse/MNG-3124 Inherit mailing lists from parent POM

Sounds like an issue building the internal model. Additionally this would not be a change that affects other consumers and their processing of dependencies, so this looks like a valid candidate to me.
http://jira.codehaus.org/browse/MNG-2807 ciManagement from parent is not merging with children
Same as MNG-3124. Both issues are related it would seem
http://jira.codehaus.org/browse/MNG-4173 Remove automatic version resolution for POM plugins
This is somewhat reasonable, but we have already kicked this can down the road and it may hinder adoption. I would be happy to kick this one to 4.x on the basis that most existing poms were written with the assumption that you could avoid specifying the plugin version... and we even omit the plugin version in the asf parent pom for some stuff...

http://jira.codehaus.org/browse/MNG-3092 Version ranges with non-snapshot bounds can contain snapshot versions
Do we have a decision as to what we will do with this one? It is one of the longest discussions we have...
http://jira.codehaus.org/browse/MNG-5185 Improve "missing dependency" error message when _maven.repositories/_remote.repositories contains other repository ids than requested
The attached patch does not address the real issue, namely being able to define specific repo id's as offline. I would be happy to take a stab at the real issue, but likely do not have the time. If nobody else has the time, we should move this to 3.2.x as it could be a patch level enhancement to the maven CLI options

http://jira.codehaus.org/browse/MNG-5207 [Regression] Maven 3 fails to calculate proper build order
http://jira.codehaus.org/browse/MNG-5265 enforce repository url verification for passing authz
Should be an easy fix for somebody to add a warning during the pom/settings parsing?

http://jira.codehaus.org/browse/MNG-5378 Use m-s-u in core
ACTION: krosenv to provide status update

http://jira.codehaus.org/browse/MNG-5353 Ignore pre-releases in exclusive upper bound [lw,up)
ACTION: jvzyl will we be upping Aether to M4, in which case that will expose an alternative version range syntax that resolves this issue... OTOH that new syntax may cause issues for existing pom readers... in which case this becomes a push back to 4.x
http://jira.codehaus.org/browse/MNG-5205 Memory leak in StringSearchModelInterpolator
ACTION: krosenv to provide status update

http://jira.codehaus.org/browse/MNG-5494 Add a license file that corresponds to each GAV in the distribution
I think jvzyl has this one under control. Can be pushed back if necessary as what we have currently works, if somewhat sub-optimal
http://jira.codehaus.org/browse/MNG-3526 Small change to artifact version parsing.
I have committed this issue

https://jira.codehaus.org/browse/MNG-5176 Print build times in an ISO 8601-style manner