Re: Will a version range for a parent pom reference work?

Elliotte Rusty Harold <[email protected]> Tue, 30 Jun 2026 11:20:03 +0000
Newsgroups gmane.comp.jakarta.turbine.maven.user
Message-ID <CAGhczroufe5R7j6+sTX+nMNF64auQpqQve3S6ku48_WY3j9=pA@mail.gmail.com>
Whether it works or not, you really, really don't want to do this.
It's a source of really hard to diagnose security bugs.

On Mon, Jun 29, 2026 at 6:37=E2=80=AFPM KARR, DAVID via users
<[email protected]> wrote:
>
> We are wondering whether we can use a version range for the "parent"->"ve=
rsion" property in our pom.xml. The docs don't explicitly say so, but compa=
ring the info for the "version" property in "parent" vs. "dependency", we s=
ee that only in "dependency" does it mention the possibility of using the r=
ange syntax.  In our tests, it didn't reject the range syntax in the parent=
, but we'd have to set up a more complex test to verify whether it's actual=
ly respecting it.  We're currently on version 3.9.8.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>


--=20
Elliotte Rusty Harold
[email protected]