This is an automated email from the ASF dual-hosted git repository.
dongjoon pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/orc.git
The following commit(s) were added to refs/heads/main by this push:
new 4458fe825 ORC-2126: Upgrade `maven-shade-plugin` to 3.6.2
4458fe825 is described below
commit 4458fe8251841d75e00a52e175194789545f9dd7
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Mar 9 10:55:06 2026 -0700
ORC-2126: Upgrade `maven-shade-plugin` to 3.6.2
Bumps
[org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin)
from 3.6.1 to 3.6.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/apache/maven-shade-plugin/releases">org.apache.maven.plugins:maven-shade-plugin's
releases</a>.</em></p>
<blockquote>
<h2>3.6.2</h2>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Bug: Extra JARs and Artifacts were not subjected to filtering (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/785">#785</a>)
<a href="https://github.com/cstamas"><code>cstamas</code></a></li>
</ul>
<h2>👻 Maintenance</h2>
<ul>
<li>Drop excessive dependencies (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/786">#786</a>)
<a href="https://github.com/cstamas"><code>cstamas</code></a></li>
<li>chore: remove junit3 reference (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/762">#762</a>)
<a href="https://github.com/sparsick"><code>sparsick</code></a></li>
<li>Exclude Java 25 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/773">#773</a>)
<a href="https://github.com/slachiewicz"><code>slachiewicz</code></a></li>
<li>Update site descriptor, use site configuration from parent (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/755">#755</a>)
<a
href="https://github.com/slawekjaranowski"><code>slawekjaranowski</code></a></li>
</ul>
<h2>📦 Dependency updates</h2>
<ul>
<li>Drop unneeded dependencies (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/788">#788</a>)
<a href="https://github.com/cstamas"><code>cstamas</code></a></li>
<li>Update to parent POM v 47 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/781">#781</a>)
<a href="https://github.com/Bukama"><code>Bukama</code></a></li>
<li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from
3.5.0 to 3.5.1 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/782">#782</a>)
<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/780">#780</a>)
<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from
3.4.0 to 3.5.0 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/778">#778</a>)
<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump asmVersion from 9.9 to 9.9.1 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/774">#774</a>)
<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Update invoker plugin to 3.9.1 to Support Java 25 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/769">#769</a>)
<a href="https://github.com/Bukama"><code>Bukama</code></a></li>
<li>Bump asmVersion from 9.8 to 9.9 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/761">#761</a>)
<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.xmlunit:xmlunit-legacy from 2.10.3 to 2.11.0 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/763">#763</a>)
<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.apache.maven.plugin-tools:maven-plugin-annotations from 3.15.1
to 3.15.2 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/764">#764</a>)
<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from
3.3.0 to 3.4.0 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/768">#768</a>)
<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/pull/758">#758</a>)
<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/apache/maven-shade-plugin/commit/ad8de59b38b373a7a601209bc3e2e192805ad7cd"><code>ad8de59</code></a>
[maven-release-plugin] prepare release maven-shade-plugin-3.6.2</li>
<li><a
href="https://github.com/apache/maven-shade-plugin/commit/8eb19dce1f587a6f67f3ab00254925e1a437afbb"><code>8eb19dc</code></a>
Drop unneeded dependencies (<a
href="https://redirect.github.com/apache/maven-shade-plugin/issues/788">#788</a>)</li>
<li><a
href="https://github.com/apache/maven-shade-plugin/commit/397b2cd7a6315cc9f0ce14b87d6a9108edee25b1"><code>397b2cd</code></a>
Drop excessive dependencies (<a
href="https://redirect.github.com/apache/maven-shade-plugin/issues/786">#786</a>)</li>
<li><a
href="https://github.com/apache/maven-shade-plugin/commit/eca6398fd26db22a8f94da99682251ab85a758d8"><code>eca6398</code></a>
Bug: Extra JARs and Artifacts were not subjected to filtering (<a
href="https://redirect.github.com/apache/maven-shade-plugin/issues/785">#785</a>)</li>
<li><a
href="https://github.com/apache/maven-shade-plugin/commit/7edce171e15fccee898a69d264bdfdbe21229952"><code>7edce17</code></a>
Update to parent POM v 47 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/issues/781">#781</a>)</li>
<li><a
href="https://github.com/apache/maven-shade-plugin/commit/3171a34b15528336c5e7baaf74d18a9140076973"><code>3171a34</code></a>
Mockito improvements (<a
href="https://redirect.github.com/apache/maven-shade-plugin/issues/783">#783</a>)</li>
<li><a
href="https://github.com/apache/maven-shade-plugin/commit/678844bd0330fef60f29c5b9d9476867c82c0699"><code>678844b</code></a>
Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (<a
href="https://redirect.github.com/apache/maven-shade-plugin/issues/782">#782</a>)</li>
<li><a
href="https://github.com/apache/maven-shade-plugin/commit/73ec909916f71e018508b4d39e78d939578ee9fa"><code>73ec909</code></a>
Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (<a
href="https://redirect.github.com/apache/maven-shade-plugin/issues/780">#780</a>)</li>
<li><a
href="https://github.com/apache/maven-shade-plugin/commit/5f7a87719217bae4b18cf9d29d326e2b064edd4a"><code>5f7a877</code></a>
Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (<a
href="https://redirect.github.com/apache/maven-shade-plugin/issues/778">#778</a>)</li>
<li><a
href="https://github.com/apache/maven-shade-plugin/commit/73c52477a0e1b67eee420ec207a8f50c1d3e99f0"><code>73c5247</code></a>
chore: remove junit3 reference (<a
href="https://redirect.github.com/apache/maven-shade-plugin/issues/762">#762</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/apache/maven-shade-plugin/compare/maven-shade-plugin-3.6.1...maven-shade-plugin-3.6.2">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that
have been made to it
- `dependabot show <dependency name> ignore conditions` will show all of
the ignore conditions of the specified dependency
- `dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen the PR
or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen the PR
or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the PR or
upgrade to it yourself)
</details>
Closes #2574 from
dependabot[bot]/dependabot/maven/java/org.apache.maven.plugins-maven-shade-plugin-3.6.2.
Authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Dongjoon Hyun <[email protected]>
---
java/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/pom.xml b/java/pom.xml
index 2d5391601..f6ac0df2e 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -78,7 +78,7 @@
<maven-assembly-plugin.version>3.8.0</maven-assembly-plugin.version>
<maven-dependency-plugin.version>3.10.0</maven-dependency-plugin.version>
<maven-enforcer-plugin.version>3.6.2</maven-enforcer-plugin.version>
- <maven-shade-plugin.version>3.6.1</maven-shade-plugin.version>
+ <maven-shade-plugin.version>3.6.2</maven-shade-plugin.version>
<maven.compiler.proc>full</maven.compiler.proc>
<maven.compiler.release>${java.version}</maven.compiler.release>
<maven.compiler.useIncrementalCompilation>false</maven.compiler.useIncrementalCompilation>