dependabot[bot] opened a new pull request, #2971: URL: https://github.com/apache/tomee/pull/2971
Bumps [org.apache.maven.plugins:maven-install-plugin](https://github.com/apache/maven-install-plugin) from 3.0.0-M1 to 4.0.0-beta-3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/maven-install-plugin/releases";>org.apache.maven.plugins:maven-install-plugin's releases</a>.</em></p> <blockquote> <h2>4.0.0-beta-3</h2> <blockquote> <p>[!WARNING] This plugin is a Maven 4 plugin and requires Maven 4.x to run.</p> </blockquote> <!-- raw HTML omitted --> <h2>🚀 New features and improvements</h2> <ul> <li>Cache projectsUsingPlugin to fix O(N²) reactor scan (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/427";>#427</a>) <a href="https://github.com/gnodet";><code>@gnodet</code></a></li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>chore: harden embedded-POM trust boundary in install:install-file (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/446";>#446</a>) <a href="https://github.com/gnodet";><code>@gnodet</code></a></li> <li>chore: harden installAtEnd integrity contracts (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/445";>#445</a>) <a href="https://github.com/gnodet";><code>@gnodet</code></a></li> </ul> <h2>📝 Documentation updates</h2> <ul> <li>Restore the common wording on the download page (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/436";>#436</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Convert the FAQ from FML to Markdown (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/437";>#437</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/415";>#415</a>) <a href="https://github.com/potiuk";><code>@potiuk</code></a></li> </ul> <h2>👻 Maintenance</h2> <ul> <li>Migrate the site descriptor to the v2 model (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/449";>#449</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Cleanups project, use plugin versions from parent in ITs (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/443";>#443</a>) <a href="https://github.com/slawekjaranowski";><code>@slawekjaranowski</code></a></li> <li>Inherit the maven-invoker-plugin version from the parent (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/435";>#435</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Restore the document metadata dropped when the pages were ported (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/434";>#434</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Port the site documentation from APT to Markdown (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/432";>#432</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Pass siteMvn as a String so the site stage runs on Maven 4 (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/430";>#430</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Build against Maven 4.0.0-rc-6 (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/429";>#429</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Build against Maven 4.0.0-rc-5 (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/410";>#410</a>) <a href="https://github.com/ascheman";><code>@ascheman</code></a></li> <li>Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/415";>#415</a>) <a href="https://github.com/potiuk";><code>@potiuk</code></a></li> <li>Bump m-invoker-p to 3.9.1 / downgrade Guice to 5.1.0 (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/375";>#375</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>JUnit Jupiter best practices (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/370";>#370</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>feat: enable prevent branch protection rules (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/361";>#361</a>) <a href="https://github.com/sparsick";><code>@sparsick</code></a></li> <li><a href="https://issues.apache.org/jira/browse/MINSTALL-206";>[MINSTALL-206]</a> - Add IT to verify that phase=none skips execution without errors (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/340";>#340</a>) <a href="https://github.com/gnodet";><code>@gnodet</code></a></li> <li>Re-enable Issue Notifs (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/339";>#339</a>) <a href="https://github.com/bmarwell";><code>@bmarwell</code></a></li> <li>Disable notifications for jira migration (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/135";>#135</a>) <a href="https://github.com/bmarwell";><code>@bmarwell</code></a></li> <li>Remove unused branch and argument (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/125";>#125</a>) <a href="https://github.com/elharo";><code>@elharo</code></a></li> <li>Fix JIRA link (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/123";>#123</a>) <a href="https://github.com/elharo";><code>@elharo</code></a></li> <li>Delete commented code (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/121";>#121</a>) <a href="https://github.com/elharo";><code>@elharo</code></a></li> <li>Remove pointless cast (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/122";>#122</a>) <a href="https://github.com/elharo";><code>@elharo</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Bump org.slf4j:slf4j-simple from 2.0.18 to 2.0.19 (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/448";>#448</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump org.apache.maven.resolver:maven-resolver-api from 2.0.21 to 2.0.22 (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/441";>#441</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump com.google.guava:guava from 33.7.0-jre to 33.7.1-jre (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/440";>#440</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump com.google.guava:guava from 33.6.0-jre to 33.7.0-jre (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/439";>#439</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Inherit the maven-invoker-plugin version from the parent (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/435";>#435</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Bump org.apache.maven.resolver:maven-resolver-api from 2.0.20 to 2.0.21 (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/424";>#424</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (<a href="https://redirect.github.com/apache/maven-install-plugin/pull/423";>#423</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/maven-install-plugin/commit/26865d50736c5e592515dfd873d7326f87801456";><code>26865d5</code></a> [maven-release-plugin] prepare release maven-install-plugin-4.0.0-beta-3</li> <li><a href="https://github.com/apache/maven-install-plugin/commit/66118b61668f9b734a3f71c58f836a2c24bee985";><code>66118b6</code></a> Migrate the site descriptor to the v2 model</li> <li><a href="https://github.com/apache/maven-install-plugin/commit/957940bfaad178933704a906f29c2a9434053d99";><code>957940b</code></a> Bump org.slf4j:slf4j-simple from 2.0.18 to 2.0.19</li> <li><a href="https://github.com/apache/maven-install-plugin/commit/cea29f37f77bfdde6e6bb5175ba5e1e5d573b51e";><code>cea29f3</code></a> chore: harden embedded-POM trust boundary in install:install-file (<a href="https://redirect.github.com/apache/maven-install-plugin/issues/446";>#446</a>)</li> <li><a href="https://github.com/apache/maven-install-plugin/commit/ee2d7fc2cc3e346e5eb53d776d1f2775f385f800";><code>ee2d7fc</code></a> chore: harden installAtEnd integrity contracts</li> <li><a href="https://github.com/apache/maven-install-plugin/commit/e4a5b5a44cf8bdd2251a9edee86a085109984f65";><code>e4a5b5a</code></a> Add project metadata for ATR</li> <li><a href="https://github.com/apache/maven-install-plugin/commit/5c4503c025d14d032d84f092ccff376b492cfb9c";><code>5c4503c</code></a> Cache projectsUsingPlugin to fix O(N²) reactor scan (<a href="https://redirect.github.com/apache/maven-install-plugin/issues/427";>#427</a>)</li> <li><a href="https://github.com/apache/maven-install-plugin/commit/4610c21badba7e61f345e94618fa8a68acf3be22";><code>4610c21</code></a> Cleanups project, use plugin versions from parent in ITs</li> <li><a href="https://github.com/apache/maven-install-plugin/commit/a807975cbf43d1b5c59696b59889951208cd3ebe";><code>a807975</code></a> Drop unneeded release-drafter config</li> <li><a href="https://github.com/apache/maven-install-plugin/commit/4d4e1a62195f3e50087edc78862301470c0200e1";><code>4d4e1a6</code></a> Bump org.apache.maven.resolver:maven-resolver-api from 2.0.21 to 2.0.22 (<a href="https://redirect.github.com/apache/maven-install-plugin/issues/441";>#441</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apache/maven-install-plugin/compare/maven-install-plugin-3.0.0-M1...maven-install-plugin-4.0.0-beta-3";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
