dependabot[bot] opened a new pull request, #682: URL: https://github.com/apache/maven-deploy-plugin/pull/682
Bumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.20 to 2.0.21. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/maven-resolver/releases";>org.apache.maven.resolver:maven-resolver-api's releases</a>.</em></p> <blockquote> <h2>2.0.21</h2> <!-- raw HTML omitted --> <h2>🚀 New features and improvements</h2> <ul> <li>RRF: self-heal from provably broken auto-discovered prefixes files (<a href="https://redirect.github.com/apache/maven-resolver/pull/1976";>#1976</a>) <a href="https://github.com/ascheman";><code>@ascheman</code></a></li> <li>Feat: config to close connection at end of tx (<a href="https://redirect.github.com/apache/maven-resolver/pull/1978";>#1978</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>Feat: new (limited) transport (<a href="https://redirect.github.com/apache/maven-resolver/pull/1966";>#1966</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>Expose additional transport details to TransportListener (<a href="https://redirect.github.com/apache/maven-resolver/pull/1762";>#1762</a>) <a href="https://github.com/kwin";><code>@kwin</code></a></li> <li>Support HTTP/3 in Jetty and JRE HTTP Client (<a href="https://redirect.github.com/apache/maven-resolver/pull/1949";>#1949</a>) <a href="https://github.com/kwin";><code>@kwin</code></a></li> <li>Skip validation and decoration on re-entrant RepositorySystem calls (<a href="https://redirect.github.com/apache/maven-resolver/pull/1957";>#1957</a>) <a href="https://github.com/gnodet";><code>@gnodet</code></a></li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>Fix: preserve original trace data when stamping re-entrancy marker (<a href="https://redirect.github.com/apache/maven-resolver/pull/1980";>#1980</a>) <a href="https://github.com/gnodet";><code>@gnodet</code></a></li> <li>Bug: in certain cases Resolver caused build failure (<a href="https://redirect.github.com/apache/maven-resolver/pull/1975";>#1975</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>Make sure to always close input streams bound to responses (<a href="https://redirect.github.com/apache/maven-resolver/pull/1970";>#1970</a>) <a href="https://github.com/kwin";><code>@kwin</code></a></li> <li>Fix: be more defensive regarding request traces (<a href="https://redirect.github.com/apache/maven-resolver/pull/1973";>#1973</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>Fix reporting of HTTP/3 in JdkTransporter (<a href="https://redirect.github.com/apache/maven-resolver/pull/1967";>#1967</a>) <a href="https://github.com/kwin";><code>@kwin</code></a></li> <li>Validate path components (<a href="https://redirect.github.com/apache/maven-resolver/pull/1959";>#1959</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>Bug: Apache transport deadlock in concurrent use case (<a href="https://redirect.github.com/apache/maven-resolver/pull/1953";>#1953</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>Fix potential NPEs in IpcClient and resource leak in DependencyGraphParser (<a href="https://redirect.github.com/apache/maven-resolver/pull/1945";>#1945</a>) <a href="https://github.com/gnodet";><code>@gnodet</code></a></li> <li>Bug: Jetty transport used wrong config (<a href="https://redirect.github.com/apache/maven-resolver/pull/1948";>#1948</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> </ul> <h2>📝 Documentation updates</h2> <ul> <li>fix: Some since javadoc tags were off; fixed (<a href="https://redirect.github.com/apache/maven-resolver/pull/1968";>#1968</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (<a href="https://redirect.github.com/apache/maven-resolver/pull/1950";>#1950</a>) <a href="https://github.com/potiuk";><code>@potiuk</code></a></li> </ul> <h2>👻 Maintenance</h2> <ul> <li>Use try-with-resources in AbstractTransporter (<a href="https://redirect.github.com/apache/maven-resolver/pull/1947";>#1947</a>) <a href="https://github.com/Aayush10016";><code>@Aayush10016</code></a></li> <li>Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (<a href="https://redirect.github.com/apache/maven-resolver/pull/1950";>#1950</a>) <a href="https://github.com/potiuk";><code>@potiuk</code></a></li> <li>Fix potential NPEs in IpcClient and resource leak in DependencyGraphParser (<a href="https://redirect.github.com/apache/maven-resolver/pull/1945";>#1945</a>) <a href="https://github.com/gnodet";><code>@gnodet</code></a></li> <li>Limit internal retries to 1 with Java 26+ (<a href="https://redirect.github.com/apache/maven-resolver/pull/1946";>#1946</a>) <a href="https://github.com/kwin";><code>@kwin</code></a></li> </ul> <h2>🔧 Build</h2> <ul> <li>Use custom doclet to extract configuration metadata with the help of (<a href="https://redirect.github.com/apache/maven-resolver/pull/1965";>#1965</a>) <a href="https://github.com/kwin";><code>@kwin</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Bump Jetty to 12.1.11 (<a href="https://redirect.github.com/apache/maven-resolver/pull/1969";>#1969</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (<a href="https://redirect.github.com/apache/maven-resolver/pull/1963";>#1963</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (<a href="https://redirect.github.com/apache/maven-resolver/pull/1961";>#1961</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml from 4 to 5 (<a href="https://redirect.github.com/apache/maven-resolver/pull/1960";>#1960</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (<a href="https://redirect.github.com/apache/maven-resolver/pull/1962";>#1962</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump bouncycastleVersion from 1.84 to 1.85 (<a href="https://redirect.github.com/apache/maven-resolver/pull/1956";>#1956</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/maven-resolver/commit/838477a48a6cbcc26a51c56fff7f964440f2aaa3";><code>838477a</code></a> [maven-release-plugin] prepare release maven-resolver-2.0.21</li> <li><a href="https://github.com/apache/maven-resolver/commit/f59888098759883ce95d673b883e29fd09b07a9b";><code>f598880</code></a> Add ATR meta (<a href="https://redirect.github.com/apache/maven-resolver/issues/1982";>#1982</a>)</li> <li><a href="https://github.com/apache/maven-resolver/commit/1e5d22aeeadebe2942fb011f2c47ba84d5eced12";><code>1e5d22a</code></a> Fix: preserve original trace data when stamping re-entrancy marker (<a href="https://redirect.github.com/apache/maven-resolver/issues/1980";>#1980</a>)</li> <li><a href="https://github.com/apache/maven-resolver/commit/f4d1fa9cb1f036b9128d9617e80e4e6cf0098cc2";><code>f4d1fa9</code></a> RRF: self-heal from provably broken auto-discovered prefixes files (<a href="https://redirect.github.com/apache/maven-resolver/issues/1976";>#1976</a>)</li> <li><a href="https://github.com/apache/maven-resolver/commit/853288956a17c87538cd2ff11e60bea1ce82e318";><code>8532889</code></a> Bug: in certain cases Resolver caused build failure (<a href="https://redirect.github.com/apache/maven-resolver/issues/1975";>#1975</a>)</li> <li><a href="https://github.com/apache/maven-resolver/commit/0feb2143e382e9095928f14c465a04f52ed99fd8";><code>0feb214</code></a> Feat: config to close connection at end of tx (<a href="https://redirect.github.com/apache/maven-resolver/issues/1978";>#1978</a>)</li> <li><a href="https://github.com/apache/maven-resolver/commit/f97423550e975bd555833926b6fec60712463e56";><code>f974235</code></a> Do not check UrlTransporter for open connections after close</li> <li><a href="https://github.com/apache/maven-resolver/commit/dbaf30986168a4c66700193fba7b80b651a84445";><code>dbaf309</code></a> Make sure to always close input streams bound to responses (<a href="https://redirect.github.com/apache/maven-resolver/issues/1970";>#1970</a>)</li> <li><a href="https://github.com/apache/maven-resolver/commit/45482a82ce0377d0c7a0d8fc343eeff6b94012ad";><code>45482a8</code></a> Fix: be more defensive regarding request traces (<a href="https://redirect.github.com/apache/maven-resolver/issues/1973";>#1973</a>)</li> <li><a href="https://github.com/apache/maven-resolver/commit/4bb69adc2e1a4d38db665c0e8e87ca70e8372f7c";><code>4bb69ad</code></a> Fix tools classpath</li> <li>Additional commits viewable in <a href="https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.20...maven-resolver-2.0.21";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
