gnodet opened a new pull request, #13001: URL: https://github.com/apache/maven/pull/13001
## Summary - Add `maven-bundle-plugin` (≥ 5.1.1) and `bnd-maven-plugin` (≥ 5.1.0) to mvnup's `PluginUpgradeStrategy` so that `mvn mvnup:check` / `mvn mvnup:apply` detects and upgrades these plugins automatically - bndlib < 5.1.0 has a bug ([FELIX-6259](https://issues.apache.org/jira/browse/FELIX-6259)) where `Jar.putResource()` modifies a `TreeMap` inside its own `computeIfAbsent()` call — JDK 17.0.13+ backported CME detection ([JDK-8259535](https://bugs.openjdk.org/browse/JDK-8259535)) that correctly rejects this, causing `ConcurrentModificationException` on every Maven 4 build using old BND plugins - Affects 7+ Apache projects (geronimo-health, geronimo-metrics, geronimo-opentracing, geronimo-config, geronimo-jcache-simple, aries-journaled-events, aries-tx-control) Fixes #12987 ## Test plan - [x] 4 new unit tests in `PluginUpgradeStrategyTest`: upgrade when below minimum + no-op when already sufficient, for both plugins - [x] Updated `shouldHavePredefinedPluginUpgrades` configuration test to include both new plugins - [x] All 46 tests in `PluginUpgradeStrategyTest` pass 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
