Re: [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0 [cxf]

2024-03-19 Thread via GitHub


reta merged PR #1761:
URL: https://github.com/apache/cxf/pull/1761


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0 [cxf]

2024-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #1761:
URL: https://github.com/apache/cxf/pull/1761

   Bumps 
[org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin)
 from 3.12.1 to 3.13.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-compiler-plugin/releases";>org.apache.maven.plugins:maven-compiler-plugin's
 releases.
   
   3.13.0
   
   🚀 New features and improvements
   
   https://issues.apache.org/jira/browse/MCOMPILER-574";>[MCOMPILER-574] 
- Propagate cause of exception in AbstractCompilerMojo (https://redirect.github.com/apache/maven-compiler-plugin/pull/232";>#232)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-582";>[MCOMPILER-582] 
- Automatic detection of release option for JDK < 9 (https://redirect.github.com/apache/maven-compiler-plugin/pull/228";>#228)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-583";>[MCOMPILER-583] 
- Require Maven 3.6.3 (https://redirect.github.com/apache/maven-compiler-plugin/pull/229";>#229)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-577";>[MCOMPILER-577] 
- Rename parameter "forceJavacCompilerUse" (https://redirect.github.com/apache/maven-compiler-plugin/pull/225";>#225)
 https://github.com/kwin";>@​kwin
   https://issues.apache.org/jira/browse/MCOMPILER-570";>[MCOMPILER-570] 
- Add links to javac documentation of JDK17 (https://redirect.github.com/apache/maven-compiler-plugin/pull/224";>#224)
 https://github.com/kwin";>@​kwin
   https://issues.apache.org/jira/browse/MCOMPILER-576";>[MCOMPILER-576] 
- Deprecate parameter "compilerVersion" (https://redirect.github.com/apache/maven-compiler-plugin/pull/223";>#223)
 https://github.com/kwin";>@​kwin
   
   📦 Dependency updates
   
   https://issues.apache.org/jira/browse/MCOMPILER-575";>[MCOMPILER-575] 
- Bump plexusCompilerVersion from 2.14.2 to 2.15.0 (https://redirect.github.com/apache/maven-compiler-plugin/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump apache/maven-gh-actions-shared from 3 to 4 (https://redirect.github.com/apache/maven-compiler-plugin/pull/226";>#226)
 https://github.com/dependabot";>@​dependabot
   
   đź“ť Documentation updates
   
   https://issues.apache.org/jira/browse/MCOMPILER-548";>[MCOMPILER-548] 
- JDK 21 throws annotations processing warning that can not be turned off (https://redirect.github.com/apache/maven-compiler-plugin/pull/200";>#200)
 https://github.com/hgschmie";>@​hgschmie
   
   đź‘» Maintenance
   
   https://issues.apache.org/jira/browse/MCOMPILER-584";>[MCOMPILER-584] 
- Refresh page - Using Non-Javac Compilers (https://redirect.github.com/apache/maven-compiler-plugin/pull/231";>#231)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-585";>[MCOMPILER-585] 
- Refresh plugins versions in ITs (https://redirect.github.com/apache/maven-compiler-plugin/pull/230";>#230)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   subject verb agreement (https://redirect.github.com/apache/maven-compiler-plugin/pull/221";>#221)
 https://github.com/elharo";>@​elharo
   
   
   
   
   Commits
   
   https://github.com/apache/maven-compiler-plugin/commit/a1415aa3833df5985ecdc2b854ef516d3afbf348";>a1415aa
 [maven-release-plugin] prepare release maven-compiler-plugin-3.13.0
   https://github.com/apache/maven-compiler-plugin/commit/b2b9196f61198daddcac513d849c0d808e02c8d7";>b2b9196
 [MCOMPILER-574] Propagate cause of exception in AbstractCompilerMojo
   https://github.com/apache/maven-compiler-plugin/commit/6d2ce5a46507ea6c44c2d4a81aaf183baad2784e";>6d2ce5a
 [MCOMPILER-584] Refresh page - Using Non-Javac Compilers
   https://github.com/apache/maven-compiler-plugin/commit/eebad60f7500c3db44050f599d5fc13f01af116b";>eebad60
 [MCOMPILER-585] Refresh plugins versions in ITs
   https://github.com/apache/maven-compiler-plugin/commit/ceacf6884dc98be921f78cbb6de9a88213955471";>ceacf68
 [MCOMPILER-582] Automatic detection of release option for JDK < 9
   https://github.com/apache/maven-compiler-plugin/commit/110293f730f03bd2361aafb39789055b52efe6ab";>110293f
 [MCOMPILER-583] Require Maven 3.6.3
   https://github.com/apache/maven-compiler-plugin/commit/90131df544a466a7d2f35e2c1da88f56b2b9368e";>90131df
 [MCOMPILER-575] Bump plexusCompilerVersion from 2.14.2 to 2.15.0 (https://redirect.github.com/apache/maven-compiler-plugin/issues/227";>#227)
   https://github.com/apache/maven-compiler-plugin/commit/74cfc72acae4f55708bca189b2170167e83df6b3";>74cfc72
 [MCOMPILER-548] JDK 21 throws annotations processing warning that can not be 
...
   https://github.com/apache/maven-compiler-plugin/commit/f85aa27d7cc28664ed7cfdd19b8e250652a66471";>f85aa27
 Bump apache/maven-gh-actions-shared from 3 to 4
   https://github.com/apache/maven-compiler-plugin/commit/d59ef49ead31f7d85c24f98ca6747f

Re: [PR] Bump cxf.spring.security.version from 6.0.8 to 6.2.3 [cxf]

2024-03-19 Thread via GitHub


dependabot[bot] commented on PR #1757:
URL: https://github.com/apache/cxf/pull/1757#issuecomment-2007526408

   OK, I won't notify you again about this release, but will get in touch when 
a new version is available. You can also ignore all major, minor, or patch 
releases for a dependency by adding an [`ignore` 
condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore)
 with the desired `update_types` to your config file.
   
   If you change your mind, just re-open this PR and I'll resolve any conflicts 
on it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump cxf.spring.security.version from 6.0.8 to 6.2.3 [cxf]

2024-03-19 Thread via GitHub


reta commented on PR #1757:
URL: https://github.com/apache/cxf/pull/1757#issuecomment-2007526220

   Closing, addressed in scope of https://issues.apache.org/jira/browse/CXF-8671


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump cxf.spring.security.version from 6.0.8 to 6.2.3 [cxf]

2024-03-19 Thread via GitHub


reta closed pull request #1757: Bump cxf.spring.security.version from 6.0.8 to 
6.2.3
URL: https://github.com/apache/cxf/pull/1757


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.springframework.security:spring-security-core from 6.0.8 to 6.1.8 in /parent [cxf]

2024-03-19 Thread via GitHub


reta merged PR #1755:
URL: https://github.com/apache/cxf/pull/1755


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Updating CXF to 3.5.8 [cxf-fediz]

2024-03-19 Thread via GitHub


coheigea merged PR #265:
URL: https://github.com/apache/cxf-fediz/pull/265


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.springframework.security:spring-security-core from 6.0.8 to 6.1.8 in /parent [cxf]

2024-03-19 Thread via GitHub


reta commented on PR #1755:
URL: https://github.com/apache/cxf/pull/1755#issuecomment-2007162619

   I think we have no choice but to bump the Spring Security version to 6.1.x, 
it should be drop in for 6.0.x (as per Spring Security documentation)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven.plugins:maven-assembly-plugin from 3.7.0 to 3.7.1 [cxf]

2024-03-19 Thread via GitHub


reta merged PR #1756:
URL: https://github.com/apache/cxf/pull/1756


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.0 to 3.2.1 [cxf]

2024-03-19 Thread via GitHub


reta merged PR #1758:
URL: https://github.com/apache/cxf/pull/1758


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.webjars:swagger-ui from 5.11.10 to 5.12.0 [cxf]

2024-03-19 Thread via GitHub


reta merged PR #1759:
URL: https://github.com/apache/cxf/pull/1759


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.atmosphere:atmosphere-runtime from 3.0.4 to 3.0.5 [cxf]

2024-03-19 Thread via GitHub


reta merged PR #1760:
URL: https://github.com/apache/cxf/pull/1760


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Updating CXF to 3.5.8 [cxf-fediz]

2024-03-19 Thread via GitHub


coheigea opened a new pull request, #265:
URL: https://github.com/apache/cxf-fediz/pull/265

   (no comment)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0 [cxf-fediz]

2024-03-19 Thread via GitHub


coheigea merged PR #263:
URL: https://github.com/apache/cxf-fediz/pull/263


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.cxf:cxf-xjc-plugin from 3.3.2 to 3.3.3 [cxf-fediz]

2024-03-19 Thread via GitHub


coheigea merged PR #264:
URL: https://github.com/apache/cxf-fediz/pull/264


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven.plugins:maven-assembly-plugin from 3.7.0 to 3.7.1 [cxf-fediz]

2024-03-19 Thread via GitHub


coheigea merged PR #262:
URL: https://github.com/apache/cxf-fediz/pull/262


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.springframework.security:spring-security-core from 6.0.8 to 6.1.8 in /parent [cxf]

2024-03-19 Thread via GitHub


jstansel commented on PR #1755:
URL: https://github.com/apache/cxf/pull/1755#issuecomment-2007095610

   The [CVE-2024-22257](https://spring.io/security/cve-2024-22257) notes that 
6.0.10 is only available from a private repository. I haven't seen more of an 
announcement than than but the [project page support 
tab](https://spring.io/projects/spring-security#support) lists the end of 
support date as 2023-11-21 for Spring Security 6.0.x.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.cxf:cxf-xjc-plugin from 3.3.2 to 3.3.3 [cxf-fediz]

2024-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #264:
URL: https://github.com/apache/cxf-fediz/pull/264

   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.cxf:cxf-xjc-plugin&package-manager=maven&previous-version=3.3.2&new-version=3.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0 [cxf-fediz]

2024-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #263:
URL: https://github.com/apache/cxf-fediz/pull/263

   Bumps 
[org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin)
 from 3.12.1 to 3.13.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-compiler-plugin/releases";>org.apache.maven.plugins:maven-compiler-plugin's
 releases.
   
   3.13.0
   
   🚀 New features and improvements
   
   https://issues.apache.org/jira/browse/MCOMPILER-574";>[MCOMPILER-574] 
- Propagate cause of exception in AbstractCompilerMojo (https://redirect.github.com/apache/maven-compiler-plugin/pull/232";>#232)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-582";>[MCOMPILER-582] 
- Automatic detection of release option for JDK < 9 (https://redirect.github.com/apache/maven-compiler-plugin/pull/228";>#228)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-583";>[MCOMPILER-583] 
- Require Maven 3.6.3 (https://redirect.github.com/apache/maven-compiler-plugin/pull/229";>#229)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-577";>[MCOMPILER-577] 
- Rename parameter "forceJavacCompilerUse" (https://redirect.github.com/apache/maven-compiler-plugin/pull/225";>#225)
 https://github.com/kwin";>@​kwin
   https://issues.apache.org/jira/browse/MCOMPILER-570";>[MCOMPILER-570] 
- Add links to javac documentation of JDK17 (https://redirect.github.com/apache/maven-compiler-plugin/pull/224";>#224)
 https://github.com/kwin";>@​kwin
   https://issues.apache.org/jira/browse/MCOMPILER-576";>[MCOMPILER-576] 
- Deprecate parameter "compilerVersion" (https://redirect.github.com/apache/maven-compiler-plugin/pull/223";>#223)
 https://github.com/kwin";>@​kwin
   
   📦 Dependency updates
   
   https://issues.apache.org/jira/browse/MCOMPILER-575";>[MCOMPILER-575] 
- Bump plexusCompilerVersion from 2.14.2 to 2.15.0 (https://redirect.github.com/apache/maven-compiler-plugin/pull/227";>#227)
 https://github.com/dependabot";>@​dependabot
   Bump apache/maven-gh-actions-shared from 3 to 4 (https://redirect.github.com/apache/maven-compiler-plugin/pull/226";>#226)
 https://github.com/dependabot";>@​dependabot
   
   đź“ť Documentation updates
   
   https://issues.apache.org/jira/browse/MCOMPILER-548";>[MCOMPILER-548] 
- JDK 21 throws annotations processing warning that can not be turned off (https://redirect.github.com/apache/maven-compiler-plugin/pull/200";>#200)
 https://github.com/hgschmie";>@​hgschmie
   
   đź‘» Maintenance
   
   https://issues.apache.org/jira/browse/MCOMPILER-584";>[MCOMPILER-584] 
- Refresh page - Using Non-Javac Compilers (https://redirect.github.com/apache/maven-compiler-plugin/pull/231";>#231)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-585";>[MCOMPILER-585] 
- Refresh plugins versions in ITs (https://redirect.github.com/apache/maven-compiler-plugin/pull/230";>#230)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   subject verb agreement (https://redirect.github.com/apache/maven-compiler-plugin/pull/221";>#221)
 https://github.com/elharo";>@​elharo
   
   
   
   
   Commits
   
   https://github.com/apache/maven-compiler-plugin/commit/a1415aa3833df5985ecdc2b854ef516d3afbf348";>a1415aa
 [maven-release-plugin] prepare release maven-compiler-plugin-3.13.0
   https://github.com/apache/maven-compiler-plugin/commit/b2b9196f61198daddcac513d849c0d808e02c8d7";>b2b9196
 [MCOMPILER-574] Propagate cause of exception in AbstractCompilerMojo
   https://github.com/apache/maven-compiler-plugin/commit/6d2ce5a46507ea6c44c2d4a81aaf183baad2784e";>6d2ce5a
 [MCOMPILER-584] Refresh page - Using Non-Javac Compilers
   https://github.com/apache/maven-compiler-plugin/commit/eebad60f7500c3db44050f599d5fc13f01af116b";>eebad60
 [MCOMPILER-585] Refresh plugins versions in ITs
   https://github.com/apache/maven-compiler-plugin/commit/ceacf6884dc98be921f78cbb6de9a88213955471";>ceacf68
 [MCOMPILER-582] Automatic detection of release option for JDK < 9
   https://github.com/apache/maven-compiler-plugin/commit/110293f730f03bd2361aafb39789055b52efe6ab";>110293f
 [MCOMPILER-583] Require Maven 3.6.3
   https://github.com/apache/maven-compiler-plugin/commit/90131df544a466a7d2f35e2c1da88f56b2b9368e";>90131df
 [MCOMPILER-575] Bump plexusCompilerVersion from 2.14.2 to 2.15.0 (https://redirect.github.com/apache/maven-compiler-plugin/issues/227";>#227)
   https://github.com/apache/maven-compiler-plugin/commit/74cfc72acae4f55708bca189b2170167e83df6b3";>74cfc72
 [MCOMPILER-548] JDK 21 throws annotations processing warning that can not be 
...
   https://github.com/apache/maven-compiler-plugin/commit/f85aa27d7cc28664ed7cfdd19b8e250652a66471";>f85aa27
 Bump apache/maven-gh-actions-shared from 3 to 4
   https://github.com/apache/maven-compiler-plugin/commit/d59ef49ead31f7d85c24f98ca6

[PR] Bump org.apache.maven.plugins:maven-assembly-plugin from 3.7.0 to 3.7.1 [cxf-fediz]

2024-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #262:
URL: https://github.com/apache/cxf-fediz/pull/262

   Bumps 
[org.apache.maven.plugins:maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin)
 from 3.7.0 to 3.7.1.
   
   Release notes
   Sourced from https://github.com/apache/maven-assembly-plugin/releases";>org.apache.maven.plugins:maven-assembly-plugin's
 releases.
   
   3.7.1
   https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12354406";>Release
 Notes - Maven Assembly Plugin - Version 3.7.1
   
   
   What's Changed
   
   [MASSEMBLY-1023] Bump org.apache.maven.shared:maven-filtering from 3.3.1 
to 3.3.2 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/apache/maven-assembly-plugin/pull/192";>apache/maven-assembly-plugin#192
   [MASSEMBLY-1024] Bump org.apache.commons:commons-compress from 1.25.0 to 
1.26.1 by https://github.com/dependabot";>@​dependabot 
in https://redirect.github.com/apache/maven-assembly-plugin/pull/191";>apache/maven-assembly-plugin#191
   [MASSEMBLY-1025] Bump org.codehaus.plexus:plexus-archiver from 4.9.1 to 
4.9.2 by https://github.com/dependabot";>@​dependabot 
in https://redirect.github.com/apache/maven-assembly-plugin/pull/195";>apache/maven-assembly-plugin#195
   [MASSEMBLY-1022] Unresolved artifacts should be not processed by https://github.com/slawekjaranowski";>@​slawekjaranowski 
in https://redirect.github.com/apache/maven-assembly-plugin/pull/194";>apache/maven-assembly-plugin#194
   
   Full Changelog: https://github.com/apache/maven-assembly-plugin/compare/maven-assembly-plugin-3.7.0...maven-assembly-plugin-3.7.1";>https://github.com/apache/maven-assembly-plugin/compare/maven-assembly-plugin-3.7.0...maven-assembly-plugin-3.7.1
   
   
   
   Commits
   
   https://github.com/apache/maven-assembly-plugin/commit/0afbb3e1252e0cdfb5e4abe3c4b2a108567059a7";>0afbb3e
 [maven-release-plugin] prepare release maven-assembly-plugin-3.7.1
   https://github.com/apache/maven-assembly-plugin/commit/74e858ad40849cc3f8bef462e310336a8c6a0cd5";>74e858a
 [MASSEMBLY-1022] Unresolved artifacts should be not processed
   https://github.com/apache/maven-assembly-plugin/commit/cb5638223ebaf93ff06290a6ebb64c6dac12ebd4";>cb56382
 [MASSEMBLY-1025] Bump org.codehaus.plexus:plexus-archiver from 4.9.1 to 
4.9.2...
   https://github.com/apache/maven-assembly-plugin/commit/86bbed043dbe78f6c32e99c1e433e052b2d78f69";>86bbed0
 [MASSEMBLY-1024] Bump org.apache.commons:commons-compress from 1.25.0 to 
1.26...
   https://github.com/apache/maven-assembly-plugin/commit/bdcc4d0d093de4484820b2f9c4f84b5d0f7eaaa0";>bdcc4d0
 [MASSEMBLY-1023] Bump org.apache.maven.shared:maven-filtering from 3.3.1 to 
3...
   https://github.com/apache/maven-assembly-plugin/commit/74fe92e979db0479ee58db580d0e7295e6113e78";>74fe92e
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/apache/maven-assembly-plugin/compare/maven-assembly-plugin-3.7.0...maven-assembly-plugin-3.7.1";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-assembly-plugin&package-manager=maven&previous-version=3.7.0&new-version=3.7.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this

Re: [VOTE] - Release Apache CXF XJC Utils 4.0.1 and 3.3.3

2024-03-19 Thread Colm O hEigeartaigh
With 5 +1 votes, including at least 3 binding votes, this vote passes.

Colm.

On Fri, Mar 15, 2024 at 7:34 AM Herve Boutemy  wrote:
>
> +1
>
> Reproducible Builds for these releases confirmed
> results available on 
> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/cxf/xjc-utils/README.md
> (README will be updated once the releases will be available on Maven Central)
>
> Regards,
>
> Hervé
>
> On 2024/03/12 13:45:01 Colm O hEigeartaigh wrote:
> > This is a vote to release Apache CXF XJC Utils 4.0.1 and 3.3.3. They
> > both contain a fix for https://issues.apache.org/jira/browse/CXFXJC-44
> > as well as various dependency updates.
> >
> > 4.0.1:
> >
> > Git tag: 
> > https://github.com/apache/cxf-xjc-utils/releases/tag/xjc-utils-4.0.1
> > Artifacts: 
> > https://repository.apache.org/content/repositories/orgapachecxf-1200/
> >
> > 3.3.3:
> >
> > Git tag: 
> > https://github.com/apache/cxf-xjc-utils/releases/tag/xjc-utils-3.3.3
> > Artifacts: 
> > https://repository.apache.org/content/repositories/orgapachecxf-1201/
> >
> > +1 from me.
> >
> > Colm.
> >