[PR] Bump org.apache.maven.resolver:maven-resolver-transport-http from 1.9.7 to 1.9.18 [maven-build-cache-extension]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #123:
URL: https://github.com/apache/maven-build-cache-extension/pull/123

   Bumps org.apache.maven.resolver:maven-resolver-transport-http from 1.9.7 to 
1.9.18.
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.resolver:maven-resolver-transport-http=maven=1.9.7=1.9.18)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven:maven-archiver from 3.6.0 to 3.6.1 [maven-source-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #21:
URL: https://github.com/apache/maven-source-plugin/pull/21

   Bumps 
[org.apache.maven:maven-archiver](https://github.com/apache/maven-archiver) 
from 3.6.0 to 3.6.1.
   
   Release notes
   Sourced from https://github.com/apache/maven-archiver/releases;>org.apache.maven:maven-archiver's
 releases.
   
   3.6.1
   What's Changed
   
   [MSHARED-1179] - Upgrade Parent to 39 by https://github.com/jorsol;>@​jorsol in https://redirect.github.com/apache/maven-archiver/pull/27;>apache/maven-archiver#27
   [MSHARED-1179] Back to 3.6.1-SNAPSHOT by https://github.com/elharo;>@​elharo in https://redirect.github.com/apache/maven-archiver/pull/31;>apache/maven-archiver#31
   Bump plexus-archiver from 1.0-alpha-7 to 3.6.0 in /src/test/resources by 
https://github.com/dependabot;>@​dependabot in https://redirect.github.com/apache/maven-archiver/pull/26;>apache/maven-archiver#26
   Bump plexus-utils from 3.4.2 to 3.5.1 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/apache/maven-archiver/pull/30;>apache/maven-archiver#30
   Bump plexus-io from 3.4.0 to 3.4.1 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/apache/maven-archiver/pull/28;>apache/maven-archiver#28
   Bump junit-jupiter from 5.9.2 to 5.9.3 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/apache/maven-archiver/pull/32;>apache/maven-archiver#32
   [MNG-6829] Replace StringUtils#isEmpty(String)  #isNotEmpty(String) 
by https://github.com/timtebeek;>@​timtebeek in https://redirect.github.com/apache/maven-archiver/pull/34;>apache/maven-archiver#34
   [MSHARED-1251] - Deprecate the JAR Index feature (JDK-8302819) by https://github.com/jorsol;>@​jorsol in https://redirect.github.com/apache/maven-archiver/pull/33;>apache/maven-archiver#33
   [MSHARED-1291] Bump org.junit:junit-bom from 5.9.3 to 5.10.0 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/apache/maven-archiver/pull/37;>apache/maven-archiver#37
   [MSHARED-1292] Bump org.codehaus.plexus:plexus-archiver from 4.4.0 to 
4.8.0 by https://github.com/dependabot;>@​dependabot 
in https://redirect.github.com/apache/maven-archiver/pull/39;>apache/maven-archiver#39
   [MSHARED-1292] Bump org.codehaus.plexus:plexus-archiver from 3.6.0 to 
4.8.0 in /src/test/resources by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/apache/maven-archiver/pull/38;>apache/maven-archiver#38
   [MSHARED-1294] Upgrade Parent to 40 by https://github.com/slawekjaranowski;>@​slawekjaranowski 
in https://redirect.github.com/apache/maven-archiver/pull/40;>apache/maven-archiver#40
   [MSHARED-1293] Refresh download page by https://github.com/slawekjaranowski;>@​slawekjaranowski 
in https://redirect.github.com/apache/maven-archiver/pull/41;>apache/maven-archiver#41
   [MSHARED-1297] Prefer JDK features over plexus-utils, plexus-io by https://github.com/slawekjaranowski;>@​slawekjaranowski 
in https://redirect.github.com/apache/maven-archiver/pull/42;>apache/maven-archiver#42
   
   New Contributors
   
   https://github.com/dependabot;>@​dependabot 
made their first contribution in https://redirect.github.com/apache/maven-archiver/pull/26;>apache/maven-archiver#26
   https://github.com/timtebeek;>@​timtebeek made 
their first contribution in https://redirect.github.com/apache/maven-archiver/pull/34;>apache/maven-archiver#34
   https://github.com/slawekjaranowski;>@​slawekjaranowski 
made their first contribution in https://redirect.github.com/apache/maven-archiver/pull/40;>apache/maven-archiver#40
   
   Full Changelog: https://github.com/apache/maven-archiver/compare/maven-archiver-3.6.0...maven-archiver-3.6.1;>https://github.com/apache/maven-archiver/compare/maven-archiver-3.6.0...maven-archiver-3.6.1
   
   
   
   Commits
   
   https://github.com/apache/maven-archiver/commit/1602aa4d149d318f992433ca9f0a660ff55e95c5;>1602aa4
 [maven-release-plugin] prepare release maven-archiver-3.6.1
   https://github.com/apache/maven-archiver/commit/482ec069255bb49e7ccaa1c50eb9ea5ed38c6cb4;>482ec06
 [MSHARED-1297] Prefer JDK features over plexus-utils, plexus-io
   https://github.com/apache/maven-archiver/commit/87edd76eab050c75ac3bb7619678b32a5503e2e8;>87edd76
 [MSHARED-1293] Refresh download page
   https://github.com/apache/maven-archiver/commit/b459dae7964ddabff60e2d166fef9828ca745b5a;>b459dae
 [MSHARED-1294] Upgrade Parent to 40
   https://github.com/apache/maven-archiver/commit/c8a2edb7387a22f3b92a1f9d1103e3e679bdcdf6;>c8a2edb
 [MSHARED-1292] Bump org.codehaus.plexus:plexus-archiver in 
/src/test/resource...
   https://github.com/apache/maven-archiver/commit/0fcec499b3d484f7e493972d60908fed9e4a800b;>0fcec49
 [MSHARED-1292] Bump org.codehaus.plexus:plexus-archiver from 4.4.0 to 4.8.0 
(...
   https://github.com/apache/maven-archiver/commit/6528ddb5c047d4e883b18f894d46f9ccc0f381e2;>6528ddb
 [MSHARED-1291] Bump org.junit:junit-bom from 5.9.3 to 5.10.0 

Re: [PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0 [maven-source-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] commented on PR #14:
URL: 
https://github.com/apache/maven-source-plugin/pull/14#issuecomment-1868774256

   Superseded by #20.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0 [maven-source-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] closed pull request #14: Bump 
org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0
URL: https://github.com/apache/maven-source-plugin/pull/14


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 [maven-source-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #20:
URL: https://github.com/apache/maven-source-plugin/pull/20

   Bumps 
[org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
 from 4.8.0 to 4.9.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases;>org.codehaus.plexus:plexus-archiver's
 releases.
   
   4.9.1
   
    New features and improvements
   
   https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in Abstrac… (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/312;>#312)
 https://github.com/redzi;>@​redzi
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/316;>#316)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/314;>#314)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.15.0 to 2.15.1 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/313;>#313)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/309;>#309)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/315;>#315)
 https://github.com/slachiewicz;>@​slachiewicz
   
   4.9.0
   
    New features and improvements
   
   Allow copy all files without timestamp checking by DirectoryArchiver (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/304;>#304)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   
    Dependency updates
   
   Bump com.github.luben:zstd-jni from 1.5.5-6 to 1.5.5-10 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/307;>#307)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.14.0 to 2.15.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/303;>#303)
 https://github.com/dependabot;>@​dependabot
   Bump org.codehaus.plexus:plexus from 14 to 15 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/302;>#302)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-5 to 1.5.5-6 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/301;>#301)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.13.0 to 2.14.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/300;>#300)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.23.0 to 1.24.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/298;>#298)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Update info about release notes in README, ReleaseNotes (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/308;>#308)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/fb02b02a78d4adecef4e32f304f9f6d3ab7b9861;>fb02b02
 [maven-release-plugin] prepare release plexus-archiver-4.9.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/d953f322ccbb38479b04abbde3645f77eafd489a;>d953f32
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-archiver/commit/54c42c20e531b9e642a3c70c215814b5a4d61a3b;>54c42c2
 Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11
   https://github.com/codehaus-plexus/plexus-archiver/commit/cb4b6668a8dde2d04aaac37e8265b3e009cb2ca9;>cb4b666
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-archiver/commit/20cf65421aacbb133a9fe228dbe9fc06000def7a;>20cf654
 Bump commons-io:commons-io from 2.15.0 to 2.15.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/fca25e56461394a6d34af8e018ec0348885cbad8;>fca25e5
 https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in AbstractFileSet.
   https://github.com/codehaus-plexus/plexus-archiver/commit/9c0e021ab9d58dd8b05a74a5ba6c82f8070c8d93;>9c0e021
 Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/b353ae3240cfda1c23ec8c1d80e719af40698b66;>b353ae3
 [maven-release-plugin] prepare for next development iteration
   https://github.com/codehaus-plexus/plexus-archiver/commit/b31477fb321484a115fcfa44d0f6b6cb0a902d8c;>b31477f
 [maven-release-plugin] prepare release plexus-archiver-4.9.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/87f62d5ffed709dc0d429d643b2f064dc84ee2ad;>87f62d5
 Update info about release notes in README, ReleaseNotes
   

[PR] Bump org.codehaus.plexus:plexus-interpolation from 1.26 to 1.27 [maven-resolver-ant-tasks]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #34:
URL: https://github.com/apache/maven-resolver-ant-tasks/pull/34

   Bumps 
[org.codehaus.plexus:plexus-interpolation](https://github.com/codehaus-plexus/plexus-interpolation)
 from 1.26 to 1.27.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-interpolation/releases;>org.codehaus.plexus:plexus-interpolation's
 releases.
   
   1.27.0
   
    New features and improvements
   
   Added support for PPC64LE (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/25;>#25)
 https://github.com/ezeeyahoo;>@​ezeeyahoo
   Add dependabot and release drafter configuration (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/26;>#26)
 https://github.com/olamy;>@​olamy
   Move to Junit5 (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/64;>#64)
 https://github.com/slachiewicz;>@​slachiewicz
   
    Dependency updates
   
   Bump plexus from 7 to 16
   Bump maven-bundle-plugin from 3.0.1 to 5.1.9
   
    Build
   
   use shared gh action (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/57;>#57)
 https://github.com/olamy;>@​olamy
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/70;>#70)
 https://github.com/slachiewicz;>@​slachiewicz
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-interpolation/commit/f44266e74556c30fddcae4b20ee477e7e64a5204;>f44266e
 [maven-release-plugin] prepare release plexus-interpolation-1.27
   https://github.com/codehaus-plexus/plexus-interpolation/commit/10d6389ad22ac8db8ee7279407d10d64295dc9ec;>10d6389
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-interpolation/commit/88f5a941f5b2c6ce5c60ba7b7d2c93a725206807;>88f5a94
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-interpolation/commit/e980e6679d28afc3d0ccc067fb855ab1270ea97f;>e980e66
 Bump org.codehaus.plexus:plexus from 14 to 15
   https://github.com/codehaus-plexus/plexus-interpolation/commit/acb47031ead222f1bebb983d289907f97cbbe3c6;>acb4703
 Reformat code
   https://github.com/codehaus-plexus/plexus-interpolation/commit/df44d880bda41f5d428835597dd47c0b1f3b2ba5;>df44d88
 Bump org.codehaus.plexus:plexus from 11 to 14
   https://github.com/codehaus-plexus/plexus-interpolation/commit/22b9c9b64132deb3b002f3f68d6b2d9034fc0d0e;>22b9c9b
 Bump maven-bundle-plugin from 5.1.8 to 5.1.9
   https://github.com/codehaus-plexus/plexus-interpolation/commit/dad9f189b5c8782be76afaaa12b9c5a263cdcb95;>dad9f18
 Move to Junit5
   https://github.com/codehaus-plexus/plexus-interpolation/commit/f541b1aa9eda8a977967364e0b34b88d7a60dc73;>f541b1a
 Bump plexus from 10 to 11
   https://github.com/codehaus-plexus/plexus-interpolation/commit/a2b39e67f33060f50e6d68349e5577bc114eafed;>a2b39e6
 Bump maven-bundle-plugin from 5.1.7 to 5.1.8
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-interpolation/compare/plexus-interpolation-1.26...plexus-interpolation-1.27;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-interpolation=maven=1.26=1.27)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this 

[PR] Bump org.codehaus.plexus:plexus-component-metadata from 2.1.1 to 2.2.0 [maven-checkstyle-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #131:
URL: https://github.com/apache/maven-checkstyle-plugin/pull/131

   Bumps 
[org.codehaus.plexus:plexus-component-metadata](https://github.com/codehaus-plexus/plexus-containers)
 from 2.1.1 to 2.2.0.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-containers/releases;>org.codehaus.plexus:plexus-component-metadata's
 releases.
   
   2.2.0
   
   
   improve documentation to switch to Sisu (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/121;>#121)
 https://github.com/hboutemy;>@​hboutemy
   pom clean after parent upgrade (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/120;>#120)
 https://github.com/hboutemy;>@​hboutemy
   Improve plexus-component metadata - remove dependency to 
plexus-container-default (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/109;>#109)
 https://github.com/slachiewicz;>@​slachiewicz
   Add deprecation information to Plexus components (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/108;>#108)
 https://github.com/slachiewicz;>@​slachiewicz
   Require Java 8 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/107;>#107)
 https://github.com/slachiewicz;>@​slachiewicz
   Drop plexus-container-default artefact (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/135;>#135)
 https://github.com/slachiewicz;>@​slachiewicz
   Require Maven 3.6.3+ (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/133;>#133)
 https://github.com/slachiewicz;>@​slachiewicz
   Switch to JUnit5 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/134;>#134)
 https://github.com/slachiewicz;>@​slachiewicz
   Bump org.eclipse.sisu.plexus from 0.3.0.M1 to 0.9.0.M2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/113;>#113)
 https://github.com/dependabot;>@​dependabot
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus-testing from 1.2.0 to 1.3.0 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/139;>#139)
 https://github.com/dependabot;>@​dependabot
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/138;>#138)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.xbean:xbean-reflect from 4.23 to 4.24 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/131;>#131)
 https://github.com/dependabot;>@​dependabot
   Reorg dependencyManagement to subprojects. Prepare to drop 
plexus-container-default (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/132;>#132)
 https://github.com/slachiewicz;>@​slachiewicz
   Bump org.ow2.asm:asm from 9.5 to 9.6 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/129;>#129)
 https://github.com/dependabot;>@​dependabot
   Bump maven-invoker-plugin from 3.5.1 to 3.6.0 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/125;>#125)
 https://github.com/dependabot;>@​dependabot
   Bump xbean-reflect from 4.22 to 4.23 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/116;>#116)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-annotations from 3.8.1 to 3.8.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/104;>#104)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.8.1 to 3.8.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/105;>#105)
 https://github.com/dependabot;>@​dependabot
   Bump maven-project-info-reports-plugin from 3.4.2 to 3.4.3 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/102;>#102)
 https://github.com/dependabot;>@​dependabot
   Bump asm from 9.4 to 9.5 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/99;>#99)
 https://github.com/dependabot;>@​dependabot
   Bump plexus-utils from 3.5.0 to 3.5.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/97;>#97)
 https://github.com/dependabot;>@​dependabot
   Bump checkstyle from 9.2 to 9.3 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/96;>#96)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.7.1 to 3.8.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/92;>#92)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-annotations from 3.7.1 to 3.8.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/93;>#93)
 https://github.com/dependabot;>@​dependabot
   Bump asm from 9.3 to 9.4 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/88;>#88)
 https://github.com/dependabot;>@​dependabot
   Bump maven-project-info-reports-plugin from 3.4.1 to 3.4.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/85;>#85)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.7.0 to 3.7.1 

[PR] Bump org.codehaus.plexus:plexus-component-annotations from 2.1.1 to 2.2.0 [maven-checkstyle-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #130:
URL: https://github.com/apache/maven-checkstyle-plugin/pull/130

   Bumps 
[org.codehaus.plexus:plexus-component-annotations](https://github.com/codehaus-plexus/plexus-containers)
 from 2.1.1 to 2.2.0.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-containers/releases;>org.codehaus.plexus:plexus-component-annotations's
 releases.
   
   2.2.0
   
   
   improve documentation to switch to Sisu (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/121;>#121)
 https://github.com/hboutemy;>@​hboutemy
   pom clean after parent upgrade (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/120;>#120)
 https://github.com/hboutemy;>@​hboutemy
   Improve plexus-component metadata - remove dependency to 
plexus-container-default (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/109;>#109)
 https://github.com/slachiewicz;>@​slachiewicz
   Add deprecation information to Plexus components (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/108;>#108)
 https://github.com/slachiewicz;>@​slachiewicz
   Require Java 8 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/107;>#107)
 https://github.com/slachiewicz;>@​slachiewicz
   Drop plexus-container-default artefact (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/135;>#135)
 https://github.com/slachiewicz;>@​slachiewicz
   Require Maven 3.6.3+ (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/133;>#133)
 https://github.com/slachiewicz;>@​slachiewicz
   Switch to JUnit5 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/134;>#134)
 https://github.com/slachiewicz;>@​slachiewicz
   Bump org.eclipse.sisu.plexus from 0.3.0.M1 to 0.9.0.M2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/113;>#113)
 https://github.com/dependabot;>@​dependabot
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus-testing from 1.2.0 to 1.3.0 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/139;>#139)
 https://github.com/dependabot;>@​dependabot
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/138;>#138)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.xbean:xbean-reflect from 4.23 to 4.24 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/131;>#131)
 https://github.com/dependabot;>@​dependabot
   Reorg dependencyManagement to subprojects. Prepare to drop 
plexus-container-default (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/132;>#132)
 https://github.com/slachiewicz;>@​slachiewicz
   Bump org.ow2.asm:asm from 9.5 to 9.6 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/129;>#129)
 https://github.com/dependabot;>@​dependabot
   Bump maven-invoker-plugin from 3.5.1 to 3.6.0 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/125;>#125)
 https://github.com/dependabot;>@​dependabot
   Bump xbean-reflect from 4.22 to 4.23 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/116;>#116)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-annotations from 3.8.1 to 3.8.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/104;>#104)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.8.1 to 3.8.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/105;>#105)
 https://github.com/dependabot;>@​dependabot
   Bump maven-project-info-reports-plugin from 3.4.2 to 3.4.3 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/102;>#102)
 https://github.com/dependabot;>@​dependabot
   Bump asm from 9.4 to 9.5 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/99;>#99)
 https://github.com/dependabot;>@​dependabot
   Bump plexus-utils from 3.5.0 to 3.5.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/97;>#97)
 https://github.com/dependabot;>@​dependabot
   Bump checkstyle from 9.2 to 9.3 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/96;>#96)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.7.1 to 3.8.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/92;>#92)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-annotations from 3.7.1 to 3.8.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/93;>#93)
 https://github.com/dependabot;>@​dependabot
   Bump asm from 9.3 to 9.4 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/88;>#88)
 https://github.com/dependabot;>@​dependabot
   Bump maven-project-info-reports-plugin from 3.4.1 to 3.4.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/85;>#85)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.7.0 to 3.7.1 

[PR] Bump org.codehaus.plexus:plexus-resources from 1.1.0 to 1.3.0 [maven-checkstyle-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #129:
URL: https://github.com/apache/maven-checkstyle-plugin/pull/129

   Bumps 
[org.codehaus.plexus:plexus-resources](https://github.com/codehaus-plexus/plexus-resources)
 from 1.1.0 to 1.3.0.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-resources/releases;>org.codehaus.plexus:plexus-resources's
 releases.
   
   1.3.0
   
   
   Restore public constructor to DefaultResourceManager (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/69;>#69)
 https://github.com/slachiewicz;>@​slachiewicz
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.3.0 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/89;>#89)
 https://github.com/dependabot;>@​dependabot
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/88;>#88)
 https://github.com/dependabot;>@​dependabot
   Update parent pom to 15 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/86;>#86)
 https://github.com/slachiewicz;>@​slachiewicz
   Bump mockito.version from 4.8.1 to 4.11.0 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/73;>#73)
 https://github.com/dependabot;>@​dependabot
   Bump slf4j-mock from 2.2.0 to 2.3.0 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/67;>#67)
 https://github.com/dependabot;>@​dependabot
   Bump slf4j-api from 1.7.33 to 1.7.36 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/44;>#44)
 https://github.com/dependabot;>@​dependabot
   Bump slf4j-mock from 2.1.1 to 2.2.0 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/51;>#51)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/83;>#83)
 https://github.com/slachiewicz;>@​slachiewicz
   Create LICENSE (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/70;>#70)
 https://github.com/slachiewicz;>@​slachiewicz
   
   1.2.0
   What's Changed
   
   Verify project build by GitHub Action by https://github.com/slawekjaranowski;>@​slawekjaranowski 
in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/3;>codehaus-plexus/plexus-resources#3
   fix GitHub workflow location by https://github.com/slawekjaranowski;>@​slawekjaranowski 
in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/6;>codehaus-plexus/plexus-resources#6
   Ignore mac os .DS_Store by https://github.com/slawekjaranowski;>@​slawekjaranowski 
in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/11;>codehaus-plexus/plexus-resources#11
   Bump findbugs-maven-plugin from 3.0.4 to 3.0.5 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/14;>codehaus-plexus/plexus-resources#14
   Bump slf4j-mock from 2.1.0 to 2.1.1 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/15;>codehaus-plexus/plexus-resources#15
   Bump slf4j-api from 1.7.30 to 1.7.32 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/16;>codehaus-plexus/plexus-resources#16
   Bump mockito.version from 3.10.0 to 3.11.2 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/17;>codehaus-plexus/plexus-resources#17
   Update codebase to current Java level by https://github.com/cstamas;>@​cstamas in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/13;>codehaus-plexus/plexus-resources#13
   Replace CI badge from Travis to GitHub by https://github.com/slawekjaranowski;>@​slawekjaranowski 
in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/20;>codehaus-plexus/plexus-resources#20
   Bump junit-jupiter from 5.8.0-M1 to 5.8.0-RC1 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/21;>codehaus-plexus/plexus-resources#21
   Bump mockito.version from 3.11.2 to 3.12.1 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/23;>codehaus-plexus/plexus-resources#23
   Bump mockito.version from 3.12.1 to 3.12.4 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/25;>codehaus-plexus/plexus-resources#25
   Bump junit-jupiter from 5.8.0-RC1 to 5.8.0 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/26;>codehaus-plexus/plexus-resources#26
   Bump plexus-testing from 1.0.0 to 1.1.0 by https://github.com/dependabot;>@​dependabot in https://redirect.github.com/codehaus-plexus/plexus-resources/pull/29;>codehaus-plexus/plexus-resources#29
   Bump junit-jupiter from 5.8.0 to 5.8.1 by 

[PR] Bump org.codehaus.plexus:plexus-io from 3.4.1 to 3.4.2 [maven-assembly-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #178:
URL: https://github.com/apache/maven-assembly-plugin/pull/178

   Bumps 
[org.codehaus.plexus:plexus-io](https://github.com/codehaus-plexus/plexus-io) 
from 3.4.1 to 3.4.2.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-io/releases;>org.codehaus.plexus:plexus-io's
 releases.
   
   plexus-io-3.4.2
   
    Dependency updates
   
   Update sisu.inject to 0.9.0.M2
   Bump guice from 5.1.0 to 6.0.0
   Bump commons-io:commons-io from 2.11.0 to 2.15.1
   Bump plexus-utils from 3.5.0 to 4.0.0
   
    Maintenance
   
   JUnit4 to 5 migration (https://redirect.github.com/codehaus-plexus/plexus-io/pull/111;>#111) 
https://github.com/slachiewicz;>@​slachiewicz
   Code cleanup (https://redirect.github.com/codehaus-plexus/plexus-io/pull/113;>#113) 
https://github.com/slachiewicz;>@​slachiewicz
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-io/pull/122;>#122) 
https://github.com/slachiewicz;>@​slachiewicz
   Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.3.0
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-io/commit/f4a7838b46e24814b1bad5a069d46627056c33f1;>f4a7838
 [maven-release-plugin] prepare release plexus-io-3.4.2
   https://github.com/codehaus-plexus/plexus-io/commit/74297f1cf6df09faa7257563ec628c447390e7aa;>74297f1
 Update sisu.inject to 0.9.0.M2
   https://github.com/codehaus-plexus/plexus-io/commit/ea0c6737fc80efc383a3798ea0a2a2b349f13ad0;>ea0c673
 Bump org.codehaus.plexus:plexus-testing from 1.2.0 to 1.3.0
   https://github.com/codehaus-plexus/plexus-io/commit/1fe3b07aad8cba086b090d6a4f36109c20eb6ff8;>1fe3b07
 Bump commons-io:commons-io from 2.15.0 to 2.15.1
   https://github.com/codehaus-plexus/plexus-io/commit/5f3c175e1fecbda9157026a1aceff594293d755f;>5f3c175
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-io/commit/8524fcab4d95fb1ef748ac43825c2fadef80e746;>8524fca
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-io/commit/594c26937a68c326270a7fc44aefd635bd008840;>594c269
 Bump commons-io:commons-io from 2.14.0 to 2.15.0
   https://github.com/codehaus-plexus/plexus-io/commit/a753eeb075dac8a424236881832e24b927f0ee00;>a753eeb
 Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.2.0
   https://github.com/codehaus-plexus/plexus-io/commit/11f8db4e9cde36fec65ca1bcb7576864aac5be5b;>11f8db4
 Correct sisu.inject dependency version
   https://github.com/codehaus-plexus/plexus-io/commit/5ad18c992cc73e962bc41d015efb2000603a9e12;>5ad18c9
 Bump org.codehaus.plexus:plexus from 14 to 15
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-io/compare/plexus-io-3.4.1...plexus-io-3.4.2;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-io=maven=3.4.1=3.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about 

[PR] Bump org.codehaus.plexus:plexus-archiver from 4.9.0 to 4.9.1 [maven-assembly-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #177:
URL: https://github.com/apache/maven-assembly-plugin/pull/177

   Bumps 
[org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
 from 4.9.0 to 4.9.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases;>org.codehaus.plexus:plexus-archiver's
 releases.
   
   4.9.1
   
    New features and improvements
   
   https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in Abstrac… (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/312;>#312)
 https://github.com/redzi;>@​redzi
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/316;>#316)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/314;>#314)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.15.0 to 2.15.1 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/313;>#313)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/309;>#309)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/315;>#315)
 https://github.com/slachiewicz;>@​slachiewicz
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/fb02b02a78d4adecef4e32f304f9f6d3ab7b9861;>fb02b02
 [maven-release-plugin] prepare release plexus-archiver-4.9.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/d953f322ccbb38479b04abbde3645f77eafd489a;>d953f32
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-archiver/commit/54c42c20e531b9e642a3c70c215814b5a4d61a3b;>54c42c2
 Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11
   https://github.com/codehaus-plexus/plexus-archiver/commit/cb4b6668a8dde2d04aaac37e8265b3e009cb2ca9;>cb4b666
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-archiver/commit/20cf65421aacbb133a9fe228dbe9fc06000def7a;>20cf654
 Bump commons-io:commons-io from 2.15.0 to 2.15.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/fca25e56461394a6d34af8e018ec0348885cbad8;>fca25e5
 https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in AbstractFileSet.
   https://github.com/codehaus-plexus/plexus-archiver/commit/9c0e021ab9d58dd8b05a74a5ba6c82f8070c8d93;>9c0e021
 Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/b353ae3240cfda1c23ec8c1d80e719af40698b66;>b353ae3
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.9.0...plexus-archiver-4.9.1;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver=maven=4.9.0=4.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it 

[PR] Bump org.codehaus.plexus:plexus-interpolation from 1.26 to 1.27 [maven-assembly-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #176:
URL: https://github.com/apache/maven-assembly-plugin/pull/176

   Bumps 
[org.codehaus.plexus:plexus-interpolation](https://github.com/codehaus-plexus/plexus-interpolation)
 from 1.26 to 1.27.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-interpolation/releases;>org.codehaus.plexus:plexus-interpolation's
 releases.
   
   1.27.0
   
    New features and improvements
   
   Added support for PPC64LE (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/25;>#25)
 https://github.com/ezeeyahoo;>@​ezeeyahoo
   Add dependabot and release drafter configuration (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/26;>#26)
 https://github.com/olamy;>@​olamy
   Move to Junit5 (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/64;>#64)
 https://github.com/slachiewicz;>@​slachiewicz
   
    Dependency updates
   
   Bump plexus from 7 to 16
   Bump maven-bundle-plugin from 3.0.1 to 5.1.9
   
    Build
   
   use shared gh action (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/57;>#57)
 https://github.com/olamy;>@​olamy
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/70;>#70)
 https://github.com/slachiewicz;>@​slachiewicz
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-interpolation/commit/f44266e74556c30fddcae4b20ee477e7e64a5204;>f44266e
 [maven-release-plugin] prepare release plexus-interpolation-1.27
   https://github.com/codehaus-plexus/plexus-interpolation/commit/10d6389ad22ac8db8ee7279407d10d64295dc9ec;>10d6389
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-interpolation/commit/88f5a941f5b2c6ce5c60ba7b7d2c93a725206807;>88f5a94
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-interpolation/commit/e980e6679d28afc3d0ccc067fb855ab1270ea97f;>e980e66
 Bump org.codehaus.plexus:plexus from 14 to 15
   https://github.com/codehaus-plexus/plexus-interpolation/commit/acb47031ead222f1bebb983d289907f97cbbe3c6;>acb4703
 Reformat code
   https://github.com/codehaus-plexus/plexus-interpolation/commit/df44d880bda41f5d428835597dd47c0b1f3b2ba5;>df44d88
 Bump org.codehaus.plexus:plexus from 11 to 14
   https://github.com/codehaus-plexus/plexus-interpolation/commit/22b9c9b64132deb3b002f3f68d6b2d9034fc0d0e;>22b9c9b
 Bump maven-bundle-plugin from 5.1.8 to 5.1.9
   https://github.com/codehaus-plexus/plexus-interpolation/commit/dad9f189b5c8782be76afaaa12b9c5a263cdcb95;>dad9f18
 Move to Junit5
   https://github.com/codehaus-plexus/plexus-interpolation/commit/f541b1aa9eda8a977967364e0b34b88d7a60dc73;>f541b1a
 Bump plexus from 10 to 11
   https://github.com/codehaus-plexus/plexus-interpolation/commit/a2b39e67f33060f50e6d68349e5577bc114eafed;>a2b39e6
 Bump maven-bundle-plugin from 5.1.7 to 5.1.8
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-interpolation/compare/plexus-interpolation-1.26...plexus-interpolation-1.27;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-interpolation=maven=1.26=1.27)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this 

[PR] Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 4.0.3 [maven-gpg-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #59:
URL: https://github.com/apache/maven-gpg-plugin/pull/59

   Bumps 
[org.codehaus.plexus:plexus-xml](https://github.com/codehaus-plexus/plexus-xml) 
from 3.0.0 to 4.0.3.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-xml/releases;>org.codehaus.plexus:plexus-xml's
 releases.
   
   4.0.1
   
   
   Fix detection of invalid spaces in prolog (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/20;>#20) 
https://github.com/gnodet;>@​gnodet
   pom.mxl and site.xml cleanup (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/19;>#19) 
https://github.com/hboutemy;>@​hboutemy
   
   Plexus XML 4.0.2
   What's Changed
   
   Cleanup after parent pom upgrade by https://github.com/slachiewicz;>@​slachiewicz in https://redirect.github.com/codehaus-plexus/plexus-xml/pull/22;>codehaus-plexus/plexus-xml#22
   Upgrade to 4.0.0-alpha-7 and exclude dependency to sisu (fixes https://redirect.github.com/codehaus-plexus/plexus-xml/issues/17;>#17)
 by https://github.com/gnodet;>@​gnodet in https://redirect.github.com/codehaus-plexus/plexus-xml/pull/23;>codehaus-plexus/plexus-xml#23
   
   New Contributors
   
   https://github.com/slachiewicz;>@​slachiewicz 
made their first contribution in https://redirect.github.com/codehaus-plexus/plexus-xml/pull/22;>codehaus-plexus/plexus-xml#22
   
   Full Changelog: https://github.com/codehaus-plexus/plexus-xml/compare/plexus-xml-4.0.1...plexus-xml-4.0.2;>https://github.com/codehaus-plexus/plexus-xml/compare/plexus-xml-4.0.1...plexus-xml-4.0.2
   4.0.0
   
   
   Use spotless (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/8;>#8) https://github.com/gnodet;>@​gnodet
   Fix site generation (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/15;>#15) 
https://github.com/gnodet;>@​gnodet
   Switch build ci workflow to master branch (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/14;>#14) 
https://github.com/gnodet;>@​gnodet
   Fix SCM urls (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/13;>#13) 
https://github.com/gnodet;>@​gnodet
   MXParser tokenization fails when PI is before first tag (fixes https://redirect.github.com/codehaus-plexus/plexus-xml/issues/7;>#7) 
(https://redirect.github.com/codehaus-plexus/plexus-xml/pull/12;>#12) 
https://github.com/gnodet;>@​gnodet
   Deprecate Xpp3DomUtils (fixes https://redirect.github.com/codehaus-plexus/plexus-xml/issues/6;>#6) 
(https://redirect.github.com/codehaus-plexus/plexus-xml/pull/9;>#9) https://github.com/gnodet;>@​gnodet
   Use a ArrayDeque (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/5;>#5) https://github.com/gnodet;>@​gnodet
   Upgrade plugins and clean build warnings (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/4;>#4) https://github.com/gnodet;>@​gnodet
   Switch to junit 5 (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/2;>#2) https://github.com/gnodet;>@​gnodet
   Fix parsing an UTF-8 file without BOM and ISO-8859-1 encoding (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/1;>#1) https://github.com/gnodet;>@​gnodet
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-xml/commit/784ff955e0944bea8b3a15254ad7ce06ae72dc20;>784ff95
 [maven-release-plugin] prepare release plexus-xml-4.0.3
   https://github.com/codehaus-plexus/plexus-xml/commit/e6a6427dd4c1e0b40832ea027f5c102cd739ef85;>e6a6427
 Upgrade to Maven 4.0.0-alpha-9 (https://redirect.github.com/codehaus-plexus/plexus-xml/issues/27;>#27)
   https://github.com/codehaus-plexus/plexus-xml/commit/aa82ed33a2e8c178fcd2a2106f57023d6947d84e;>aa82ed3
 Update dependencies (https://redirect.github.com/codehaus-plexus/plexus-xml/issues/26;>#26)
   https://github.com/codehaus-plexus/plexus-xml/commit/7bfeb09596b87f4a28add4699bbd663fe6dcbd6e;>7bfeb09
 clarify Maven 4-specific
   https://github.com/codehaus-plexus/plexus-xml/commit/07f63919296984b2c5f5d30a433411c0715b2e9e;>07f6391
 explain 3 vs 4
   https://github.com/codehaus-plexus/plexus-xml/commit/bcf34dcd790955f6381efe442f2d24dbe2b8170e;>bcf34dc
 describe plexus-xml update to maven-xml-impl
   https://github.com/codehaus-plexus/plexus-xml/commit/72c06a0a2d0793a79b1ea6b68eb453cc1ee9c867;>72c06a0
 [maven-release-plugin] prepare for next development iteration
   https://github.com/codehaus-plexus/plexus-xml/commit/944197c74386b199857a003160d840fb5593ac29;>944197c
 [maven-release-plugin] prepare release plexus-xml-4.0.2
   https://github.com/codehaus-plexus/plexus-xml/commit/c3d99b433a272d8eb1cc7c799410799e8c16ace3;>c3d99b4
 Upgrade to 4.0.0-alpha-7 and exclude dependency to sisu (fixes https://redirect.github.com/codehaus-plexus/plexus-xml/issues/17;>#17)
 (https://redirect.github.com/codehaus-plexus/plexus-xml/issues/23;>#23)
   https://github.com/codehaus-plexus/plexus-xml/commit/a83cefa086c9a5bb8b6674a409016f378b19891e;>a83cefa
 Cleanup after parent pom upgrade
   Additional commits viewable in 

[PR] Bump org.codehaus.plexus:plexus-archiver from 4.9.0 to 4.9.1 [maven-archetype]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #176:
URL: https://github.com/apache/maven-archetype/pull/176

   Bumps 
[org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
 from 4.9.0 to 4.9.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases;>org.codehaus.plexus:plexus-archiver's
 releases.
   
   4.9.1
   
    New features and improvements
   
   https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in Abstrac… (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/312;>#312)
 https://github.com/redzi;>@​redzi
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/316;>#316)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/314;>#314)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.15.0 to 2.15.1 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/313;>#313)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/309;>#309)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/315;>#315)
 https://github.com/slachiewicz;>@​slachiewicz
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/fb02b02a78d4adecef4e32f304f9f6d3ab7b9861;>fb02b02
 [maven-release-plugin] prepare release plexus-archiver-4.9.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/d953f322ccbb38479b04abbde3645f77eafd489a;>d953f32
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-archiver/commit/54c42c20e531b9e642a3c70c215814b5a4d61a3b;>54c42c2
 Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11
   https://github.com/codehaus-plexus/plexus-archiver/commit/cb4b6668a8dde2d04aaac37e8265b3e009cb2ca9;>cb4b666
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-archiver/commit/20cf65421aacbb133a9fe228dbe9fc06000def7a;>20cf654
 Bump commons-io:commons-io from 2.15.0 to 2.15.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/fca25e56461394a6d34af8e018ec0348885cbad8;>fca25e5
 https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in AbstractFileSet.
   https://github.com/codehaus-plexus/plexus-archiver/commit/9c0e021ab9d58dd8b05a74a5ba6c82f8070c8d93;>9c0e021
 Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/b353ae3240cfda1c23ec8c1d80e719af40698b66;>b353ae3
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.9.0...plexus-archiver-4.9.1;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver=maven=4.9.0=4.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   

[PR] Bump com.ibm.icu:icu4j from 70.1 to 74.2 [maven-archetype]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #175:
URL: https://github.com/apache/maven-archetype/pull/175

   Bumps [com.ibm.icu:icu4j](https://github.com/unicode-org/icu) from 70.1 to 
74.2.
   
   Release notes
   Sourced from https://github.com/unicode-org/icu/releases;>com.ibm.icu:icu4j's 
releases.
   
   ICU 74.2 updates to https://cldr.unicode.org/index/downloads/cldr-44#h.nvqx283jwsx;>CLDR 
44.1 locale data. These are maintenance releases for ICU 74 and CLDR 44, 
with limited sets of bug fixes and no API or structural changes.
   
   The CLDR bug fix relevant for ICU is for some formatting patterns that 
erroneously had two adjacent space characters. These are coalesced into one. 
(https://unicode-org.atlassian.net/browse/CLDR-17233;>CLDR-17233)
   Important: DateFormat.getInstanceForSkeleton() and the 
DateTimePatternGenerator sometimes used the wrong patterns because they failed 
to use/inherit certain data (https://unicode-org.atlassian.net/browse/ICU-22575;>ICU-22575 — CLDR 
44 had removed some redundant data that ICU relied on)
   
   For details, please see https://icu.unicode.org/download/74;>https://icu.unicode.org/download/74.
   ICU 74.1
   Unicode® ICU 74 updates to http://blog.unicode.org/2023/09/announcing-unicode-standard-version-151.html;>Unicode
 15.1, and to https://cldr.unicode.org/index/downloads/cldr-44;>CLDR 44 locale data 
with various additions and corrections.
   ICU 74 and CLDR 44 are major releases, including a new version of Unicode 
and major locale data improvements. They subsume the changes for the https://blog.unicode.org/2023/06/icu-732-cldr-431-released-gb18030.html;>ICU
 73.2 and CLDR 43.1 maintenance releases.
   Unicode 15.1 adds source code security mechanisms, improves line breaking 
for southeast Asian scripts, and adds important CJK unified ideographs.
   CLDR 44 has added or improved data for a number of languages that have 
been newly added to ICU, and has improved measurement unit handling, 
conversion, and formatting.
   ICU 74 implements these improvements, adds new C APIs for locale 
handling, adds a plug-in API for word segmentation, and switches the Java build 
system to Maven.
   For details, please see https://icu.unicode.org/download/74;>https://icu.unicode.org/download/74.
   ICU 74 RC
   We are pleased to announce the release candidate for Unicode® ICU 74. It 
updates to http://blog.unicode.org/2023/09/announcing-unicode-standard-version-151.html;>Unicode
 15.1, and to https://cldr.unicode.org/index/downloads/cldr-44;>CLDR 44 locale data 
with various additions and corrections.
   ICU 74 and CLDR 44 are major releases, including a new version of Unicode 
and major locale data improvements. They subsume the changes for the https://blog.unicode.org/2023/06/icu-732-cldr-431-released-gb18030.html;>ICU
 73.2 and CLDR 43.1 maintenance releases.
   For details, please see https://icu.unicode.org/download/74;>https://icu.unicode.org/download/74.
   Please test this release candidate on your platforms and report bugs and 
regressions by Wednesday, 2023-oct-26, via the https://icu.unicode.org/contacts;>icu-support mailing list, and/or 
please https://icu.unicode.org/bugs;>find/submit error reports.
   Please do not use this release candidate in production.
   The preliminary API reference documents are published on https://unicode-org.github.io/icu-docs/;>unicode-org.github.io/icu-docs/
 – follow the “Dev” links there.
   Note: The prebuilt WinARM64 binaries below should be considered 
alpha/experimental.
   (ICU locale data was generated from the CLDR tag: https://github.com/unicode-org/cldr/releases/tag/release-44-beta2;>https://github.com/unicode-org/cldr/releases/tag/release-44-beta2)
   ICU 73.2
   We are pleased to announce the release of Unicode® ICU 73.2. It updates 
to https://cldr.unicode.org/index/downloads/cldr-43#h.qobmda543waj;>CLDR 
43.1 locale data with various additions and corrections. These are 
maintenance releases for ICU 73 and CLDR 43, with limited sets of bug fixes and 
no API or structural changes.
   There are significant changes for https://ken-lunde.medium.com/the-gb-18030-2022-standard-3d0ebaeb4132;>GB18030-2022
 compliance support:
   
   CLDR extends the support for “short” Chinese sort orders to cover some 
additional, required characters for Level 2. This is carried over into ICU 
collation.
   ICU has a modified character conversion table, mapping some GB18030 
characters to Unicode characters that were encoded after GB18030-2005.
   
   There are also changes for compatibility:
   
   There are optional variants of time formats with AM/PM (only for 
English) using ASCII spaces in CLDR that can also be used in ICU via custom 
data generation. This is intended to help certain implementers transition to 
the improved patterns, which have used a narrow no-break space between the time 
and AM/PM since https://cldr.unicode.org/index/downloads/cldr-42#h.ck7cpcrqqrq0;>CLDR 
42.
   
   For how to generate ICU data with this 

[PR] Bump org.apache.maven.plugins:maven-invoker-plugin from 3.5.1 to 3.6.0 [maven-archetype]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #174:
URL: https://github.com/apache/maven-archetype/pull/174

   Bumps 
[org.apache.maven.plugins:maven-invoker-plugin](https://github.com/apache/maven-invoker-plugin)
 from 3.5.1 to 3.6.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-invoker-plugin/releases;>org.apache.maven.plugins:maven-invoker-plugin's
 releases.
   
   3.6.0
   
   https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317525version=12353076;>Release
 Notes
    New features and improvements
   
   https://issues.apache.org/jira/browse/MINVOKER-345;>[MINVOKER-345] - 
Use ChoiceFormat to selectively render percentage and … (https://redirect.github.com/apache/maven-invoker-plugin/pull/194;>#194)
 https://github.com/michael-o;>@​michael-o
   https://issues.apache.org/jira/browse/MINVOKER-342;>[MINVOKER-342] - 
Use ChoiceFormat to selectively render elapsed time in AbstractInvokerMojo (https://redirect.github.com/apache/maven-invoker-plugin/pull/192;>#192)
 https://github.com/michael-o;>@​michael-o
   https://issues.apache.org/jira/browse/MINVOKER-341;>[MINVOKER-341] - 
Make elapsed time field type consistent with Maven Sur… (https://redirect.github.com/apache/maven-invoker-plugin/pull/191;>#191)
 https://github.com/michael-o;>@​michael-o
   
    Dependency updates
   
   Bump maven-shared-utils from 3.3.4 to 3.4.1 (https://redirect.github.com/apache/maven-invoker-plugin/pull/186;>#186)
 https://github.com/dependabot;>@​dependabot
   https://issues.apache.org/jira/browse/MINVOKER-338;>[MINVOKER-338] - 
Bump groovy-bom from 4.0.10 to 4.0.12 (https://redirect.github.com/apache/maven-invoker-plugin/pull/188;>#188)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   https://issues.apache.org/jira/browse/MNG-6829;>[MNG-6829] 
- Replace StringUtils#isEmpty(String) and #isNotEmpty(String) (https://redirect.github.com/apache/maven-invoker-plugin/pull/189;>#189)
 https://github.com/timtebeek;>@​timtebeek
   https://issues.apache.org/jira/browse/MNG-6825;>[MNG-6825] 
- Replace StringUtils with Commons Lang3 (https://redirect.github.com/apache/maven-invoker-plugin/pull/185;>#185)
 https://github.com/timtebeek;>@​timtebeek
   
   
   
   
   Commits
   
   https://github.com/apache/maven-invoker-plugin/commit/d612eb63f2e5797728c29fec9ce7cef62541a87a;>d612eb6
 [maven-release-plugin] prepare release maven-invoker-plugin-3.6.0
   https://github.com/apache/maven-invoker-plugin/commit/14ffae65a9f0db6cf623da820e7444a9d9cd0501;>14ffae6
 [MINVOKER-347] Document upcoming report file name change
   https://github.com/apache/maven-invoker-plugin/commit/3df7c384accf3489122a7f17995c778755d7ba88;>3df7c38
 [MINVOKER-345] Use ChoiceFormat to selectively render percentage and elapsed 
...
   https://github.com/apache/maven-invoker-plugin/commit/a154e5b13dd7d900829d1d951efff50c41f25738;>a154e5b
 [MINVOKER-344] Move reporting rendering logic into a ReportRenderer class
   https://github.com/apache/maven-invoker-plugin/commit/3dff59f19ab1b810a4a300a7f06ee8d90b605782;>3dff59f
 [MINVOKER-342] Use ChoiceFormat to selectively render elapsed time in 
Abstrac...
   https://github.com/apache/maven-invoker-plugin/commit/26f2dcfcb76b8e23f986954f4670c189f3ead153;>26f2dcf
 [MINVOKER-341] Make elapsed time field type consistent with Maven Surefire
   https://github.com/apache/maven-invoker-plugin/commit/6c0c181e09c45c0d1e02c8ccfa51f503ad7751f7;>6c0c181
 Bump maven-shared-utils from 3.3.4 to 3.4.1
   https://github.com/apache/maven-invoker-plugin/commit/401c229952bce1842756fb72963ae9b343c2517f;>401c229
 [MNG-6829] Replace StringUtils#isEmpty(String) and #isNotEmpty(String) (https://redirect.github.com/apache/maven-invoker-plugin/issues/189;>#189)
   https://github.com/apache/maven-invoker-plugin/commit/4afec1d322e912b188982255de9801dcaf793186;>4afec1d
 [MINVOKER-338] Bump groovy-bom from 4.0.10 to 4.0.12 (https://redirect.github.com/apache/maven-invoker-plugin/issues/188;>#188)
   https://github.com/apache/maven-invoker-plugin/commit/9c3e913e04cbf3b930c537a07ee5946e3251c24e;>9c3e913
 configure notifications
   Additional commits viewable in https://github.com/apache/maven-invoker-plugin/compare/maven-invoker-plugin-3.5.1...maven-invoker-plugin-3.6.0;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-invoker-plugin=maven=3.5.1=3.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - 

[PR] Bump org.codehaus.plexus:plexus-velocity from 1.2 to 2.1.0 [maven-archetype]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #173:
URL: https://github.com/apache/maven-archetype/pull/173

   Bumps 
[org.codehaus.plexus:plexus-velocity](https://github.com/codehaus-plexus/plexus-velocity)
 from 1.2 to 2.1.0.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-velocity/releases;>org.codehaus.plexus:plexus-velocity's
 releases.
   
   2.1.0
   
   
   Update component (https://redirect.github.com/codehaus-plexus/plexus-velocity/pull/67;>#67)
 https://github.com/cstamas;>@​cstamas
   
    Dependency updates
   
   Bump org.junit.jupiter:junit-jupiter from 5.10.0 to 5.10.1 (https://redirect.github.com/codehaus-plexus/plexus-velocity/pull/63;>#63)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Bump parent pom to plexus 16, update version to 2.1.0-SNAPSHOT (https://redirect.github.com/codehaus-plexus/plexus-velocity/pull/68;>#68)
 https://github.com/slachiewicz;>@​slachiewicz
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-velocity/pull/65;>#65)
 https://github.com/slachiewicz;>@​slachiewicz
   Move to JUnit5 (https://redirect.github.com/codehaus-plexus/plexus-velocity/pull/60;>#60)
 https://github.com/slachiewicz;>@​slachiewicz
   
   2.0.0
   What's Changed
   Upgrade Velocity Engine from 2.0 to 2.3
   Full Changelog: https://github.com/codehaus-plexus/plexus-velocity/compare/plexus-velocity-1.3...plexus-velocity-2.0;>https://github.com/codehaus-plexus/plexus-velocity/compare/plexus-velocity-1.3...plexus-velocity-2.0
   plexus-velocity-1.3
   
   
   Upgrade to Velocity Engine 2.0 (https://redirect.github.com/codehaus-plexus/plexus-velocity/issues/11;>#11)
 https://github.com/slachiewicz;>@​slachiewicz
   Bump commons-collections from 3.1 to 3.2.2 (https://redirect.github.com/codehaus-plexus/plexus-velocity/issues/8;>#8)
 https://github.com/dependabot;>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-velocity/commit/7017cd2e43c0f7c357c1db617bfcded73e2b14cb;>7017cd2
 [maven-release-plugin] prepare release plexus-velocity-2.1.0
   https://github.com/codehaus-plexus/plexus-velocity/commit/59a98d41cca1273a80e4a17a55ab608a554d4f33;>59a98d4
 Bump parent pom to plexus 16, update version to 2.1.0-SNAPSHOT
   https://github.com/codehaus-plexus/plexus-velocity/commit/e0c3648db003793f4fe3d79a0003b430a37427a6;>e0c3648
 Merge pull request https://redirect.github.com/codehaus-plexus/plexus-velocity/issues/67;>#67
 from codehaus-plexus/update-component
   https://github.com/codehaus-plexus/plexus-velocity/commit/2a90dbc8505e6a46296fbde2973f37a4dbad4d2f;>2a90dbc
 Update component
   https://github.com/codehaus-plexus/plexus-velocity/commit/f7d9d35af1a1db5ba876310d91ac4374c37fc4bc;>f7d9d35
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-velocity/commit/265f2a3e72432ea42a7068e572b1fd8a810546da;>265f2a3
 Bump actions/setup-java from 3 to 4
   https://github.com/codehaus-plexus/plexus-velocity/commit/3bd53850a86edf2748415620c3165e5bba1b9d62;>3bd5385
 Bump org.junit.jupiter:junit-jupiter from 5.10.0 to 5.10.1
   https://github.com/codehaus-plexus/plexus-velocity/commit/ed5c0f36d9120a214b772d8cd8b6cf86d3c0807b;>ed5c0f3
 Bump actions/checkout from 3 to 4
   https://github.com/codehaus-plexus/plexus-velocity/commit/f08980a18c4421af26745f04903f9623bfd973f7;>f08980a
 Bump org.junit.jupiter:junit-jupiter from 5.9.3 to 5.10.0
   https://github.com/codehaus-plexus/plexus-velocity/commit/49891e0e0393352b97f3457935288d6e170ed250;>49891e0
 Move to JUnit5
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-velocity/compare/plexus-velocity-1.2...plexus-velocity-2.1.0;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-velocity=maven=1.2=2.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same 

[PR] Bump org.apache.maven.shared:maven-invoker from 3.0.1 to 3.2.0 [maven-archetype]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #172:
URL: https://github.com/apache/maven-archetype/pull/172

   Bumps 
[org.apache.maven.shared:maven-invoker](https://github.com/apache/maven-invoker)
 from 3.0.1 to 3.2.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-invoker/releases;>org.apache.maven.shared:maven-invoker's
 releases.
   
   3.2.0
   
    New features and improvements
   
   https://issues.apache.org/jira/browse/MSHARED-1040;>[MSHARED-1040] - 
Require Java 8 (https://redirect.github.com/apache/maven-invoker/issues/45;>#45) https://github.com/slawekjaranowski;>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MSHARED-1019;>[MSHARED-1019] - 
Allow pass raw cli option to Maven process (https://redirect.github.com/apache/maven-invoker/issues/43;>#43) https://github.com/slawekjaranowski;>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MSHARED-1018;>[MSHARED-1018] - 
Allow for using the -ntp ,--no-transfer-progress flag in Maven invocations (https://redirect.github.com/apache/maven-invoker/issues/42;>#42) https://github.com/slawekjaranowski;>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MSHARED-1009;>[MSHARED-1009] - 
Allow providing Maven executable from workspace (https://redirect.github.com/apache/maven-invoker/issues/38;>#38) https://github.com/slawekjaranowski;>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MSHARED-649;>[MSHARED-649] - 
Allow Pom file outside base directory (https://redirect.github.com/apache/maven-invoker/issues/37;>#37) https://github.com/slawekjaranowski;>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MSHARED-1007;>[MSHARED-1007] - 
Add MavenHome and MavenExecutable options to InvocationRequest (https://redirect.github.com/apache/maven-invoker/issues/34;>#34) https://github.com/slawekjaranowski;>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MINVOKER-233;>[MINVOKER-233] - 
Improve DefaultInvoker with a timeout.  (https://redirect.github.com/apache/maven-invoker/issues/1;>#1) https://github.com/surli;>@​surli
   
    Bug Fixes
   
   https://issues.apache.org/jira/browse/MSHARED-1008;>[MSHARED-1008] - 
Set builder id in proper way (https://redirect.github.com/apache/maven-invoker/issues/33;>#33) https://github.com/slawekjaranowski;>@​slawekjaranowski
   
    Dependency updates
   
   https://issues.apache.org/jira/browse/MSHARED-1042;>[MSHARED-1042] - 
Upgrade Parent to 35 (https://redirect.github.com/apache/maven-invoker/issues/47;>#47) https://github.com/slawekjaranowski;>@​slawekjaranowski
   Bump maven-site-plugin from 3.9.1 to 3.10.0 (https://redirect.github.com/apache/maven-invoker/issues/36;>#36) https://github.com/dependabot;>@​dependabot
   Bump extra-enforcer-rules from 1.4 to 1.5.1 (https://redirect.github.com/apache/maven-invoker/issues/31;>#31) https://github.com/dependabot;>@​dependabot
   Bump maven-project-info-reports-plugin from 3.1.1 to 3.1.2 (https://redirect.github.com/apache/maven-invoker/issues/11;>#11) https://github.com/dependabot;>@​dependabot
   Update build and deps (https://redirect.github.com/apache/maven-invoker/issues/25;>#25) https://github.com/cstamas;>@​cstamas
   Bump actions/setup-java from 2.3.0 to 2.3.1 (https://redirect.github.com/apache/maven-invoker/issues/23;>#23) https://github.com/dependabot;>@​dependabot
   Bump maven-javadoc-plugin from 3.2.0 to 3.3.1 (https://redirect.github.com/apache/maven-invoker/issues/21;>#21) https://github.com/dependabot;>@​dependabot
   Bump actions/setup-java from 2.2.0 to 2.3.0 (https://redirect.github.com/apache/maven-invoker/issues/20;>#20) https://github.com/dependabot;>@​dependabot
   Bump actions/cache from 2.1.5 to 2.1.6 (https://redirect.github.com/apache/maven-invoker/issues/17;>#17) https://github.com/dependabot;>@​dependabot
   Bump actions/checkout from 2 to 2.3.4 (https://redirect.github.com/apache/maven-invoker/issues/14;>#14) https://github.com/dependabot;>@​dependabot
   Bump actions/cache from v2.1.4 to v2.1.5 (https://redirect.github.com/apache/maven-invoker/issues/10;>#10) https://github.com/dependabot;>@​dependabot
   Bump junit from 4.13.1 to 4.13.2 (https://redirect.github.com/apache/maven-invoker/issues/8;>#8) https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   https://issues.apache.org/jira/browse/MSHARED-577;>[MSHARED-577] - 
Remove usage of M2_HOME environment variable (https://redirect.github.com/apache/maven-invoker/issues/35;>#35) https://github.com/slawekjaranowski;>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MSHARED-1006;>[MSHARED-1006] - 
Deprecate not thread safe methods on Invoker (https://redirect.github.com/apache/maven-invoker/issues/32;>#32) https://github.com/slawekjaranowski;>@​slawekjaranowski
   Unit test MavenCommandLineBuilderTest refactor (https://redirect.github.com/apache/maven-invoker/issues/30;>#30) https://github.com/slawekjaranowski;>@​slawekjaranowski
   remove --no-module-directories from javadoc configuration 

[PR] Bump org.codehaus.plexus:plexus-interpolation from 1.26 to 1.27 [maven-release]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #206:
URL: https://github.com/apache/maven-release/pull/206

   Bumps 
[org.codehaus.plexus:plexus-interpolation](https://github.com/codehaus-plexus/plexus-interpolation)
 from 1.26 to 1.27.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-interpolation/releases;>org.codehaus.plexus:plexus-interpolation's
 releases.
   
   1.27.0
   
    New features and improvements
   
   Added support for PPC64LE (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/25;>#25)
 https://github.com/ezeeyahoo;>@​ezeeyahoo
   Add dependabot and release drafter configuration (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/26;>#26)
 https://github.com/olamy;>@​olamy
   Move to Junit5 (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/64;>#64)
 https://github.com/slachiewicz;>@​slachiewicz
   
    Dependency updates
   
   Bump plexus from 7 to 16
   Bump maven-bundle-plugin from 3.0.1 to 5.1.9
   
    Build
   
   use shared gh action (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/57;>#57)
 https://github.com/olamy;>@​olamy
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/70;>#70)
 https://github.com/slachiewicz;>@​slachiewicz
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-interpolation/commit/f44266e74556c30fddcae4b20ee477e7e64a5204;>f44266e
 [maven-release-plugin] prepare release plexus-interpolation-1.27
   https://github.com/codehaus-plexus/plexus-interpolation/commit/10d6389ad22ac8db8ee7279407d10d64295dc9ec;>10d6389
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-interpolation/commit/88f5a941f5b2c6ce5c60ba7b7d2c93a725206807;>88f5a94
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-interpolation/commit/e980e6679d28afc3d0ccc067fb855ab1270ea97f;>e980e66
 Bump org.codehaus.plexus:plexus from 14 to 15
   https://github.com/codehaus-plexus/plexus-interpolation/commit/acb47031ead222f1bebb983d289907f97cbbe3c6;>acb4703
 Reformat code
   https://github.com/codehaus-plexus/plexus-interpolation/commit/df44d880bda41f5d428835597dd47c0b1f3b2ba5;>df44d88
 Bump org.codehaus.plexus:plexus from 11 to 14
   https://github.com/codehaus-plexus/plexus-interpolation/commit/22b9c9b64132deb3b002f3f68d6b2d9034fc0d0e;>22b9c9b
 Bump maven-bundle-plugin from 5.1.8 to 5.1.9
   https://github.com/codehaus-plexus/plexus-interpolation/commit/dad9f189b5c8782be76afaaa12b9c5a263cdcb95;>dad9f18
 Move to Junit5
   https://github.com/codehaus-plexus/plexus-interpolation/commit/f541b1aa9eda8a977967364e0b34b88d7a60dc73;>f541b1a
 Bump plexus from 10 to 11
   https://github.com/codehaus-plexus/plexus-interpolation/commit/a2b39e67f33060f50e6d68349e5577bc114eafed;>a2b39e6
 Bump maven-bundle-plugin from 5.1.7 to 5.1.8
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-interpolation/compare/plexus-interpolation-1.26...plexus-interpolation-1.27;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-interpolation=maven=1.26=1.27)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency 

[PR] Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 4.0.3 [maven-doxia-converter]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #60:
URL: https://github.com/apache/maven-doxia-converter/pull/60

   Bumps 
[org.codehaus.plexus:plexus-xml](https://github.com/codehaus-plexus/plexus-xml) 
from 3.0.0 to 4.0.3.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-xml/releases;>org.codehaus.plexus:plexus-xml's
 releases.
   
   4.0.1
   
   
   Fix detection of invalid spaces in prolog (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/20;>#20) 
https://github.com/gnodet;>@​gnodet
   pom.mxl and site.xml cleanup (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/19;>#19) 
https://github.com/hboutemy;>@​hboutemy
   
   Plexus XML 4.0.2
   What's Changed
   
   Cleanup after parent pom upgrade by https://github.com/slachiewicz;>@​slachiewicz in https://redirect.github.com/codehaus-plexus/plexus-xml/pull/22;>codehaus-plexus/plexus-xml#22
   Upgrade to 4.0.0-alpha-7 and exclude dependency to sisu (fixes https://redirect.github.com/codehaus-plexus/plexus-xml/issues/17;>#17)
 by https://github.com/gnodet;>@​gnodet in https://redirect.github.com/codehaus-plexus/plexus-xml/pull/23;>codehaus-plexus/plexus-xml#23
   
   New Contributors
   
   https://github.com/slachiewicz;>@​slachiewicz 
made their first contribution in https://redirect.github.com/codehaus-plexus/plexus-xml/pull/22;>codehaus-plexus/plexus-xml#22
   
   Full Changelog: https://github.com/codehaus-plexus/plexus-xml/compare/plexus-xml-4.0.1...plexus-xml-4.0.2;>https://github.com/codehaus-plexus/plexus-xml/compare/plexus-xml-4.0.1...plexus-xml-4.0.2
   4.0.0
   
   
   Use spotless (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/8;>#8) https://github.com/gnodet;>@​gnodet
   Fix site generation (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/15;>#15) 
https://github.com/gnodet;>@​gnodet
   Switch build ci workflow to master branch (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/14;>#14) 
https://github.com/gnodet;>@​gnodet
   Fix SCM urls (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/13;>#13) 
https://github.com/gnodet;>@​gnodet
   MXParser tokenization fails when PI is before first tag (fixes https://redirect.github.com/codehaus-plexus/plexus-xml/issues/7;>#7) 
(https://redirect.github.com/codehaus-plexus/plexus-xml/pull/12;>#12) 
https://github.com/gnodet;>@​gnodet
   Deprecate Xpp3DomUtils (fixes https://redirect.github.com/codehaus-plexus/plexus-xml/issues/6;>#6) 
(https://redirect.github.com/codehaus-plexus/plexus-xml/pull/9;>#9) https://github.com/gnodet;>@​gnodet
   Use a ArrayDeque (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/5;>#5) https://github.com/gnodet;>@​gnodet
   Upgrade plugins and clean build warnings (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/4;>#4) https://github.com/gnodet;>@​gnodet
   Switch to junit 5 (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/2;>#2) https://github.com/gnodet;>@​gnodet
   Fix parsing an UTF-8 file without BOM and ISO-8859-1 encoding (https://redirect.github.com/codehaus-plexus/plexus-xml/pull/1;>#1) https://github.com/gnodet;>@​gnodet
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-xml/commit/784ff955e0944bea8b3a15254ad7ce06ae72dc20;>784ff95
 [maven-release-plugin] prepare release plexus-xml-4.0.3
   https://github.com/codehaus-plexus/plexus-xml/commit/e6a6427dd4c1e0b40832ea027f5c102cd739ef85;>e6a6427
 Upgrade to Maven 4.0.0-alpha-9 (https://redirect.github.com/codehaus-plexus/plexus-xml/issues/27;>#27)
   https://github.com/codehaus-plexus/plexus-xml/commit/aa82ed33a2e8c178fcd2a2106f57023d6947d84e;>aa82ed3
 Update dependencies (https://redirect.github.com/codehaus-plexus/plexus-xml/issues/26;>#26)
   https://github.com/codehaus-plexus/plexus-xml/commit/7bfeb09596b87f4a28add4699bbd663fe6dcbd6e;>7bfeb09
 clarify Maven 4-specific
   https://github.com/codehaus-plexus/plexus-xml/commit/07f63919296984b2c5f5d30a433411c0715b2e9e;>07f6391
 explain 3 vs 4
   https://github.com/codehaus-plexus/plexus-xml/commit/bcf34dcd790955f6381efe442f2d24dbe2b8170e;>bcf34dc
 describe plexus-xml update to maven-xml-impl
   https://github.com/codehaus-plexus/plexus-xml/commit/72c06a0a2d0793a79b1ea6b68eb453cc1ee9c867;>72c06a0
 [maven-release-plugin] prepare for next development iteration
   https://github.com/codehaus-plexus/plexus-xml/commit/944197c74386b199857a003160d840fb5593ac29;>944197c
 [maven-release-plugin] prepare release plexus-xml-4.0.2
   https://github.com/codehaus-plexus/plexus-xml/commit/c3d99b433a272d8eb1cc7c799410799e8c16ace3;>c3d99b4
 Upgrade to 4.0.0-alpha-7 and exclude dependency to sisu (fixes https://redirect.github.com/codehaus-plexus/plexus-xml/issues/17;>#17)
 (https://redirect.github.com/codehaus-plexus/plexus-xml/issues/23;>#23)
   https://github.com/codehaus-plexus/plexus-xml/commit/a83cefa086c9a5bb8b6674a409016f378b19891e;>a83cefa
 Cleanup after parent pom upgrade
   Additional commits viewable in 

[PR] Bump org.apache.bcel:bcel from 6.7.0 to 6.8.0 [maven-shared-jar]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #29:
URL: https://github.com/apache/maven-shared-jar/pull/29

   Bumps [org.apache.bcel:bcel](https://github.com/apache/commons-bcel) from 
6.7.0 to 6.8.0.
   
   Changelog
   Sourced from https://github.com/apache/commons-bcel/blob/master/RELEASE-NOTES.txt;>org.apache.bcel:bcel's
 changelog.
   
 Apache Commons BCEL
 Version 6.8.0
 RELEASE NOTES
   
   INTRODUCTION:
   The Apache Commons BCEL team is pleased to announce the release of
   Apache Commons BCEL 6.8.0!
   The Byte Code Engineering Library (BCEL) is intended to give users a 
convenient
   way to analyze, create, and manipulate compiled .class files. Classes are
   represented by objects containing all the symbolic information of the given
   class: methods, fields and byte code instructions.
   Maintenance and bug fix release.
   NEW FEATURES:
   o   Add and use InvalidMethodSignatureException extending 
ClassFormatException. Thanks to Gary Gregory.
   o   Increase code coverage in Class2HTMLTestCase with new test input 
Java4Example https://redirect.github.com/apache/commons-bcel/issues/186;>#186. 
Thanks to nbauma109.
   o   Add verifier tests on some opcodes https://redirect.github.com/apache/commons-bcel/issues/180;>#180. 
Thanks to nbauma109.
   o   Added signature test cases for class/method, and bad signatures 
https://redirect.github.com/apache/commons-bcel/issues/182;>#182. 
Thanks to nbauma109.
   o   Add Const.MAJOR_20. Thanks to Gary Gregory.
   o   Add Const.MINOR_20. Thanks to Gary Gregory.
   o   Add Const.MAJOR_21. Thanks to Gary Gregory.
   o   Add Const.MINOR_21. Thanks to Gary Gregory.
   o   [Bcelifier] stackmap support to pass JDK verifier https://redirect.github.com/apache/commons-bcel/issues/177;>#177. 
Thanks to nbauma109, Gary Gregory, Mark Roberts.
   o   Fix SpotBugs [ERROR] Class org.apache.bcel.util.ClassVector 
defines non-transient non-serializable instance field vec 
[org.apache.bcel.util.ClassVector] In ClassVector.java SE_BAD_FIELD. Thanks to 
Gary Gregory.
   o   Fix SpotBugs [ERROR] Switch statement found in 
org.apache.bcel.util.BCELFactory.visitAllocationInstruction(AllocationInstruction)
 where one case falls through to the next case 
[org.apache.bcel.util.BCELFactory, org.apache.bcel.util.BCELFactory] At 
BCELFactory.java:[lines 188-191]Another occurrence at BCELFactory.java:[lines 
192-196] SF_SWITCH_FALLTHROUGH. Thanks to Gary Gregory.
   FIXED BUGS:
   o   When parsing an class with an invalid constant reference, 
ensure ClassParser.parse() throws ClassFormatException, not 
NullPointerException. Thanks to OSS-Fuzz.
   o   Ensure that references to a constant pool entry with index zero 
trigger a ClassFormatException, not a NullPointerException. Thanks to OSS-Fuzz.
   o   Ensure that references to the unused constant pool entry after a 
long/double entry triggers a ClassFormatException, not a NullPointerException. 
Thanks to OSS-Fuzz.
   o   Test and coverage of InstructionFactory https://redirect.github.com/apache/commons-bcel/issues/190;>#190. 
Thanks to nbauma109.
   o   Verifier: test and coverage for SWAP instruction https://redirect.github.com/apache/commons-bcel/issues/188;>#188. 
Thanks to nbauma109.
   o   Exception parsing Kotlin class with 'fun method name with 
() in it()' https://redirect.github.com/apache/commons-bcel/issues/205;>#205. 
Thanks to Jason Copenhaver, Gary Gregory.
   o   Fix null pointers in AnnotationEntry https://redirect.github.com/apache/commons-bcel/issues/213;>#213. 
Thanks to nbauma109, Gary Gregory.
   o   Field not found, search field in both super class and 
implemented interfaces (5x duplicated code to find field by name and type is 
refactored to a new method and now supports package-private) https://redirect.github.com/apache/commons-bcel/issues/181;>#181. 
Thanks to nbauma109.
   o BCEL-366: Use alternative name for broken classes under test https://redirect.github.com/apache/commons-bcel/issues/220;>#220. 
Thanks to Slawomir Jaranowski.
   o BCEL-367: Fixes java.lang.IndexOutOfBoundsException for ATHROW on empty 
stack https://redirect.github.com/apache/commons-bcel/issues/223;>#223. 
Thanks to Katherine Hough, Gary Gregory.
   o BCEL-368: Fixes java.lang.StackOverflowError in Select#toString(boolean) 
https://redirect.github.com/apache/commons-bcel/issues/229;>#229. 
Thanks to Katherine Hough, Gary Gregory.
   o   Fix for type.getType(...) use on non-signature type names https://redirect.github.com/apache/commons-bcel/issues/221;>#221. 
Thanks to nbauma109, Judit Knoll, Gary Gregory.
   o   Fix EmptyVisitorTestCase on Java 21. Thanks to Gary Gregory.
   CHANGES:
   
   
   ... (truncated)
   
   
   Commits
   
   https://github.com/apache/commons-bcel/commit/cf6f7e710abf4eda2e0aa9aa914aa17878999583;>cf6f7e7
 

[PR] Bump org.codehaus.plexus:plexus-interpolation from 1.26 to 1.27 [maven-invoker-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #206:
URL: https://github.com/apache/maven-invoker-plugin/pull/206

   Bumps 
[org.codehaus.plexus:plexus-interpolation](https://github.com/codehaus-plexus/plexus-interpolation)
 from 1.26 to 1.27.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-interpolation/releases;>org.codehaus.plexus:plexus-interpolation's
 releases.
   
   1.27.0
   
    New features and improvements
   
   Added support for PPC64LE (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/25;>#25)
 https://github.com/ezeeyahoo;>@​ezeeyahoo
   Add dependabot and release drafter configuration (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/26;>#26)
 https://github.com/olamy;>@​olamy
   Move to Junit5 (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/64;>#64)
 https://github.com/slachiewicz;>@​slachiewicz
   
    Dependency updates
   
   Bump plexus from 7 to 16
   Bump maven-bundle-plugin from 3.0.1 to 5.1.9
   
    Build
   
   use shared gh action (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/57;>#57)
 https://github.com/olamy;>@​olamy
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/70;>#70)
 https://github.com/slachiewicz;>@​slachiewicz
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-interpolation/commit/f44266e74556c30fddcae4b20ee477e7e64a5204;>f44266e
 [maven-release-plugin] prepare release plexus-interpolation-1.27
   https://github.com/codehaus-plexus/plexus-interpolation/commit/10d6389ad22ac8db8ee7279407d10d64295dc9ec;>10d6389
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-interpolation/commit/88f5a941f5b2c6ce5c60ba7b7d2c93a725206807;>88f5a94
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-interpolation/commit/e980e6679d28afc3d0ccc067fb855ab1270ea97f;>e980e66
 Bump org.codehaus.plexus:plexus from 14 to 15
   https://github.com/codehaus-plexus/plexus-interpolation/commit/acb47031ead222f1bebb983d289907f97cbbe3c6;>acb4703
 Reformat code
   https://github.com/codehaus-plexus/plexus-interpolation/commit/df44d880bda41f5d428835597dd47c0b1f3b2ba5;>df44d88
 Bump org.codehaus.plexus:plexus from 11 to 14
   https://github.com/codehaus-plexus/plexus-interpolation/commit/22b9c9b64132deb3b002f3f68d6b2d9034fc0d0e;>22b9c9b
 Bump maven-bundle-plugin from 5.1.8 to 5.1.9
   https://github.com/codehaus-plexus/plexus-interpolation/commit/dad9f189b5c8782be76afaaa12b9c5a263cdcb95;>dad9f18
 Move to Junit5
   https://github.com/codehaus-plexus/plexus-interpolation/commit/f541b1aa9eda8a977967364e0b34b88d7a60dc73;>f541b1a
 Bump plexus from 10 to 11
   https://github.com/codehaus-plexus/plexus-interpolation/commit/a2b39e67f33060f50e6d68349e5577bc114eafed;>a2b39e6
 Bump maven-bundle-plugin from 5.1.7 to 5.1.8
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-interpolation/compare/plexus-interpolation-1.26...plexus-interpolation-1.27;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-interpolation=maven=1.26=1.27)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this 

Re: [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.12.0 [maven-apache-parent]

2023-12-24 Thread via GitHub


dependabot[bot] closed pull request #180: Bump 
org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.12.0
URL: https://github.com/apache/maven-apache-parent/pull/180


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.12.0 [maven-apache-parent]

2023-12-24 Thread via GitHub


dependabot[bot] commented on PR #180:
URL: 
https://github.com/apache/maven-apache-parent/pull/180#issuecomment-1868718543

   Superseded by #181.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.12.1 [maven-apache-parent]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #181:
URL: https://github.com/apache/maven-apache-parent/pull/181

   Bumps 
[org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin)
 from 3.11.0 to 3.12.1.
   
   Release notes
   Sourced from https://github.com/apache/maven-compiler-plugin/releases;>org.apache.maven.plugins:maven-compiler-plugin's
 releases.
   
   3.12.1
   
    Bug Fixes
   
   https://issues.apache.org/jira/browse/MCOMPILER-567;>[MCOMPILER-567] 
- Fail to compile if the generated-sources/annotation… (https://redirect.github.com/apache/maven-compiler-plugin/pull/218;>#218)
 https://github.com/jorsol;>@​jorsol
   
    Dependency updates
   
   https://issues.apache.org/jira/browse/MCOMPILER-568;>[MCOMPILER-568] 
- Bump plexusCompilerVersion from 2.14.1 to 2.14.2 (https://redirect.github.com/apache/maven-compiler-plugin/pull/220;>#220)
 https://github.com/dependabot;>@​dependabot
   
   3.12.0
   
    New features and improvements
   
   https://issues.apache.org/jira/browse/MCOMPILER-562;>[MCOMPILER-562] 
- Add property maven.compiler.outputDirectory to CompilerMojo (https://redirect.github.com/apache/maven-compiler-plugin/pull/213;>#213)
 https://github.com/jGauravGupta;>@​jGauravGupta
   https://issues.apache.org/jira/browse/MCOMPILER-381;>[MCOMPILER-381] 
- Refactor incremental detection (https://redirect.github.com/apache/maven-compiler-plugin/pull/181;>#181)
 https://github.com/jorsol;>@​jorsol
   https://issues.apache.org/jira/browse/MCOMPILER-542;>[MCOMPILER-542] 
- Clean JDK patch version in module-info.class  (https://redirect.github.com/apache/maven-compiler-plugin/pull/208;>#208)
 https://github.com/jorsol;>@​jorsol
   https://issues.apache.org/jira/browse/MCOMPILER-558;>[MCOMPILER-558] 
- compileSourceRoots in testCompile should be writable (https://redirect.github.com/apache/maven-compiler-plugin/pull/209;>#209)
 https://github.com/lorenzsimon;>@​lorenzsimon
   https://issues.apache.org/jira/browse/MCOMPILER-559;>[MCOMPILER-559] 
- Warn if overwriting the project's artifact's file to a different value (https://redirect.github.com/apache/maven-compiler-plugin/pull/211;>#211)
 https://github.com/gnodet;>@​gnodet
   https://issues.apache.org/jira/browse/MCOMPILER-550;>[MCOMPILER-550] 
- make outputDirectory writable (https://redirect.github.com/apache/maven-compiler-plugin/pull/202;>#202)
 https://github.com/bmarwell;>@​bmarwell
   https://issues.apache.org/jira/browse/MCOMPILER-549;>[MCOMPILER-549] 
- Improve log message in case of recompilation - fix jenkins build (https://redirect.github.com/apache/maven-compiler-plugin/pull/203;>#203)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-549;>[MCOMPILER-549] 
- Improve log message in case of recompilation (https://redirect.github.com/apache/maven-compiler-plugin/pull/201;>#201)
 https://github.com/BrowneMonke;>@​BrowneMonke
   https://issues.apache.org/jira/browse/MCOMPILER-391;>[MCOMPILER-391] 
- Use dep mgmt when resolving annotation processors and their deps (https://redirect.github.com/apache/maven-compiler-plugin/pull/180;>#180)
 https://github.com/psiroky;>@​psiroky
   https://issues.apache.org/jira/browse/MCOMPILER-531;>[MCOMPILER-531] 
- Prepare for Java 20(-ea) (https://redirect.github.com/apache/maven-compiler-plugin/pull/184;>#184)
 https://github.com/slachiewicz;>@​slachiewicz
   
    Bug Fixes
   
   https://issues.apache.org/jira/browse/MCOMPILER-333;>[MCOMPILER-333] 
- Cleanup generated source files (https://redirect.github.com/apache/maven-compiler-plugin/pull/214;>#214)
 https://github.com/jorsol;>@​jorsol
   https://issues.apache.org/jira/browse/MCOMPILER-544;>[MCOMPILER-544] 
- don't add items to classpath that are not used for that (https://redirect.github.com/apache/maven-compiler-plugin/pull/198;>#198)
 https://github.com/laeubi;>@​laeubi
   https://issues.apache.org/jira/browse/MCOMPILER-547;>[MCOMPILER-547] 
- : Initialize pathElements to empty (https://redirect.github.com/apache/maven-compiler-plugin/pull/199;>#199)
 https://github.com/rovarga;>@​rovarga
   
    Dependency updates
   
   https://issues.apache.org/jira/browse/MCOMPILER-564;>[MCOMPILER-564] 
- Bump plexusCompilerVersion from 2.13.0 to 2.14.1 (https://redirect.github.com/apache/maven-compiler-plugin/pull/216;>#216)
 https://github.com/dependabot;>@​dependabot
   https://issues.apache.org/jira/browse/MCOMPILER-557;>[MCOMPILER-557] 
- Upgrade maven-plugin parent to 41 - fix build (https://redirect.github.com/apache/maven-compiler-plugin/pull/210;>#210)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-554;>[MCOMPILER-554] 
- Update plexus-java to 1.2.0 (https://redirect.github.com/apache/maven-compiler-plugin/pull/207;>#207)
 https://github.com/jorsol;>@​jorsol
   https://issues.apache.org/jira/browse/MCOMPILER-551;>[MCOMPILER-551] 
- Upgrade Parent to 40 

[PR] Bump org.codehaus.plexus:plexus-archiver from 4.9.0 to 4.9.1 [maven-site-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #167:
URL: https://github.com/apache/maven-site-plugin/pull/167

   Bumps 
[org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
 from 4.9.0 to 4.9.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases;>org.codehaus.plexus:plexus-archiver's
 releases.
   
   4.9.1
   
    New features and improvements
   
   https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in Abstrac… (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/312;>#312)
 https://github.com/redzi;>@​redzi
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/316;>#316)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/314;>#314)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.15.0 to 2.15.1 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/313;>#313)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/309;>#309)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/315;>#315)
 https://github.com/slachiewicz;>@​slachiewicz
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/fb02b02a78d4adecef4e32f304f9f6d3ab7b9861;>fb02b02
 [maven-release-plugin] prepare release plexus-archiver-4.9.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/d953f322ccbb38479b04abbde3645f77eafd489a;>d953f32
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-archiver/commit/54c42c20e531b9e642a3c70c215814b5a4d61a3b;>54c42c2
 Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11
   https://github.com/codehaus-plexus/plexus-archiver/commit/cb4b6668a8dde2d04aaac37e8265b3e009cb2ca9;>cb4b666
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-archiver/commit/20cf65421aacbb133a9fe228dbe9fc06000def7a;>20cf654
 Bump commons-io:commons-io from 2.15.0 to 2.15.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/fca25e56461394a6d34af8e018ec0348885cbad8;>fca25e5
 https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in AbstractFileSet.
   https://github.com/codehaus-plexus/plexus-archiver/commit/9c0e021ab9d58dd8b05a74a5ba6c82f8070c8d93;>9c0e021
 Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/b353ae3240cfda1c23ec8c1d80e719af40698b66;>b353ae3
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.9.0...plexus-archiver-4.9.1;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver=maven=4.9.0=4.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
 

[PR] Bump org.codehaus.plexus:plexus-interpolation from 1.26 to 1.27 [maven-resources-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #66:
URL: https://github.com/apache/maven-resources-plugin/pull/66

   Bumps 
[org.codehaus.plexus:plexus-interpolation](https://github.com/codehaus-plexus/plexus-interpolation)
 from 1.26 to 1.27.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-interpolation/releases;>org.codehaus.plexus:plexus-interpolation's
 releases.
   
   1.27.0
   
    New features and improvements
   
   Added support for PPC64LE (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/25;>#25)
 https://github.com/ezeeyahoo;>@​ezeeyahoo
   Add dependabot and release drafter configuration (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/26;>#26)
 https://github.com/olamy;>@​olamy
   Move to Junit5 (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/64;>#64)
 https://github.com/slachiewicz;>@​slachiewicz
   
    Dependency updates
   
   Bump plexus from 7 to 16
   Bump maven-bundle-plugin from 3.0.1 to 5.1.9
   
    Build
   
   use shared gh action (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/57;>#57)
 https://github.com/olamy;>@​olamy
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-interpolation/pull/70;>#70)
 https://github.com/slachiewicz;>@​slachiewicz
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-interpolation/commit/f44266e74556c30fddcae4b20ee477e7e64a5204;>f44266e
 [maven-release-plugin] prepare release plexus-interpolation-1.27
   https://github.com/codehaus-plexus/plexus-interpolation/commit/10d6389ad22ac8db8ee7279407d10d64295dc9ec;>10d6389
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-interpolation/commit/88f5a941f5b2c6ce5c60ba7b7d2c93a725206807;>88f5a94
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-interpolation/commit/e980e6679d28afc3d0ccc067fb855ab1270ea97f;>e980e66
 Bump org.codehaus.plexus:plexus from 14 to 15
   https://github.com/codehaus-plexus/plexus-interpolation/commit/acb47031ead222f1bebb983d289907f97cbbe3c6;>acb4703
 Reformat code
   https://github.com/codehaus-plexus/plexus-interpolation/commit/df44d880bda41f5d428835597dd47c0b1f3b2ba5;>df44d88
 Bump org.codehaus.plexus:plexus from 11 to 14
   https://github.com/codehaus-plexus/plexus-interpolation/commit/22b9c9b64132deb3b002f3f68d6b2d9034fc0d0e;>22b9c9b
 Bump maven-bundle-plugin from 5.1.8 to 5.1.9
   https://github.com/codehaus-plexus/plexus-interpolation/commit/dad9f189b5c8782be76afaaa12b9c5a263cdcb95;>dad9f18
 Move to Junit5
   https://github.com/codehaus-plexus/plexus-interpolation/commit/f541b1aa9eda8a977967364e0b34b88d7a60dc73;>f541b1a
 Bump plexus from 10 to 11
   https://github.com/codehaus-plexus/plexus-interpolation/commit/a2b39e67f33060f50e6d68349e5577bc114eafed;>a2b39e6
 Bump maven-bundle-plugin from 5.1.7 to 5.1.8
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-interpolation/compare/plexus-interpolation-1.26...plexus-interpolation-1.27;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-interpolation=maven=1.26=1.27)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this 

[PR] Bump org.apache.maven.plugins:maven-plugin-plugin from 3.8.1 to 3.10.2 [maven-jlink-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #184:
URL: https://github.com/apache/maven-jlink-plugin/pull/184

   Bumps 
[org.apache.maven.plugins:maven-plugin-plugin](https://github.com/apache/maven-plugin-tools)
 from 3.8.1 to 3.10.2.
   
   Release notes
   Sourced from https://github.com/apache/maven-plugin-tools/releases;>org.apache.maven.plugins:maven-plugin-plugin's
 releases.
   
   3.10.2
   https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317820version=12353719;>Release
 Notes - Maven Plugin Tools - Version 3.10.2
   Bug
   
   [https://issues.apache.org/jira/browse/MPLUGIN-484;>MPLUGIN-484] - 
Downgrade plexus-xml to 3.0.0
   
   Dependency upgrade
   
   [https://issues.apache.org/jira/browse/MPLUGIN-485;>MPLUGIN-485] - 
Upgrade Parent to 40
   [https://issues.apache.org/jira/browse/MPLUGIN-487;>MPLUGIN-487] - 
Bump org.codehaus.plexus:plexus-java from 1.1.2 to 1.2.0
   [https://issues.apache.org/jira/browse/MPLUGIN-488;>MPLUGIN-488] - 
Bump asmVersion from 9.5 to 9.6
   [https://issues.apache.org/jira/browse/MPLUGIN-489;>MPLUGIN-489] - 
Bump antVersion from 1.10.13 to 1.10.14
   [https://issues.apache.org/jira/browse/MPLUGIN-490;>MPLUGIN-490] - 
Bump org.jsoup:jsoup from 1.16.1 to 1.16.2
   [https://issues.apache.org/jira/browse/MPLUGIN-491;>MPLUGIN-491] - 
Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.2.0
   
   3.10.1
   https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317820version=12353716;>Release
 Notes - Maven Plugin Tools - Version 3.10.1
   Bug
   
   [https://issues.apache.org/jira/browse/MPLUGIN-482;>MPLUGIN-482] - 
JavadocSite.createLink() does not consider implicit module path prefix
   
   Improvement
   
   [https://issues.apache.org/jira/browse/MPLUGIN-442;>MPLUGIN-442] - 
Rewrite plugin goal documentation generation to use supplied sink instead of 
direct Xdoc
   [https://issues.apache.org/jira/browse/MPLUGIN-475;>MPLUGIN-475] - 
Upgrade to plexus-utils / plexus-xml 4.0.0
   [https://issues.apache.org/jira/browse/MPLUGIN-477;>MPLUGIN-477] - 
Don't add a stray period
   
   Dependency upgrade
   
   [https://issues.apache.org/jira/browse/MPLUGIN-478;>MPLUGIN-478] - 
Upgrade org.junit:junit-bom from 5.9.3 to 5.10.0
   [https://issues.apache.org/jira/browse/MPLUGIN-479;>MPLUGIN-479] - 
Bump org.codehaus.plexus:plexus-archiver from 4.7.1 to 4.8.0
   
   3.9.0
   https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317820version=12353224;>Release
 Notes - Maven Plugin Tools - Version 3.9.0
   
   Bug
   
   [https://issues.apache.org/jira/browse/MPLUGIN-470;>MPLUGIN-470] - 
*-mojo.xml (in PluginXdocGenerator) is overwritten when multiple locales are 
defined
   [https://issues.apache.org/jira/browse/MPLUGIN-471;>MPLUGIN-471] - 
Generated table by PluginXdocGenerator does not contain default attributes
   
   
   
   ... (truncated)
   
   
   Commits
   
   https://github.com/apache/maven-plugin-tools/commit/f6222d6f362bab1682e4682726b758eaa1faa945;>f6222d6
 [maven-release-plugin] prepare release maven-plugin-tools-3.10.2
   https://github.com/apache/maven-plugin-tools/commit/b2aa6cd87812a86c3641e786d3721d105d21085a;>b2aa6cd
 [MPLUGIN-491] Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.2.0 (https://redirect.github.com/apache/maven-plugin-tools/issues/235;>#235)
   https://github.com/apache/maven-plugin-tools/commit/be032eed3de41aaa55d0241e32056816ac082c3d;>be032ee
 [MPLUGIN-490] Bump org.jsoup:jsoup from 1.16.1 to 1.16.2 (https://redirect.github.com/apache/maven-plugin-tools/issues/232;>#232)
   https://github.com/apache/maven-plugin-tools/commit/596553cee673fd273f2253f5d535c6bcca14791c;>596553c
 [MPLUGIN-489] Bump antVersion from 1.10.13 to 1.10.14 (https://redirect.github.com/apache/maven-plugin-tools/issues/223;>#223)
   https://github.com/apache/maven-plugin-tools/commit/71a7750d7fc7dea4f959332e9172587d297ae74d;>71a7750
 [MPLUGIN-488] Bump asmVersion from 9.5 to 9.6.
   https://github.com/apache/maven-plugin-tools/commit/1934c85712a93e735c416ccdf313190bcce39319;>1934c85
 [MPLUGIN-485] Upgrade Parent to 40
   https://github.com/apache/maven-plugin-tools/commit/52cf6b5ff5c07ab1d6c0b015ffcfe02b22e84081;>52cf6b5
 [MPLUGIN-487] Bump org.codehaus.plexus:plexus-java from 1.1.2 to 1.2.0 (https://redirect.github.com/apache/maven-plugin-tools/issues/231;>#231)
   https://github.com/apache/maven-plugin-tools/commit/fbe2a7ca9fa4636a08fb39e2409456b44e1c9911;>fbe2a7c
 [MPLUGIN-484] Downgrade plexus-xml to 3.0.0
   https://github.com/apache/maven-plugin-tools/commit/619bb57aeefb2f8f14f98c31d68a8da45f88d9e2;>619bb57
 [maven-release-plugin] prepare for next development iteration
   https://github.com/apache/maven-plugin-tools/commit/cfdc1e35b1cf617a094d70d36f7028baafa5f3eb;>cfdc1e3
 [maven-release-plugin] prepare release maven-plugin-tools-3.10.1
   Additional commits viewable in https://github.com/apache/maven-plugin-tools/compare/maven-plugin-tools-3.8.1...maven-plugin-tools-3.10.2;>compare
 view
   
   
   
   
   
   

Re: [PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0 [maven-jlink-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] commented on PR #171:
URL: 
https://github.com/apache/maven-jlink-plugin/pull/171#issuecomment-1868712510

   Superseded by #186.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 [maven-jlink-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #186:
URL: https://github.com/apache/maven-jlink-plugin/pull/186

   Bumps 
[org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
 from 4.8.0 to 4.9.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases;>org.codehaus.plexus:plexus-archiver's
 releases.
   
   4.9.1
   
    New features and improvements
   
   https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in Abstrac… (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/312;>#312)
 https://github.com/redzi;>@​redzi
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/316;>#316)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/314;>#314)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.15.0 to 2.15.1 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/313;>#313)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/309;>#309)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/315;>#315)
 https://github.com/slachiewicz;>@​slachiewicz
   
   4.9.0
   
    New features and improvements
   
   Allow copy all files without timestamp checking by DirectoryArchiver (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/304;>#304)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   
    Dependency updates
   
   Bump com.github.luben:zstd-jni from 1.5.5-6 to 1.5.5-10 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/307;>#307)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.14.0 to 2.15.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/303;>#303)
 https://github.com/dependabot;>@​dependabot
   Bump org.codehaus.plexus:plexus from 14 to 15 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/302;>#302)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-5 to 1.5.5-6 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/301;>#301)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.13.0 to 2.14.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/300;>#300)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.23.0 to 1.24.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/298;>#298)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Update info about release notes in README, ReleaseNotes (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/308;>#308)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/fb02b02a78d4adecef4e32f304f9f6d3ab7b9861;>fb02b02
 [maven-release-plugin] prepare release plexus-archiver-4.9.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/d953f322ccbb38479b04abbde3645f77eafd489a;>d953f32
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-archiver/commit/54c42c20e531b9e642a3c70c215814b5a4d61a3b;>54c42c2
 Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11
   https://github.com/codehaus-plexus/plexus-archiver/commit/cb4b6668a8dde2d04aaac37e8265b3e009cb2ca9;>cb4b666
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-archiver/commit/20cf65421aacbb133a9fe228dbe9fc06000def7a;>20cf654
 Bump commons-io:commons-io from 2.15.0 to 2.15.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/fca25e56461394a6d34af8e018ec0348885cbad8;>fca25e5
 https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in AbstractFileSet.
   https://github.com/codehaus-plexus/plexus-archiver/commit/9c0e021ab9d58dd8b05a74a5ba6c82f8070c8d93;>9c0e021
 Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/b353ae3240cfda1c23ec8c1d80e719af40698b66;>b353ae3
 [maven-release-plugin] prepare for next development iteration
   https://github.com/codehaus-plexus/plexus-archiver/commit/b31477fb321484a115fcfa44d0f6b6cb0a902d8c;>b31477f
 [maven-release-plugin] prepare release plexus-archiver-4.9.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/87f62d5ffed709dc0d429d643b2f064dc84ee2ad;>87f62d5
 Update info about release notes in README, ReleaseNotes
   

Re: [PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0 [maven-jlink-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] closed pull request #171: Bump 
org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0
URL: https://github.com/apache/maven-jlink-plugin/pull/171


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.12.1 [maven-jlink-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #185:
URL: https://github.com/apache/maven-jlink-plugin/pull/185

   Bumps 
[org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin)
 from 3.11.0 to 3.12.1.
   
   Release notes
   Sourced from https://github.com/apache/maven-compiler-plugin/releases;>org.apache.maven.plugins:maven-compiler-plugin's
 releases.
   
   3.12.1
   
    Bug Fixes
   
   https://issues.apache.org/jira/browse/MCOMPILER-567;>[MCOMPILER-567] 
- Fail to compile if the generated-sources/annotation… (https://redirect.github.com/apache/maven-compiler-plugin/pull/218;>#218)
 https://github.com/jorsol;>@​jorsol
   
    Dependency updates
   
   https://issues.apache.org/jira/browse/MCOMPILER-568;>[MCOMPILER-568] 
- Bump plexusCompilerVersion from 2.14.1 to 2.14.2 (https://redirect.github.com/apache/maven-compiler-plugin/pull/220;>#220)
 https://github.com/dependabot;>@​dependabot
   
   3.12.0
   
    New features and improvements
   
   https://issues.apache.org/jira/browse/MCOMPILER-562;>[MCOMPILER-562] 
- Add property maven.compiler.outputDirectory to CompilerMojo (https://redirect.github.com/apache/maven-compiler-plugin/pull/213;>#213)
 https://github.com/jGauravGupta;>@​jGauravGupta
   https://issues.apache.org/jira/browse/MCOMPILER-381;>[MCOMPILER-381] 
- Refactor incremental detection (https://redirect.github.com/apache/maven-compiler-plugin/pull/181;>#181)
 https://github.com/jorsol;>@​jorsol
   https://issues.apache.org/jira/browse/MCOMPILER-542;>[MCOMPILER-542] 
- Clean JDK patch version in module-info.class  (https://redirect.github.com/apache/maven-compiler-plugin/pull/208;>#208)
 https://github.com/jorsol;>@​jorsol
   https://issues.apache.org/jira/browse/MCOMPILER-558;>[MCOMPILER-558] 
- compileSourceRoots in testCompile should be writable (https://redirect.github.com/apache/maven-compiler-plugin/pull/209;>#209)
 https://github.com/lorenzsimon;>@​lorenzsimon
   https://issues.apache.org/jira/browse/MCOMPILER-559;>[MCOMPILER-559] 
- Warn if overwriting the project's artifact's file to a different value (https://redirect.github.com/apache/maven-compiler-plugin/pull/211;>#211)
 https://github.com/gnodet;>@​gnodet
   https://issues.apache.org/jira/browse/MCOMPILER-550;>[MCOMPILER-550] 
- make outputDirectory writable (https://redirect.github.com/apache/maven-compiler-plugin/pull/202;>#202)
 https://github.com/bmarwell;>@​bmarwell
   https://issues.apache.org/jira/browse/MCOMPILER-549;>[MCOMPILER-549] 
- Improve log message in case of recompilation - fix jenkins build (https://redirect.github.com/apache/maven-compiler-plugin/pull/203;>#203)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-549;>[MCOMPILER-549] 
- Improve log message in case of recompilation (https://redirect.github.com/apache/maven-compiler-plugin/pull/201;>#201)
 https://github.com/BrowneMonke;>@​BrowneMonke
   https://issues.apache.org/jira/browse/MCOMPILER-391;>[MCOMPILER-391] 
- Use dep mgmt when resolving annotation processors and their deps (https://redirect.github.com/apache/maven-compiler-plugin/pull/180;>#180)
 https://github.com/psiroky;>@​psiroky
   https://issues.apache.org/jira/browse/MCOMPILER-531;>[MCOMPILER-531] 
- Prepare for Java 20(-ea) (https://redirect.github.com/apache/maven-compiler-plugin/pull/184;>#184)
 https://github.com/slachiewicz;>@​slachiewicz
   
    Bug Fixes
   
   https://issues.apache.org/jira/browse/MCOMPILER-333;>[MCOMPILER-333] 
- Cleanup generated source files (https://redirect.github.com/apache/maven-compiler-plugin/pull/214;>#214)
 https://github.com/jorsol;>@​jorsol
   https://issues.apache.org/jira/browse/MCOMPILER-544;>[MCOMPILER-544] 
- don't add items to classpath that are not used for that (https://redirect.github.com/apache/maven-compiler-plugin/pull/198;>#198)
 https://github.com/laeubi;>@​laeubi
   https://issues.apache.org/jira/browse/MCOMPILER-547;>[MCOMPILER-547] 
- : Initialize pathElements to empty (https://redirect.github.com/apache/maven-compiler-plugin/pull/199;>#199)
 https://github.com/rovarga;>@​rovarga
   
    Dependency updates
   
   https://issues.apache.org/jira/browse/MCOMPILER-564;>[MCOMPILER-564] 
- Bump plexusCompilerVersion from 2.13.0 to 2.14.1 (https://redirect.github.com/apache/maven-compiler-plugin/pull/216;>#216)
 https://github.com/dependabot;>@​dependabot
   https://issues.apache.org/jira/browse/MCOMPILER-557;>[MCOMPILER-557] 
- Upgrade maven-plugin parent to 41 - fix build (https://redirect.github.com/apache/maven-compiler-plugin/pull/210;>#210)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MCOMPILER-554;>[MCOMPILER-554] 
- Update plexus-java to 1.2.0 (https://redirect.github.com/apache/maven-compiler-plugin/pull/207;>#207)
 https://github.com/jorsol;>@​jorsol
   https://issues.apache.org/jira/browse/MCOMPILER-551;>[MCOMPILER-551] 
- Upgrade Parent to 40 

[PR] Bump org.codehaus.plexus:plexus-io from 3.4.1 to 3.4.2 [maven-javadoc-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #257:
URL: https://github.com/apache/maven-javadoc-plugin/pull/257

   Bumps 
[org.codehaus.plexus:plexus-io](https://github.com/codehaus-plexus/plexus-io) 
from 3.4.1 to 3.4.2.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-io/releases;>org.codehaus.plexus:plexus-io's
 releases.
   
   plexus-io-3.4.2
   
    Dependency updates
   
   Update sisu.inject to 0.9.0.M2
   Bump guice from 5.1.0 to 6.0.0
   Bump commons-io:commons-io from 2.11.0 to 2.15.1
   Bump plexus-utils from 3.5.0 to 4.0.0
   
    Maintenance
   
   JUnit4 to 5 migration (https://redirect.github.com/codehaus-plexus/plexus-io/pull/111;>#111) 
https://github.com/slachiewicz;>@​slachiewicz
   Code cleanup (https://redirect.github.com/codehaus-plexus/plexus-io/pull/113;>#113) 
https://github.com/slachiewicz;>@​slachiewicz
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-io/pull/122;>#122) 
https://github.com/slachiewicz;>@​slachiewicz
   Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.3.0
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-io/commit/f4a7838b46e24814b1bad5a069d46627056c33f1;>f4a7838
 [maven-release-plugin] prepare release plexus-io-3.4.2
   https://github.com/codehaus-plexus/plexus-io/commit/74297f1cf6df09faa7257563ec628c447390e7aa;>74297f1
 Update sisu.inject to 0.9.0.M2
   https://github.com/codehaus-plexus/plexus-io/commit/ea0c6737fc80efc383a3798ea0a2a2b349f13ad0;>ea0c673
 Bump org.codehaus.plexus:plexus-testing from 1.2.0 to 1.3.0
   https://github.com/codehaus-plexus/plexus-io/commit/1fe3b07aad8cba086b090d6a4f36109c20eb6ff8;>1fe3b07
 Bump commons-io:commons-io from 2.15.0 to 2.15.1
   https://github.com/codehaus-plexus/plexus-io/commit/5f3c175e1fecbda9157026a1aceff594293d755f;>5f3c175
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-io/commit/8524fcab4d95fb1ef748ac43825c2fadef80e746;>8524fca
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-io/commit/594c26937a68c326270a7fc44aefd635bd008840;>594c269
 Bump commons-io:commons-io from 2.14.0 to 2.15.0
   https://github.com/codehaus-plexus/plexus-io/commit/a753eeb075dac8a424236881832e24b927f0ee00;>a753eeb
 Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.2.0
   https://github.com/codehaus-plexus/plexus-io/commit/11f8db4e9cde36fec65ca1bcb7576864aac5be5b;>11f8db4
 Correct sisu.inject dependency version
   https://github.com/codehaus-plexus/plexus-io/commit/5ad18c992cc73e962bc41d015efb2000603a9e12;>5ad18c9
 Bump org.codehaus.plexus:plexus from 14 to 15
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-io/compare/plexus-io-3.4.1...plexus-io-3.4.2;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-io=maven=3.4.1=3.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about 

[PR] Bump org.codehaus.plexus:plexus-archiver from 4.9.0 to 4.9.1 [maven-javadoc-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #256:
URL: https://github.com/apache/maven-javadoc-plugin/pull/256

   Bumps 
[org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
 from 4.9.0 to 4.9.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases;>org.codehaus.plexus:plexus-archiver's
 releases.
   
   4.9.1
   
    New features and improvements
   
   https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in Abstrac… (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/312;>#312)
 https://github.com/redzi;>@​redzi
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/316;>#316)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/314;>#314)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.15.0 to 2.15.1 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/313;>#313)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/309;>#309)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/315;>#315)
 https://github.com/slachiewicz;>@​slachiewicz
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/fb02b02a78d4adecef4e32f304f9f6d3ab7b9861;>fb02b02
 [maven-release-plugin] prepare release plexus-archiver-4.9.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/d953f322ccbb38479b04abbde3645f77eafd489a;>d953f32
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-archiver/commit/54c42c20e531b9e642a3c70c215814b5a4d61a3b;>54c42c2
 Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11
   https://github.com/codehaus-plexus/plexus-archiver/commit/cb4b6668a8dde2d04aaac37e8265b3e009cb2ca9;>cb4b666
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-archiver/commit/20cf65421aacbb133a9fe228dbe9fc06000def7a;>20cf654
 Bump commons-io:commons-io from 2.15.0 to 2.15.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/fca25e56461394a6d34af8e018ec0348885cbad8;>fca25e5
 https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in AbstractFileSet.
   https://github.com/codehaus-plexus/plexus-archiver/commit/9c0e021ab9d58dd8b05a74a5ba6c82f8070c8d93;>9c0e021
 Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/b353ae3240cfda1c23ec8c1d80e719af40698b66;>b353ae3
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.9.0...plexus-archiver-4.9.1;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver=maven=4.9.0=4.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it 

[PR] Bump org.codehaus.plexus:plexus-resources from 1.2.0 to 1.3.0 [maven-remote-resources-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #49:
URL: https://github.com/apache/maven-remote-resources-plugin/pull/49

   Bumps 
[org.codehaus.plexus:plexus-resources](https://github.com/codehaus-plexus/plexus-resources)
 from 1.2.0 to 1.3.0.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-resources/releases;>org.codehaus.plexus:plexus-resources's
 releases.
   
   1.3.0
   
   
   Restore public constructor to DefaultResourceManager (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/69;>#69)
 https://github.com/slachiewicz;>@​slachiewicz
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.3.0 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/89;>#89)
 https://github.com/dependabot;>@​dependabot
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/88;>#88)
 https://github.com/dependabot;>@​dependabot
   Update parent pom to 15 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/86;>#86)
 https://github.com/slachiewicz;>@​slachiewicz
   Bump mockito.version from 4.8.1 to 4.11.0 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/73;>#73)
 https://github.com/dependabot;>@​dependabot
   Bump slf4j-mock from 2.2.0 to 2.3.0 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/67;>#67)
 https://github.com/dependabot;>@​dependabot
   Bump slf4j-api from 1.7.33 to 1.7.36 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/44;>#44)
 https://github.com/dependabot;>@​dependabot
   Bump slf4j-mock from 2.1.1 to 2.2.0 (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/51;>#51)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/83;>#83)
 https://github.com/slachiewicz;>@​slachiewicz
   Create LICENSE (https://redirect.github.com/codehaus-plexus/plexus-resources/pull/70;>#70)
 https://github.com/slachiewicz;>@​slachiewicz
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-resources/commit/d1a3e09b96bda47aa10f7710bd744131b0ac6bbd;>d1a3e09
 [maven-release-plugin] prepare release plexus-resources-1.3.0
   https://github.com/codehaus-plexus/plexus-resources/commit/70160eb6ceef6e1cb0b35de3ee3013a2d48ff264;>70160eb
 Drop redundant dependency to old Guice
   https://github.com/codehaus-plexus/plexus-resources/commit/5fb2714a6aa8dc3243f3c5db8c8ed890c22092e1;>5fb2714
 Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.3.0
   https://github.com/codehaus-plexus/plexus-resources/commit/e48cdc12e9f782ef8023205244c5cf99dd29cc62;>e48cdc1
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-resources/commit/5106d8d9ad5da896dbf8c561cb95759a67022af8;>5106d8d
 Switch to plexus parent pom 15
   https://github.com/codehaus-plexus/plexus-resources/commit/6f7c8ab83c619ec2bab78790a6dde4e99b5ec79d;>6f7c8ab
 Switch to plexus parent pom 14
   https://github.com/codehaus-plexus/plexus-resources/commit/512f188d28472759b17e34d4b96bd0f71f613294;>512f188
 Reformat code
   https://github.com/codehaus-plexus/plexus-resources/commit/441117b1b3ddb91dcb311f2eacda2f39618b8774;>441117b
 Bump org.codehaus.plexus:plexus-components from 10.0 to 14.2
   https://github.com/codehaus-plexus/plexus-resources/commit/70169abba6988cf23e560d48353e3f58bcd4c51f;>70169ab
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-resources/commit/1c62e47b1dd883c17d418c613b6a46ad7c6ee10a;>1c62e47
 Delete .github/workflows/codeql-analysis.yml
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-resources/compare/plexus-resources-1.2.0...plexus-resources-1.3.0;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-resources=maven=1.2.0=1.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this 

Re: [PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0 [maven-war-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] closed pull request #56: Bump 
org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0
URL: https://github.com/apache/maven-war-plugin/pull/56


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 [maven-war-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #62:
URL: https://github.com/apache/maven-war-plugin/pull/62

   Bumps 
[org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
 from 4.8.0 to 4.9.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases;>org.codehaus.plexus:plexus-archiver's
 releases.
   
   4.9.1
   
    New features and improvements
   
   https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in Abstrac… (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/312;>#312)
 https://github.com/redzi;>@​redzi
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/316;>#316)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/314;>#314)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.15.0 to 2.15.1 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/313;>#313)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/309;>#309)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/315;>#315)
 https://github.com/slachiewicz;>@​slachiewicz
   
   4.9.0
   
    New features and improvements
   
   Allow copy all files without timestamp checking by DirectoryArchiver (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/304;>#304)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   
    Dependency updates
   
   Bump com.github.luben:zstd-jni from 1.5.5-6 to 1.5.5-10 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/307;>#307)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.14.0 to 2.15.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/303;>#303)
 https://github.com/dependabot;>@​dependabot
   Bump org.codehaus.plexus:plexus from 14 to 15 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/302;>#302)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-5 to 1.5.5-6 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/301;>#301)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.13.0 to 2.14.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/300;>#300)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.23.0 to 1.24.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/298;>#298)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Update info about release notes in README, ReleaseNotes (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/308;>#308)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/fb02b02a78d4adecef4e32f304f9f6d3ab7b9861;>fb02b02
 [maven-release-plugin] prepare release plexus-archiver-4.9.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/d953f322ccbb38479b04abbde3645f77eafd489a;>d953f32
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-archiver/commit/54c42c20e531b9e642a3c70c215814b5a4d61a3b;>54c42c2
 Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11
   https://github.com/codehaus-plexus/plexus-archiver/commit/cb4b6668a8dde2d04aaac37e8265b3e009cb2ca9;>cb4b666
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-archiver/commit/20cf65421aacbb133a9fe228dbe9fc06000def7a;>20cf654
 Bump commons-io:commons-io from 2.15.0 to 2.15.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/fca25e56461394a6d34af8e018ec0348885cbad8;>fca25e5
 https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in AbstractFileSet.
   https://github.com/codehaus-plexus/plexus-archiver/commit/9c0e021ab9d58dd8b05a74a5ba6c82f8070c8d93;>9c0e021
 Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/b353ae3240cfda1c23ec8c1d80e719af40698b66;>b353ae3
 [maven-release-plugin] prepare for next development iteration
   https://github.com/codehaus-plexus/plexus-archiver/commit/b31477fb321484a115fcfa44d0f6b6cb0a902d8c;>b31477f
 [maven-release-plugin] prepare release plexus-archiver-4.9.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/87f62d5ffed709dc0d429d643b2f064dc84ee2ad;>87f62d5
 Update info about release notes in README, ReleaseNotes
   

Re: [PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0 [maven-war-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] commented on PR #56:
URL: https://github.com/apache/maven-war-plugin/pull/56#issuecomment-1868642848

   Superseded by #62.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump commons-io:commons-io from 2.13.0 to 2.15.1 [maven-war-plugin]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #61:
URL: https://github.com/apache/maven-war-plugin/pull/61

   Bumps commons-io:commons-io from 2.13.0 to 2.15.1.
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=commons-io:commons-io=maven=2.13.0=2.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.codehaus.plexus:plexus-io from 3.4.1 to 3.4.2 [maven-wrapper]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #116:
URL: https://github.com/apache/maven-wrapper/pull/116

   Bumps 
[org.codehaus.plexus:plexus-io](https://github.com/codehaus-plexus/plexus-io) 
from 3.4.1 to 3.4.2.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-io/releases;>org.codehaus.plexus:plexus-io's
 releases.
   
   plexus-io-3.4.2
   
    Dependency updates
   
   Update sisu.inject to 0.9.0.M2
   Bump guice from 5.1.0 to 6.0.0
   Bump commons-io:commons-io from 2.11.0 to 2.15.1
   Bump plexus-utils from 3.5.0 to 4.0.0
   
    Maintenance
   
   JUnit4 to 5 migration (https://redirect.github.com/codehaus-plexus/plexus-io/pull/111;>#111) 
https://github.com/slachiewicz;>@​slachiewicz
   Code cleanup (https://redirect.github.com/codehaus-plexus/plexus-io/pull/113;>#113) 
https://github.com/slachiewicz;>@​slachiewicz
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-io/pull/122;>#122) 
https://github.com/slachiewicz;>@​slachiewicz
   Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.3.0
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-io/commit/f4a7838b46e24814b1bad5a069d46627056c33f1;>f4a7838
 [maven-release-plugin] prepare release plexus-io-3.4.2
   https://github.com/codehaus-plexus/plexus-io/commit/74297f1cf6df09faa7257563ec628c447390e7aa;>74297f1
 Update sisu.inject to 0.9.0.M2
   https://github.com/codehaus-plexus/plexus-io/commit/ea0c6737fc80efc383a3798ea0a2a2b349f13ad0;>ea0c673
 Bump org.codehaus.plexus:plexus-testing from 1.2.0 to 1.3.0
   https://github.com/codehaus-plexus/plexus-io/commit/1fe3b07aad8cba086b090d6a4f36109c20eb6ff8;>1fe3b07
 Bump commons-io:commons-io from 2.15.0 to 2.15.1
   https://github.com/codehaus-plexus/plexus-io/commit/5f3c175e1fecbda9157026a1aceff594293d755f;>5f3c175
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-io/commit/8524fcab4d95fb1ef748ac43825c2fadef80e746;>8524fca
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-io/commit/594c26937a68c326270a7fc44aefd635bd008840;>594c269
 Bump commons-io:commons-io from 2.14.0 to 2.15.0
   https://github.com/codehaus-plexus/plexus-io/commit/a753eeb075dac8a424236881832e24b927f0ee00;>a753eeb
 Bump org.codehaus.plexus:plexus-testing from 1.1.0 to 1.2.0
   https://github.com/codehaus-plexus/plexus-io/commit/11f8db4e9cde36fec65ca1bcb7576864aac5be5b;>11f8db4
 Correct sisu.inject dependency version
   https://github.com/codehaus-plexus/plexus-io/commit/5ad18c992cc73e962bc41d015efb2000603a9e12;>5ad18c9
 Bump org.codehaus.plexus:plexus from 14 to 15
   Additional commits viewable in https://github.com/codehaus-plexus/plexus-io/compare/plexus-io-3.4.1...plexus-io-3.4.2;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-io=maven=3.4.1=3.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this 

Re: [PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0 [maven-wrapper]

2023-12-24 Thread via GitHub


dependabot[bot] closed pull request #112: Bump 
org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0
URL: https://github.com/apache/maven-wrapper/pull/112


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0 [maven-wrapper]

2023-12-24 Thread via GitHub


dependabot[bot] commented on PR #112:
URL: https://github.com/apache/maven-wrapper/pull/112#issuecomment-1868642218

   Superseded by #115.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 [maven-wrapper]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #115:
URL: https://github.com/apache/maven-wrapper/pull/115

   Bumps 
[org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver)
 from 4.8.0 to 4.9.1.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-archiver/releases;>org.codehaus.plexus:plexus-archiver's
 releases.
   
   4.9.1
   
    New features and improvements
   
   https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in Abstrac… (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/312;>#312)
 https://github.com/redzi;>@​redzi
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/316;>#316)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/314;>#314)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.15.0 to 2.15.1 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/313;>#313)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/309;>#309)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Reuse plexus-pom action for CI (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/315;>#315)
 https://github.com/slachiewicz;>@​slachiewicz
   
   4.9.0
   
    New features and improvements
   
   Allow copy all files without timestamp checking by DirectoryArchiver (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/304;>#304)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   
    Dependency updates
   
   Bump com.github.luben:zstd-jni from 1.5.5-6 to 1.5.5-10 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/307;>#307)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.14.0 to 2.15.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/303;>#303)
 https://github.com/dependabot;>@​dependabot
   Bump org.codehaus.plexus:plexus from 14 to 15 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/302;>#302)
 https://github.com/dependabot;>@​dependabot
   Bump com.github.luben:zstd-jni from 1.5.5-5 to 1.5.5-6 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/301;>#301)
 https://github.com/dependabot;>@​dependabot
   Bump commons-io:commons-io from 2.13.0 to 2.14.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/300;>#300)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.commons:commons-compress from 1.23.0 to 1.24.0 (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/298;>#298)
 https://github.com/dependabot;>@​dependabot
   
    Maintenance
   
   Update info about release notes in README, ReleaseNotes (https://redirect.github.com/codehaus-plexus/plexus-archiver/pull/308;>#308)
 https://github.com/slawekjaranowski;>@​slawekjaranowski
   
   
   
   
   Commits
   
   https://github.com/codehaus-plexus/plexus-archiver/commit/fb02b02a78d4adecef4e32f304f9f6d3ab7b9861;>fb02b02
 [maven-release-plugin] prepare release plexus-archiver-4.9.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/d953f322ccbb38479b04abbde3645f77eafd489a;>d953f32
 Bump org.codehaus.plexus:plexus from 15 to 16
   https://github.com/codehaus-plexus/plexus-archiver/commit/54c42c20e531b9e642a3c70c215814b5a4d61a3b;>54c42c2
 Bump com.github.luben:zstd-jni from 1.5.5-10 to 1.5.5-11
   https://github.com/codehaus-plexus/plexus-archiver/commit/cb4b6668a8dde2d04aaac37e8265b3e009cb2ca9;>cb4b666
 Reuse plexus-pom action for CI
   https://github.com/codehaus-plexus/plexus-archiver/commit/20cf65421aacbb133a9fe228dbe9fc06000def7a;>20cf654
 Bump commons-io:commons-io from 2.15.0 to 2.15.1
   https://github.com/codehaus-plexus/plexus-archiver/commit/fca25e56461394a6d34af8e018ec0348885cbad8;>fca25e5
 https://redirect.github.com/codehaus-plexus/plexus-archiver/issues/311;>#311
 - provide fluent setter for usingDefaultExcludes flag in AbstractFileSet.
   https://github.com/codehaus-plexus/plexus-archiver/commit/9c0e021ab9d58dd8b05a74a5ba6c82f8070c8d93;>9c0e021
 Bump org.apache.commons:commons-compress from 1.24.0 to 1.25.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/b353ae3240cfda1c23ec8c1d80e719af40698b66;>b353ae3
 [maven-release-plugin] prepare for next development iteration
   https://github.com/codehaus-plexus/plexus-archiver/commit/b31477fb321484a115fcfa44d0f6b6cb0a902d8c;>b31477f
 [maven-release-plugin] prepare release plexus-archiver-4.9.0
   https://github.com/codehaus-plexus/plexus-archiver/commit/87f62d5ffed709dc0d429d643b2f064dc84ee2ad;>87f62d5
 Update info about release notes in README, ReleaseNotes
   

[PR] Bump org.codehaus.plexus:plexus-component-metadata from 2.1.1 to 2.2.0 [maven-jarsigner]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #13:
URL: https://github.com/apache/maven-jarsigner/pull/13

   Bumps 
[org.codehaus.plexus:plexus-component-metadata](https://github.com/codehaus-plexus/plexus-containers)
 from 2.1.1 to 2.2.0.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-containers/releases;>org.codehaus.plexus:plexus-component-metadata's
 releases.
   
   2.2.0
   
   
   improve documentation to switch to Sisu (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/121;>#121)
 https://github.com/hboutemy;>@​hboutemy
   pom clean after parent upgrade (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/120;>#120)
 https://github.com/hboutemy;>@​hboutemy
   Improve plexus-component metadata - remove dependency to 
plexus-container-default (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/109;>#109)
 https://github.com/slachiewicz;>@​slachiewicz
   Add deprecation information to Plexus components (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/108;>#108)
 https://github.com/slachiewicz;>@​slachiewicz
   Require Java 8 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/107;>#107)
 https://github.com/slachiewicz;>@​slachiewicz
   Drop plexus-container-default artefact (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/135;>#135)
 https://github.com/slachiewicz;>@​slachiewicz
   Require Maven 3.6.3+ (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/133;>#133)
 https://github.com/slachiewicz;>@​slachiewicz
   Switch to JUnit5 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/134;>#134)
 https://github.com/slachiewicz;>@​slachiewicz
   Bump org.eclipse.sisu.plexus from 0.3.0.M1 to 0.9.0.M2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/113;>#113)
 https://github.com/dependabot;>@​dependabot
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus-testing from 1.2.0 to 1.3.0 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/139;>#139)
 https://github.com/dependabot;>@​dependabot
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/138;>#138)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.xbean:xbean-reflect from 4.23 to 4.24 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/131;>#131)
 https://github.com/dependabot;>@​dependabot
   Reorg dependencyManagement to subprojects. Prepare to drop 
plexus-container-default (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/132;>#132)
 https://github.com/slachiewicz;>@​slachiewicz
   Bump org.ow2.asm:asm from 9.5 to 9.6 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/129;>#129)
 https://github.com/dependabot;>@​dependabot
   Bump maven-invoker-plugin from 3.5.1 to 3.6.0 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/125;>#125)
 https://github.com/dependabot;>@​dependabot
   Bump xbean-reflect from 4.22 to 4.23 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/116;>#116)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-annotations from 3.8.1 to 3.8.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/104;>#104)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.8.1 to 3.8.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/105;>#105)
 https://github.com/dependabot;>@​dependabot
   Bump maven-project-info-reports-plugin from 3.4.2 to 3.4.3 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/102;>#102)
 https://github.com/dependabot;>@​dependabot
   Bump asm from 9.4 to 9.5 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/99;>#99)
 https://github.com/dependabot;>@​dependabot
   Bump plexus-utils from 3.5.0 to 3.5.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/97;>#97)
 https://github.com/dependabot;>@​dependabot
   Bump checkstyle from 9.2 to 9.3 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/96;>#96)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.7.1 to 3.8.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/92;>#92)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-annotations from 3.7.1 to 3.8.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/93;>#93)
 https://github.com/dependabot;>@​dependabot
   Bump asm from 9.3 to 9.4 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/88;>#88)
 https://github.com/dependabot;>@​dependabot
   Bump maven-project-info-reports-plugin from 3.4.1 to 3.4.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/85;>#85)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.7.0 to 3.7.1 

[PR] Bump org.codehaus.plexus:plexus-component-annotations from 2.1.1 to 2.2.0 [maven-jarsigner]

2023-12-24 Thread via GitHub


dependabot[bot] opened a new pull request, #12:
URL: https://github.com/apache/maven-jarsigner/pull/12

   Bumps 
[org.codehaus.plexus:plexus-component-annotations](https://github.com/codehaus-plexus/plexus-containers)
 from 2.1.1 to 2.2.0.
   
   Release notes
   Sourced from https://github.com/codehaus-plexus/plexus-containers/releases;>org.codehaus.plexus:plexus-component-annotations's
 releases.
   
   2.2.0
   
   
   improve documentation to switch to Sisu (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/121;>#121)
 https://github.com/hboutemy;>@​hboutemy
   pom clean after parent upgrade (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/120;>#120)
 https://github.com/hboutemy;>@​hboutemy
   Improve plexus-component metadata - remove dependency to 
plexus-container-default (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/109;>#109)
 https://github.com/slachiewicz;>@​slachiewicz
   Add deprecation information to Plexus components (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/108;>#108)
 https://github.com/slachiewicz;>@​slachiewicz
   Require Java 8 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/107;>#107)
 https://github.com/slachiewicz;>@​slachiewicz
   Drop plexus-container-default artefact (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/135;>#135)
 https://github.com/slachiewicz;>@​slachiewicz
   Require Maven 3.6.3+ (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/133;>#133)
 https://github.com/slachiewicz;>@​slachiewicz
   Switch to JUnit5 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/134;>#134)
 https://github.com/slachiewicz;>@​slachiewicz
   Bump org.eclipse.sisu.plexus from 0.3.0.M1 to 0.9.0.M2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/113;>#113)
 https://github.com/dependabot;>@​dependabot
   
    Dependency updates
   
   Bump org.codehaus.plexus:plexus-testing from 1.2.0 to 1.3.0 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/139;>#139)
 https://github.com/dependabot;>@​dependabot
   Bump org.codehaus.plexus:plexus from 15 to 16 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/138;>#138)
 https://github.com/dependabot;>@​dependabot
   Bump org.apache.xbean:xbean-reflect from 4.23 to 4.24 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/131;>#131)
 https://github.com/dependabot;>@​dependabot
   Reorg dependencyManagement to subprojects. Prepare to drop 
plexus-container-default (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/132;>#132)
 https://github.com/slachiewicz;>@​slachiewicz
   Bump org.ow2.asm:asm from 9.5 to 9.6 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/129;>#129)
 https://github.com/dependabot;>@​dependabot
   Bump maven-invoker-plugin from 3.5.1 to 3.6.0 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/125;>#125)
 https://github.com/dependabot;>@​dependabot
   Bump xbean-reflect from 4.22 to 4.23 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/116;>#116)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-annotations from 3.8.1 to 3.8.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/104;>#104)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.8.1 to 3.8.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/105;>#105)
 https://github.com/dependabot;>@​dependabot
   Bump maven-project-info-reports-plugin from 3.4.2 to 3.4.3 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/102;>#102)
 https://github.com/dependabot;>@​dependabot
   Bump asm from 9.4 to 9.5 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/99;>#99)
 https://github.com/dependabot;>@​dependabot
   Bump plexus-utils from 3.5.0 to 3.5.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/97;>#97)
 https://github.com/dependabot;>@​dependabot
   Bump checkstyle from 9.2 to 9.3 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/96;>#96)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.7.1 to 3.8.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/92;>#92)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-annotations from 3.7.1 to 3.8.1 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/93;>#93)
 https://github.com/dependabot;>@​dependabot
   Bump asm from 9.3 to 9.4 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/88;>#88)
 https://github.com/dependabot;>@​dependabot
   Bump maven-project-info-reports-plugin from 3.4.1 to 3.4.2 (https://redirect.github.com/codehaus-plexus/plexus-containers/pull/85;>#85)
 https://github.com/dependabot;>@​dependabot
   Bump maven-plugin-plugin from 3.7.0 to 3.7.1 

[jira] [Commented] (SUREFIRE-1644) Identify flaky tests in Surefire report

2023-12-24 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/SUREFIRE-1644?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800215#comment-17800215
 ] 

Michael Osipov commented on SUREFIRE-1644:
--

Some parsing ground work has been done in SUREFIRE-1345.

> Identify flaky tests in Surefire report
> ---
>
> Key: SUREFIRE-1644
> URL: https://issues.apache.org/jira/browse/SUREFIRE-1644
> Project: Maven Surefire
>  Issue Type: Improvement
>  Components: Maven Surefire Report Plugin
>Reporter: André Carmo
>Priority: Major
>
> Hi all,
>  
> There is a feature that allows to rerun failing tests: 
> [https://maven.apache.org/surefire/maven-surefire-plugin/examples/rerun-failing-tests.html]
> This feature outputs to the surefire XML report some elements like 
> flakyFailure, flakyError, and others.
>  
> However, when generating the surefire report (invoking something like mvn 
> surefire-report:report-only) those XML elements are not used and are not 
> considered for the HTML report. That would be a great improvement.
>  
> I can try to make a pull request for that, but please give me an overview 
> first on where to look at to try to cut some time and some effort.
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Assigned] (MPMD-250) Resolve Code Duplication for XRef Link generation

2023-12-24 Thread Michael Osipov (Jira)


 [ 
https://issues.apache.org/jira/browse/MPMD-250?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Osipov reassigned MPMD-250:
---

Assignee: Michael Osipov

> Resolve Code Duplication for XRef Link generation
> -
>
> Key: MPMD-250
> URL: https://issues.apache.org/jira/browse/MPMD-250
> Project: Maven PMD Plugin
>  Issue Type: Task
>Reporter: Andreas Dangel
>Assignee: Michael Osipov
>Priority: Major
>
> PMD, Checkstyle and Surefire all have the same code to determine the xref 
> code location for reporting and linking to the source code.
> See MPMD-128



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MNG-7043) MavenITmng3991ValidDependencyScopeTest will fail with Maven 4.0.0

2023-12-24 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800212#comment-17800212
 ] 

Michael Osipov commented on MNG-7043:
-

Still valid.

> MavenITmng3991ValidDependencyScopeTest will fail with Maven 4.0.0
> -
>
> Key: MNG-7043
> URL: https://issues.apache.org/jira/browse/MNG-7043
> Project: Maven
>  Issue Type: Bug
>  Components: Integration Tests
>Affects Versions: 4.0.0
>Reporter: Michael Osipov
>Priority: Major
>
> As soon as Maven master will move to 4.0.0 
> {{MavenITmng3991ValidDependencyScopeTest}} will fail due to the coded version 
> constraint:
> {code:java}
> public MavenITmng3991ValidDependencyScopeTest()
> {
> // TODO: One day, we should be able to error out but this requires to 
> consider extensions and their use cases
> super( "[4.0,)" );
> }
> {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MNG-7018) Maven does not traverse all repos when downloading extensions from .mvn/extensions.xml

2023-12-24 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7018?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800213#comment-17800213
 ] 

Michael Osipov commented on MNG-7018:
-

Still valid.

> Maven does not traverse all repos when downloading extensions from 
> .mvn/extensions.xml
> --
>
> Key: MNG-7018
> URL: https://issues.apache.org/jira/browse/MNG-7018
> Project: Maven
>  Issue Type: Bug
>  Components: Artifacts and Repositories, Dependencies
>Affects Versions: 3.6.3
>Reporter: Michael Osipov
>Priority: Major
> Attachments: MNG-6114-settings.xml, MNG-6114.log, 
> master-settings.xml, master.log
>
>
> Check out Maven from {{MNG-6114}}. Run Core ITs, see MNG-5771 fail. (Compare 
> uploaded log files and settings). MNG-6114 orders all settings elements from 
> global to local. I.e., repos from global settings come first. Here is the 
> bug: One expects Maven to traverse all available repos to download artifacts, 
> but Maven stops here with the first one. W/o MNG-6114 it works accidently 
> because Central override was servered by a mirror.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (SCM-907) GitScmProviderRepository#parseUrl() does not comply with RFC 3986 and RFC 8089

2023-12-24 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/SCM-907?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800211#comment-17800211
 ] 

Michael Osipov commented on SCM-907:


Still valid.

> GitScmProviderRepository#parseUrl() does not comply with RFC 3986 and RFC 8089
> --
>
> Key: SCM-907
> URL: https://issues.apache.org/jira/browse/SCM-907
> Project: Maven SCM
>  Issue Type: Bug
>  Components: maven-scm-provider-gitexe, maven-scm-provider-jgit
>Affects Versions: 1.10.0
>Reporter: Michael Osipov
>Priority: Major
>
> This issue was been found on one of Jenkins slaves. Consider the following 
> path: 
> {{F:\jenkins\jenkins-slave\workspace\maven-box_maven-scm_SCM-906-3AXCXWOA5KAAL37TCEKGJUQCHVU3HMOGCVV63JP76C24C3X6DHOA@2\m\maven-scm-providers\maven-scm-providers-git\maven-scm-provider-gitexe\target}}.
>  THe aforementioned class outputs:
> {noformat}
> file:///F:/jenkins/jenkins-slave/workspace/maven-box_maven-scm_SCM-906-3AXCXWOA5KAAL37TCEKGJUQCHVU3HMOGCVV63JP76C24C3X6DHOA@2/m/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe/target
> file://2/m/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe/target
> {noformat}
> The parse logic incorrectly assumes that the last {{@}} is for the user info. 
> According to RFC 8089 a file URL may contain this information, but our parser 
> would still fail becuase it uses {{lastIndexOf}}. It must stop searching to 
> the first slash.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (SCM-909) SvnScmProviderRepository#parseUrl() does not comply with RFC 3986 and RFC 8089

2023-12-24 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/SCM-909?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800210#comment-17800210
 ] 

Michael Osipov commented on SCM-909:


Still valid.

> SvnScmProviderRepository#parseUrl() does not comply with RFC 3986 and RFC 8089
> --
>
> Key: SCM-909
> URL: https://issues.apache.org/jira/browse/SCM-909
> Project: Maven SCM
>  Issue Type: Bug
>  Components: maven-scm-provider-svn
>Affects Versions: 1.10.0
>Reporter: Michael Osipov
>Priority: Major
>
> This issue was been found on one of Jenkins slaves. Consider the following 
> path: 
> {{F:\jenkins\jenkins-slave\workspace\maven-box_maven-scm_SCM-906-3AXCXWOA5KAAL37TCEKGJUQCHVU3HMOGCVV63JP76C24C3X6DHOA@2\m\maven-scm-providers\maven-scm-providers-git\maven-scm-provider-gitexe\target}}.
>  THe aforementioned class outputs:
> {noformat}
> file:///F:/jenkins/jenkins-slave/workspace/maven-box_maven-scm_SCM-906-3AXCXWOA5KAAL37TCEKGJUQCHVU3HMOGCVV63JP76C24C3X6DHOA@2/m/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe/target
> file://2/m/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe/target
> {noformat}
> The parse logic incorrectly assumes that the last {{@}} is for the user info. 
> According to RFC 8089 a file URL may contain this information, but our parser 
> would still fail becuase it uses {{indexOf}}. It must stop searching to the 
> first slash.
> Note: the example is from the GitExe provider, but it also applies to SvnExe.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (WAGON-583) WebDavWagon and tests do not adhere to RFC 4918

2023-12-24 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/WAGON-583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800209#comment-17800209
 ] 

Michael Osipov commented on WAGON-583:
--

Still valid.

> WebDavWagon and tests do not adhere to RFC 4918
> ---
>
> Key: WAGON-583
> URL: https://issues.apache.org/jira/browse/WAGON-583
> Project: Maven Wagon
>  Issue Type: Bug
>  Components: wagon-webdav
>Affects Versions: 3.3.4
>Reporter: Michael Osipov
>Priority: Major
>
> While working on release 3.4.0 I have noticed several issues (non-exhaustive) 
> with the {{WebDavWagon}}:
> * On a {{PUT}} request 409 is ignored when parent collections do not exist.
> * Redirects on {{MKCOL}} are competely ignored because not the relocation is 
> not passed to {{mkdirs()}}, but the original path.
> * Status code management from {{MKCOL}} are incomplete.
> * Most tests treat WebDAV like HTTP which is wrong. {{MKCOL}} requests are 
> answered with 404.
> They are likely many other issues I did not discover or already forgot. A 
> serious amount of time needs to be invested to make this Wagon decently 
> compatible with real world servers and along with real world tests.
> Therefore, I propose following options:
> * Bring this on par with the regular {{HttpWagon}}
> * Deprecate in 3.x and remove in 4.0.0
> * Mark it especially as unmaintained (abandoned) from 3.x



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (WAGON-584) LightweightHttpWagon and tests are built on false assumptions around internal buffering

2023-12-24 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/WAGON-584?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800208#comment-17800208
 ] 

Michael Osipov commented on WAGON-584:
--

Still valid.

> LightweightHttpWagon and tests are built on false assumptions around internal 
> buffering
> ---
>
> Key: WAGON-584
> URL: https://issues.apache.org/jira/browse/WAGON-584
> Project: Maven Wagon
>  Issue Type: Bug
>  Components: wagon-http-lightweight
>Affects Versions: 3.3.4
>Reporter: Michael Osipov
>Priority: Major
>
> The {{LightweightHttpWagon}} heavily differs from {{HttpWagon}} internally, 
> the way {{HttpURLConnection}} is implemented it is virtually impossible to 
> make them behave similar (or identical).
> Notable differences:
> * Expect Continue is virtually not supported and signals an exception as soon 
> as non-2xx is received
> * *All* content is buffered in a byte array making it extremely inefficient 
> with large uploads
> * As soon as streaming mode is enabled (see 
> {{HttpURLConnection#setFixedLengthStreamingMode(long)}} and 
> {{HttpURLConnection#setChunkedStreamingMode(int)}}) redirect and 
> authentication support are disabled
> Tests do assume that both behave the same although {{HttpWagon}} is fully 
> streaming while the other one is not. So, the tests are illdesigned/based on 
> false assumptions. Run branches 
> {{WAGON-584_streaming}}/{{WAGON-584_streaming_no-expect-continue}} and see 
> the failures.
> This behavior is nowhere documented and not properly covered in tests.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MPOM-399) Upgrade minimalMavenBuildVersion from 3.2.5 to 3.6.3 - the minimum used by plugins

2023-12-24 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/MPOM-399?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800198#comment-17800198
 ] 

Michael Osipov commented on MPOM-399:
-

Created: https://github.com/apache/maven-site-plugin/pull/166

> Upgrade minimalMavenBuildVersion from 3.2.5 to 3.6.3 - the minimum used by 
> plugins
> --
>
> Key: MPOM-399
> URL: https://issues.apache.org/jira/browse/MPOM-399
> Project: Maven POMs
>  Issue Type: Improvement
>  Components: asf
>Reporter: Slawomir Jaranowski
>Assignee: Slawomir Jaranowski
>Priority: Major
> Fix For: ASF-31
>
>
> Current is {{3.2.5}}
> https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dist-tool/job/master/site/dist-tool-prerequisites.html
> {{maven-help-plugin}} - {{3.4.0}} requires {{3.6.3}}
>  
> Rationale:
>  - early build fail with proper message - not when newer plugin used
>  - 3.6.3 minimum version  widly used on Mavne CI and in other ASF project
>  - other than Maven plugins - all ASF project should use one of the newest 
> version of Maven
>  - in special case property {{minimalMavenBuildVersion}} can be overridden



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[PR] Expand and update CI for Maven 3.2.5 and newer [maven-site-plugin]

2023-12-24 Thread via GitHub


michael-o opened a new pull request, #166:
URL: https://github.com/apache/maven-site-plugin/pull/166

   Following this checklist to help us incorporate your 
   contribution quickly and easily:
   
- [ ] Make sure there is a [JIRA 
issue](https://issues.apache.org/jira/browse/MSITE) filed 
  for the change (usually before you start working on it).  Trivial 
changes like typos do not 
  require a JIRA issue.  Your pull request should address just this 
issue, without 
  pulling in other changes.
- [ ] Each commit in the pull request should have a meaningful subject line 
and body.
- [ ] Format the pull request title like `[MSITE-XXX] - Fixes bug in 
ApproximateQuantiles`,
  where you replace `MSITE-XXX` with the appropriate JIRA issue. Best 
practice
  is to use the JIRA issue title in the pull request title and in the 
first line of the 
  commit message.
- [ ] Write a pull request description that is detailed enough to 
understand what the pull request does, how, and why.
- [ ] Run `mvn clean verify` to make sure basic checks pass. A more 
thorough check will 
  be performed on your pull request automatically.
- [ ] You have run the integration tests successfully (`mvn -Prun-its clean 
verify`).
   
   If your pull request is about ~20 lines of code you don't need to sign an
   [Individual Contributor License 
Agreement](https://www.apache.org/licenses/icla.pdf) if you are unsure
   please ask on the developers list.
   
   To make clear that you license your contribution under 
   the [Apache License Version 2.0, January 
2004](http://www.apache.org/licenses/LICENSE-2.0)
   you have to acknowledge this by using the following check-box.
   
- [ ] I hereby declare this contribution to be licenced under the [Apache 
License Version 2.0, January 2004](http://www.apache.org/licenses/LICENSE-2.0)
   
- [ ] In any other case, please file an [Apache Individual Contributor 
License Agreement](https://www.apache.org/licenses/icla.pdf).
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MPOM-399) Upgrade minimalMavenBuildVersion from 3.2.5 to 3.6.3 - the minimum used by plugins

2023-12-24 Thread Herve Boutemy (Jira)


[ 
https://issues.apache.org/jira/browse/MPOM-399?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800189#comment-17800189
 ] 

Herve Boutemy commented on MPOM-399:


all these remarks are not wrong

but they avoid the question about the intent of this Jira issue with the "the 
minimum used by plugins" only for POM: it implies our own Maven plugins inherit 
from this minimum requirement

IIUC, we should create an associated update in maven-plugins parent to 
downgrade the prerequisite to 3.2.5, because it is our current strategy

or if this issue is an update of our strategy, this should be made very clear

> Upgrade minimalMavenBuildVersion from 3.2.5 to 3.6.3 - the minimum used by 
> plugins
> --
>
> Key: MPOM-399
> URL: https://issues.apache.org/jira/browse/MPOM-399
> Project: Maven POMs
>  Issue Type: Improvement
>  Components: asf
>Reporter: Slawomir Jaranowski
>Assignee: Slawomir Jaranowski
>Priority: Major
> Fix For: ASF-31
>
>
> Current is {{3.2.5}}
> https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dist-tool/job/master/site/dist-tool-prerequisites.html
> {{maven-help-plugin}} - {{3.4.0}} requires {{3.6.3}}
>  
> Rationale:
>  - early build fail with proper message - not when newer plugin used
>  - 3.6.3 minimum version  widly used on Mavne CI and in other ASF project
>  - other than Maven plugins - all ASF project should use one of the newest 
> version of Maven
>  - in special case property {{minimalMavenBuildVersion}} can be overridden



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MPOM-399) Upgrade minimalMavenBuildVersion from 3.2.5 to 3.6.3 - the minimum used by plugins

2023-12-24 Thread Slawomir Jaranowski (Jira)


[ 
https://issues.apache.org/jira/browse/MPOM-399?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800183#comment-17800183
 ] 

Slawomir Jaranowski commented on MPOM-399:
--

Fix labels for 3.8.x on Jenkins: 
https://github.com/apache/maven-jenkins-env/pull/5

> Upgrade minimalMavenBuildVersion from 3.2.5 to 3.6.3 - the minimum used by 
> plugins
> --
>
> Key: MPOM-399
> URL: https://issues.apache.org/jira/browse/MPOM-399
> Project: Maven POMs
>  Issue Type: Improvement
>  Components: asf
>Reporter: Slawomir Jaranowski
>Assignee: Slawomir Jaranowski
>Priority: Major
> Fix For: ASF-31
>
>
> Current is {{3.2.5}}
> https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dist-tool/job/master/site/dist-tool-prerequisites.html
> {{maven-help-plugin}} - {{3.4.0}} requires {{3.6.3}}
>  
> Rationale:
>  - early build fail with proper message - not when newer plugin used
>  - 3.6.3 minimum version  widly used on Mavne CI and in other ASF project
>  - other than Maven plugins - all ASF project should use one of the newest 
> version of Maven
>  - in special case property {{minimalMavenBuildVersion}} can be overridden



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[PR] Fix labels for Maven 3.8.x [maven-jenkins-env]

2023-12-24 Thread via GitHub


slawekjaranowski opened a new pull request, #5:
URL: https://github.com/apache/maven-jenkins-env/pull/5

   `maven_3_latest` - points to `3.9.6`, for `3.8.x` we should use dedicated 
label
   
   According to documentation: 
   
https://cwiki.apache.org/confluence/pages/viewpage.action?spaceKey=INFRA=Maven+Installation+Matrix
   `3.8.6` is the latest version of `3.8.x` installed on all environments.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Resolved] (MJLINK-77) Update description and parameters of --compress to reflect JDK21 changes

2023-12-24 Thread Benjamin Marwell (Jira)


 [ 
https://issues.apache.org/jira/browse/MJLINK-77?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Benjamin Marwell resolved MJLINK-77.

Resolution: Fixed

> Update description and parameters of --compress to reflect JDK21 changes
> 
>
> Key: MJLINK-77
> URL: https://issues.apache.org/jira/browse/MJLINK-77
> Project: Maven JLink Plugin
>  Issue Type: Task
>Reporter: Benjamin Marwell
>Assignee: Benjamin Marwell
>Priority: Major
> Fix For: 3.2.0
>
>
> Starting from Java 21, the allowed parameters for {{compress}} have changed, 
> and the old ones are suspect to removal:
> {code:java}
> $ jlink --help
> […]
>   --compress  Compression to use in compressing 
> resources:
> Accepted values are:
> zip-[0-9], where zip-0 provides no 
> compression,
> and zip-9 provides the best 
> compression.
> Default is zip-6.
> Deprecated values to be removed in a 
> future release:
> 0:  No compression. Equivalent to 
> zip-0.
> 1:  Constant String Sharing
> 2:  Equivalent to zip-6.
> {code}
> Thus, the current jlink-plugin is incompatible with Java 21:
> {code:java}
> /**
>  * Here you can define the compression of the resources being used. The 
> command line equivalent is:
>  * -c, --compress=level. The valid values for the level 
> are: 0, 1, 2.
>  */
> @Parameter
> private Integer compress;
> {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MJLINK-77) Update description and parameters of --compress to reflect JDK21 changes

2023-12-24 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MJLINK-77?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800176#comment-17800176
 ] 

ASF GitHub Bot commented on MJLINK-77:
--

bmarwell merged PR #183:
URL: https://github.com/apache/maven-jlink-plugin/pull/183




> Update description and parameters of --compress to reflect JDK21 changes
> 
>
> Key: MJLINK-77
> URL: https://issues.apache.org/jira/browse/MJLINK-77
> Project: Maven JLink Plugin
>  Issue Type: Task
>Reporter: Benjamin Marwell
>Assignee: Benjamin Marwell
>Priority: Major
> Fix For: 3.2.0
>
>
> Starting from Java 21, the allowed parameters for {{compress}} have changed, 
> and the old ones are suspect to removal:
> {code:java}
> $ jlink --help
> […]
>   --compress  Compression to use in compressing 
> resources:
> Accepted values are:
> zip-[0-9], where zip-0 provides no 
> compression,
> and zip-9 provides the best 
> compression.
> Default is zip-6.
> Deprecated values to be removed in a 
> future release:
> 0:  No compression. Equivalent to 
> zip-0.
> 1:  Constant String Sharing
> 2:  Equivalent to zip-6.
> {code}
> Thus, the current jlink-plugin is incompatible with Java 21:
> {code:java}
> /**
>  * Here you can define the compression of the resources being used. The 
> command line equivalent is:
>  * -c, --compress=level. The valid values for the level 
> are: 0, 1, 2.
>  */
> @Parameter
> private Integer compress;
> {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


Re: [PR] [MJLINK-77] compress parameters jdk21 no validation [maven-jlink-plugin]

2023-12-24 Thread via GitHub


bmarwell merged PR #183:
URL: https://github.com/apache/maven-jlink-plugin/pull/183


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (ARCHETYPE-653) Require Maven 3.2.5+

2023-12-24 Thread Slawomir Jaranowski (Jira)


[ 
https://issues.apache.org/jira/browse/ARCHETYPE-653?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800175#comment-17800175
 ] 

Slawomir Jaranowski commented on ARCHETYPE-653:
---

[https://maven.apache.org/developers/compatibility-plan.html]

The question is - Why we still want to preserve 10 year old version as minimum 
required.

> Require Maven 3.2.5+
> 
>
> Key: ARCHETYPE-653
> URL: https://issues.apache.org/jira/browse/ARCHETYPE-653
> Project: Maven Archetype
>  Issue Type: Dependency upgrade
>Reporter: Sylwester Lachiewicz
>Priority: Minor
>
> [https://maven.apache.org/docs/history.html]
>  
> "Maven before 3.6.3 has now reached its end of life. New plugin releases will 
> require Maven 3.2.5 or later. The following information is made available for 
> reference."



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (DOXIA-712) Add validation capability to Sink API

2023-12-24 Thread Konrad Windszus (Jira)


[ 
https://issues.apache.org/jira/browse/DOXIA-712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800167#comment-17800167
 ] 

Konrad Windszus commented on DOXIA-712:
---

All those limitations outlined above are defined by the Sink interface (i.e. 
are implementation agnostic). That is for me the whole point of using this Sink 
indirection. The Sink API must work the same irrespective of the actual 
implementation.

> Add validation capability to Sink API
> -
>
> Key: DOXIA-712
> URL: https://issues.apache.org/jira/browse/DOXIA-712
> Project: Maven Doxia
>  Issue Type: Improvement
>  Components: Core
>Reporter: Konrad Windszus
>Priority: Major
>
> The Sink API comes with several limitations with regards to valid order of 
> events/method calls and valid parametrization. Those are documented in the 
> javadoc of the Sink interface but are complex to follow. This includes
> - certain start events need to be followed by an according end event
> - {{sectionTitle(int,SinkEventAttributes)}} needs to be directly preceded by 
> {{section(int,SinkEventAttributes)}} with the same first argument.
> - certain rules for sequence of events for {{table}}, {{list}} (numbered, 
> non-numbered and definition) and {{figure}}
> - validation of certain common parameters like {{level}} or 
> {{SinkEventAttributes}} for valid values
> As we encourage the direct usage of the Sink API for report mojos there 
> should be a way for mojo authors to quickly crosscheck whether they used the 
> Sink API in a correct way.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


Re: [PR] Bump org.codehaus.plexus:plexus-archiver from 4.2.5 to 4.8.0 [maven-rar-plugin]

2023-12-24 Thread via GitHub


slachiewicz commented on PR #4:
URL: https://github.com/apache/maven-rar-plugin/pull/4#issuecomment-1868491888

   @dependabot recreate


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Comment Edited] (ARCHETYPE-602) Set minimum enforced Maven version to 3.1.0

2023-12-24 Thread Sylwester Lachiewicz (Jira)


[ 
https://issues.apache.org/jira/browse/ARCHETYPE-602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17799972#comment-17799972
 ] 

Sylwester Lachiewicz edited comment on ARCHETYPE-602 at 12/24/23 11:07 AM:
---

-Or even 3.6.3-


was (Author: slachiewicz):
Or even 3.6.3

> Set minimum enforced Maven version to 3.1.0
> ---
>
> Key: ARCHETYPE-602
> URL: https://issues.apache.org/jira/browse/ARCHETYPE-602
> Project: Maven Archetype
>  Issue Type: Dependency upgrade
>Reporter: Elliotte Rusty Harold
>Priority: Major
> Fix For: 3.3.0
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (ARCHETYPE-653) Require Maven 3.2.5+

2023-12-24 Thread Sylwester Lachiewicz (Jira)


 [ 
https://issues.apache.org/jira/browse/ARCHETYPE-653?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sylwester Lachiewicz updated ARCHETYPE-653:
---
Description: 
[https://maven.apache.org/docs/history.html]

 

"Maven before 3.6.3 has now reached its end of life. New plugin releases will 
require Maven 3.2.5 or later. The following information is made available for 
reference."

  was:https://maven.apache.org/docs/history.html


> Require Maven 3.2.5+
> 
>
> Key: ARCHETYPE-653
> URL: https://issues.apache.org/jira/browse/ARCHETYPE-653
> Project: Maven Archetype
>  Issue Type: Dependency upgrade
>Reporter: Sylwester Lachiewicz
>Priority: Minor
>
> [https://maven.apache.org/docs/history.html]
>  
> "Maven before 3.6.3 has now reached its end of life. New plugin releases will 
> require Maven 3.2.5 or later. The following information is made available for 
> reference."



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (ARCHETYPE-653) Require Maven 3.2.5+

2023-12-24 Thread Sylwester Lachiewicz (Jira)


 [ 
https://issues.apache.org/jira/browse/ARCHETYPE-653?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sylwester Lachiewicz updated ARCHETYPE-653:
---
Summary: Require Maven 3.2.5+  (was: Require Maven 3.6.3+)

> Require Maven 3.2.5+
> 
>
> Key: ARCHETYPE-653
> URL: https://issues.apache.org/jira/browse/ARCHETYPE-653
> Project: Maven Archetype
>  Issue Type: Dependency upgrade
>Reporter: Sylwester Lachiewicz
>Priority: Minor
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (ARCHETYPE-653) Require Maven 3.2.5+

2023-12-24 Thread Sylwester Lachiewicz (Jira)


 [ 
https://issues.apache.org/jira/browse/ARCHETYPE-653?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sylwester Lachiewicz updated ARCHETYPE-653:
---
Description: https://maven.apache.org/docs/history.html

> Require Maven 3.2.5+
> 
>
> Key: ARCHETYPE-653
> URL: https://issues.apache.org/jira/browse/ARCHETYPE-653
> Project: Maven Archetype
>  Issue Type: Dependency upgrade
>Reporter: Sylwester Lachiewicz
>Priority: Minor
>
> https://maven.apache.org/docs/history.html



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


Re: [PR] Use uppercase convention for enum member names [maven-surefire]

2023-12-24 Thread via GitHub


asfgit merged PR #704:
URL: https://github.com/apache/maven-surefire/pull/704


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (DOXIA-712) Add validation capability to Sink API

2023-12-24 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/DOXIA-712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800160#comment-17800160
 ] 

Michael Osipov commented on DOXIA-712:
--

How should this happen? Per Sink implemenatation because only they know the 
semantics of validation? A configure flag to enforce?

> Add validation capability to Sink API
> -
>
> Key: DOXIA-712
> URL: https://issues.apache.org/jira/browse/DOXIA-712
> Project: Maven Doxia
>  Issue Type: Improvement
>  Components: Core
>Reporter: Konrad Windszus
>Priority: Major
>
> The Sink API comes with several limitations with regards to valid order of 
> events/method calls and valid parametrization. Those are documented in the 
> javadoc of the Sink interface but are complex to follow. This includes
> - certain start events need to be followed by an according end event
> - {{sectionTitle(int,SinkEventAttributes)}} needs to be directly preceded by 
> {{section(int,SinkEventAttributes)}} with the same first argument.
> - certain rules for sequence of events for {{table}}, {{list}} (numbered, 
> non-numbered and definition) and {{figure}}
> - validation of certain common parameters like {{level}} or 
> {{SinkEventAttributes}} for valid values
> As we encourage the direct usage of the Sink API for report mojos there 
> should be a way for mojo authors to quickly crosscheck whether they used the 
> Sink API in a correct way.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (ARCHETYPE-653) Require Maven 3.6.3+

2023-12-24 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/ARCHETYPE-653?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800161#comment-17800161
 ] 

Michael Osipov commented on ARCHETYPE-653:
--

This issue should contain a reason why.

> Require Maven 3.6.3+
> 
>
> Key: ARCHETYPE-653
> URL: https://issues.apache.org/jira/browse/ARCHETYPE-653
> Project: Maven Archetype
>  Issue Type: Dependency upgrade
>Reporter: Sylwester Lachiewicz
>Priority: Minor
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MPOM-399) Upgrade minimalMavenBuildVersion from 3.2.5 to 3.6.3 - the minimum used by plugins

2023-12-24 Thread Slawomir Jaranowski (Jira)


[ 
https://issues.apache.org/jira/browse/MPOM-399?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800159#comment-17800159
 ] 

Slawomir Jaranowski commented on MPOM-399:
--

If you relay want to support old Maven versions in project you can override 
property: {{minimalMavenBuildVersion}} in this specific project, 
it should be done before merge or in next commit to fix - do we not look for 
build status ... after merge???

Current m-site-p requirements in jenkins file is:

{noformat}
asfMavenTlpPlgnBuild(jdk:['8','11','14'], maven:['3.3.x', '3.5.x', '3.8.x'])
{noformat}

I see two other issues here:
 - missing JDK 14 on jenkins - you should ask INFRA for instal it for you
 - in maven-jenkins-env there is missing label for Maven 3.8.x - so the latest 
3.x - today 3.9.6 is used - 
https://github.com/apache/maven-jenkins-env/blob/master/vars/jenkinsEnv.groovy

> Upgrade minimalMavenBuildVersion from 3.2.5 to 3.6.3 - the minimum used by 
> plugins
> --
>
> Key: MPOM-399
> URL: https://issues.apache.org/jira/browse/MPOM-399
> Project: Maven POMs
>  Issue Type: Improvement
>  Components: asf
>Reporter: Slawomir Jaranowski
>Assignee: Slawomir Jaranowski
>Priority: Major
> Fix For: ASF-31
>
>
> Current is {{3.2.5}}
> https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dist-tool/job/master/site/dist-tool-prerequisites.html
> {{maven-help-plugin}} - {{3.4.0}} requires {{3.6.3}}
>  
> Rationale:
>  - early build fail with proper message - not when newer plugin used
>  - 3.6.3 minimum version  widly used on Mavne CI and in other ASF project
>  - other than Maven plugins - all ASF project should use one of the newest 
> version of Maven
>  - in special case property {{minimalMavenBuildVersion}} can be overridden



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Resolved] (DOXIA-711) Introduce SinkWrapper with factory

2023-12-24 Thread Konrad Windszus (Jira)


 [ 
https://issues.apache.org/jira/browse/DOXIA-711?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Konrad Windszus resolved DOXIA-711.
---
Resolution: Fixed

Fixed in 
https://github.com/apache/maven-doxia/commit/1fef4c578dc3d1f868893e8ea8afc60d4cc6a0c8.

> Introduce SinkWrapper with factory
> --
>
> Key: DOXIA-711
> URL: https://issues.apache.org/jira/browse/DOXIA-711
> Project: Maven Doxia
>  Issue Type: Improvement
>  Components: Core
>Reporter: Konrad Windszus
>Assignee: Konrad Windszus
>Priority: Major
> Fix For: 2.0.0-M9
>
>
> Similar to HttpServletRequestWrapper in Servlet API one should have a 
> SinkWrapper helper for Doxia. That allows to easily implement some 
> post/preprocessing and even modifying or skipping the underlying sink. All 
> Sink wrappers and the original sink should form a pipeline.
> Registering a SinkWrapper should optionally be done automatically (via JSR330 
> annotations) or manually.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (DOXIA-711) Introduce SinkWrapper with factory

2023-12-24 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/DOXIA-711?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17800156#comment-17800156
 ] 

ASF GitHub Bot commented on DOXIA-711:
--

kwin merged PR #184:
URL: https://github.com/apache/maven-doxia/pull/184




> Introduce SinkWrapper with factory
> --
>
> Key: DOXIA-711
> URL: https://issues.apache.org/jira/browse/DOXIA-711
> Project: Maven Doxia
>  Issue Type: Improvement
>  Components: Core
>Reporter: Konrad Windszus
>Assignee: Konrad Windszus
>Priority: Major
> Fix For: 2.0.0-M9
>
>
> Similar to HttpServletRequestWrapper in Servlet API one should have a 
> SinkWrapper helper for Doxia. That allows to easily implement some 
> post/preprocessing and even modifying or skipping the underlying sink. All 
> Sink wrappers and the original sink should form a pipeline.
> Registering a SinkWrapper should optionally be done automatically (via JSR330 
> annotations) or manually.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


Re: [PR] [DOXIA-711] Introduce SinkWrapper and according SinkWrapperFactory [maven-doxia]

2023-12-24 Thread via GitHub


kwin merged PR #184:
URL: https://github.com/apache/maven-doxia/pull/184


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org