Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the maven-build-plugins group with 12 updates #43

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2024

Bumps the maven-build-plugins group with 12 updates:

Package From To
org.apache.maven.plugins:maven-enforcer-plugin 3.0.0 3.4.1
org.apache.maven.plugins:maven-compiler-plugin 3.9.0 3.12.1
org.apache.maven.plugins:maven-shade-plugin 3.4.0 3.5.1
org.codehaus.mojo:exec-maven-plugin 3.1.0 3.1.1
org.apache.maven.plugins:maven-surefire-plugin 3.0.0-M5 3.2.3
org.apache.maven.plugins:maven-jar-plugin 3.2.2 3.3.0
org.apache.maven.plugins:maven-source-plugin 3.2.1 3.3.0
org.apache.maven.plugins:maven-javadoc-plugin 3.3.1 3.6.3
org.owasp:dependency-check-maven 9.0.4 9.0.7
org.jacoco:jacoco-maven-plugin 0.8.7 0.8.11
org.apache.maven.plugins:maven-gpg-plugin 3.0.1 3.1.0
org.sonatype.plugins:nexus-staging-maven-plugin 1.6.8 1.6.13

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.0.0 to 3.4.1

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.4.1

🐛 Bug Fixes

👻 Maintenance

3.4.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

📝 Documentation updates

  • Clarify availability of AbstractEnforcerRule (#278) @​kwin

👻 Maintenance

  • Bump org.junit:junit-bom from 5.9.3 to 5.10.0 (#280) @​dependabot
  • Bump snappy-java from 1.1.8.3 to 1.1.10.1 in /maven-enforcer-plugin/src/it/projects/dependency-convergence_transitive_provided/module1 (#273) @​dependabot
  • [MNG-6829] - Replace StringUtils#isEmpty(String) and #isNotEmpty(String) (#272) @​timtebeek

3.3.0

... (truncated)

Commits
  • d8a21ee [maven-release-plugin] prepare release enforcer-3.4.1
  • 66250c0 [MENFORCER-491] Fix plugin documentation generation
  • 5d32e6c [MENFORCER-490] Declare maven-enforcer-plugin dependencies (#285)
  • d258109 [MENFORCER-490] Declare org.eclipse.sisu.plexus dependencies (#283)
  • 2aa71e7 [MENFORCER-490] Declare maven-enforcer-extension dependencies (#284)
  • d4ec8e1 [MENFORCER-490] Declare maven-enforcer-extension dependencies (#282)
  • b35e4a0 [maven-release-plugin] prepare for next development iteration
  • 3d365f7 [maven-release-plugin] prepare release enforcer-3.4.0
  • 5feb93a [MENFORCER-489] Bump commons-lang3 from 3.12.0 to 3.13.0
  • 8f2de47 Bump org.junit:junit-bom from 5.9.3 to 5.10.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.9.0 to 3.12.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.12.1

🐛 Bug Fixes

📦 Dependency updates

3.12.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

... (truncated)

Commits
  • 736da68 [maven-release-plugin] prepare release maven-compiler-plugin-3.12.1
  • ef93f3d [MCOMPILER-568] Bump plexusCompilerVersion from 2.14.1 to 2.14.2 (#220)
  • eb7840c [MCOMPILER-567] - Fail to compile if the "generated-sources/annotations" does...
  • 2a7a73b [maven-release-plugin] prepare for next development iteration
  • c08b0fd [maven-release-plugin] prepare release maven-compiler-plugin-3.12.0
  • a1c5b13 [MCOMPILER-565] Allow project build by Maven 4
  • 4855773 Bump plexusCompilerVersion from 2.13.0 to 2.14.1
  • 1d05342 [MCOMPILER-562] Add property maven.compiler.outputDirectory to CompilerMojo (...
  • ea74978 [MCOMPILER-381] - Refactor incremental detection (#181)
  • fd37f09 [MCOMPILER-333] Cleanup generated source files (#214)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-shade-plugin from 3.4.0 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-shade-plugin's releases.

3.5.1

Release Notes - Maven Shade Plugin - Version 3.5.1

Bug

  • [MSHADE-454] - Shade Plugin does not work with JDK 20

Improvement

  • [MSHADE-459] - Prepare to build and pass tests with Java 21

Task

Dependency upgrade

Maven Shade Plugin 3.5.0 release notes https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317921&version=12352951

Release Notes - Maven Shade Plugin - Version 3.5.0

... (truncated)

Commits
  • bd4759b [maven-release-plugin] prepare release maven-shade-plugin-3.5.1
  • d2a1552 [MSHADE-457] Upgrade Parent to 40
  • c2a2e2b [MSHADE-458] Refresh download page
  • 64f577b [MSHADE-459] Adjust to test also with Java 21 (#196)
  • e56294a [MSHADE-454] Shade Plugin does not work with JDK 20
  • 6a400db [maven-release-plugin] prepare for next development iteration
  • 963e30e [maven-release-plugin] prepare release maven-shade-plugin-3.5.0
  • 9265316 Fix for tmp file creation
  • fc0f784 Get rid of security alerts (#190)
  • d3dd181 [MSHADE-446] Update dependencies (#189)
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.1.1

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.1.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

... (truncated)

Commits
  • 58be40b [maven-release-plugin] prepare release 3.1.1
  • 285443b Use name and tag template for release-drafter from commons
  • 2afa124 Code cleanups - use newer JDK features
  • 5fb64ce Enable spotless for code formatting - reformat
  • 69d648f Enable spotless for code formatting
  • b08fba0 Remove unused killAfter options
  • 6fae009 #391 Cope with Thread::stop being unavailable in JDK 20+ (#393)
  • 6fcb15b Only prefix program output with thread name when Maven is running with multip...
  • 584c544 #389 Add option 'blockSystemExit' to 'java' mojo
  • c545089 Bump org.codehaus.plexus:plexus-utils
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.0.0-M5 to 3.2.3

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.2.2

🐛 Bug Fixes

📦 Dependency updates

🔧 Build

3.2.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

3.1.2

Release Notes - Maven Surefire - Version 3.1.2

... (truncated)

Commits
  • ac9e574 [maven-release-plugin] prepare release surefire-3.2.3
  • 2d6cbc6 [SUREFIRE-2220] SurefireForkChannel#getForkNodeConnectionString() returns inv...
  • 05322d9 [SUREFIRE-2212] OutOfMemoryError raised when parsing files with huge stderr/s...
  • 55ccd06 [SUREFIRE-2211] additionalClasspathElement with UNC path not working with Mav...
  • aa864f4 [SUREFIRE-2216] Upgrade plugins and components (in ITs)
  • 6662e07 [SUREFIRE-2215] Upgrade to Parent 41
  • f5b73ab [SUREFIRE-2214] Uprade to HtmlUnit 3.8.0
  • 47c5816 [SUREFIRE-2210] - Restore ordering of additional class path elements
  • 9b7ecf1 [maven-release-plugin] prepare for next development iteration
  • 2d76753 [maven-release-plugin] prepare release surefire-3.2.2
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.2.2 to 3.3.0

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.3.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

📝 Documentation updates

  • Restore mavenArchiverVersion property used in the site (#51) @​jorsol
  • (doc) Updated create-test-jar.apt.vm removing 'and' in Maven site Create Test JAR documentation (#34) @​focbenz

👻 Maintenance

Commits
  • d68df4b [maven-release-plugin] prepare release maven-jar-plugin-3.3.0
  • fb2299a Restore mavenArchiverVersion property used in the site
  • 1204127 [MJAR-290] - Update Plexus Utils to 3.4.2
  • 5fd2fc9 [MJAR-291] - Upgrade Parent to 37
  • 56344da use shared action v3 (#49)
  • 4148491 Code simplifications in AbstractMojo (#47)
  • 46c017d [MJAR-275] - Fix outputTimestamp not applied to module-info; breaks reproduci...
  • c02be20 [MJAR-278] Update plugin (requires Maven 3.2.5+) (#19)
  • b6fe3eb Bump junit from 4.11 to 4.13.2 in /src/it/MJAR-228
  • 78a28dd Ignore Maven Core updates
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 3.2.1 to 3.3.0

Commits
  • 02a9847 [maven-release-plugin] prepare release maven-source-plugin-3.3.0
  • f186993 [MSOURCES-135] Cleanup project code
  • 021af55 [MSOURCES-134] Refresh download page
  • b11a457 Use shared GitHub actions v3
  • 7caf2b0 [MSOURCES-133] Upgrade Parent to 39 - ignore git blame
  • dee4c10 [MSOURCES-133] Upgrade Parent to 39
  • 452111f Add dependabot configuration
  • e691ac3 s/MSOURCE/MSOURCES/
  • 1ddffd8 Auto-link MSOURCE Jira
  • 37ffefe Add pull request template
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.3.1 to 3.6.3

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.6.2

🐛 Bug Fixes

📦 Dependency updates

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

... (truncated)

Commits
  • 8205008 [maven-release-plugin] prepare release maven-javadoc-plugin-3.6.3
  • b69af90 [MJAVADOC-682] Reactor builds fail when multiple modules with same groupId:ar...
  • b47b280 directory, not folder
  • 488624f [MJAVADOC-782] Align read-only parameters naming with other plugins
  • 867dc73 [MJAVADOC-781] Upgrade plugins and components (in ITs)
  • 0104ab2 Fix incorrect config in test-javadoc-test-plugin-config.xml
  • dd39c0c [MJAVADOC-780] add missing plugin configuration
  • e6e6180 Remove junk from 692d7a8a9918efd24633a44f0f3d4dfd22d0fec4
  • 692d7a8 [MJAVADOC-779] - Upgrade maven-plugin parent to 41
  • 386d4ea Remove dead link
  • Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 9.0.4 to 9.0.7

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 9.0.7

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 9.0.6

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 9.0.5

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 9.0.7 (2023-12-18)

  • docs: document insecure configuration for GHSA-qqhq-8r2c-c3f5 (#6315)
  • fix: improve memory usage on NVD update (#6321)
  • fix: skip pyproject.toml unless it contains tool.poetry (#6316)
  • fix: resolve build error that may cause an issue on some JDK versions (#6312)

See the full listing of changes.

Version 9.0.6 (2023-12-15)

  • build: bump open-vulnerability-clients@5.1.1 (#6308)
  • fix: mask nvd.api.key in logs; see GHSA-qqhq-8r2c-c3f5 (#6307)
  • fix: update java version check (#6297)
  • fix: more efficient memory usage (#6299)
  • fix: stream NVD data via Jackson t...

    Description has been truncated

Bumps the maven-build-plugins group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.0.0` | `3.4.1` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.9.0` | `3.12.1` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.4.0` | `3.5.1` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.1.0` | `3.1.1` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.0.0-M5` | `3.2.3` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.2.2` | `3.3.0` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.2.1` | `3.3.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.3.1` | `3.6.3` |
| [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) | `9.0.4` | `9.0.7` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.7` | `0.8.11` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.0.1` | `3.1.0` |
| org.sonatype.plugins:nexus-staging-maven-plugin | `1.6.8` | `1.6.13` |


Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.0.0 to 3.4.1
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.0.0...enforcer-3.4.1)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.9.0 to 3.12.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.9.0...maven-compiler-plugin-3.12.1)

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.4.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.4.0...maven-shade-plugin-3.5.1)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@exec-maven-plugin-3.1.0...3.1.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.0.0-M5 to 3.2.3
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.0.0-M5...surefire-3.2.3)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.2.2 to 3.3.0
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.2.2...maven-jar-plugin-3.3.0)

Updates `org.apache.maven.plugins:maven-source-plugin` from 3.2.1 to 3.3.0
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.2.1...maven-source-plugin-3.3.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.3.1 to 3.6.3
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.3.1...maven-javadoc-plugin-3.6.3)

Updates `org.owasp:dependency-check-maven` from 9.0.4 to 9.0.7
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](jeremylong/DependencyCheck@v9.0.4...v9.0.7)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.7 to 0.8.11
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.7...v0.8.11)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.0.1 to 3.1.0
- [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.0.1...maven-gpg-plugin-3.1.0)

Updates `org.sonatype.plugins:nexus-staging-maven-plugin` from 1.6.8 to 1.6.13

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.owasp:dependency-check-maven
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-build-plugins
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.sonatype.plugins:nexus-staging-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-build-plugins
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 1, 2024
@overheadhunter
Copy link
Member

@dependabot squash and merge

@dependabot dependabot bot merged commit d44c58e into develop Jan 8, 2024
4 checks passed
@dependabot dependabot bot deleted the dependabot/maven/maven-build-plugins-13ae5f5e89 branch January 8, 2024 07:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant