dependabot[bot] opened a new pull request, #1967: URL: https://github.com/apache/maven/pull/1967
Bumps [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 3.5.1 to 4.0.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/codehaus-plexus/plexus-utils/releases">org.codehaus.plexus:plexus-utils's releases</a>.</em></p> <blockquote> <h2>4.0.2</h2> <!-- raw HTML omitted --> <h2>🐛 Bug Fixes</h2> <ul> <li>Specify /D for cmd.exe to bypass the Command Processor Autorun folder (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/272">#272</a>) <a href="https://github.com/sebthom"><code>@sebthom</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Bump org.codehaus.plexus:plexus from 17 to 18 (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/271">#271</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> <li>Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.1 (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/270">#270</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> </ul> <h2>4.0.1</h2> <!-- raw HTML omitted --> <h2>🚀 New features and improvements</h2> <ul> <li>Add .gitignore to default excludes (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/269">#269</a>) <a href="https://github.com/slawekjaranowski"><code>@slawekjaranowski</code></a></li> <li>downgrade plexus-xml from 4 to 3: keep Maven 3 compatibility (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/263">#263</a>) <a href="https://github.com/hboutemy"><code>@hboutemy</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>downgrade plexus-xml from 4 to 3: keep Maven 3 compatibility (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/263">#263</a>) <a href="https://github.com/hboutemy"><code>@hboutemy</code></a></li> <li>Bump org.codehaus.plexus:plexus from 13 to 17 (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/issues/262">#262</a> <a href="https://redirect.github.com/codehaus-plexus/plexus-utils/issues/265">#265</a> <a href="https://redirect.github.com/codehaus-plexus/plexus-utils/issues/266">#266</a> <a href="https://redirect.github.com/codehaus-plexus/plexus-utils/issues/268">#268</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> <li>Bump plexus-xml from 4.0.0 to 4.0.2 (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/259">#259</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> <li>Bump org.junit.jupiter:junit-jupiter from 5.9.2 to 5.10.0 (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/issues/251">#251</a> <a href="https://redirect.github.com/codehaus-plexus/plexus-utils/issues/261">#261</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> </ul> <h2>👻 Maintenance</h2> <ul> <li>pom.mxl and site.xml cleanup (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/257">#257</a>) <a href="https://github.com/hboutemy"><code>@hboutemy</code></a></li> <li>Bump release-drafter/release-drafter from 5 to 6 (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/267">#267</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> </ul> <h2>4.0.0</h2> <!-- raw HTML omitted --> <ul> <li>Starting with version 4, XML classes (in <strong>org.codehaus.plexus.util.xml and org.codehaus.plexus.util.xml.pull</strong>) have been extracted to a separate <a href="https://github.com/codehaus-plexus/plexus-xml/">plexus-xml</a> 4: if you need them, just use this new artifact as outlined in <a href="https://codehaus-plexus.github.io/plexus-xml/dependency-info.html">https://codehaus-plexus.github.io/plexus-xml/dependency-info.html</a>.</li> <li>Fix false difference detected with CachingOutputStream/CachingWriter when streams are flushed (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/252">#252</a>) <a href="https://github.com/gnodet"><code>@gnodet</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Switch to junit 5 (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/245">#245</a>) <a href="https://github.com/gnodet"><code>@gnodet</code></a></li> </ul> <h2>👻 Maintenance</h2> <ul> <li>Switch to junit 5 (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/245">#245</a>) <a href="https://github.com/gnodet"><code>@gnodet</code></a></li> <li>Remove unused/unmaintained jira export (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/247">#247</a>) <a href="https://github.com/gnodet"><code>@gnodet</code></a></li> <li>Switch build ci workflow to master branch (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/250">#250</a>) <a href="https://github.com/slachiewicz"><code>@slachiewicz</code></a></li> <li>Bump maven-resources-plugin from 2.7 to 3.3.1 (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/209">#209</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> <li>Fix SCM information (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/254">#254</a>) <a href="https://github.com/gnodet"><code>@gnodet</code></a></li> <li>Fix non contiguous imports (<a href="https://redirect.github.com/codehaus-plexus/plexus-utils/pull/255">#255</a>) <a href="https://github.com/gnodet"><code>@gnodet</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/codehaus-plexus/plexus-utils/commit/4789f7a122d2bb096b67630d62faa27560b035ef"><code>4789f7a</code></a> [maven-release-plugin] prepare release plexus-utils-4.0.2</li> <li><a href="https://github.com/codehaus-plexus/plexus-utils/commit/90932719b58b0e8ec33f4e3a7664b84d582e97b0"><code>9093271</code></a> Specify /D for cmd.exe to bypass the Command Processor Autorun directory</li> <li><a href="https://github.com/codehaus-plexus/plexus-utils/commit/a5d1ab20b9db1c8780d989a1cdb60ffeb839950a"><code>a5d1ab2</code></a> fix Reproducible Central README link</li> <li><a href="https://github.com/codehaus-plexus/plexus-utils/commit/1e90541f7e52509076760c39246e8c1ba0b10373"><code>1e90541</code></a> use new Reproducible Central badge endpoint</li> <li><a href="https://github.com/codehaus-plexus/plexus-utils/commit/8ca191341462f7c5a2ea68edcd3acacce1c60eff"><code>8ca1913</code></a> ---</li> <li><a href="https://github.com/codehaus-plexus/plexus-utils/commit/4da33e12a8b0d02a7298a9be468ae5e1af8dce80"><code>4da33e1</code></a> ---</li> <li><a href="https://github.com/codehaus-plexus/plexus-utils/commit/0d760ef00225321d70fcc8996c8728fddaee5c15"><code>0d760ef</code></a> [maven-release-plugin] prepare for next development iteration</li> <li><a href="https://github.com/codehaus-plexus/plexus-utils/commit/31ef81812095709ebbfa0e4b707e1c3ad00a51e5"><code>31ef818</code></a> [maven-release-plugin] prepare release plexus-utils-4.0.1</li> <li><a href="https://github.com/codehaus-plexus/plexus-utils/commit/2f541fdfb253757a1f3beca33d75a86b124f78f5"><code>2f541fd</code></a> Add .gitignore to default excludes</li> <li><a href="https://github.com/codehaus-plexus/plexus-utils/commit/d44d2ec844fe3e420407936bbda0c015a386b5c5"><code>d44d2ec</code></a> Bump org.codehaus.plexus:plexus from 16 to 17</li> <li>Additional commits viewable in <a href="https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.5.1...plexus-utils-4.0.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-utils&package-manager=maven&previous-version=3.5.1&new-version=4.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org