gnodet opened a new pull request, #13166: URL: https://github.com/apache/maven/pull/13166
## Summary Adds automated tooling to keep the 13 Maven lifecycle plugin versions in `impl/maven-core/pom.xml` up to date. ### The problem Dependabot currently cannot track the `version.maven-*-plugin` properties added in #13080 due to a bug in dependabot-core: when a plugin appears in both the remote parent POM (`maven-apache-parent`) and the local POM, Dependabot's `requirements_unlocked_or_can_be?` returns `false` and skips the update. A fix has been submitted upstream: https://github.com/dependabot/dependabot-core/pull/16331 ### The solution While waiting for the Dependabot fix to land, this PR adds: 1. **Profile `versions-update`** in the root `pom.xml` — never activated during normal builds. Configures `versions-maven-plugin` with explicit `property→artifact` mappings for all 13 lifecycle plugins, so that `versions:update-properties` can resolve the correct Maven Central coordinates without relying on heuristics. 2. **Workflow `.github/workflows/update-lifecycle-plugins.yml`** — runs every Monday at 08:00 UTC on both `master` and `maven-4.0.x`. If updates are found, a PR is opened automatically. ### Manual invocation ``` mvn versions:update-properties -Pversions-update \ -DincludeProperties='version.maven-clean-plugin,version.maven-compiler-plugin,version.maven-deploy-plugin,version.maven-ear-plugin,version.maven-ejb-plugin,version.maven-install-plugin,version.maven-jar-plugin,version.maven-plugin-plugin,version.maven-rar-plugin,version.maven-resources-plugin,version.maven-site-plugin,version.maven-surefire-plugin,version.maven-war-plugin' \ -pl impl/maven-core ``` ### Validation Tested locally — the command correctly identifies and updates all 13 properties (e.g. `maven-clean-plugin 3.4.0→3.5.0`, `maven-compiler-plugin 3.13.0→3.16.0`, etc.). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
