[PR] Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre [maven-doxia-converter]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #91:
URL: https://github.com/apache/maven-doxia-converter/pull/91

   Bumps [com.google.guava:guava](https://github.com/google/guava) from 
33.4.0-jre to 33.4.5-jre.
   
   Release notes
   Sourced from https://github.com/google/guava/releases";>com.google.guava:guava's 
releases.
   
   33.4.5
   For those upgrading from Guava 33.4.0 or earlier, be sure to read https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1.
   Maven
   
 com.google.guava
 guava
 33.4.5-jre
 
 33.4.5-android
   
   
   Jar files
   
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-jre/guava-33.4.5-jre.jar";>33.4.5-jre.jar
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-android/guava-33.4.5-android.jar";>33.4.5-android.jar
   
   Guava requires https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>one
 runtime dependency, which you can download here:
   
   https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar";>failureaccess-1.0.3.jar
   
   Javadoc
   
   https://guava.dev/releases/33.4.5-jre/api/docs/";>33.4.5-jre
   https://guava.dev/releases/33.4.5-android/api/docs/";>33.4.5-android
   
   JDiff
   
   https://guava.dev/releases/33.4.5-jre/api/diffs/";>33.4.5-jre 
vs. 33.4.4-jre
   https://guava.dev/releases/33.4.5-android/api/diffs/";>33.4.5-android vs. 
33.4.4-android
   https://guava.dev/releases/33.4.5-android/api/androiddiffs/";>33.4.5-android
 vs. 33.4.5-jre
   
   Changelog
   
   Changed the Guava jar (plus guava-testlib and https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>failureaccess
 jars) to be a modular jar. (7a71ea0bfa, 287c701a86)
   Changed various classes to stop using sun.misc.Unsafe under 
Java 9+. (ee63055ddd, 80aab00dc5b7a36785f5e09b6a54397388980cde, 
400af25292096746ed3f6164f0ff88209acbb19f, 
71d0692d418a5dd001c9b3786275a5f1f94e1971, 
d1a3cd5037528a2ae990bfceed9cdd009fbc54de, 
b3bb29a54b8f13d6f6630b6cb929867adbf6b9a0, 
1a300f6b2f7ba03ae9bc3620a80c4d4589c65b69)
   
   Note that, if you use guava-android on the JVM (instead of 
using guava-jre), Guava will still try to use 
sun.misc.Unsafe. We will do https://redirect.github.com/google/guava/issues/6806#issuecomment-2738313040";>further
 work on this in the future.
   
   
   Belatedly updated the Public Suffix List data. 
(ee3b9c64382037f72b3a8341915cc64b87850b53, 
d25d62fc843ece1c3866859bc8639b815093eac8)
   
   Special thanks to https://github.com/sgammon";>@​sgammon for https://javamodules.dev/";>his modularization efforts.
   33.4.4
   This is one of a series of releases that improve Guava's nullness 
annotations. For more information, including troubleshooting help, see https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1. Most users can update directly to Guava 33.4.5.
   Maven
    
   
   
   ... (truncated)
   
   
   Commits
   
   See full diff in https://github.com/google/guava/commits";>compare view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava&package-manager=maven&previous-version=33.4.0-jre&new-version=33.4.5-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any mo

[PR] Bump actions/upload-artifact from 4.6.1 to 4.6.2 [maven-gh-actions-shared]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #158:
URL: https://github.com/apache/maven-gh-actions-shared/pull/158

   Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) 
from 4.6.1 to 4.6.2.
   
   Release notes
   Sourced from https://github.com/actions/upload-artifact/releases";>actions/upload-artifact's
 releases.
   
   v4.6.2
   What's Changed
   
   Update to use artifact 2.3.2 package & prepare for new 
upload-artifact release by https://github.com/salmanmkc";>@​salmanmkc in https://redirect.github.com/actions/upload-artifact/pull/685";>actions/upload-artifact#685
   
   New Contributors
   
   https://github.com/salmanmkc";>@​salmanmkc made 
their first contribution in https://redirect.github.com/actions/upload-artifact/pull/685";>actions/upload-artifact#685
   
   Full Changelog: https://github.com/actions/upload-artifact/compare/v4...v4.6.2";>https://github.com/actions/upload-artifact/compare/v4...v4.6.2
   
   
   
   Commits
   
   https://github.com/actions/upload-artifact/commit/ea165f8d65b6e75b540449e92b4886f43607fa02";>ea165f8
 Merge pull request https://redirect.github.com/actions/upload-artifact/issues/685";>#685 
from salmanmkc/salmanmkc/3-new-upload-artifacts-release
   https://github.com/actions/upload-artifact/commit/08396203c179e13c71b9754ce3472ed71842eec0";>0839620
 Prepare for new release of actions/upload-artifact with new toolkit cache 
ver...
   See full diff in https://github.com/actions/upload-artifact/compare/4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1...ea165f8d65b6e75b540449e92b4886f43607fa02";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=4.6.1&new-version=4.6.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre [maven-clean-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #238:
URL: https://github.com/apache/maven-clean-plugin/pull/238

   Bumps [com.google.guava:guava](https://github.com/google/guava) from 
33.4.0-jre to 33.4.5-jre.
   
   Release notes
   Sourced from https://github.com/google/guava/releases";>com.google.guava:guava's 
releases.
   
   33.4.5
   For those upgrading from Guava 33.4.0 or earlier, be sure to read https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1.
   Maven
   
 com.google.guava
 guava
 33.4.5-jre
 
 33.4.5-android
   
   
   Jar files
   
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-jre/guava-33.4.5-jre.jar";>33.4.5-jre.jar
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-android/guava-33.4.5-android.jar";>33.4.5-android.jar
   
   Guava requires https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>one
 runtime dependency, which you can download here:
   
   https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar";>failureaccess-1.0.3.jar
   
   Javadoc
   
   https://guava.dev/releases/33.4.5-jre/api/docs/";>33.4.5-jre
   https://guava.dev/releases/33.4.5-android/api/docs/";>33.4.5-android
   
   JDiff
   
   https://guava.dev/releases/33.4.5-jre/api/diffs/";>33.4.5-jre 
vs. 33.4.4-jre
   https://guava.dev/releases/33.4.5-android/api/diffs/";>33.4.5-android vs. 
33.4.4-android
   https://guava.dev/releases/33.4.5-android/api/androiddiffs/";>33.4.5-android
 vs. 33.4.5-jre
   
   Changelog
   
   Changed the Guava jar (plus guava-testlib and https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>failureaccess
 jars) to be a modular jar. (7a71ea0bfa, 287c701a86)
   Changed various classes to stop using sun.misc.Unsafe under 
Java 9+. (ee63055ddd, 80aab00dc5b7a36785f5e09b6a54397388980cde, 
400af25292096746ed3f6164f0ff88209acbb19f, 
71d0692d418a5dd001c9b3786275a5f1f94e1971, 
d1a3cd5037528a2ae990bfceed9cdd009fbc54de, 
b3bb29a54b8f13d6f6630b6cb929867adbf6b9a0, 
1a300f6b2f7ba03ae9bc3620a80c4d4589c65b69)
   
   Note that, if you use guava-android on the JVM (instead of 
using guava-jre), Guava will still try to use 
sun.misc.Unsafe. We will do https://redirect.github.com/google/guava/issues/6806#issuecomment-2738313040";>further
 work on this in the future.
   
   
   Belatedly updated the Public Suffix List data. 
(ee3b9c64382037f72b3a8341915cc64b87850b53, 
d25d62fc843ece1c3866859bc8639b815093eac8)
   
   Special thanks to https://github.com/sgammon";>@​sgammon for https://javamodules.dev/";>his modularization efforts.
   33.4.4
   This is one of a series of releases that improve Guava's nullness 
annotations. For more information, including troubleshooting help, see https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1. Most users can update directly to Guava 33.4.5.
   Maven
    
   
   
   ... (truncated)
   
   
   Commits
   
   See full diff in https://github.com/google/guava/commits";>compare view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava&package-manager=maven&previous-version=33.4.0-jre&new-version=33.4.5-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any mor

[PR] Bump com.google.guava:guava from 33.3.0-jre to 33.4.5-jre [maven-indexer]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #414:
URL: https://github.com/apache/maven-indexer/pull/414

   Bumps [com.google.guava:guava](https://github.com/google/guava) from 
33.3.0-jre to 33.4.5-jre.
   
   Release notes
   Sourced from https://github.com/google/guava/releases";>com.google.guava:guava's 
releases.
   
   33.4.5
   For those upgrading from Guava 33.4.0 or earlier, be sure to read https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1.
   Maven
   
 com.google.guava
 guava
 33.4.5-jre
 
 33.4.5-android
   
   
   Jar files
   
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-jre/guava-33.4.5-jre.jar";>33.4.5-jre.jar
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-android/guava-33.4.5-android.jar";>33.4.5-android.jar
   
   Guava requires https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>one
 runtime dependency, which you can download here:
   
   https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar";>failureaccess-1.0.3.jar
   
   Javadoc
   
   https://guava.dev/releases/33.4.5-jre/api/docs/";>33.4.5-jre
   https://guava.dev/releases/33.4.5-android/api/docs/";>33.4.5-android
   
   JDiff
   
   https://guava.dev/releases/33.4.5-jre/api/diffs/";>33.4.5-jre 
vs. 33.4.4-jre
   https://guava.dev/releases/33.4.5-android/api/diffs/";>33.4.5-android vs. 
33.4.4-android
   https://guava.dev/releases/33.4.5-android/api/androiddiffs/";>33.4.5-android
 vs. 33.4.5-jre
   
   Changelog
   
   Changed the Guava jar (plus guava-testlib and https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>failureaccess
 jars) to be a modular jar. (7a71ea0bfa, 287c701a86)
   Changed various classes to stop using sun.misc.Unsafe under 
Java 9+. (ee63055ddd, 80aab00dc5b7a36785f5e09b6a54397388980cde, 
400af25292096746ed3f6164f0ff88209acbb19f, 
71d0692d418a5dd001c9b3786275a5f1f94e1971, 
d1a3cd5037528a2ae990bfceed9cdd009fbc54de, 
b3bb29a54b8f13d6f6630b6cb929867adbf6b9a0, 
1a300f6b2f7ba03ae9bc3620a80c4d4589c65b69)
   
   Note that, if you use guava-android on the JVM (instead of 
using guava-jre), Guava will still try to use 
sun.misc.Unsafe. We will do https://redirect.github.com/google/guava/issues/6806#issuecomment-2738313040";>further
 work on this in the future.
   
   
   Belatedly updated the Public Suffix List data. 
(ee3b9c64382037f72b3a8341915cc64b87850b53, 
d25d62fc843ece1c3866859bc8639b815093eac8)
   
   Special thanks to https://github.com/sgammon";>@​sgammon for https://javamodules.dev/";>his modularization efforts.
   33.4.4
   This is one of a series of releases that improve Guava's nullness 
annotations. For more information, including troubleshooting help, see https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1. Most users can update directly to Guava 33.4.5.
   Maven
    
   
   
   ... (truncated)
   
   
   Commits
   
   See full diff in https://github.com/google/guava/commits";>compare view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava&package-manager=maven&previous-version=33.3.0-jre&new-version=33.4.5-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for

Re: [PR] Bump com.google.guava:guava from 33.3.0-jre to 33.4.0-jre [maven-indexer]

2025-03-19 Thread via GitHub


dependabot[bot] commented on PR #403:
URL: https://github.com/apache/maven-indexer/pull/403#issuecomment-2739110347

   Superseded by #414.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump com.google.guava:guava from 33.3.0-jre to 33.4.0-jre [maven-indexer]

2025-03-19 Thread via GitHub


dependabot[bot] closed pull request #403: Bump com.google.guava:guava from 
33.3.0-jre to 33.4.0-jre
URL: https://github.com/apache/maven-indexer/pull/403


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre [maven-plugin-testing]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #90:
URL: https://github.com/apache/maven-plugin-testing/pull/90

   Bumps [com.google.guava:guava](https://github.com/google/guava) from 
33.4.0-jre to 33.4.5-jre.
   
   Release notes
   Sourced from https://github.com/google/guava/releases";>com.google.guava:guava's 
releases.
   
   33.4.5
   For those upgrading from Guava 33.4.0 or earlier, be sure to read https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1.
   Maven
   
 com.google.guava
 guava
 33.4.5-jre
 
 33.4.5-android
   
   
   Jar files
   
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-jre/guava-33.4.5-jre.jar";>33.4.5-jre.jar
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-android/guava-33.4.5-android.jar";>33.4.5-android.jar
   
   Guava requires https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>one
 runtime dependency, which you can download here:
   
   https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar";>failureaccess-1.0.3.jar
   
   Javadoc
   
   https://guava.dev/releases/33.4.5-jre/api/docs/";>33.4.5-jre
   https://guava.dev/releases/33.4.5-android/api/docs/";>33.4.5-android
   
   JDiff
   
   https://guava.dev/releases/33.4.5-jre/api/diffs/";>33.4.5-jre 
vs. 33.4.4-jre
   https://guava.dev/releases/33.4.5-android/api/diffs/";>33.4.5-android vs. 
33.4.4-android
   https://guava.dev/releases/33.4.5-android/api/androiddiffs/";>33.4.5-android
 vs. 33.4.5-jre
   
   Changelog
   
   Changed the Guava jar (plus guava-testlib and https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>failureaccess
 jars) to be a modular jar. (7a71ea0bfa, 287c701a86)
   Changed various classes to stop using sun.misc.Unsafe under 
Java 9+. (ee63055ddd, 80aab00dc5b7a36785f5e09b6a54397388980cde, 
400af25292096746ed3f6164f0ff88209acbb19f, 
71d0692d418a5dd001c9b3786275a5f1f94e1971, 
d1a3cd5037528a2ae990bfceed9cdd009fbc54de, 
b3bb29a54b8f13d6f6630b6cb929867adbf6b9a0, 
1a300f6b2f7ba03ae9bc3620a80c4d4589c65b69)
   
   Note that, if you use guava-android on the JVM (instead of 
using guava-jre), Guava will still try to use 
sun.misc.Unsafe. We will do https://redirect.github.com/google/guava/issues/6806#issuecomment-2738313040";>further
 work on this in the future.
   
   
   Belatedly updated the Public Suffix List data. 
(ee3b9c64382037f72b3a8341915cc64b87850b53, 
d25d62fc843ece1c3866859bc8639b815093eac8)
   
   Special thanks to https://github.com/sgammon";>@​sgammon for https://javamodules.dev/";>his modularization efforts.
   33.4.4
   This is one of a series of releases that improve Guava's nullness 
annotations. For more information, including troubleshooting help, see https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1. Most users can update directly to Guava 33.4.5.
   Maven
    
   
   
   ... (truncated)
   
   
   Commits
   
   See full diff in https://github.com/google/guava/commits";>compare view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava&package-manager=maven&previous-version=33.4.0-jre&new-version=33.4.5-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any mor

Re: [PR] Bump actions/upload-artifact from 4.6.1 to 4.6.2 [maven-gh-actions-shared]

2025-03-19 Thread via GitHub


slawekjaranowski merged PR #158:
URL: https://github.com/apache/maven-gh-actions-shared/pull/158


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] [SUREFIRE-1643] surefire junit5 parallel tests [maven-surefire]

2025-03-19 Thread via GitHub


slawekjaranowski commented on code in PR #815:
URL: https://github.com/apache/maven-surefire/pull/815#discussion_r2004914455


##
Jenkinsfile:
##
@@ -21,19 +21,18 @@
 
 properties(
 [
-buildDiscarder(logRotator(artifactDaysToKeepStr: env.BRANCH_NAME == 
'master' ? '14' : '7',
-  artifactNumToKeepStr: '50',
+buildDiscarder(logRotator(artifactNumToKeepStr: env.BRANCH_NAME == 
'master' ? '15' : '5',
   daysToKeepStr: env.BRANCH_NAME == 'master' ? 
'30' : '14',
   numToKeepStr: env.BRANCH_NAME == 'master' ? 
'20' : '10')
-),
-disableConcurrentBuilds()
+)//,
+//disableConcurrentBuilds()
 ]
 )
 // final def oses = ['linux':'ubuntu && maven', 'windows':'windows-he']
-final def oses = ['linux':'ubuntu && maven']
-final def mavens = env.BRANCH_NAME == 'master' ? ['3.x.x', '3.6.3'] : ['3.x.x']
+final def oses = ['linux':'ubuntu']
+final def mavens = env.BRANCH_NAME == 'master' ? ['3.x.x', '3.8.8'] : ['3.x.x']

Review Comment:
   on GH action we have 3.6.3 still



##
Jenkinsfile:
##
@@ -134,7 +133,7 @@ def buildProcess(String stageKey, String jdkName, String 
mvnName, goals, options
 println "Maven Local Repository = ${mvnLocalRepoDir}."
 assert mvnLocalRepoDir != null : 'Local Maven Repository is undefined.'
 
-def properties = ["-Djacoco.skip=${!makeReports}", 
"\"-Dmaven.repo.local=${mvnLocalRepoDir}\""]
+def properties = ["-Papache.ci -Djacoco.skip=${!makeReports}", 
"\"-Dmaven.repo.local=${mvnLocalRepoDir}\""]

Review Comment:
   If needed should be added in GH actions ...



##
surefire-its/src/test/resources/surefire-1643-parallel-junit5/pom.xml:
##
@@ -0,0 +1,97 @@
+
+http://maven.apache.org/POM/4.0.0"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
+ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 
http://maven.apache.org/xsd/maven-4.0.0.xsd";>
+  4.0.0
+  org.apache.maven.plugins.surefire
+  junit-platform-1.0.0
+  1.0
+  [SUREFIRE-1643] JUnit 5: Parallel Test mixed
+
+  
+UTF-8
+1.8
+1.8
+
3
+
fixed
+
true
+
concurrent
+
same_thread
+  
+
+  
+
+  
+org.junit
+junit-bom
+5.9.1
+pom
+import
+  
+
+  
+
+  
+
+  org.junit.jupiter
+  junit-jupiter-api
+  test
+
+  
+
+  
+
+  
+
+
+  maven-clean-plugin
+  3.4.0
+
+
+
+  maven-resources-plugin
+  3.3.1
+
+
+  maven-compiler-plugin
+  3.13.0
+
+
+  maven-surefire-plugin
+  3.5.3-SNAPSHOT

Review Comment:
   Here should be current project version



##
surefire-its/pom.xml:
##
@@ -241,6 +242,13 @@
 
   
 
+
+  apache.ci
+  
+0.4C
+1
+  
+

Review Comment:
   maybe we can detect CI by some of commons environment variable like CI ...?
   
   do we need this only on Jenkins?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.graalvm.nativeimage:svm from 24.1.1 to 24.2.0 [maven-mvnd]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #1296:
URL: https://github.com/apache/maven-mvnd/pull/1296

   Bumps [org.graalvm.nativeimage:svm](https://github.com/oracle/graal) from 
24.1.1 to 24.2.0.
   
   Commits
   
   https://github.com/oracle/graal/commit/7b230f23574c51bae4b1b13802a02095874cf7bc";>7b230f2
 Release GraalVM 24.2.0.
   https://github.com/oracle/graal/commit/db02fc8e3c5bef24a59c5fd0e58aeff0f3fd8cc9";>db02fc8
 Update CI overlay (GR-62797).
   https://github.com/oracle/graal/commit/0376db0f90ae030b3ea02f8a1731311ef2d200d8";>0376db0
 [GR-59180] Update third party license file.
   https://github.com/oracle/graal/commit/c39e4705eaf6450bc80091019075acac1112aabe";>c39e470
 Update third party license file.
   https://github.com/oracle/graal/commit/827b4ac08f53c58807a2dd921e8d2679970da30f";>827b4ac
 [GR-62649] Backport to 24.2: TruffleJWS version updated.
   https://github.com/oracle/graal/commit/f0f3fc60a298f159328eabc9c9d46c05f4cdce7b";>f0f3fc6
 [GR-62624] Fix StaticProperty.javaHome to reflect user input.
   https://github.com/oracle/graal/commit/9978d6a16390067e34ca5e6f1872c9863c3298df";>9978d6a
 Backport to 24.2: TruffleJWS version updated. (GR-62649)
   https://github.com/oracle/graal/commit/766ffbce2f80c967db5ad32244343bbf41a531fd";>766ffbc
 [GR-62597] Backport to 24.2: Fall back to non-containerized bundle build for 
...
   https://github.com/oracle/graal/commit/3196c9d2bf9af4890ea7fc8fd336f0b97f5c9701";>3196c9d
 Fix StaticProperty.javaHome to reflect user input
   https://github.com/oracle/graal/commit/14e47280d8bffc9e4812f53294d6e0f251c7a186";>14e4728
 [GR-62456] Backport to 24.2: GraalPy Maven plugin incorrectly prints warning 
...
   Additional commits viewable in https://github.com/oracle/graal/compare/vm-24.1.1...vm-24.2.0";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.graalvm.nativeimage:svm&package-manager=maven&previous-version=24.1.1&new-version=24.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.graalvm.nativeimage:svm from 24.1.1 to 24.1.2 [maven-mvnd]

2025-03-19 Thread via GitHub


dependabot[bot] closed pull request #1246: Bump org.graalvm.nativeimage:svm 
from 24.1.1 to 24.1.2
URL: https://github.com/apache/maven-mvnd/pull/1246


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Initialize entities map lazily [maven]

2025-03-19 Thread via GitHub


gnodet opened a new pull request, #2165:
URL: https://github.com/apache/maven/pull/2165

   (no comment)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.graalvm.nativeimage:svm from 24.1.2 to 24.2.0 [maven-mvnd]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #1297:
URL: https://github.com/apache/maven-mvnd/pull/1297

   Bumps [org.graalvm.nativeimage:svm](https://github.com/oracle/graal) from 
24.1.2 to 24.2.0.
   
   Commits
   
   https://github.com/oracle/graal/commit/7b230f23574c51bae4b1b13802a02095874cf7bc";>7b230f2
 Release GraalVM 24.2.0.
   https://github.com/oracle/graal/commit/db02fc8e3c5bef24a59c5fd0e58aeff0f3fd8cc9";>db02fc8
 Update CI overlay (GR-62797).
   https://github.com/oracle/graal/commit/0376db0f90ae030b3ea02f8a1731311ef2d200d8";>0376db0
 [GR-59180] Update third party license file.
   https://github.com/oracle/graal/commit/c39e4705eaf6450bc80091019075acac1112aabe";>c39e470
 Update third party license file.
   https://github.com/oracle/graal/commit/827b4ac08f53c58807a2dd921e8d2679970da30f";>827b4ac
 [GR-62649] Backport to 24.2: TruffleJWS version updated.
   https://github.com/oracle/graal/commit/f0f3fc60a298f159328eabc9c9d46c05f4cdce7b";>f0f3fc6
 [GR-62624] Fix StaticProperty.javaHome to reflect user input.
   https://github.com/oracle/graal/commit/9978d6a16390067e34ca5e6f1872c9863c3298df";>9978d6a
 Backport to 24.2: TruffleJWS version updated. (GR-62649)
   https://github.com/oracle/graal/commit/766ffbce2f80c967db5ad32244343bbf41a531fd";>766ffbc
 [GR-62597] Backport to 24.2: Fall back to non-containerized bundle build for 
...
   https://github.com/oracle/graal/commit/3196c9d2bf9af4890ea7fc8fd336f0b97f5c9701";>3196c9d
 Fix StaticProperty.javaHome to reflect user input
   https://github.com/oracle/graal/commit/14e47280d8bffc9e4812f53294d6e0f251c7a186";>14e4728
 [GR-62456] Backport to 24.2: GraalPy Maven plugin incorrectly prints warning 
...
   Additional commits viewable in https://github.com/oracle/graal/compare/vm-24.1.2...vm-24.2.0";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.graalvm.nativeimage:svm&package-manager=maven&previous-version=24.1.2&new-version=24.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.graalvm.nativeimage:svm from 24.1.1 to 24.1.2 [maven-mvnd]

2025-03-19 Thread via GitHub


dependabot[bot] commented on PR #1246:
URL: https://github.com/apache/maven-mvnd/pull/1246#issuecomment-2736162403

   Superseded by #1296.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-mvnd]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #1298:
URL: https://github.com/apache/maven-mvnd/pull/1298

   Bumps 
[org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 43 
to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven:maven-parent's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9.1 (https://redirect.g

[PR] Bump org.apache.maven.plugins:maven-plugins from 43 to 44 [maven-project-info-reports-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #114:
URL: https://github.com/apache/maven-project-info-reports-plugin/pull/114

   Bumps 
[org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.plugins:maven-plugins's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin 

[PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-apache-resources]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #89:
URL: https://github.com/apache/maven-apache-resources/pull/89

   Bumps 
[org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 43 
to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven:maven-parent's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9.1 (https://re

Re: [PR] Bump org.apache.maven.extensions:maven-extensions from 41 to 43 [maven-build-cache-extension]

2025-03-19 Thread via GitHub


dependabot[bot] closed pull request #160: Bump 
org.apache.maven.extensions:maven-extensions from 41 to 43
URL: https://github.com/apache/maven-build-cache-extension/pull/160


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.extensions:maven-extensions from 41 to 44 [maven-build-cache-extension]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #200:
URL: https://github.com/apache/maven-build-cache-extension/pull/200

   Bumps 
[org.apache.maven.extensions:maven-extensions](https://github.com/apache/maven-parent)
 from 41 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.extensions:maven-extensions's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-p

Re: [PR] Bump org.apache.maven.extensions:maven-extensions from 41 to 43 [maven-build-cache-extension]

2025-03-19 Thread via GitHub


dependabot[bot] commented on PR #160:
URL: 
https://github.com/apache/maven-build-cache-extension/pull/160#issuecomment-2735544121

   Superseded by #200.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] [MNG-5102] Add support for POM mixins [maven]

2025-03-19 Thread via GitHub


gnodet commented on code in PR #1209:
URL: https://github.com/apache/maven/pull/1209#discussion_r2002564146


##
its/core-it-suite/src/test/resources/mng-5102-mixins/gav/project/pom.xml:
##
@@ -0,0 +1,60 @@
+
+
+http://maven.apache.org/POM/4.1.0"; root="true">
+  org.apache.maven.its.mng5102
+  gav
+  0.1
+  pom
+
+  Maven Integration Test :: MNG-5102
+  Mixins tests.
+
+  
+
+  
+org.apache.maven.its.plugins
+maven-it-plugin-expression
+2.1-SNAPSHOT
+
+  
+
+  eval
+
+validate
+
+  target/model.properties
+  
+project/properties
+  
+
+  
+
+  
+
+  
+
+  
+
+  org.apache.maven.its.mng5102
+  mixin-2

Review Comment:
   It's now supported :-)



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] [MNG-5102] Add support for POM mixins [maven]

2025-03-19 Thread via GitHub


gnodet commented on code in PR #1209:
URL: https://github.com/apache/maven/pull/1209#discussion_r2002564146


##
its/core-it-suite/src/test/resources/mng-5102-mixins/gav/project/pom.xml:
##
@@ -0,0 +1,60 @@
+
+
+http://maven.apache.org/POM/4.1.0"; root="true">
+  org.apache.maven.its.mng5102
+  gav
+  0.1
+  pom
+
+  Maven Integration Test :: MNG-5102
+  Mixins tests.
+
+  
+
+  
+org.apache.maven.its.plugins
+maven-it-plugin-expression
+2.1-SNAPSHOT
+
+  
+
+  eval
+
+validate
+
+  target/model.properties
+  
+project/properties
+  
+
+  
+
+  
+
+  
+
+  
+
+  org.apache.maven.its.mng5102
+  mixin-2

Review Comment:
   It's now supported !



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] [MNG-8630] Bump ch.qos.logback:logback-classic from 1.5.17 to 1.5.18 [maven]

2025-03-19 Thread via GitHub


gnodet merged PR #2161:
URL: https://github.com/apache/maven/pull/2161


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-plugins from 43 to 44 [maven-jarsigner-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #47:
URL: https://github.com/apache/maven-jarsigner-plugin/pull/47

   Bumps 
[org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.plugins:maven-plugins's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to

Re: [PR] Bump org.codehaus.plexus:plexus-java from 1.3.0 to 1.4.0 [maven-surefire]

2025-03-19 Thread via GitHub


olamy commented on PR #810:
URL: https://github.com/apache/maven-surefire/pull/810#issuecomment-2735916047

   @dependabot rebase


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-wagon]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #156:
URL: https://github.com/apache/maven-wagon/pull/156

   Bumps 
[org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 43 
to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven:maven-parent's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9.1 (https://redirect.gi

[jira] [Created] (MNG-8630) Bump ch.qos.logback:logback-classic from 1.5.17 to 1.5.18

2025-03-19 Thread Guillaume Nodet (Jira)
Guillaume Nodet created MNG-8630:


 Summary: Bump ch.qos.logback:logback-classic from 1.5.17 to 1.5.18
 Key: MNG-8630
 URL: https://issues.apache.org/jira/browse/MNG-8630
 Project: Maven
  Issue Type: Task
Reporter: Guillaume Nodet


GitHub Pull Request: https://github.com/apache/maven/pull/2161



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[PR] Fix ITs referencing rc-3-SNAPSHOT [maven]

2025-03-19 Thread via GitHub


gnodet opened a new pull request, #2164:
URL: https://github.com/apache/maven/pull/2164

   Following this checklist to help us incorporate your
   contribution quickly and easily:
   
- [ ] Make sure there is a [JIRA 
issue](https://issues.apache.org/jira/browse/MNG) filed
  for the change (usually before you start working on it).  Trivial 
changes like typos do not
  require a JIRA issue. Your pull request should address just this 
issue, without
  pulling in other changes.
- [ ] Each commit in the pull request should have a meaningful subject line 
and body.
- [ ] Format the pull request title like `[MNG-XXX] SUMMARY`,
  where you replace `MNG-XXX` and `SUMMARY` with the appropriate JIRA 
issue.
- [ ] Also format the first line of the commit message like `[MNG-XXX] 
SUMMARY`.
  Best practice is to use the JIRA issue title in both the pull request 
title and in the first line of the commit message.
- [ ] Write a pull request description that is detailed enough to 
understand what the pull request does, how, and why.
- [ ] Run `mvn clean verify` to make sure basic checks pass. A more 
thorough check will
  be performed on your pull request automatically.
- [ ] You have run the [Core IT][core-its] successfully.
   
   If your pull request is about ~20 lines of code you don't need to sign an
   [Individual Contributor License 
Agreement](https://www.apache.org/licenses/icla.pdf) if you are unsure
   please ask on the developers list.
   
   To make clear that you license your contribution under
   the [Apache License Version 2.0, January 
2004](http://www.apache.org/licenses/LICENSE-2.0)
   you have to acknowledge this by using the following check-box.
   
- [ ] I hereby declare this contribution to be licenced under the [Apache 
License Version 2.0, January 2004](http://www.apache.org/licenses/LICENSE-2.0)
   
- [ ] In any other case, please file an [Apache Individual Contributor 
License Agreement](https://www.apache.org/licenses/icla.pdf).
   
   [core-its]: https://maven.apache.org/core-its/core-it-suite/
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MNG-7868) "Could not acquire lock(s)" error in concurrent maven builds

2025-03-19 Thread Reto Hoehener (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17936731#comment-17936731
 ] 

Reto Hoehener commented on MNG-7868:


 [~michael-o] I also find references to Jira issues in error messages very 
helpful (e.g. 'see MNG-7868'), because they allow me to get the complete 
picture / context.

> "Could not acquire lock(s)" error in concurrent maven builds
> 
>
> Key: MNG-7868
> URL: https://issues.apache.org/jira/browse/MNG-7868
> Project: Maven
>  Issue Type: Bug
> Environment: windows, maven 3.9.4
>Reporter: Jörg Hohwiller
>Priority: Major
> Attachments: MNG-7868-pz_ai_37_lock.txt, MNG-7868-reproduce.txt, 
> MNG-7868.zip, image-2024-04-10-15-44-37-013.png, screenshot-1.png
>
>
> {code}
> [ERROR] Failed to execute goal 
> org.apache.maven.plugins:maven-install-plugin:3.1.1:install (default-install) 
> on project foo.bar: Execution default-install of goal 
> org.apache.maven.plugins:maven-install-plugin:3.1.1:install failed: Could not 
> acquire lock(s) -> [Help 1]
> {code}
> I am using maven 3.9.4 on windows:
> {code}
> $ mvn -v
> Apache Maven 3.9.4 (dfbb324ad4a7c8fb0bf182e6d91b0ae20e3d2dd9)
> Maven home: D:\projects\test\software\mvn
> Java version: 17.0.5, vendor: Eclipse Adoptium, runtime: 
> D:\projects\test\software\java
> Default locale: en_US, platform encoding: UTF-8
> OS name: "windows 10", version: "10.0", arch: "amd64", family: "windows"
> {code}
> I searched for this bug and found issues like MRESOLVER-332 that first look 
> identical or similar but do not really seem to be related so I decided to 
> create this issue.
> For this bug I made the following observations:
> * it only happens with concurrent builds: {{mvn -T ...}}
> * is seems to be windows related (at least mainly happens on windows)
> * it is in-deterministic and is not so easy to create an isolated and simple 
> project and a reproducible scenario that always results in this error. 
> However, I get this very often in my current project with many modules (500+).
> * it is not specific to the maven-install-plugin and also happens from other 
> spots in maven:
> I also got this stacktrace:
> {code}
> Suppressed: java.lang.IllegalStateException: Attempt 1: Could not acquire 
> write lock for 
> 'C:\Users\hohwille\.m2\repository\.locks\artifact~com.caucho~com.springsource.com.caucho~3.2.1.lock'
>  in 30 SECONDS
> at 
> org.eclipse.aether.internal.impl.synccontext.named.NamedLockFactoryAdapter$AdaptedLockSyncContext.acquire
>  (NamedLockFactoryAdapter.java:202)
> at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve 
> (DefaultArtifactResolver.java:271)
> at 
> org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifacts 
> (DefaultArtifactResolver.java:259)
> at 
> org.eclipse.aether.internal.impl.DefaultRepositorySystem.resolveDependencies 
> (DefaultRepositorySystem.java:352)
> {code}
> See also this related discussion:
> https://github.com/apache/maven-mvnd/issues/836#issuecomment-1702488377



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-wagon]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #155:
URL: https://github.com/apache/maven-wagon/pull/155

   Bumps 
[org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 43 
to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven:maven-parent's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9.1 (https://redirect.gi

[jira] [Updated] (MNG-7906) Dependency Management import (BOM) does not work the "maven way"

2025-03-19 Thread Herve Boutemy (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7906?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Herve Boutemy updated MNG-7906:
---
Description: 
This affects all released Maven versions so far (precisely since 2.0.9 
MNG-3220).

Problem reproducer: https://github.com/cstamas/MNG-7852 (repo name is wrong, 
obviously).

In short: unlike with dependencies, where you CAN override some "deep 
transitive" dependency by re-declaring it directly as 1st level dependency in 
POM, for depMgt import this does not work, actually, it works quite the 
opposite ("first comes, wins"). Moreover, Maven remains silent about this, as 
reproducer shows, and all of this goes unnoticed.

Solution: at least depMgt import should make "the maven way", maybe not by 
default (to not break existing builds) but configurable. Problem is solved if 
in reproducer:
- with fix enabled, junit 5.9.3 is used, AND
- with fix disabled, Maven yells about ignored depMgt import

  was:
This affects all released Maven versions so far.

Problem reproducer: https://github.com/cstamas/MNG-7852 (repo name is wrong, 
obviously).

In short: unlike with dependencies, where you CAN override some "deep 
transitive" dependency by re-declaring it directly as 1st level dependency in 
POM, for depMgt import this does not work, actually, it works quite the 
opposite ("first comes, wins"). Moreover, Maven remains silent about this, as 
reproducer shows, and all of this goes unnoticed.

Solution: at least depMgt import should make "the maven way", maybe not by 
default (to not break existing builds) but configurable. Problem is solved if 
in reproducer:
- with fix enabled, junit 5.9.3 is used, AND
- with fix disabled, Maven yells about ignored depMgt import


> Dependency Management import (BOM) does not work the "maven way"
> 
>
> Key: MNG-7906
> URL: https://issues.apache.org/jira/browse/MNG-7906
> Project: Maven
>  Issue Type: Bug
>  Components: Dependencies, Documentation:  General
>Reporter: Tamas Cservenak
>Priority: Major
> Fix For: 4.0.x-candidate
>
>
> This affects all released Maven versions so far (precisely since 2.0.9 
> MNG-3220).
> Problem reproducer: https://github.com/cstamas/MNG-7852 (repo name is wrong, 
> obviously).
> In short: unlike with dependencies, where you CAN override some "deep 
> transitive" dependency by re-declaring it directly as 1st level dependency in 
> POM, for depMgt import this does not work, actually, it works quite the 
> opposite ("first comes, wins"). Moreover, Maven remains silent about this, as 
> reproducer shows, and all of this goes unnoticed.
> Solution: at least depMgt import should make "the maven way", maybe not by 
> default (to not break existing builds) but configurable. Problem is solved if 
> in reproducer:
> - with fix enabled, junit 5.9.3 is used, AND
> - with fix disabled, Maven yells about ignored depMgt import



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MNG-7868) "Could not acquire lock(s)" error in concurrent maven builds

2025-03-19 Thread Michael Osipov (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17936737#comment-17936737
 ] 

Michael Osipov commented on MNG-7868:
-

[~rho4], why not? Maybe you should raise a PR.

> "Could not acquire lock(s)" error in concurrent maven builds
> 
>
> Key: MNG-7868
> URL: https://issues.apache.org/jira/browse/MNG-7868
> Project: Maven
>  Issue Type: Bug
> Environment: windows, maven 3.9.4
>Reporter: Jörg Hohwiller
>Priority: Major
> Attachments: MNG-7868-pz_ai_37_lock.txt, MNG-7868-reproduce.txt, 
> MNG-7868.zip, image-2024-04-10-15-44-37-013.png, screenshot-1.png
>
>
> {code}
> [ERROR] Failed to execute goal 
> org.apache.maven.plugins:maven-install-plugin:3.1.1:install (default-install) 
> on project foo.bar: Execution default-install of goal 
> org.apache.maven.plugins:maven-install-plugin:3.1.1:install failed: Could not 
> acquire lock(s) -> [Help 1]
> {code}
> I am using maven 3.9.4 on windows:
> {code}
> $ mvn -v
> Apache Maven 3.9.4 (dfbb324ad4a7c8fb0bf182e6d91b0ae20e3d2dd9)
> Maven home: D:\projects\test\software\mvn
> Java version: 17.0.5, vendor: Eclipse Adoptium, runtime: 
> D:\projects\test\software\java
> Default locale: en_US, platform encoding: UTF-8
> OS name: "windows 10", version: "10.0", arch: "amd64", family: "windows"
> {code}
> I searched for this bug and found issues like MRESOLVER-332 that first look 
> identical or similar but do not really seem to be related so I decided to 
> create this issue.
> For this bug I made the following observations:
> * it only happens with concurrent builds: {{mvn -T ...}}
> * is seems to be windows related (at least mainly happens on windows)
> * it is in-deterministic and is not so easy to create an isolated and simple 
> project and a reproducible scenario that always results in this error. 
> However, I get this very often in my current project with many modules (500+).
> * it is not specific to the maven-install-plugin and also happens from other 
> spots in maven:
> I also got this stacktrace:
> {code}
> Suppressed: java.lang.IllegalStateException: Attempt 1: Could not acquire 
> write lock for 
> 'C:\Users\hohwille\.m2\repository\.locks\artifact~com.caucho~com.springsource.com.caucho~3.2.1.lock'
>  in 30 SECONDS
> at 
> org.eclipse.aether.internal.impl.synccontext.named.NamedLockFactoryAdapter$AdaptedLockSyncContext.acquire
>  (NamedLockFactoryAdapter.java:202)
> at org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve 
> (DefaultArtifactResolver.java:271)
> at 
> org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifacts 
> (DefaultArtifactResolver.java:259)
> at 
> org.eclipse.aether.internal.impl.DefaultRepositorySystem.resolveDependencies 
> (DefaultRepositorySystem.java:352)
> {code}
> See also this related discussion:
> https://github.com/apache/maven-mvnd/issues/836#issuecomment-1702488377



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[PR] Bump org.apache.maven.extensions:maven-extensions from 43 to 44 [maven-xinclude-extension]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #24:
URL: https://github.com/apache/maven-xinclude-extension/pull/24

   Bumps 
[org.apache.maven.extensions:maven-extensions](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.extensions:maven-extensions's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin

Re: [PR] [MRESOLVER-687] Validator SPI [maven-resolver]

2025-03-19 Thread via GitHub


cstamas merged PR #671:
URL: https://github.com/apache/maven-resolver/pull/671


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MRESOLVER-687) Add Artifact/Dependency validation SPI hook

2025-03-19 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MRESOLVER-687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17936801#comment-17936801
 ] 

ASF GitHub Bot commented on MRESOLVER-687:
--

cstamas merged PR #671:
URL: https://github.com/apache/maven-resolver/pull/671




> Add Artifact/Dependency validation SPI hook
> ---
>
> Key: MRESOLVER-687
> URL: https://issues.apache.org/jira/browse/MRESOLVER-687
> Project: Maven Resolver
>  Issue Type: Improvement
>  Components: Resolver
>Reporter: Tamas Cservenak
>Assignee: Tamas Cservenak
>Priority: Major
> Fix For: 2.0.8
>
>
> Resolver treats GAV strings as opaquen, yet in some cases (ie. dependency 
> version set to some non existent property or property with typo) Resolver 
> will be asked to resolve that artifact potentially with incomplete 
> (uninterpolated) artifact. Resolver will obey (coordinates are opaque) and 
> will return "no such artifact".
> This may lead to build error like "non resolvable artifact", while in fact 
> user had a typo in version property of a dependency.
> Because resolver has no notion of "interpolation" and "placeholders" (it is 
> Maven doing this atop of resolver) a form of callback would be handy where 
> Resolver would have an extension point that is implemented in Maven invoked 
> before artifact/dependency is about to be resolved where Maven could throw 
> early error (not letting Resolver even try to resolve it) as Artifact was 
> "incompletely interpolated".



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Closed] (MRESOLVER-687) Add Artifact/Dependency validation SPI hook

2025-03-19 Thread Tamas Cservenak (Jira)


 [ 
https://issues.apache.org/jira/browse/MRESOLVER-687?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tamas Cservenak closed MRESOLVER-687.
-
Resolution: Fixed

> Add Artifact/Dependency validation SPI hook
> ---
>
> Key: MRESOLVER-687
> URL: https://issues.apache.org/jira/browse/MRESOLVER-687
> Project: Maven Resolver
>  Issue Type: Improvement
>  Components: Resolver
>Reporter: Tamas Cservenak
>Assignee: Tamas Cservenak
>Priority: Major
> Fix For: 2.0.8
>
>
> Resolver treats GAV strings as opaquen, yet in some cases (ie. dependency 
> version set to some non existent property or property with typo) Resolver 
> will be asked to resolve that artifact potentially with incomplete 
> (uninterpolated) artifact. Resolver will obey (coordinates are opaque) and 
> will return "no such artifact".
> This may lead to build error like "non resolvable artifact", while in fact 
> user had a typo in version property of a dependency.
> Because resolver has no notion of "interpolation" and "placeholders" (it is 
> Maven doing this atop of resolver) a form of callback would be handy where 
> Resolver would have an extension point that is implemented in Maven invoked 
> before artifact/dependency is about to be resolved where Maven could throw 
> early error (not letting Resolver even try to resolve it) as Artifact was 
> "incompletely interpolated".



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


Re: [PR] Fix ITs referencing rc-3-SNAPSHOT [maven]

2025-03-19 Thread via GitHub


gnodet merged PR #2164:
URL: https://github.com/apache/maven/pull/2164


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Closed] (MRESOLVER-692) Bump maven-parent from 43 to 44

2025-03-19 Thread Tamas Cservenak (Jira)


 [ 
https://issues.apache.org/jira/browse/MRESOLVER-692?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tamas Cservenak closed MRESOLVER-692.
-
  Assignee: Tamas Cservenak
Resolution: Fixed

> Bump maven-parent from 43 to 44
> ---
>
> Key: MRESOLVER-692
> URL: https://issues.apache.org/jira/browse/MRESOLVER-692
> Project: Maven Resolver
>  Issue Type: Dependency upgrade
>  Components: Resolver
>Reporter: Tamas Cservenak
>Assignee: Tamas Cservenak
>Priority: Major
> Fix For: 2.0.8
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


Re: [PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-resolver]

2025-03-19 Thread via GitHub


dependabot[bot] commented on PR #674:
URL: https://github.com/apache/maven-resolver/pull/674#issuecomment-2736662741

   Looks like org.apache.maven:maven-parent is up-to-date now, so this is no 
longer needed.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump maven-parent from 43 to 44 [maven-resolver]

2025-03-19 Thread via GitHub


cstamas merged PR #675:
URL: https://github.com/apache/maven-resolver/pull/675


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-resolver]

2025-03-19 Thread via GitHub


cstamas commented on PR #674:
URL: https://github.com/apache/maven-resolver/pull/674#issuecomment-2736660777

   @dependabot rebase


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-plugins from 43 to 44 [maven-doap-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #37:
URL: https://github.com/apache/maven-doap-plugin/pull/37

   Bumps 
[org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.plugins:maven-plugins's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9.

[PR] Bump org.apache.maven.plugins:maven-plugins from 43 to 44 [maven-pmd-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #183:
URL: https://github.com/apache/maven-pmd-plugin/pull/183

   Bumps 
[org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.plugins:maven-plugins's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9

Re: [PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-resolver]

2025-03-19 Thread via GitHub


dependabot[bot] closed pull request #674: Bump org.apache.maven:maven-parent 
from 43 to 44
URL: https://github.com/apache/maven-resolver/pull/674


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Created] (MRESOLVER-692) Bump maven-parent from 43 to 44

2025-03-19 Thread Tamas Cservenak (Jira)
Tamas Cservenak created MRESOLVER-692:
-

 Summary: Bump maven-parent from 43 to 44
 Key: MRESOLVER-692
 URL: https://issues.apache.org/jira/browse/MRESOLVER-692
 Project: Maven Resolver
  Issue Type: Dependency upgrade
  Components: Resolver
Reporter: Tamas Cservenak
 Fix For: 2.0.8






--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[PR] Bump org.apache.maven.plugins:maven-plugins from 43 to 44 [maven-compiler-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #316:
URL: https://github.com/apache/maven-compiler-plugin/pull/316

   Bumps 
[org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.plugins:maven-plugins's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 t

[jira] [Commented] (MRESOLVER-646) Maven4 supplier should use maven-impl

2025-03-19 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MRESOLVER-646?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17936880#comment-17936880
 ] 

ASF GitHub Bot commented on MRESOLVER-646:
--

cstamas commented on PR #672:
URL: https://github.com/apache/maven-resolver/pull/672#issuecomment-2737252343

   This cannot work as is: "mvn4 bits" are Maven4 annotated, and bridge is not 
here (is in maven-core which we don't want here)...




> Maven4 supplier should use maven-impl
> -
>
> Key: MRESOLVER-646
> URL: https://issues.apache.org/jira/browse/MRESOLVER-646
> Project: Maven Resolver
>  Issue Type: Dependency upgrade
>  Components: Resolver
>Reporter: Tamas Cservenak
>Priority: Major
> Fix For: 2.0.8
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


Re: [PR] [MRESOLVER-646] Use Maven 4 internal bits [maven-resolver]

2025-03-19 Thread via GitHub


cstamas commented on PR #672:
URL: https://github.com/apache/maven-resolver/pull/672#issuecomment-2737252343

   This cannot work as is: "mvn4 bits" are Maven4 annotated, and bridge is not 
here (is in maven-core which we don't want here)...


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Commented] (MRESOLVER-646) Maven4 supplier should use maven-impl

2025-03-19 Thread ASF GitHub Bot (Jira)


[ 
https://issues.apache.org/jira/browse/MRESOLVER-646?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17936882#comment-17936882
 ] 

ASF GitHub Bot commented on MRESOLVER-646:
--

gnodet commented on PR #672:
URL: https://github.com/apache/maven-resolver/pull/672#issuecomment-2737290343

   > This cannot work as is: "mvn4 bits" are Maven4 annotated, and bridge is 
not here (is in maven-core which we don't want here)...
   
   It may be possible to move the bridge in a separate jar, not sure...
   Or do we want to use DI annotations for resolver ?




> Maven4 supplier should use maven-impl
> -
>
> Key: MRESOLVER-646
> URL: https://issues.apache.org/jira/browse/MRESOLVER-646
> Project: Maven Resolver
>  Issue Type: Dependency upgrade
>  Components: Resolver
>Reporter: Tamas Cservenak
>Priority: Major
> Fix For: 2.0.8
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[PR] Bump org.apache.maven.plugins:maven-plugins from 43 to 44 [maven-deploy-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #118:
URL: https://github.com/apache/maven-deploy-plugin/pull/118

   Bumps 
[org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.plugins:maven-plugins's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 

[PR] Bump org.apache.maven.plugins:maven-plugins from 43 to 44 [maven-deploy-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #117:
URL: https://github.com/apache/maven-deploy-plugin/pull/117

   Bumps 
[org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.plugins:maven-plugins's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 

[PR] Bump org.apache.maven.shared:maven-shared-components from 43 to 44 [maven-filtering]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #145:
URL: https://github.com/apache/maven-filtering/pull/145

   Bumps 
[org.apache.maven.shared:maven-shared-components](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.shared:maven-shared-components's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin 

[PR] Bump org.apache.maven.shared:maven-shared-components from 43 to 44 [maven-filtering]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #146:
URL: https://github.com/apache/maven-filtering/pull/146

   Bumps 
[org.apache.maven.shared:maven-shared-components](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.shared:maven-shared-components's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin 

[PR] Bump maven-parent from 43 to 44 [maven-resolver]

2025-03-19 Thread via GitHub


cstamas opened a new pull request, #675:
URL: https://github.com/apache/maven-resolver/pull/675

   (no comment)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-jxr]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #135:
URL: https://github.com/apache/maven-jxr/pull/135

   Bumps 
[org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 43 
to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven:maven-parent's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9.1 (https://redirect.gith

[PR] Bump org.apache.maven.plugins:maven-plugins from 43 to 44 [maven-compiler-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #315:
URL: https://github.com/apache/maven-compiler-plugin/pull/315

   Bumps 
[org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.plugins:maven-plugins's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 t

Re: [PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven]

2025-03-19 Thread via GitHub


cstamas commented on PR #2162:
URL: https://github.com/apache/maven/pull/2162#issuecomment-2737313622

   Needs site descriptor changes as well...
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] [MRESOLVER-646] Use Maven 4 internal bits [maven-resolver]

2025-03-19 Thread via GitHub


gnodet commented on PR #672:
URL: https://github.com/apache/maven-resolver/pull/672#issuecomment-2737290343

   > This cannot work as is: "mvn4 bits" are Maven4 annotated, and bridge is 
not here (is in maven-core which we don't want here)...
   
   It may be possible to move the bridge in a separate jar, not sure...
   Or do we want to use DI annotations for resolver ?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Update site descriptors [maven-resolver]

2025-03-19 Thread via GitHub


cstamas merged PR #676:
URL: https://github.com/apache/maven-resolver/pull/676


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.shared:maven-shared-components from 43 to 44 [maven-archiver]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #89:
URL: https://github.com/apache/maven-archiver/pull/89

   Bumps 
[org.apache.maven.shared:maven-shared-components](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.shared:maven-shared-components's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin fro

Re: [PR] Bump org.apache.maven.shared:maven-shared-components from 42 to 43 [maven-shared-utils]

2025-03-19 Thread via GitHub


dependabot[bot] closed pull request #179: Bump 
org.apache.maven.shared:maven-shared-components from 42 to 43
URL: https://github.com/apache/maven-shared-utils/pull/179


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.shared:maven-shared-components from 42 to 44 [maven-shared-utils]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #189:
URL: https://github.com/apache/maven-shared-utils/pull/189

   Bumps 
[org.apache.maven.shared:maven-shared-components](https://github.com/apache/maven-parent)
 from 42 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.shared:maven-shared-components's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plug

[PR] Bump org.apache.maven.plugins:maven-plugins from 43 to 44 [maven-jdeps-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #22:
URL: https://github.com/apache/maven-jdeps-plugin/pull/22

   Bumps 
[org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.plugins:maven-plugins's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9

Re: [PR] Bump org.apache.maven.shared:maven-shared-components from 42 to 43 [maven-shared-utils]

2025-03-19 Thread via GitHub


dependabot[bot] commented on PR #179:
URL: 
https://github.com/apache/maven-shared-utils/pull/179#issuecomment-2737852456

   Superseded by #189.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] [MNG-5102] Add support for POM mixins [maven]

2025-03-19 Thread via GitHub


jimisola commented on code in PR #1209:
URL: https://github.com/apache/maven/pull/1209#discussion_r2004165944


##
its/core-it-suite/src/test/resources/mng-5102-mixins/gav/project/pom.xml:
##
@@ -0,0 +1,60 @@
+
+
+http://maven.apache.org/POM/4.1.0"; root="true">
+  org.apache.maven.its.mng5102
+  gav
+  0.1
+  pom
+
+  Maven Integration Test :: MNG-5102
+  Mixins tests.
+
+  
+
+  
+org.apache.maven.its.plugins
+maven-it-plugin-expression
+2.1-SNAPSHOT
+
+  
+
+  eval
+
+validate
+
+  target/model.properties
+  
+project/properties
+  
+
+  
+
+  
+
+  
+
+  
+
+  org.apache.maven.its.mng5102
+  mixin-2

Review Comment:
   @gnodet Is it likely that mixins will make the next Maven 4 release 
candidate? Would really like to try it out with our setup.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] [MNG-5102] Add support for POM mixins [maven]

2025-03-19 Thread via GitHub


jimisola commented on code in PR #1209:
URL: https://github.com/apache/maven/pull/1209#discussion_r2004164811


##
its/core-it-suite/src/test/resources/mng-5102-mixins/gav/project/pom.xml:
##
@@ -0,0 +1,60 @@
+
+
+http://maven.apache.org/POM/4.1.0"; root="true">
+  org.apache.maven.its.mng5102
+  gav
+  0.1
+  pom
+
+  Maven Integration Test :: MNG-5102
+  Mixins tests.
+
+  
+
+  
+org.apache.maven.its.plugins
+maven-it-plugin-expression
+2.1-SNAPSHOT
+
+  
+
+  eval
+
+validate
+
+  target/model.properties
+  
+project/properties
+  
+
+  
+
+  
+
+  
+
+  
+
+  org.apache.maven.its.mng5102
+  mixin-2

Review Comment:
   @talios Our organization use your Maven Tiles (thank you!). Trying to think 
if there is something in Maven Tiles that this current implementation of Maven 
Mixins does not support. With Maven Tiles we have issues with profiles (the are 
active but Maven does not alwats acknowledge them) and properties (properties 
aren't propagated).
   
   From what Guillaume wrote it seems as if mixins, currently not having any 
restrictions, might function even better that Maven Tiles.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] [MNG-5102] Add support for POM mixins [maven]

2025-03-19 Thread via GitHub


talios commented on code in PR #1209:
URL: https://github.com/apache/maven/pull/1209#discussion_r2004193938


##
its/core-it-suite/src/test/resources/mng-5102-mixins/gav/project/pom.xml:
##
@@ -0,0 +1,60 @@
+
+
+http://maven.apache.org/POM/4.1.0"; root="true">
+  org.apache.maven.its.mng5102
+  gav
+  0.1
+  pom
+
+  Maven Integration Test :: MNG-5102
+  Mixins tests.
+
+  
+
+  
+org.apache.maven.its.plugins
+maven-it-plugin-expression
+2.1-SNAPSHOT
+
+  
+
+  eval
+
+validate
+
+  target/model.properties
+  
+project/properties
+  
+
+  
+
+  
+
+  
+
+  
+
+  org.apache.maven.its.mng5102
+  mixin-2

Review Comment:
   @jimisola Depending on how this works in practise - and @gnodet may be able 
to quickly confirm, one big thing that users of tiles seem to love (which is 
something I'd gladly give up as I don't overlike it) - is having mixins, that 
contain mixins.
   
   Tiles also (by default) disallows dependencies (unlocked via the code smells 
configuration) - but it's often useful to include runtime dependencies to match 
plugins.
   
   Say an antlr mixin might declared the antlr runtime dep, AND the plugin 
config.
   
   One thing I don't see here (and also only cause I've not yet had a running 
version work yet) is logging of mixins being pulled in.  That's quite handy for 
debugging, as is our default behavior of rewriting the execution ids to be 
prefixed by the mixin.
   
   The rewriting of execution ids could easily just be done IN the mixin, with 
descriptive ids to begin with tho.
   
   Properties aren't propagated? AFAIK they are as we use them often, the issue 
we have (which is possible more to Model inheritance) is if a tile references a 
property, but doesn't declare it a default value THEN it doesn't seem to work.
   
   But having a property defined at the mixin/tile level, and overridden in the 
top level pom works.
   



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-mvnd]

2025-03-19 Thread via GitHub


cstamas merged PR #1298:
URL: https://github.com/apache/maven-mvnd/pull/1298


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Created] (MNG-8631) Replace a NullPointerException by a more explicit error message

2025-03-19 Thread Tamas Cservenak (Jira)
Tamas Cservenak created MNG-8631:


 Summary: Replace a NullPointerException by a more explicit error 
message
 Key: MNG-8631
 URL: https://issues.apache.org/jira/browse/MNG-8631
 Project: Maven
  Issue Type: Bug
  Components: Core
Reporter: Tamas Cservenak
 Fix For: 4.0.0-rc-4






--
This message was sent by Atlassian Jira
(v8.20.10#820010)


Re: [PR] Replace a `NullPointerException` by a more explicit error message [maven]

2025-03-19 Thread via GitHub


cstamas merged PR #2160:
URL: https://github.com/apache/maven/pull/2160


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Assigned] (MNG-8631) Replace a NullPointerException by a more explicit error message

2025-03-19 Thread Tamas Cservenak (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-8631?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tamas Cservenak reassigned MNG-8631:


Assignee: Martin Desruisseaux

> Replace a NullPointerException by a more explicit error message
> ---
>
> Key: MNG-8631
> URL: https://issues.apache.org/jira/browse/MNG-8631
> Project: Maven
>  Issue Type: Bug
>  Components: Core
>Reporter: Tamas Cservenak
>Assignee: Martin Desruisseaux
>Priority: Major
> Fix For: 4.0.0-rc-4
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MNG-7906) Dependency Management import (BOM) does not work the "maven way"

2025-03-19 Thread Elliotte Rusty Harold (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7906?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17936840#comment-17936840
 ] 

Elliotte Rusty Harold commented on MNG-7906:


This is confusing and surprising. If we were working from a green field, I 
would agree with changing this. However, we're not. I don't think we should add 
a configurable option to change this. Adding more options only increases the 
complexity, and makes it all the more confusing. We should document this 
carefully and fully, but we should not change the behavior.  

At this late date it's hard to see this as a bug. It's really de facto working 
as intended.



> Dependency Management import (BOM) does not work the "maven way"
> 
>
> Key: MNG-7906
> URL: https://issues.apache.org/jira/browse/MNG-7906
> Project: Maven
>  Issue Type: Bug
>  Components: Dependencies, Documentation:  General
>Reporter: Tamas Cservenak
>Priority: Major
> Fix For: 4.0.x-candidate
>
>
> This affects all released Maven versions so far (precisely since 2.0.9 
> MNG-3220).
> Problem reproducer: https://github.com/cstamas/MNG-7852 (repo name is wrong, 
> obviously).
> In short: unlike with dependencies, where you CAN override some "deep 
> transitive" dependency by re-declaring it directly as 1st level dependency in 
> POM, for depMgt import this does not work, actually, it works quite the 
> opposite ("first comes, wins"). Moreover, Maven remains silent about this, as 
> reproducer shows, and all of this goes unnoticed.
> Solution: at least depMgt import should make "the maven way", maybe not by 
> default (to not break existing builds) but configurable. Problem is solved if 
> in reproducer:
> - with fix enabled, junit 5.9.3 is used, AND
> - with fix disabled, Maven yells about ignored depMgt import



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[PR] Bump org.apache.maven.plugins:maven-plugins from 43 to 44 [maven-antrun-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #115:
URL: https://github.com/apache/maven-antrun-plugin/pull/115

   Bumps 
[org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.plugins:maven-plugins's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 

[jira] [Closed] (MNG-8631) Replace a NullPointerException by a more explicit error message

2025-03-19 Thread Tamas Cservenak (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-8631?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tamas Cservenak closed MNG-8631.

Resolution: Fixed

> Replace a NullPointerException by a more explicit error message
> ---
>
> Key: MNG-8631
> URL: https://issues.apache.org/jira/browse/MNG-8631
> Project: Maven
>  Issue Type: Bug
>  Components: Core
>Reporter: Tamas Cservenak
>Assignee: Martin Desruisseaux
>Priority: Major
> Fix For: 4.0.0-rc-4
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (MNG-7906) Dependency Management import (BOM) does not work the "maven way"

2025-03-19 Thread Elliotte Rusty Harold (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7906?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Elliotte Rusty Harold updated MNG-7906:
---
Issue Type: New Feature  (was: Bug)

> Dependency Management import (BOM) does not work the "maven way"
> 
>
> Key: MNG-7906
> URL: https://issues.apache.org/jira/browse/MNG-7906
> Project: Maven
>  Issue Type: New Feature
>  Components: Dependencies, Documentation:  General
>Reporter: Tamas Cservenak
>Priority: Major
> Fix For: 4.0.x-candidate
>
>
> This affects all released Maven versions so far (precisely since 2.0.9 
> MNG-3220).
> Problem reproducer: https://github.com/cstamas/MNG-7852 (repo name is wrong, 
> obviously).
> In short: unlike with dependencies, where you CAN override some "deep 
> transitive" dependency by re-declaring it directly as 1st level dependency in 
> POM, for depMgt import this does not work, actually, it works quite the 
> opposite ("first comes, wins"). Moreover, Maven remains silent about this, as 
> reproducer shows, and all of this goes unnoticed.
> Solution: at least depMgt import should make "the maven way", maybe not by 
> default (to not break existing builds) but configurable. Problem is solved if 
> in reproducer:
> - with fix enabled, junit 5.9.3 is used, AND
> - with fix disabled, Maven yells about ignored depMgt import



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


Re: [PR] Bump org.graalvm.nativeimage:svm from 24.1.2 to 24.2.0 [maven-mvnd]

2025-03-19 Thread via GitHub


cstamas merged PR #1297:
URL: https://github.com/apache/maven-mvnd/pull/1297


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.shared:maven-shared-components from 43 to 44 [maven-mapping]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #16:
URL: https://github.com/apache/maven-mapping/pull/16

   Bumps 
[org.apache.maven.shared:maven-shared-components](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.shared:maven-shared-components's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from

[PR] Bump org.apache.maven:maven-parent from 41 to 44 [maven-scm]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #236:
URL: https://github.com/apache/maven-scm/pull/236

   Bumps 
[org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 41 
to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven:maven-parent's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9.1 (https://redirect.gith

Re: [PR] Bump org.apache.maven:maven-parent from 41 to 43 [maven-scm]

2025-03-19 Thread via GitHub


dependabot[bot] commented on PR #213:
URL: https://github.com/apache/maven-scm/pull/213#issuecomment-2737379668

   Superseded by #236.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven:maven-parent from 41 to 43 [maven-scm]

2025-03-19 Thread via GitHub


dependabot[bot] closed pull request #213: Bump org.apache.maven:maven-parent 
from 41 to 43
URL: https://github.com/apache/maven-scm/pull/213


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] improve RB instructions during votes [maven-site]

2025-03-19 Thread via GitHub


hboutemy merged PR #736:
URL: https://github.com/apache/maven-site/pull/736


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.shared:maven-shared-components from 43 to 44 [maven-reporting-impl]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #65:
URL: https://github.com/apache/maven-reporting-impl/pull/65

   Bumps 
[org.apache.maven.shared:maven-shared-components](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.shared:maven-shared-components's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plug

Re: [PR] [MNG-5102] Add support for POM mixins [maven]

2025-03-19 Thread via GitHub


gnodet commented on code in PR #1209:
URL: https://github.com/apache/maven/pull/1209#discussion_r2002628446


##
its/core-it-suite/src/test/resources/mng-5102-mixins/gav/project/pom.xml:
##
@@ -0,0 +1,60 @@
+
+
+http://maven.apache.org/POM/4.1.0"; root="true">
+  org.apache.maven.its.mng5102
+  gav
+  0.1
+  pom
+
+  Maven Integration Test :: MNG-5102
+  Mixins tests.
+
+  
+
+  
+org.apache.maven.its.plugins
+maven-it-plugin-expression
+2.1-SNAPSHOT
+
+  
+
+  eval
+
+validate
+
+  target/model.properties
+  
+project/properties
+  
+
+  
+
+  
+
+  
+
+  
+
+  org.apache.maven.its.mng5102
+  mixin-2

Review Comment:
   The mixins are merged in their declaration order as if they were parents, so 
there are no restrictions at this point. I haven't given much thought if there 
should be yet...



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Updated] (SUREFIRE-1643) JUnit 5 in parallel execution mode confuses Surefire reports

2025-03-19 Thread Olivier Lamy (Jira)


 [ 
https://issues.apache.org/jira/browse/SUREFIRE-1643?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Olivier Lamy updated SUREFIRE-1643:
---
Fix Version/s: next-release

> JUnit 5 in parallel execution mode confuses Surefire reports
> 
>
> Key: SUREFIRE-1643
> URL: https://issues.apache.org/jira/browse/SUREFIRE-1643
> Project: Maven Surefire
>  Issue Type: Bug
>  Components: JUnit 5.x support
>Affects Versions: 3.0.0-M3
>Reporter: Christian Stein
>Assignee: Olivier Lamy
>Priority: Major
>  Labels: triaged
> Fix For: next-release
>
>
> Hi I hope somebody here can help me out. I am observing something strange 
> while using JUNIT 5 parallel execution. I have two test classes TagTests, and 
> TagTypeTests. When I set the execution mode to CONCURRENT on both classes, 
> and run them, the test report shows the test cases on the wrong test class. 
> For example, the test case testA belongs to class TagTests, but it is shown 
> in the TagTypeTests test report. TagTests has 11 test cases, and TagType has 
> 13 test cases. But the test report shows there are 22 test cases in 
> TagTypeTests, and 2 in TagTests. Is this a known issue of parallelism? How to 
> get around the issue?
> Sam Brannen @sbrannen Mar 01 18:00
> How is the test report generated? In an IDE? Using a build tool?
> James Zhou @jazhou Mar 01 19:47
> @sbrannen I am using maven surefire plugin(ver 3.0.0-M3) to run the tests. 
> Here is the results:
> [INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 6.42 s 
> - in org.aaa.test.functional.tests.TagCrudTests
> [INFO] Tests run: 23, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 6.148 
> s - in org.aaa.test.functional.tests.TagTypeTests
> [INFO] Results:
> [INFO]
> [INFO] Tests run: 24, Failures: 0, Errors: 0, Skipped: 0
> @sbrannen there are actually 11 tests under TagCrudTests. Somehow only one 
> test is shown in the report generated by surefire plugin
> Christian Stein @sormuras Mar 01 20:31
> @jazhou Do you have a minimal (failing) example project to share?
> James Zhou @jazhou Mar 01 22:56
> @sormuras Sure. Here is the code: 
> https://github.com/jazhou/junit5-parallel-test



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[PR] Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre [maven]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #2168:
URL: https://github.com/apache/maven/pull/2168

   Bumps [com.google.guava:guava](https://github.com/google/guava) from 
33.4.0-jre to 33.4.5-jre.
   
   Release notes
   Sourced from https://github.com/google/guava/releases";>com.google.guava:guava's 
releases.
   
   33.4.5
   For those upgrading from Guava 33.4.0 or earlier, be sure to read https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1.
   Maven
   
 com.google.guava
 guava
 33.4.5-jre
 
 33.4.5-android
   
   
   Jar files
   
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-jre/guava-33.4.5-jre.jar";>33.4.5-jre.jar
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-android/guava-33.4.5-android.jar";>33.4.5-android.jar
   
   Guava requires https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>one
 runtime dependency, which you can download here:
   
   https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar";>failureaccess-1.0.3.jar
   
   Javadoc
   
   https://guava.dev/releases/33.4.5-jre/api/docs/";>33.4.5-jre
   https://guava.dev/releases/33.4.5-android/api/docs/";>33.4.5-android
   
   JDiff
   
   https://guava.dev/releases/33.4.5-jre/api/diffs/";>33.4.5-jre 
vs. 33.4.4-jre
   https://guava.dev/releases/33.4.5-android/api/diffs/";>33.4.5-android vs. 
33.4.4-android
   https://guava.dev/releases/33.4.5-android/api/androiddiffs/";>33.4.5-android
 vs. 33.4.5-jre
   
   Changelog
   
   Changed the Guava jar (plus guava-testlib and https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>failureaccess
 jars) to be a modular jar. (7a71ea0bfa, 287c701a86)
   Changed various classes to stop using sun.misc.Unsafe under 
Java 9+. (ee63055ddd, 80aab00dc5b7a36785f5e09b6a54397388980cde, 
400af25292096746ed3f6164f0ff88209acbb19f, 
71d0692d418a5dd001c9b3786275a5f1f94e1971, 
d1a3cd5037528a2ae990bfceed9cdd009fbc54de, 
b3bb29a54b8f13d6f6630b6cb929867adbf6b9a0, 
1a300f6b2f7ba03ae9bc3620a80c4d4589c65b69)
   
   Note that, if you use guava-android on the JVM (instead of 
using guava-jre), Guava will still try to use 
sun.misc.Unsafe. We will do https://redirect.github.com/google/guava/issues/6806#issuecomment-2738313040";>further
 work on this in the future.
   
   
   Belatedly updated the Public Suffix List data. 
(ee3b9c64382037f72b3a8341915cc64b87850b53, 
d25d62fc843ece1c3866859bc8639b815093eac8)
   
   Special thanks to https://github.com/sgammon";>@​sgammon for https://javamodules.dev/";>his modularization efforts.
   33.4.4
   This is one of a series of releases that improve Guava's nullness 
annotations. For more information, including troubleshooting help, see https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1. Most users can update directly to Guava 33.4.5.
   Maven
    
   
   
   ... (truncated)
   
   
   Commits
   
   See full diff in https://github.com/google/guava/commits";>compare view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava&package-manager=maven&previous-version=33.4.0-jre&new-version=33.4.5-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this 

[PR] Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre [maven]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #2166:
URL: https://github.com/apache/maven/pull/2166

   Bumps [com.google.guava:guava](https://github.com/google/guava) from 
33.4.0-jre to 33.4.5-jre.
   
   Release notes
   Sourced from https://github.com/google/guava/releases";>com.google.guava:guava's 
releases.
   
   33.4.5
   For those upgrading from Guava 33.4.0 or earlier, be sure to read https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1.
   Maven
   
 com.google.guava
 guava
 33.4.5-jre
 
 33.4.5-android
   
   
   Jar files
   
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-jre/guava-33.4.5-jre.jar";>33.4.5-jre.jar
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-android/guava-33.4.5-android.jar";>33.4.5-android.jar
   
   Guava requires https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>one
 runtime dependency, which you can download here:
   
   https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar";>failureaccess-1.0.3.jar
   
   Javadoc
   
   https://guava.dev/releases/33.4.5-jre/api/docs/";>33.4.5-jre
   https://guava.dev/releases/33.4.5-android/api/docs/";>33.4.5-android
   
   JDiff
   
   https://guava.dev/releases/33.4.5-jre/api/diffs/";>33.4.5-jre 
vs. 33.4.4-jre
   https://guava.dev/releases/33.4.5-android/api/diffs/";>33.4.5-android vs. 
33.4.4-android
   https://guava.dev/releases/33.4.5-android/api/androiddiffs/";>33.4.5-android
 vs. 33.4.5-jre
   
   Changelog
   
   Changed the Guava jar (plus guava-testlib and https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>failureaccess
 jars) to be a modular jar. (7a71ea0bfa, 287c701a86)
   Changed various classes to stop using sun.misc.Unsafe under 
Java 9+. (ee63055ddd, 80aab00dc5b7a36785f5e09b6a54397388980cde, 
400af25292096746ed3f6164f0ff88209acbb19f, 
71d0692d418a5dd001c9b3786275a5f1f94e1971, 
d1a3cd5037528a2ae990bfceed9cdd009fbc54de, 
b3bb29a54b8f13d6f6630b6cb929867adbf6b9a0, 
1a300f6b2f7ba03ae9bc3620a80c4d4589c65b69)
   
   Note that, if you use guava-android on the JVM (instead of 
using guava-jre), Guava will still try to use 
sun.misc.Unsafe. We will do https://redirect.github.com/google/guava/issues/6806#issuecomment-2738313040";>further
 work on this in the future.
   
   
   Belatedly updated the Public Suffix List data. 
(ee3b9c64382037f72b3a8341915cc64b87850b53, 
d25d62fc843ece1c3866859bc8639b815093eac8)
   
   Special thanks to https://github.com/sgammon";>@​sgammon for https://javamodules.dev/";>his modularization efforts.
   33.4.4
   This is one of a series of releases that improve Guava's nullness 
annotations. For more information, including troubleshooting help, see https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1. Most users can update directly to Guava 33.4.5.
   Maven
    
   
   
   ... (truncated)
   
   
   Commits
   
   See full diff in https://github.com/google/guava/commits";>compare view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava&package-manager=maven&previous-version=33.4.0-jre&new-version=33.4.5-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this 

[PR] Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre [maven-install-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #133:
URL: https://github.com/apache/maven-install-plugin/pull/133

   Bumps [com.google.guava:guava](https://github.com/google/guava) from 
33.4.0-jre to 33.4.5-jre.
   
   Release notes
   Sourced from https://github.com/google/guava/releases";>com.google.guava:guava's 
releases.
   
   33.4.5
   For those upgrading from Guava 33.4.0 or earlier, be sure to read https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1.
   Maven
   
 com.google.guava
 guava
 33.4.5-jre
 
 33.4.5-android
   
   
   Jar files
   
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-jre/guava-33.4.5-jre.jar";>33.4.5-jre.jar
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-android/guava-33.4.5-android.jar";>33.4.5-android.jar
   
   Guava requires https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>one
 runtime dependency, which you can download here:
   
   https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar";>failureaccess-1.0.3.jar
   
   Javadoc
   
   https://guava.dev/releases/33.4.5-jre/api/docs/";>33.4.5-jre
   https://guava.dev/releases/33.4.5-android/api/docs/";>33.4.5-android
   
   JDiff
   
   https://guava.dev/releases/33.4.5-jre/api/diffs/";>33.4.5-jre 
vs. 33.4.4-jre
   https://guava.dev/releases/33.4.5-android/api/diffs/";>33.4.5-android vs. 
33.4.4-android
   https://guava.dev/releases/33.4.5-android/api/androiddiffs/";>33.4.5-android
 vs. 33.4.5-jre
   
   Changelog
   
   Changed the Guava jar (plus guava-testlib and https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>failureaccess
 jars) to be a modular jar. (7a71ea0bfa, 287c701a86)
   Changed various classes to stop using sun.misc.Unsafe under 
Java 9+. (ee63055ddd, 80aab00dc5b7a36785f5e09b6a54397388980cde, 
400af25292096746ed3f6164f0ff88209acbb19f, 
71d0692d418a5dd001c9b3786275a5f1f94e1971, 
d1a3cd5037528a2ae990bfceed9cdd009fbc54de, 
b3bb29a54b8f13d6f6630b6cb929867adbf6b9a0, 
1a300f6b2f7ba03ae9bc3620a80c4d4589c65b69)
   
   Note that, if you use guava-android on the JVM (instead of 
using guava-jre), Guava will still try to use 
sun.misc.Unsafe. We will do https://redirect.github.com/google/guava/issues/6806#issuecomment-2738313040";>further
 work on this in the future.
   
   
   Belatedly updated the Public Suffix List data. 
(ee3b9c64382037f72b3a8341915cc64b87850b53, 
d25d62fc843ece1c3866859bc8639b815093eac8)
   
   Special thanks to https://github.com/sgammon";>@​sgammon for https://javamodules.dev/";>his modularization efforts.
   33.4.4
   This is one of a series of releases that improve Guava's nullness 
annotations. For more information, including troubleshooting help, see https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1. Most users can update directly to Guava 33.4.5.
   Maven
    
   
   
   ... (truncated)
   
   
   Commits
   
   See full diff in https://github.com/google/guava/commits";>compare view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava&package-manager=maven&previous-version=33.4.0-jre&new-version=33.4.5-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any m

[PR] Bump com.google.guava:failureaccess from 1.0.2 to 1.0.3 [maven]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #2167:
URL: https://github.com/apache/maven/pull/2167

   Bumps com.google.guava:failureaccess from 1.0.2 to 1.0.3.
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:failureaccess&package-manager=maven&previous-version=1.0.2&new-version=1.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump com.google.guava:guava from 33.3.1-jre to 33.4.5-jre [maven-jar-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #125:
URL: https://github.com/apache/maven-jar-plugin/pull/125

   Bumps [com.google.guava:guava](https://github.com/google/guava) from 
33.3.1-jre to 33.4.5-jre.
   
   Release notes
   Sourced from https://github.com/google/guava/releases";>com.google.guava:guava's 
releases.
   
   33.4.5
   For those upgrading from Guava 33.4.0 or earlier, be sure to read https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1.
   Maven
   
 com.google.guava
 guava
 33.4.5-jre
 
 33.4.5-android
   
   
   Jar files
   
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-jre/guava-33.4.5-jre.jar";>33.4.5-jre.jar
   https://repo1.maven.org/maven2/com/google/guava/guava/33.4.5-android/guava-33.4.5-android.jar";>33.4.5-android.jar
   
   Guava requires https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>one
 runtime dependency, which you can download here:
   
   https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar";>failureaccess-1.0.3.jar
   
   Javadoc
   
   https://guava.dev/releases/33.4.5-jre/api/docs/";>33.4.5-jre
   https://guava.dev/releases/33.4.5-android/api/docs/";>33.4.5-android
   
   JDiff
   
   https://guava.dev/releases/33.4.5-jre/api/diffs/";>33.4.5-jre 
vs. 33.4.4-jre
   https://guava.dev/releases/33.4.5-android/api/diffs/";>33.4.5-android vs. 
33.4.4-android
   https://guava.dev/releases/33.4.5-android/api/androiddiffs/";>33.4.5-android
 vs. 33.4.5-jre
   
   Changelog
   
   Changed the Guava jar (plus guava-testlib and https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies";>failureaccess
 jars) to be a modular jar. (7a71ea0bfa, 287c701a86)
   Changed various classes to stop using sun.misc.Unsafe under 
Java 9+. (ee63055ddd, 80aab00dc5b7a36785f5e09b6a54397388980cde, 
400af25292096746ed3f6164f0ff88209acbb19f, 
71d0692d418a5dd001c9b3786275a5f1f94e1971, 
d1a3cd5037528a2ae990bfceed9cdd009fbc54de, 
b3bb29a54b8f13d6f6630b6cb929867adbf6b9a0, 
1a300f6b2f7ba03ae9bc3620a80c4d4589c65b69)
   
   Note that, if you use guava-android on the JVM (instead of 
using guava-jre), Guava will still try to use 
sun.misc.Unsafe. We will do https://redirect.github.com/google/guava/issues/6806#issuecomment-2738313040";>further
 work on this in the future.
   
   
   Belatedly updated the Public Suffix List data. 
(ee3b9c64382037f72b3a8341915cc64b87850b53, 
d25d62fc843ece1c3866859bc8639b815093eac8)
   
   Special thanks to https://github.com/sgammon";>@​sgammon for https://javamodules.dev/";>his modularization efforts.
   33.4.4
   This is one of a series of releases that improve Guava's nullness 
annotations. For more information, including troubleshooting help, see https://github.com/google/guava/releases/tag/v33.4.1";>the release notes 
for Guava 33.4.1. Most users can update directly to Guava 33.4.5.
   Maven
    
   
   
   ... (truncated)
   
   
   Commits
   
   See full diff in https://github.com/google/guava/commits";>compare view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava&package-manager=maven&previous-version=33.3.1-jre&new-version=33.4.5-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more 

Re: [PR] Bump com.google.guava:guava from 33.3.1-jre to 33.4.0-jre [maven-jar-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] closed pull request #106: Bump com.google.guava:guava from 
33.3.1-jre to 33.4.0-jre
URL: https://github.com/apache/maven-jar-plugin/pull/106


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump com.google.guava:guava from 33.3.1-jre to 33.4.0-jre [maven-jar-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] commented on PR #106:
URL: https://github.com/apache/maven-jar-plugin/pull/106#issuecomment-2738865809

   Superseded by #125.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-dist-tool]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #104:
URL: https://github.com/apache/maven-dist-tool/pull/104

   Bumps 
[org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 43 
to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven:maven-parent's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9.1 (https://redirec

[PR] Bump org.apache.maven.shared:maven-shared-components from 43 to 44 [maven-dependency-analyzer]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #140:
URL: https://github.com/apache/maven-dependency-analyzer/pull/140

   Bumps 
[org.apache.maven.shared:maven-shared-components](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.shared:maven-shared-components's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-mav

Re: [PR] Bump maven-parent from 43 to 44 [maven-resolver]

2025-03-19 Thread via GitHub


cstamas commented on PR #675:
URL: https://github.com/apache/maven-resolver/pull/675#issuecomment-2736418662

   Now all the UT fails on checkstyle
   https://gist.github.com/cstamas/437f1aa14744820fad07de04da66b3fd


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-doxia]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #261:
URL: https://github.com/apache/maven-doxia/pull/261

   Bumps 
[org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 43 
to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven:maven-parent's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9.1 (https://redirect.gi

[jira] [Updated] (MNG-8625) Project builder w/ CI friendly versions: tries to resolve un-interpolated versioned artifacts

2025-03-19 Thread Tamas Cservenak (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-8625?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tamas Cservenak updated MNG-8625:
-
Summary: Project builder w/ CI friendly versions: tries to resolve 
un-interpolated versioned artifacts  (was: CI friendly versions tries to 
resolve un-interpolated versioned artifacts)

> Project builder w/ CI friendly versions: tries to resolve un-interpolated 
> versioned artifacts
> -
>
> Key: MNG-8625
> URL: https://issues.apache.org/jira/browse/MNG-8625
> Project: Maven
>  Issue Type: Bug
>  Components: Artifacts and Repositories
>Affects Versions: 4.0.0-rc-3
>Reporter: Tamas Cservenak
>Priority: Blocker
> Fix For: 4.0.0-rc-4
>
>
> A Mimir URI encoding bug revealed a hidden issue (that went unnoticed as 
> Resolver just "ate it"):
> The two ITs MavenITmng5895CIFriendlyUsageWithPropertyTest and 
> MavenITmng6090CIFriendlyTest both cause IT to explode due Mimir URI encoding 
> bug, both choke on download URIs (as Connector is getting URIs) as this: 
> {noformat}
> Caused by: java.lang.IllegalArgumentException: Illegal character in opaque 
> part at index 62: 
> mimir:artifact:central:mng-6090-ci-friendly:base-project:pom:${revision}
> at java.net.URI.create(URI.java:906)
> at 
> eu.maveniverse.maven.mimir.shared.naming.KeyMapper.apply(KeyMapper.java:36)
> at 
> eu.maveniverse.maven.mimir.shared.naming.KeyMapper.apply(KeyMapper.java:16)
> at 
> eu.maveniverse.maven.mimir.shared.impl.SessionImpl.locate(SessionImpl.java:78)
> at 
> eu.maveniverse.maven.mimir.extension3.MimirRepositoryConnector.get(MimirRepositoryConnector.java:81)
> at 
> org.eclipse.aether.internal.impl.DefaultArtifactResolver.performDownloads(DefaultArtifactResolver.java:490)
>  {noformat}
> And similar for other IT. This means that Maven CI Friendly version tries to 
> resolve un-interpolated atifact (version yields {{{}$\{revision{), which 
> is wrong.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[PR] Update site descriptors [maven-resolver]

2025-03-19 Thread via GitHub


cstamas opened a new pull request, #676:
URL: https://github.com/apache/maven-resolver/pull/676

   And missing ones as well.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven:maven-parent from 43 to 44 [maven-enforcer]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #361:
URL: https://github.com/apache/maven-enforcer/pull/361

   Bumps 
[org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 43 
to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven:maven-parent's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9.1 (https://redirect

[PR] Maven concepts [maven-site]

2025-03-19 Thread via GitHub


raupach-e2n opened a new pull request, #737:
URL: https://github.com/apache/maven-site/pull/737

   Added a page Apache Maven Concepts to the top left navigation. Starting 
point for terms and concepts that are needed to understand how Apache Maven 
works. 
   
   Nothing here is new. It is collection from other pages, that are hidden 
several pages below Documentation, User Guide and so on. 
   
   This is a draft. 
   
   Please let me know if this should be discussed on the mailing list.
   
   - [x] I hereby declare this contribution to be licenced under the [Apache 
License Version 2.0, January 2004](http://www.apache.org/licenses/LICENSE-2.0)
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-plugins from 43 to 44 [maven-help-plugin]

2025-03-19 Thread via GitHub


dependabot[bot] opened a new pull request, #129:
URL: https://github.com/apache/maven-help-plugin/pull/129

   Bumps 
[org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent)
 from 43 to 44.
   
   Release notes
   Sourced from https://github.com/apache/maven-parent/releases";>org.apache.maven.plugins:maven-plugins's
 releases.
   
   44
   
   :boom: Breaking changes
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   🚀 New features and improvements
   
   Move snapshot repositories in a profile (https://redirect.github.com/apache/maven-parent/pull/451";>#451) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Introduce property maven.site.path.suffix to allow override site path 
(https://redirect.github.com/apache/maven-parent/pull/239";>#239) 
https://github.com/slawekjaranowski";>@​slawekjaranowski
   Use v@{project.version} as tag template for releases (https://redirect.github.com/apache/maven-parent/pull/455";>#455) https://github.com/slawekjaranowski";>@​slawekjaranowski
   import KEYS history from svn (https://redirect.github.com/apache/maven-parent/pull/240";>#240) https://github.com/hboutemy";>@​hboutemy
   Add licenseText to modello (https://redirect.github.com/apache/maven-parent/pull/241";>#241) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Update site descriptor to 2.0 (https://redirect.github.com/apache/maven-parent/pull/232";>#232) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Check test code by checkstyle (https://redirect.github.com/apache/maven-parent/pull/228";>#228) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add issues templates (https://redirect.github.com/apache/maven-parent/pull/226";>#226) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Accept all line endings with spotless (https://redirect.github.com/apache/maven-parent/pull/217";>#217) https://github.com/kwin";>@​kwin
   Enable automatic formatter when not on CI (https://redirect.github.com/apache/maven-parent/pull/215";>#215) https://github.com/gnodet";>@​gnodet
   Bump com.diffplug.spotless:spotless-maven-plugin to enable the 
sortpom/quiet option (https://redirect.github.com/apache/maven-parent/pull/213";>#213) https://github.com/gnodet";>@​gnodet
   
   🐛 Bug Fixes
   
   Fix asf.yaml syntax (https://redirect.github.com/apache/maven-parent/pull/459";>#459) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   Bump parent to 34 (https://redirect.github.com/apache/maven-parent/pull/461";>#461) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (https://redirect.github.com/apache/maven-parent/pull/460";>#460) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (https://redirect.github.com/apache/maven-parent/pull/236";>#236) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 
(https://redirect.github.com/apache/maven-parent/pull/234";>#234) 
@https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (https://redirect.github.com/apache/maven-parent/pull/208";>#208) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (https://redirect.github.com/apache/maven-parent/pull/201";>#201) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (https://redirect.github.com/apache/maven-parent/pull/210";>#210) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (https://redirect.github.com/apache/maven-parent/pull/211";>#211) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 
2.44.2 (https://redirect.github.com/apache/maven-parent/pull/229";>#229) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (https://redirect.github.com/apache/maven-parent/pull/219";>#219) @https://github.com/apps/dependabot";>dependabot[bot]
   https://issues.apache.org/jira/browse/MNG-8453";>[MNG-8453] 
- Check dependency declarations by default (https://redirect.github.com/apache/maven-parent/pull/220";>#220) https://github.com/elharo";>@​elharo
   Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (https://redirect.github.com/apache/maven-parent/pull/202";>#202) @https://github.com/apps/dependabot";>dependabot[bot]
   Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.

  1   2   >