chore(deps-dev): bump the maven-minor-and-patch group across 1 directory with 4 updates #65

Open
dependabot[bot] wants to merge 2 commits from dependabot/maven/maven-minor-and-patch-9cd342f381 into main
pull from: dependabot/maven/maven-minor-and-patch-9cd342f381
dependabot[bot] commented 2026-10-12 14:28:09 +00:00 (Migrated from github.com)

Bumps the maven-minor-and-patch group with 4 updates in the / directory: org.apache.maven.plugins:maven-enforcer-plugin, org.apache.maven.plugins:maven-jar-plugin, org.apache.maven.plugins:maven-gpg-plugin and org.sonatype.central:central-publishing-maven-plugin.

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.3

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.3

🚀 New features and improvements

  • Make bannedDependencies report root and transitive dependency in case both are banned. (#940) @​hvoynov
  • Add enforceBytecodeVersion rule based on mojohaus (#968) @​cstamas
  • Improve formatting of deprecated API warning (#951) @​mthmulders

🐛 Bug Fixes

📝 Documentation updates

  • Document the banMavenDefaults option for the requirePluginVersions rule. (#936) @​rpkrajewski

👻 Maintenance

📦 Dependency updates

3.6.2

🐛 Bug Fixes

... (truncated)

Commits
  • c7daff3 [maven-release-plugin] prepare release enforcer-3.6.3
  • ee46e78 Make bannedDependencies report root and transitive dependency in case both ar...
  • 0806924 Document the banMavenDefaults option for the requirePluginVersions rule. (#936)
  • 8e4f5b9 Add better enforceBytecodeVersion rule based on mojohaus (#968)
  • fd4b148 Add fix for 21.0.10.0.1 issue (#967)
  • f32d597 Deps: Parent POM 48 and align deps (#979)
  • df0f2a6 Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#976)
  • 2da7a68 Add null checks for modelId in PluginWrapper
  • 91eb4d9 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#975)
  • b622245 Bump mavenVersion from 3.9.14 to 3.9.15 (#973)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.1

📝 Documentation updates

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk

👻 Maintenance

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk
  • Use plugin version properties (3.x) (#535) @​Bukama

📦 Dependency updates

3.5.0

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

... (truncated)

Commits
  • b0cd63d [maven-release-plugin] prepare release maven-jar-plugin-3.5.1
  • 5318a4f Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability
  • 8e0b9bb Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547)
  • d5a438b Fix javadoc
  • 774fac9 Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0
  • b71f403 Bump mavenVersion from 3.9.15 to 3.9.16 (#536)
  • 9f2a001 Use plugin version properties (3.x) (#535)
  • 68a978f Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534)
  • e105821 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529)
  • 953dc1a Bump mavenVersion from 3.9.14 to 3.9.15 (#528)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-gpg-plugin from 3.2.4 to 3.2.8

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.8

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.2.7

Fixes a lingering issue affecting whole 3.2.x lineage, that resulted in "bad passphrase" on Windows OS with GPG signer (see MGPG-136 for details).

What's Changed

Full Changelog: https://github.com/apache/maven-gpg-plugin/compare/maven-gpg-plugin-3.2.6...maven-gpg-plugin-3.2.7

3.2.6

Release Notes - Maven GPG Plugin - Version 3.2.6

... (truncated)

Commits
  • 8a46455 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.8
  • 7012821 Fix issueManagement, ciManagement system and url
  • a9a8c84 Make empty classifier null (not empty string) (#287)
  • a8368b0 Add .mvn
  • f0e45e0 Update parent POM to 45 (#284)
  • cb1236c Bump bouncycastleVersion from 1.78.1 to 1.80 (#127)
  • 5377a10 Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133)
  • 8b63932 Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125)
  • 54ea518 Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1
  • a6a412d Remove old JIRA issue link
  • Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.8.0 to 0.11.0

Commits

Bumps the maven-minor-and-patch group with 4 updates in the / directory: [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer), [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin), [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) and [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin). Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.5.0 to 3.6.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/maven-enforcer/releases">org.apache.maven.plugins:maven-enforcer-plugin's releases</a>.</em></p> <blockquote> <h2>3.6.3</h2> <!-- raw HTML omitted --> <h2>🚀 New features and improvements</h2> <ul> <li>Make bannedDependencies report root and transitive dependency in case both are banned. (<a href="https://redirect.github.com/apache/maven-enforcer/pull/940">#940</a>) <a href="https://github.com/hvoynov"><code>@​hvoynov</code></a></li> <li>Add enforceBytecodeVersion rule based on mojohaus (<a href="https://redirect.github.com/apache/maven-enforcer/pull/968">#968</a>) <a href="https://github.com/cstamas"><code>@​cstamas</code></a></li> <li>Improve formatting of deprecated API warning (<a href="https://redirect.github.com/apache/maven-enforcer/pull/951">#951</a>) <a href="https://github.com/mthmulders"><code>@​mthmulders</code></a></li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>Fix handling of Java versions like 21.0.10.0.1 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/967">#967</a>) <a href="https://github.com/parttimenerd"><code>@​parttimenerd</code></a></li> <li>Add null checks for modelId in PluginWrapper (<a href="https://redirect.github.com/apache/maven-enforcer/pull/974">#974</a>) <a href="https://github.com/cpfeiffer"><code>@​cpfeiffer</code></a></li> </ul> <h2>📝 Documentation updates</h2> <ul> <li>Document the banMavenDefaults option for the requirePluginVersions rule. (<a href="https://redirect.github.com/apache/maven-enforcer/pull/936">#936</a>) <a href="https://github.com/rpkrajewski"><code>@​rpkrajewski</code></a></li> </ul> <h2>👻 Maintenance</h2> <ul> <li><code>PlexusStringUtils</code> Refaster recipes (<a href="https://redirect.github.com/apache/maven-enforcer/pull/943">#943</a>) <a href="https://github.com/slachiewicz"><code>@​slachiewicz</code></a></li> <li>JUnit Jupiter migration from JUnit 4.x (<a href="https://redirect.github.com/apache/maven-enforcer/pull/941">#941</a>) <a href="https://github.com/slachiewicz"><code>@​slachiewicz</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4 in /maven-enforcer-plugin/src/it/projects/MENFORCER-434 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/970">#970</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Deps: Parent POM 48 and align deps (<a href="https://redirect.github.com/apache/maven-enforcer/pull/979">#979</a>) <a href="https://github.com/cstamas"><code>@​cstamas</code></a></li> <li>Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/976">#976</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump commons-io:commons-io from 2.21.0 to 2.22.0 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/975">#975</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump mavenVersion from 3.9.14 to 3.9.15 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/973">#973</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump mavenVersion from 3.9.13 to 3.9.14 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/965">#965</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump mavenVersion from 3.9.12 to 3.9.13 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/964">#964</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/963">#963</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Update log4j in test to avoid CVE (<a href="https://redirect.github.com/apache/maven-enforcer/pull/961">#961</a>) <a href="https://github.com/Bukama"><code>@​Bukama</code></a></li> <li>Bump commons-codec:commons-codec from 1.20.0 to 1.21.0 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/962">#962</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/960">#960</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/959">#959</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven:maven-parent from 46 to 47 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/958">#958</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/957">#957</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Update to 46 including fixes (<a href="https://redirect.github.com/apache/maven-enforcer/pull/955">#955</a>) <a href="https://github.com/Bukama"><code>@​Bukama</code></a></li> <li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.3.0 to 3.5.0 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/956">#956</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump mavenVersion from 3.9.11 to 3.9.12 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/948">#948</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/947">#947</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump commons-io:commons-io from 2.20.0 to 2.21.0 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/946">#946</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump commons-codec:commons-codec from 1.19.0 to 1.20.0 (<a href="https://redirect.github.com/apache/maven-enforcer/pull/945">#945</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> </ul> <h2>3.6.2</h2> <!-- raw HTML omitted --> <h2>🐛 Bug Fixes</h2> <ul> <li>Use SessionData for cache storage (<a href="https://redirect.github.com/apache/maven-enforcer/pull/930">#930</a>) <a href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/maven-enforcer/commit/c7daff33d46c9c3ee0666540c6857c66cf159e70"><code>c7daff3</code></a> [maven-release-plugin] prepare release enforcer-3.6.3</li> <li><a href="https://github.com/apache/maven-enforcer/commit/ee46e78b046be9882a739c07556940329a7345d6"><code>ee46e78</code></a> Make bannedDependencies report root and transitive dependency in case both ar...</li> <li><a href="https://github.com/apache/maven-enforcer/commit/0806924d8f6c5ad6105ac387bf323846e769b18c"><code>0806924</code></a> Document the banMavenDefaults option for the requirePluginVersions rule. (<a href="https://redirect.github.com/apache/maven-enforcer/issues/936">#936</a>)</li> <li><a href="https://github.com/apache/maven-enforcer/commit/8e4f5b94453de97592cf3935b79319894f013329"><code>8e4f5b9</code></a> Add better enforceBytecodeVersion rule based on mojohaus (<a href="https://redirect.github.com/apache/maven-enforcer/issues/968">#968</a>)</li> <li><a href="https://github.com/apache/maven-enforcer/commit/fd4b1486dcc93394d5f6a11687efd51d0d30b22d"><code>fd4b148</code></a> Add fix for 21.0.10.0.1 issue (<a href="https://redirect.github.com/apache/maven-enforcer/issues/967">#967</a>)</li> <li><a href="https://github.com/apache/maven-enforcer/commit/f32d5979ef387668162c2beb905b368e25accd70"><code>f32d597</code></a> Deps: Parent POM 48 and align deps (<a href="https://redirect.github.com/apache/maven-enforcer/issues/979">#979</a>)</li> <li><a href="https://github.com/apache/maven-enforcer/commit/df0f2a6d7fbbaf79914cdb56fa5899d99c8eaf19"><code>df0f2a6</code></a> Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (<a href="https://redirect.github.com/apache/maven-enforcer/issues/976">#976</a>)</li> <li><a href="https://github.com/apache/maven-enforcer/commit/2da7a68b4d8d9d2da866ffaf1e07a206c9b7115d"><code>2da7a68</code></a> Add null checks for modelId in PluginWrapper</li> <li><a href="https://github.com/apache/maven-enforcer/commit/91eb4d9fe1f6f65137991c1131131ceaca542245"><code>91eb4d9</code></a> Bump commons-io:commons-io from 2.21.0 to 2.22.0 (<a href="https://redirect.github.com/apache/maven-enforcer/issues/975">#975</a>)</li> <li><a href="https://github.com/apache/maven-enforcer/commit/b6222459bf3256bfd747731a7f4ea81577777ffe"><code>b622245</code></a> Bump mavenVersion from 3.9.14 to 3.9.15 (<a href="https://redirect.github.com/apache/maven-enforcer/issues/973">#973</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apache/maven-enforcer/compare/enforcer-3.5.0...enforcer-3.6.3">compare view</a></li> </ul> </details> <br /> Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.4.2 to 3.5.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/maven-jar-plugin/releases">org.apache.maven.plugins:maven-jar-plugin's releases</a>.</em></p> <blockquote> <h2>3.5.1</h2> <!-- raw HTML omitted --> <h2>📝 Documentation updates</h2> <ul> <li>Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/550">#550</a>) <a href="https://github.com/potiuk"><code>@​potiuk</code></a></li> </ul> <h2>👻 Maintenance</h2> <ul> <li>Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/550">#550</a>) <a href="https://github.com/potiuk"><code>@​potiuk</code></a></li> <li>Use plugin version properties (3.x) (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/535">#535</a>) <a href="https://github.com/Bukama"><code>@​Bukama</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/547">#547</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/538">#538</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump mavenVersion from 3.9.15 to 3.9.16 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/536">#536</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/534">#534</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump commons-io:commons-io from 2.21.0 to 2.22.0 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/529">#529</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump mavenVersion from 3.9.14 to 3.9.15 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/528">#528</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump mavenVersion from 3.9.12 to 3.9.14 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/526">#526</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/523">#523</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven.plugins:maven-plugins from 46 to 47 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/519">#519</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/516">#516</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.0 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/517">#517</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven.plugins:maven-plugins from 45 to 46 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/514">#514</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven:maven-archiver from 3.6.5 to 3.6.6 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/511">#511</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump mavenVersion from 3.9.11 to 3.9.12 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/509">#509</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> </ul> <h2>3.5.0</h2> <!-- raw HTML omitted --> <h2>🚀 New features and improvements</h2> <ul> <li>Add new &quot;attach&quot; configuration parameter (3.x port of <a href="https://redirect.github.com/apache/maven-jar-plugin/issues/482">#482</a>) (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/483">#483</a>) <a href="https://github.com/hgschmie"><code>@​hgschmie</code></a></li> <li>add Java-Version to MANIFEST.MF (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/465">#465</a>) <a href="https://github.com/hboutemy"><code>@​hboutemy</code></a></li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>Fix detecting java version for toolchains and JDK 1.8 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/500">#500</a>) <a href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li> <li>Ignore stderr when parsing javac version from toolchain (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/471">#471</a>) <a href="https://github.com/jaredstehler"><code>@​jaredstehler</code></a></li> </ul> <h2>👻 Maintenance</h2> <ul> <li>Update site descriptor to 2.0.0 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/501">#501</a>) <a href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li> <li>chore: remove junit3 references (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/494">#494</a>) <a href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li> <li>Migrate component injection to JSR-330 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/492">#492</a>) <a href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li> <li>Add PR Automation to 3.x (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/132">#132</a>) <a href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li> <li>Improve release-drafter configuration (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/128">#128</a>) <a href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li> <li>Fix for Maven 4.0.0-rc-3 (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/130">#130</a>) <a href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li> <li><a href="https://issues.apache.org/jira/browse/MNGSITE-529">[MNGSITE-529]</a> - Rename &quot;Goals&quot; to &quot;Plugin Documentation&quot; (<a href="https://redirect.github.com/apache/maven-jar-plugin/pull/119">#119</a>) <a href="https://github.com/Bukama"><code>@​Bukama</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/maven-jar-plugin/commit/b0cd63d0ad544aa552f06e4492faf984bf2c85c1"><code>b0cd63d</code></a> [maven-release-plugin] prepare release maven-jar-plugin-3.5.1</li> <li><a href="https://github.com/apache/maven-jar-plugin/commit/5318a4feaf529d6fa22c4622fff2d54fefe7f7dd"><code>5318a4f</code></a> Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability</li> <li><a href="https://github.com/apache/maven-jar-plugin/commit/8e0b9bb307fc29b8d267f18eca9d47be0a7f16e0"><code>8e0b9bb</code></a> Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (<a href="https://redirect.github.com/apache/maven-jar-plugin/issues/547">#547</a>)</li> <li><a href="https://github.com/apache/maven-jar-plugin/commit/d5a438b6add9a9115f5a2c9b27db67e0d962bb74"><code>d5a438b</code></a> Fix javadoc</li> <li><a href="https://github.com/apache/maven-jar-plugin/commit/774fac9215d92bfac67ece082872b00475580b21"><code>774fac9</code></a> Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0</li> <li><a href="https://github.com/apache/maven-jar-plugin/commit/b71f40368edc878b3dcaa9840d950bd7d297d4c4"><code>b71f403</code></a> Bump mavenVersion from 3.9.15 to 3.9.16 (<a href="https://redirect.github.com/apache/maven-jar-plugin/issues/536">#536</a>)</li> <li><a href="https://github.com/apache/maven-jar-plugin/commit/9f2a001a00fcbb0408219a11f62b48c4dfde78d3"><code>9f2a001</code></a> Use plugin version properties (3.x) (<a href="https://redirect.github.com/apache/maven-jar-plugin/issues/535">#535</a>)</li> <li><a href="https://github.com/apache/maven-jar-plugin/commit/68a978f952ba510f7378fd287c5172dc560079e3"><code>68a978f</code></a> Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (<a href="https://redirect.github.com/apache/maven-jar-plugin/issues/534">#534</a>)</li> <li><a href="https://github.com/apache/maven-jar-plugin/commit/e1058217f657691a3e50b0c7e0620fd13c8e83c3"><code>e105821</code></a> Bump commons-io:commons-io from 2.21.0 to 2.22.0 (<a href="https://redirect.github.com/apache/maven-jar-plugin/issues/529">#529</a>)</li> <li><a href="https://github.com/apache/maven-jar-plugin/commit/953dc1abbb527b8128657f2aeadfdca0557d974d"><code>953dc1a</code></a> Bump mavenVersion from 3.9.14 to 3.9.15 (<a href="https://redirect.github.com/apache/maven-jar-plugin/issues/528">#528</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apache/maven-jar-plugin/compare/maven-jar-plugin-3.4.2...maven-jar-plugin-3.5.1">compare view</a></li> </ul> </details> <br /> Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.2.4 to 3.2.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/maven-gpg-plugin/releases">org.apache.maven.plugins:maven-gpg-plugin's releases</a>.</em></p> <blockquote> <h2>3.2.8</h2> <!-- raw HTML omitted --> <h2>🐛 Bug Fixes</h2> <ul> <li>Make empty classifier null (not empty string) (<a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/287">#287</a>) <a href="https://github.com/cstamas"><code>@​cstamas</code></a></li> </ul> <h2>📝 Documentation updates</h2> <ul> <li><a href="https://issues.apache.org/jira/browse/MNGSITE-529">[MNGSITE-529]</a> - Rename &quot;Goals&quot; to &quot;Plugin Documentation&quot; (<a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/129">#129</a>) <a href="https://github.com/Bukama"><code>@​Bukama</code></a></li> <li>Describe how to prime a specific GPG key (<a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/128">#128</a>) <a href="https://github.com/kwin"><code>@​kwin</code></a></li> </ul> <h2>👻 Maintenance</h2> <ul> <li>Enable GitHub issues (<a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/134">#134</a>) <a href="https://github.com/Bukama"><code>@​Bukama</code></a></li> <li>Prefer Guice constructor injection (<a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/126">#126</a>) <a href="https://github.com/elharo"><code>@​elharo</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Update parent POM to 45 (<a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/284">#284</a>) <a href="https://github.com/cstamas"><code>@​cstamas</code></a></li> <li>Bump bouncycastleVersion from 1.78.1 to 1.80 (<a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/127">#127</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump commons-io:commons-io from 2.18.0 to 2.19.0 (<a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/133">#133</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (<a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/125">#125</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1 (<a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/131">#131</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump commons-io:commons-io from 2.17.0 to 2.18.0 (<a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/124">#124</a>) @<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> </ul> <h2>3.2.7</h2> <p>Fixes a lingering issue affecting whole 3.2.x lineage, that resulted in &quot;bad passphrase&quot; on Windows OS with GPG signer (see MGPG-136 for details).</p> <h2>What's Changed</h2> <ul> <li>[MGPG-136] Windows passphrase corruption by <a href="https://github.com/cstamas"><code>@​cstamas</code></a> in <a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/120">apache/maven-gpg-plugin#120</a></li> <li>Bump com.kohlschutter.junixsocket:junixsocket-core from 2.10.0 to 2.10.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/121">apache/maven-gpg-plugin#121</a></li> <li>Bump commons-io:commons-io from 2.16.1 to 2.17.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/apache/maven-gpg-plugin/pull/119">apache/maven-gpg-plugin#119</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/apache/maven-gpg-plugin/compare/maven-gpg-plugin-3.2.6...maven-gpg-plugin-3.2.7">https://github.com/apache/maven-gpg-plugin/compare/maven-gpg-plugin-3.2.6...maven-gpg-plugin-3.2.7</a></p> <h2>3.2.6</h2> <h1><a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317521&amp;version=12354997">Release Notes - Maven GPG Plugin - Version 3.2.6</a></h1> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/maven-gpg-plugin/commit/8a46455fba7d315ce7fdc9d5bdaddd890753886e"><code>8a46455</code></a> [maven-release-plugin] prepare release maven-gpg-plugin-3.2.8</li> <li><a href="https://github.com/apache/maven-gpg-plugin/commit/70128213b1fe0a2226e06d2281a7384fe5265668"><code>7012821</code></a> Fix issueManagement, ciManagement system and url</li> <li><a href="https://github.com/apache/maven-gpg-plugin/commit/a9a8c84176e33c715c922457c0a5df97066a8d83"><code>a9a8c84</code></a> Make empty classifier null (not empty string) (<a href="https://redirect.github.com/apache/maven-gpg-plugin/issues/287">#287</a>)</li> <li><a href="https://github.com/apache/maven-gpg-plugin/commit/a8368b0622529fa3b13457d19e7c7920ef661e66"><code>a8368b0</code></a> Add .mvn</li> <li><a href="https://github.com/apache/maven-gpg-plugin/commit/f0e45e0a7c3f02a22612b33ff7fcfa8e4540462f"><code>f0e45e0</code></a> Update parent POM to 45 (<a href="https://redirect.github.com/apache/maven-gpg-plugin/issues/284">#284</a>)</li> <li><a href="https://github.com/apache/maven-gpg-plugin/commit/cb1236c251b458918b5a7b5b7d240315d5ab6430"><code>cb1236c</code></a> Bump bouncycastleVersion from 1.78.1 to 1.80 (<a href="https://redirect.github.com/apache/maven-gpg-plugin/issues/127">#127</a>)</li> <li><a href="https://github.com/apache/maven-gpg-plugin/commit/5377a1044d364f5b345538ecaeaf39ec1bdbafb5"><code>5377a10</code></a> Bump commons-io:commons-io from 2.18.0 to 2.19.0 (<a href="https://redirect.github.com/apache/maven-gpg-plugin/issues/133">#133</a>)</li> <li><a href="https://github.com/apache/maven-gpg-plugin/commit/8b63932fbe869c8228d5d07527b606ed1da16268"><code>8b63932</code></a> Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (<a href="https://redirect.github.com/apache/maven-gpg-plugin/issues/125">#125</a>)</li> <li><a href="https://github.com/apache/maven-gpg-plugin/commit/54ea518a3f5c427e24fbc4cb6271e186b041b375"><code>54ea518</code></a> Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1</li> <li><a href="https://github.com/apache/maven-gpg-plugin/commit/a6a412d68a603b0f180695f2721b71307d926297"><code>a6a412d</code></a> Remove old JIRA issue link</li> <li>Additional commits viewable in <a href="https://github.com/apache/maven-gpg-plugin/compare/maven-gpg-plugin-3.2.4...maven-gpg-plugin-3.2.8">compare view</a></li> </ul> </details> <br /> Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.8.0 to 0.11.0 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/sonatype/central-publishing-maven-plugin/commits">compare view</a></li> </ul> </details> <br />
KofTwentyTwo (Migrated from github.com) reviewed 2026-10-12 14:28:09 +00:00
You are not authorized to merge this pull request.
This pull request can be merged automatically.
This branch is out-of-date with the base branch
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/maven/maven-minor-and-patch-9cd342f381:dependabot/maven/maven-minor-and-patch-9cd342f381
git checkout dependabot/maven/maven-minor-and-patch-9cd342f381
Sign in to join this conversation.