Update dependency maven to v3.9.15 #2

Open
mars3142 wants to merge 1 commits from renovate/maven-3.x into main
Owner

This PR contains the following updates:

Package Update Change
maven (source) patch 3.9.63.9.15

Release Notes

apache/maven (maven)

v3.9.15: 3.9.15

Compare Source

📝 Documentation updates

📦 Dependency updates

v3.9.14: 3.9.14

Compare Source

🐛 Bug Fixes

📦 Dependency updates

v3.9.13: 3.9.13

Compare Source

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

v3.9.12: 3.9.12

Compare Source

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

v3.9.11: 3.9.11

Compare Source

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

v3.9.10: 3.9.10

Compare Source

Release Notes - Maven - Version 3.9.10

Bug

  • [MNG-8096] - Inconsistent dependency resolution behaviour for concurrent multi-module build can cause failures
  • [MNG-8169] - MINGW support requires --add-opens java.base/java.lang=ALL-UNNAMED
  • [MNG-8170] - Maven 3.9.8 contains weird native library for Jansi on Windows/arm64
  • [MNG-8211] - Maven should fail builds that use CI Friendly versions but have no values set
  • [MNG-8248] - WARNING: A restricted method in java.lang.System has been called
  • [MNG-8256] - ProjectDependencyGraph bug: in case of filtering, non-direct module links are lost
  • [MNG-8315] - Failure of mvn.cmd if a .mvn directory is located at drive root
  • [MNG-8396] - Maven takes forever to resume
  • [MNG-8711] - "Duplicate artifact" in LifecycleDependencyResolver

Improvement

  • [MNG-8370] - Introduce maven.repo.local.head
  • [MNG-8399] - JDK 24+ issues warning about usage of sun.misc.Unsafe
  • [MNG-8707] - Add methods to remove compile and test source roots
  • [MNG-8712] - improve dependency version explanation: it&#​39;s a requirement, not always effective version
  • [MNG-8717] - Remove maven-plugin-plugin:addPluginArtifactMetadata from default binding
  • [MNG-8722] - Use a single standalone version of asm
  • [MNG-8731] - Use https for xsi:schemaLocation in generated descriptors
  • [MNG-8734] - Simplify scripting like "get project version" cases

Task

  • [MNG-8728] - Bump Eclipse Sisu from 0.9.0.M3 to 0.9.0.M4 and use Java 24 on CI

Dependency upgrade

  • [MNG-8289] - Update Plexus annotations to 2.2.0
  • [MNG-8443] - Bump com.google.guava:guava from 33.2.1-jre to 33.4.0-jre
  • [MNG-8531] - Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0
  • [MNG-8532] - Bump commons-io:commons-io from 2.16.1 to 2.18.0
  • [MNG-8534] - Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.0 to 3.2.1
  • [MNG-8635] - Bump com.google.guava:failureaccess from 1.0.2 to 1.0.3
  • [MNG-8636] - Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre
  • [MNG-8640] - Bump org.apache.maven:maven-parent from 43 to 44
  • [MNG-8661] - Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre
  • [MNG-8701] - Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28
  • [MNG-8702] - Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0
  • [MNG-8703] - Bump commons-io:commons-io from 2.18.0 to 2.19.0
  • [MNG-8704] - Bump com.google.guava:guava from 33.4.6-jre to 33.4.8-jre
  • [MNG-8705] - Bump commons-jxpath:commons-jxpath from 1.3 to 1.4.0
  • [MNG-8706] - Bump commons-cli:commons-cli from 1.8.0 to 1.9.0
  • [MNG-8715] - Bump org.fusesource.jansi:jansi from 2.4.1 to 2.4.2
  • [MNG-8716] - Bump resolver to 1.9.23
  • [MNG-8745] - Bump xmlunitVersion from 2.10.0 to 2.10.2

What's Changed

New Contributors

Full Changelog: https://github.com/apache/maven/compare/maven-3.9.9...maven-3.9.10

v3.9.9: 3.9.9

Compare Source

Release Notes - Maven - Version 3.9.9

Bug

  • [MNG-8159] - Fix search for topDirectory when using -f / --file for Maven 3.9.x
  • [MNG-8165] - Maven does not find extensions for -f when current dir is root
  • [MNG-8177] - Warning "&#​39;dependencyManagement.dependencies.dependency.systemPath&#​39; for com.sun:tools:jar refers to a non-existing file C:\Temp\jdk-11.0.23\..\lib\tools.jar"
  • [MNG-8178] - Profile activation based on OS properties is broken for "mvn site"
  • [MNG-8180] - Resolver will blindly assume it is deploying a plugin by presence of META-INF/maven/plugins.xml in JAR
  • [MNG-8182] - Missing or mismatching Trusted Checksum for some artifacts is not properly reported
  • [MNG-8188] - [REGRESSION] Property not resolved in profile pluginManagement

Task

  • [MNG-8206] - Remove Maven 2.1 (v 2.0) compatibility bits

Dependency upgrade

What's Changed

New Contributors

Full Changelog: https://github.com/apache/maven/compare/maven-3.9.8...maven-3.9.9

v3.9.8: 3.9.8

Compare Source

Release Notes - Maven - Version 3.9.8

Bug

  • [MNG-7758] - o.e.aether.resolution.ArtifactResolutionException incorrectly examined when multiple repositories are involved
  • [MNG-8066] - Maven hangs on self-referencing exceptions
  • [MNG-8116] - Plugin configuration can randomly fail in case of method overloading as it doesn&#​39;t take into account implementation attribute
  • [MNG-8131] - Property replacement in dependency pom no longer works
  • [MNG-8135] - Profile activation based on OS properties is no longer case insensitive
  • [MNG-8142] - If JDK profile activator gets "invalid" JDK version for whatever reason, it chokes but does not tell why
  • [MNG-8147] - Profile interpolation broke their evaluation in case of duplicate IDs

Improvement

  • [MNG-7902] - Sort plugins in validation report
  • [MNG-8140] - When a model is discarded (by model builder) for whatever reason, show why it happened
  • [MNG-8141] - Model Builder should report if not sure about "fully correct" outcome
  • [MNG-8150] - Make SimplexTransferListener handle absent source/target files

Task

Dependency upgrade

  • [MNG-8136] - Update to Eclipse Sisu 0.9.0.M3
  • [MNG-8143] - Update to commons-cli 1.8.0
  • [MNG-8144] - Update to Guava 32.2.1-jre
  • [MNG-8154] - Upgrade default plugin bindings

What's Changed

Full Changelog: https://github.com/apache/maven/compare/maven-3.9.7...maven-3.9.8

v3.9.7: 3.9.7

Compare Source

Release Notes - Maven - Version 3.9.7

Bug

  • [MNG-8106] - Maven Metadata corruption if repository directory role overlaps
  • [MNG-8121] - NullPointerException at org.apache.maven.artifact.repository.metadata.Metadata.merge (Metadata.java:293)

New Feature

  • [MNG-5726] - Update OS Activation To Allow Wildcards In OS Version
  • [MNG-8030] - Backport: Add ability to ignore dependency repositories: mvn -itr

Improvement

  • [MNG-8019] - Streamline update policy of pluginRepository/repository of Maven Central in Super POM
  • [MNG-8029] - improve documentation of mirror in settings
  • [MNG-8031] - Backport: Make Maven transfer listener used with Resolver more concurrent friendly
  • [MNG-8081] - default profile activation should consider available system and user properties
  • [MNG-8085] - swtich from png+imagemap to svg
  • [MNG-8117] - Improve prerequisite evaluation and plugin version selection logging

Task

  • [MNG-7309] - Remove redundant MojoDescriptor parameterMap
  • [MNG-8011] - Minimize and make generic the README.txt
  • [MNG-8055] - Investigate possible solutions for build number diffs on deploy

Dependency upgrade

  • [MNG-8094] - Resolver 1.9.19
  • [MNG-8100] - Upgrade default plugin bindings
  • [MNG-8101] - Upgrade Parent to 42
  • [MNG-8109] - Resolver 1.9.20
  • [MNG-8115] - Upgrade minimal set of dependencies
  • [MNG-8125] - (build) Bump buildhelper-maven-plugin to 3.6.0 (was 3.4.0)
  • [MNG-8126] - Bump logback classic to 1.2.13 (was 1.2.12)
  • [MNG-8127] - Bump guava to 33.2.0-jre

What's Changed

New Contributors

Full Changelog: https://github.com/apache/maven/compare/maven-3.9.6...maven-3.9.7


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [maven](https://maven.apache.org/) ([source](https://github.com/apache/maven)) | patch | `3.9.6` → `3.9.15` | --- ### Release Notes <details> <summary>apache/maven (maven)</summary> ### [`v3.9.15`](https://github.com/apache/maven/releases/tag/maven-3.9.15): 3.9.15 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.14...maven-3.9.15) <!-- Optional: add a release summary here --> #### 📝 Documentation updates - Use new Maven logos in documentation ([#&#8203;11938](https://github.com/apache/maven/pull/11938)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - document modelVersion only supported value: 4.0.0 ([#&#8203;11809](https://github.com/apache/maven/pull/11809)) [@&#8203;hboutemy](https://github.com/hboutemy) #### 📦 Dependency updates - Bump actions/upload-artifact from 7.0.0 to 7.0.1 ([#&#8203;11932](https://github.com/apache/maven/pull/11932)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 3.6.1 ([#&#8203;11876](https://github.com/apache/maven/pull/11876)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 ([#&#8203;11865](https://github.com/apache/maven/pull/11865)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/cache from 5.0.3 to 5.0.4 ([#&#8203;11813](https://github.com/apache/maven/pull/11813)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/download-artifact from 8.0.0 to 8.0.1 ([#&#8203;11790](https://github.com/apache/maven/pull/11790)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ### [`v3.9.14`](https://github.com/apache/maven/releases/tag/maven-3.9.14): 3.9.14 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.13...maven-3.9.14) <!-- Optional: add a release summary here --> #### 🐛 Bug Fixes - plexus-testing dependencies should be use in test scope ([#&#8203;11761](https://github.com/apache/maven/pull/11761)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 📦 Dependency updates - Bump actions/upload-artifact from 6.0.0 to 7.0.0 ([#&#8203;11747](https://github.com/apache/maven/pull/11747)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/download-artifact from 7.0.0 to 8.0.0 ([#&#8203;11748](https://github.com/apache/maven/pull/11748)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ### [`v3.9.13`](https://github.com/apache/maven/releases/tag/maven-3.9.13): 3.9.13 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.12...maven-3.9.13) <!-- Optional: add a release summary here --> #### 🐛 Bug Fixes - Bug: SecDispatcher is managed by legacy Plexus DI ([#&#8203;11711](https://github.com/apache/maven/pull/11711)) [@&#8203;cstamas](https://github.com/cstamas) - \[3.9.x] MavenPluginJavaPrerequisiteChecker: Handle 8/1.8 Java version in ranges as well ([#&#8203;11577](https://github.com/apache/maven/pull/11577)) [@&#8203;cstamas](https://github.com/cstamas) #### 👻 Maintenance - Update Maven plugin versions in default-bindings.xml ([#&#8203;11721](https://github.com/apache/maven/pull/11721)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Migrate to JUnit 5 - avoid using TestCase ([#&#8203;11547](https://github.com/apache/maven/pull/11547)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 📦 Dependency updates - Maven Resolver 1.9.27 ([#&#8203;11732](https://github.com/apache/maven/pull/11732)) [@&#8203;cstamas](https://github.com/cstamas) - Bump resolverVersion from 1.9.25 to 1.9.26 ([#&#8203;11725](https://github.com/apache/maven/pull/11725)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Update Maven plugin versions in default-bindings.xml ([#&#8203;11721](https://github.com/apache/maven/pull/11721)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Bump version.sisu-maven-plugin from 0.9.0.M4 to 1.0.0 ([#&#8203;11706](https://github.com/apache/maven/pull/11706)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/cache from 5.0.2 to 5.0.3 ([#&#8203;11688](https://github.com/apache/maven/pull/11688)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.apache.maven:maven-parent from 45 to 47 ([#&#8203;11647](https://github.com/apache/maven/pull/11647)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/checkout from 6.0.1 to 6.0.2 ([#&#8203;11666](https://github.com/apache/maven/pull/11666)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/setup-java from 5.1.0 to 5.2.0 ([#&#8203;11667](https://github.com/apache/maven/pull/11667)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.26 to 1.27 ([#&#8203;11658](https://github.com/apache/maven/pull/11658)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.1 to 3.3.0 ([#&#8203;11657](https://github.com/apache/maven/pull/11657)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/cache from 5.0.1 to 5.0.2 ([#&#8203;11659](https://github.com/apache/maven/pull/11659)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.plexus:plexus-testing from 2.0.2 to 2.1.0 ([#&#8203;11620](https://github.com/apache/maven/pull/11620)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.ow2.asm:asm from 9.9 to 9.9.1 ([#&#8203;11585](https://github.com/apache/maven/pull/11585)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Bump actions/upload-artifact from 5.0.0 to 6.0.0 ([#&#8203;11557](https://github.com/apache/maven/pull/11557)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/download-artifact from 6.0.0 to 7.0.0 ([#&#8203;11556](https://github.com/apache/maven/pull/11556)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/cache from 5.0.0 to 5.0.1 ([#&#8203;11558](https://github.com/apache/maven/pull/11558)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ### [`v3.9.12`](https://github.com/apache/maven/releases/tag/maven-3.9.12): 3.9.12 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.11...maven-3.9.12) <!-- Optional: add a release summary here --> #### 🚀 New features and improvements - \[3.9.x] Apply resolver changes and improvements ([#&#8203;11536](https://github.com/apache/maven/pull/11536)) [@&#8203;cstamas](https://github.com/cstamas) - Update formatting of prerequisites-requirements error to improve readability ([#&#8203;11523](https://github.com/apache/maven/pull/11523)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Allow a Maven plugin to require a Java version ([#&#8203;11479](https://github.com/apache/maven/pull/11479)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Use MavenRepositorySystem in ProjectBuildingHelper instead of deprecated RepositorySystem ([#&#8203;11358](https://github.com/apache/maven/pull/11358)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Make maven.config use UTF8 ([#&#8203;11264](https://github.com/apache/maven/pull/11264)) [@&#8203;cstamas](https://github.com/cstamas) - Simplify prefix resolution ([#&#8203;11197](https://github.com/apache/maven/pull/11197)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 🐛 Bug Fixes - Add default implementation for new method in MavenPluginManager ([#&#8203;11522](https://github.com/apache/maven/pull/11522)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Repository layout should be used in MavenRepositorySystem ([#&#8203;11495](https://github.com/apache/maven/pull/11495)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Fix plugin prefix resolution when metadata is not available from repository ([#&#8203;11290](https://github.com/apache/maven/pull/11290)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Improve source root modification warning message ([#&#8203;11105](https://github.com/apache/maven/pull/11105)) [@&#8203;gnodet](https://github.com/gnodet) - Bug: bad cache isolation between two sessions ([#&#8203;11082](https://github.com/apache/maven/pull/11082)) [@&#8203;cstamas](https://github.com/cstamas) - Set Guice class loading to CHILD - avoid using terminally deprecated methods ([#&#8203;11003](https://github.com/apache/maven/pull/11003)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Avoid parsing MAVEN\_OPTS (3.9.x) ([#&#8203;10969](https://github.com/apache/maven/pull/10969)) [@&#8203;BobVul](https://github.com/BobVul) #### 📝 Documentation updates - clarify repository vs deployment repository ([#&#8203;11492](https://github.com/apache/maven/pull/11492)) [@&#8203;hboutemy](https://github.com/hboutemy) - add maintained branches ([#&#8203;11448](https://github.com/apache/maven/pull/11448)) [@&#8203;hboutemy](https://github.com/hboutemy) #### 👻 Maintenance - Add IntelliJ icon ([#&#8203;11408](https://github.com/apache/maven/pull/11408)) [@&#8203;Bukama](https://github.com/Bukama) - Build by JDK 25 ([#&#8203;11187](https://github.com/apache/maven/pull/11187)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Deprecate org.apache.maven.repository.RepositorySystem in 3.9.x ([#&#8203;11096](https://github.com/apache/maven/pull/11096)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 🔧 Build - Bump actions/download-artifact from 5.0.0 to 6.0.0 ([#&#8203;11335](https://github.com/apache/maven/pull/11335)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/upload-artifact from 4.6.2 to 5.0.0 ([#&#8203;11336](https://github.com/apache/maven/pull/11336)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) #### 📦 Dependency updates - Bump actions/cache from 4.3.0 to 5.0.0 ([#&#8203;11542](https://github.com/apache/maven/pull/11542)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump resolverVersion from 1.9.24 to 1.9.25 ([#&#8203;11533](https://github.com/apache/maven/pull/11533)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/checkout from 6.0.0 to 6.0.1 ([#&#8203;11512](https://github.com/apache/maven/pull/11512)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/setup-java from 5.0.0 to 5.1.0 ([#&#8203;11519](https://github.com/apache/maven/pull/11519)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/checkout from 5.0.1 to 6.0.0 ([#&#8203;11476](https://github.com/apache/maven/pull/11476)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/checkout from 5.0.0 to 5.0.1 ([#&#8203;11458](https://github.com/apache/maven/pull/11458)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump commons-cli:commons-cli from 1.10.0 to 1.11.0 ([#&#8203;11438](https://github.com/apache/maven/pull/11438)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.plexus:plexus-interpolation from 1.28 to 1.29 ([#&#8203;11416](https://github.com/apache/maven/pull/11416)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump commons-io:commons-io from 2.20.0 to 2.21.0 ([#&#8203;11417](https://github.com/apache/maven/pull/11417)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump xmlunitVersion from 2.10.4 to 2.11.0 ([#&#8203;11331](https://github.com/apache/maven/pull/11331)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.24 to 1.26 ([#&#8203;11231](https://github.com/apache/maven/pull/11231)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.ow2.asm:asm from 9.8 to 9.9 ([#&#8203;11203](https://github.com/apache/maven/pull/11203)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/cache from 4.2.4 to 4.3.0 ([#&#8203;11172](https://github.com/apache/maven/pull/11172)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre ([#&#8203;11143](https://github.com/apache/maven/pull/11143)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump xmlunitVersion from 2.10.3 to 2.10.4 ([#&#8203;11121](https://github.com/apache/maven/pull/11121)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/cache from 4.2.3 to 4.2.4 ([#&#8203;11032](https://github.com/apache/maven/pull/11032)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump commons-cli:commons-cli from 1.9.0 to 1.10.0 ([#&#8203;11018](https://github.com/apache/maven/pull/11018)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump commons-io:commons-io from 2.19.0 to 2.20.0 ([#&#8203;10966](https://github.com/apache/maven/pull/10966)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ### [`v3.9.11`](https://github.com/apache/maven/releases/tag/maven-3.9.11): 3.9.11 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.10...maven-3.9.11) <!-- Optional: add a release summary here --> #### 🚀 New features and improvements - Augment version range resolution used repositories ([#&#8203;2574](https://github.com/apache/maven/pull/2574)) [@&#8203;cstamas](https://github.com/cstamas) #### 🐛 Bug Fixes - Deduplicate filtered dependency graph ([#&#8203;2489](https://github.com/apache/maven/pull/2489)) [@&#8203;alzimmermsft](https://github.com/alzimmermsft) - Move ensure in boundaries of project lock ([#&#8203;2470](https://github.com/apache/maven/pull/2470)) [@&#8203;cstamas](https://github.com/cstamas) #### 👻 Maintenance - [\[MNGSITE-393\]](https://issues.apache.org/jira/browse/MNGSITE-393) - remove references to Maven 2 ([#&#8203;2438](https://github.com/apache/maven/pull/2438)) [@&#8203;elharo](https://github.com/elharo) - Update CONTRIBUTING after GitHub issues enabled ([#&#8203;2449](https://github.com/apache/maven/pull/2449)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Enable Github Issues (3.9.x) ([#&#8203;2414](https://github.com/apache/maven/pull/2414)) [@&#8203;Bukama](https://github.com/Bukama) - [\[MNG-8763\]](https://issues.apache.org/jira/browse/MNG-8763) - Remove name from site bannerLeft ([#&#8203;2419](https://github.com/apache/maven/pull/2419)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 🔧 Build - Pin GitHub action versions by hash ([#&#8203;10898](https://github.com/apache/maven/pull/10898)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Build the project by JDK 21 as default ([#&#8203;10896](https://github.com/apache/maven/pull/10896)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Use Maven 3.9.10 for build on GitHub ([#&#8203;2452](https://github.com/apache/maven/pull/2452)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 📦 Dependency updates - Bump resolverVersion from 1.9.23 to 1.9.24 ([#&#8203;2540](https://github.com/apache/maven/pull/2540)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump xmlunitVersion from 2.10.2 to 2.10.3 ([#&#8203;2500](https://github.com/apache/maven/pull/2500)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.apache.maven:maven-parent from 44 to 45 ([#&#8203;2491](https://github.com/apache/maven/pull/2491)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.0 to 3.6.1 ([#&#8203;2432](https://github.com/apache/maven/pull/2432)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ### [`v3.9.10`](https://github.com/apache/maven/releases/tag/maven-3.9.10): 3.9.10 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.9...maven-3.9.10) ### [Release Notes - Maven - Version 3.9.10](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922\&version=12355010) <h2> Bug </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8096'>MNG-8096</a>] - Inconsistent dependency resolution behaviour for concurrent multi-module build can cause failures </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8169'>MNG-8169</a>] - MINGW support requires --add-opens java.base/java.lang=ALL-UNNAMED </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8170'>MNG-8170</a>] - Maven 3.9.8 contains weird native library for Jansi on Windows/arm64 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8211'>MNG-8211</a>] - Maven should fail builds that use CI Friendly versions but have no values set </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8248'>MNG-8248</a>] - WARNING: A restricted method in java.lang.System has been called </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8256'>MNG-8256</a>] - ProjectDependencyGraph bug: in case of filtering, non-direct module links are lost </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8315'>MNG-8315</a>] - Failure of mvn.cmd if a .mvn directory is located at drive root </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8396'>MNG-8396</a>] - Maven takes forever to resume </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8711'>MNG-8711</a>] - &quot;Duplicate artifact&quot; in LifecycleDependencyResolver </li> </ul> <h2> Improvement </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8370'>MNG-8370</a>] - Introduce maven.repo.local.head </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8399'>MNG-8399</a>] - JDK 24+ issues warning about usage of sun.misc.Unsafe </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8707'>MNG-8707</a>] - Add methods to remove compile and test source roots </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8712'>MNG-8712</a>] - improve dependency version explanation: it&#&#8203;39;s a requirement, not always effective version </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8717'>MNG-8717</a>] - Remove maven-plugin-plugin:addPluginArtifactMetadata from default binding </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8722'>MNG-8722</a>] - Use a single standalone version of asm </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8731'>MNG-8731</a>] - Use https for xsi:schemaLocation in generated descriptors </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8734'>MNG-8734</a>] - Simplify scripting like &quot;get project version&quot; cases </li> </ul> <h2> Task </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8728'>MNG-8728</a>] - Bump Eclipse Sisu from 0.9.0.M3 to 0.9.0.M4 and use Java 24 on CI </li> </ul> <h2> Dependency upgrade </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8289'>MNG-8289</a>] - Update Plexus annotations to 2.2.0 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8443'>MNG-8443</a>] - Bump com.google.guava:guava from 33.2.1-jre to 33.4.0-jre </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8531'>MNG-8531</a>] - Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8532'>MNG-8532</a>] - Bump commons-io:commons-io from 2.16.1 to 2.18.0 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8534'>MNG-8534</a>] - Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.0 to 3.2.1 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8635'>MNG-8635</a>] - Bump com.google.guava:failureaccess from 1.0.2 to 1.0.3 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8636'>MNG-8636</a>] - Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8640'>MNG-8640</a>] - Bump org.apache.maven:maven-parent from 43 to 44 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8661'>MNG-8661</a>] - Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8701'>MNG-8701</a>] - Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8702'>MNG-8702</a>] - Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8703'>MNG-8703</a>] - Bump commons-io:commons-io from 2.18.0 to 2.19.0 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8704'>MNG-8704</a>] - Bump com.google.guava:guava from 33.4.6-jre to 33.4.8-jre </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8705'>MNG-8705</a>] - Bump commons-jxpath:commons-jxpath from 1.3 to 1.4.0 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8706'>MNG-8706</a>] - Bump commons-cli:commons-cli from 1.8.0 to 1.9.0 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8715'>MNG-8715</a>] - Bump org.fusesource.jansi:jansi from 2.4.1 to 2.4.2 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8716'>MNG-8716</a>] - Bump resolver to 1.9.23 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8745'>MNG-8745</a>] - Bump xmlunitVersion from 2.10.0 to 2.10.2 </li> </ul> #### What's Changed * [MNG-8211] Fail the build if CI Friendly revision used without value by @&#8203;cstamas in https://github.com/apache/maven/pull/1656 * Add missing since by @&#8203;cstamas in https://github.com/apache/maven/pull/1682 * [MNG-8256] FilteredProjectDependencyGraph fix for non-transitive case by @&#8203;cstamas in https://github.com/apache/maven/pull/1724 * [MNG-8315] Failure of mvn.cmd if a .mvn folder is located at drive root by @&#8203;fmarot in https://github.com/apache/maven/pull/1806 * [MNG-8289] Update Plexus Annotations to 2.2.0 by @&#8203;dependabot in https://github.com/apache/maven/pull/1666 * [MNG-8370] Add maven.repo.local.head by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/1915 * [MNG-8443] Bump com.google.guava:guava from 33.2.1-jre to 33.4.0-jre by @&#8203;dependabot in https://github.com/apache/maven/pull/1991 * [MNG-8531] Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0 by @&#8203;dependabot in https://github.com/apache/maven/pull/2013 * [MNG-8532] Bump commons-io:commons-io from 2.16.1 to 2.18.0 by @&#8203;dependabot in https://github.com/apache/maven/pull/1926 * [MNG-8534] Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.0 to 3.2.1 by @&#8203;dependabot in https://github.com/apache/maven/pull/1699 * Add PR Automation action by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2113 * Bump com.google.guava:failureaccess from 1.0.2 to 1.0.3 by @&#8203;dependabot in https://github.com/apache/maven/pull/2167 * Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre by @&#8203;dependabot in https://github.com/apache/maven/pull/2168 * [MNG-8640] Bump org.apache.maven:maven-parent from 43 to 44 by @&#8203;dependabot in https://github.com/apache/maven/pull/2163 * Use Maven 3.9.9 for build maven-3.9.x branch by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2177 * [MNG-8248] Add enable-native-access to startup scripts by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2171 * [MNG-8661] Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre by @&#8203;dependabot in https://github.com/apache/maven/pull/2185 * Use dedicated local repo for ITs on Jenkins by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2255 * [MNG-8701] Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28 by @&#8203;dependabot in https://github.com/apache/maven/pull/2240 * [MNG-8702] Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0 by @&#8203;dependabot in https://github.com/apache/maven/pull/2241 * [MNG-8703] Bump commons-io:commons-io from 2.18.0 to 2.19.0 by @&#8203;dependabot in https://github.com/apache/maven/pull/2258 * [MNG-8704] Bump com.google.guava:guava from 33.4.6-jre to 33.4.8-jre by @&#8203;dependabot in https://github.com/apache/maven/pull/2264 * [MNG-8705] Bump commons-jxpath:commons-jxpath from 1.3 to 1.4.0 by @&#8203;dependabot in https://github.com/apache/maven/pull/2270 * [MNG-8706] Bump commons-cli:commons-cli from 1.8.0 to 1.9.0 by @&#8203;dependabot in https://github.com/apache/maven/pull/1665 * [MNG-8715] Bump org.fusesource.jansi:jansi from 2.4.1 to 2.4.2 by @&#8203;dependabot in https://github.com/apache/maven/pull/2280 * [MNG-8707] Add methods to remove compile and test source roots by @&#8203;gnodet in https://github.com/apache/maven/pull/2275 * [MNG-8712] dependency version is a requirement, not effective by @&#8203;hboutemy in https://github.com/apache/maven/pull/2279 * [MNG-8717] Remove maven-plugin-plugin:addPluginArtifactMetadata from default binding by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2295 * [MNG-8169] Add opens java.base/java.lang=ALL-UNNAMED for MinGW by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2296 * [MNG-8722] Use a single standalone version of asm by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2297 * [MNG-8716] Bump resolver to 1.9.23 by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2282 * [MNG-8731] Use https for xsi:schemaLocation in generated descriptors by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2343 * [MNG-8711] Fix concurrent cache access by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2345 * Update README.md by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2353 * [MNG-8728] Bump Eclipse Sisu from 0.9.0.M3 to 0.9.0.M4 by @&#8203;cstamas in https://github.com/apache/maven/pull/2359 * [MNG-8728] Build ITs on JDK 21, 24 by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/2360 * [MNG-8734] Make Maven 3.9.10 ignore --raw-streams option by @&#8203;cstamas in https://github.com/apache/maven/pull/2361 * Bump xmlunitVersion from 2.10.0 to 2.10.1 by @&#8203;dependabot in https://github.com/apache/maven/pull/2354 * [MNG-8396] Backport: add cache layer to the filtered dep graph by @&#8203;cstamas in https://github.com/apache/maven/pull/2393 * [MNG-8745] Bump xmlunitVersion from 2.10.1 to 2.10.2 by @&#8203;dependabot in https://github.com/apache/maven/pull/2389 #### New Contributors * @&#8203;fmarot made their first contribution in https://github.com/apache/maven/pull/1806 **Full Changelog**: <https://github.com/apache/maven/compare/maven-3.9.9...maven-3.9.10> ### [`v3.9.9`](https://github.com/apache/maven/releases/tag/maven-3.9.9): 3.9.9 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.8...maven-3.9.9) ### [Release Notes - Maven - Version 3.9.9](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922\&version=12354823) <h2> Bug </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8159'>MNG-8159</a>] - Fix search for topDirectory when using -f / --file for Maven 3.9.x </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8165'>MNG-8165</a>] - Maven does not find extensions for -f when current dir is root </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8177'>MNG-8177</a>] - Warning &quot;&#&#8203;39;dependencyManagement.dependencies.dependency.systemPath&#&#8203;39; for com.sun:tools:jar refers to a non-existing file C:\Temp\jdk-11.0.23\..\lib\tools.jar&quot; </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8178'>MNG-8178</a>] - Profile activation based on OS properties is broken for &quot;mvn site&quot; </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8180'>MNG-8180</a>] - Resolver will blindly assume it is deploying a plugin by presence of META-INF/maven/plugins.xml in JAR </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8182'>MNG-8182</a>] - Missing or mismatching Trusted Checksum for some artifacts is not properly reported </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8188'>MNG-8188</a>] - [REGRESSION] Property not resolved in profile pluginManagement </li> </ul> <h2> Task </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8206'>MNG-8206</a>] - Remove Maven 2.1 (v 2.0) compatibility bits </li> </ul> <h2> Dependency upgrade </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8175'>MNG-8175</a>] - Resolver 1.9.21 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8179'>MNG-8179</a>] - Upgrade Parent to 43 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8193'>MNG-8193</a>] - Resolver 1.9.22 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8198'>MNG-8198</a>] - (build) Animal Sniffer 1.24 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8199'>MNG-8199</a>] - Hamcrest 3.0 </li> </ul> #### What's Changed * [MNG-8159] Fix search for topDirectory when using -f / --file by @&#8203;gzm55 in https://github.com/apache/maven/pull/1589 * [MNG-7194] Test missing property evaluation by @&#8203;pzygielo in https://github.com/apache/maven/pull/1570 * [3.9.x] [MNG-8175] Update Resolver to 1.9.21 by @&#8203;cstamas in https://github.com/apache/maven/pull/1598 * [MNG-8178] Fall back to system properties for missing profile activation context properties by @&#8203;kohlschuetter in https://github.com/apache/maven/pull/1603 * [MNG-8179] Upgrade Parent to 43 by @&#8203;slawekjaranowski in https://github.com/apache/maven/pull/1610 * [MNG-8180] Fail install/deploy if rogue Maven Plugin metadata found by @&#8203;cstamas in https://github.com/apache/maven/pull/1611 * [3.9.x][MNG-8193] Update to Resolver 1.9.22 by @&#8203;cstamas in https://github.com/apache/maven/pull/1627 * [MNG-8199] Hamcrest 3.0 by @&#8203;cstamas in https://github.com/apache/maven/pull/1631 * [MNG-8182] Resolved errors were created based on collect exceptions by @&#8203;cstamas in https://github.com/apache/maven/pull/1632 * [MNG-8180] Handle NPE due non-existent tags by @&#8203;cstamas in https://github.com/apache/maven/pull/1641 * [MNG-8180] Back out from failing the build by @&#8203;cstamas in https://github.com/apache/maven/pull/1642 * [MNG-8206] Remove bad plugin.xml from maven-compat by @&#8203;cstamas in https://github.com/apache/maven/pull/1646 * [MNG-8177] Add contextual info for model warnings by @&#8203;cstamas in https://github.com/apache/maven/pull/1633 * [MNG-8188] Profile properties are not interpolated by @&#8203;cstamas in https://github.com/apache/maven/pull/1634 * [MNG-8165] Align mvn.sh script with mvn.cmd by @&#8203;cstamas in https://github.com/apache/maven/pull/1647 * [MNG-8165] Get rid of bashism creeped in by @&#8203;cstamas in https://github.com/apache/maven/pull/1653 #### New Contributors * @&#8203;gzm55 made their first contribution in https://github.com/apache/maven/pull/1589 * @&#8203;kohlschuetter made their first contribution in https://github.com/apache/maven/pull/1603 **Full Changelog**: <https://github.com/apache/maven/compare/maven-3.9.8...maven-3.9.9> ### [`v3.9.8`](https://github.com/apache/maven/releases/tag/maven-3.9.8): 3.9.8 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.7...maven-3.9.8) ### [Release Notes - Maven - Version 3.9.8](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922\&version=12354748) <h2> Bug </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-7758'>MNG-7758</a>] - o.e.aether.resolution.ArtifactResolutionException incorrectly examined when multiple repositories are involved </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8066'>MNG-8066</a>] - Maven hangs on self-referencing exceptions </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8116'>MNG-8116</a>] - Plugin configuration can randomly fail in case of method overloading as it doesn&#&#8203;39;t take into account implementation attribute </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8131'>MNG-8131</a>] - Property replacement in dependency pom no longer works </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8135'>MNG-8135</a>] - Profile activation based on OS properties is no longer case insensitive </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8142'>MNG-8142</a>] - If JDK profile activator gets &quot;invalid&quot; JDK version for whatever reason, it chokes but does not tell why </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8147'>MNG-8147</a>] - Profile interpolation broke their evaluation in case of duplicate IDs </li> </ul> <h2> Improvement </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-7902'>MNG-7902</a>] - Sort plugins in validation report </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8140'>MNG-8140</a>] - When a model is discarded (by model builder) for whatever reason, show why it happened </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8141'>MNG-8141</a>] - Model Builder should report if not sure about &quot;fully correct&quot; outcome </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8150'>MNG-8150</a>] - Make SimplexTransferListener handle absent source/target files </li> </ul> <h2> Task </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8146'>MNG-8146</a>] - Drop use of commons-lang </li> </ul> <h2> Dependency upgrade </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8136'>MNG-8136</a>] - Update to Eclipse Sisu 0.9.0.M3 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8143'>MNG-8143</a>] - Update to commons-cli 1.8.0 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8144'>MNG-8144</a>] - Update to Guava 32.2.1-jre </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8154'>MNG-8154</a>] - Upgrade default plugin bindings </li> </ul> *** #### What's Changed - Use Maven Wrapper to build by [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) in [#&#8203;1553](https://github.com/apache/maven/pull/1553) - \[3.9.x] \[MNG-8136] Update Eclipse Sisu to 0.9.0.M3 by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1547](https://github.com/apache/maven/pull/1547) - \[MNG-8135] Profile activation based on OS properties is no longer case insensitive by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1561](https://github.com/apache/maven/pull/1561) - \[3.9.x] Dependency updates by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1560](https://github.com/apache/maven/pull/1560) - \[MNG-7902] Sort plugins in the validation report ([#&#8203;1510](https://github.com/apache/maven/issues/1510)) by [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) in [#&#8203;1562](https://github.com/apache/maven/pull/1562) - \[MNG-8066] Default exception handler does not handle recursion by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1558](https://github.com/apache/maven/pull/1558) - \[MNG-8142] Hidden bug: JDK profile activator throw NumberFormatEx by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1557](https://github.com/apache/maven/pull/1557) - \[MNG-8146] Drop commons-lang by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1564](https://github.com/apache/maven/pull/1564) - \[MNG-8140] Always tell why model was discarded as "invalid" by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1555](https://github.com/apache/maven/pull/1555) - \[MNG-8141] Model builder should report problems it finds during build by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1556](https://github.com/apache/maven/pull/1556) - \[MNG-8141]\[MNG-8147] Restore profile ID invariance but warn if duplicate IDs present by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1568](https://github.com/apache/maven/pull/1568) - \[MNG-8141] Aftermath, and tidy up by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1572](https://github.com/apache/maven/pull/1572) - \[MNG-8150] Backport TransferListener improvements for Maven 3.9.x by [@&#8203;pshevche](https://github.com/pshevche) in [#&#8203;1576](https://github.com/apache/maven/pull/1576) - \[MNG-7758] Report dependency problems for all repository by [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) in [#&#8203;1584](https://github.com/apache/maven/pull/1584) - \[MNG-8154] Upgrade default plugin bindings by [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) in [#&#8203;1586](https://github.com/apache/maven/pull/1586) **Full Changelog**: <https://github.com/apache/maven/compare/maven-3.9.7...maven-3.9.8> ### [`v3.9.7`](https://github.com/apache/maven/releases/tag/maven-3.9.7): 3.9.7 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.6...maven-3.9.7) ### [Release Notes - Maven - Version 3.9.7](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922\&version=12353964) <h2> Bug </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8106'>MNG-8106</a>] - Maven Metadata corruption if repository directory role overlaps </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8121'>MNG-8121</a>] - NullPointerException at org.apache.maven.artifact.repository.metadata.Metadata.merge (Metadata.java:293) </li> </ul> <h2> New Feature </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-5726'>MNG-5726</a>] - Update OS Activation To Allow Wildcards In OS Version </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8030'>MNG-8030</a>] - Backport: Add ability to ignore dependency repositories: mvn -itr </li> </ul> <h2> Improvement </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8019'>MNG-8019</a>] - Streamline update policy of pluginRepository/repository of Maven Central in Super POM </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8029'>MNG-8029</a>] - improve documentation of mirror in settings </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8031'>MNG-8031</a>] - Backport: Make Maven transfer listener used with Resolver more concurrent friendly </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8081'>MNG-8081</a>] - default profile activation should consider available system and user properties </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8085'>MNG-8085</a>] - swtich from png+imagemap to svg </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8117'>MNG-8117</a>] - Improve prerequisite evaluation and plugin version selection logging </li> </ul> <h2> Task </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-7309'>MNG-7309</a>] - Remove redundant MojoDescriptor parameterMap </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8011'>MNG-8011</a>] - Minimize and make generic the README.txt </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8055'>MNG-8055</a>] - Investigate possible solutions for build number diffs on deploy </li> </ul> <h2> Dependency upgrade </h2> <ul> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8094'>MNG-8094</a>] - Resolver 1.9.19 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8100'>MNG-8100</a>] - Upgrade default plugin bindings </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8101'>MNG-8101</a>] - Upgrade Parent to 42 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8109'>MNG-8109</a>] - Resolver 1.9.20 </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8115'>MNG-8115</a>] - Upgrade minimal set of dependencies </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8125'>MNG-8125</a>] - (build) Bump buildhelper-maven-plugin to 3.6.0 (was 3.4.0) </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8126'>MNG-8126</a>] - Bump logback classic to 1.2.13 (was 1.2.12) </li> <li>[<a href='https://issues.apache.org/jira/browse/MNG-8127'>MNG-8127</a>] - Bump guava to 33.2.0-jre </li> </ul> *** #### What's Changed - \[MNG-6776] Inconsistent list of parameters for MojoDescriptor ([#&#8203;584](https://github.com/apache/maven/issues/584)) by [@&#8203;michael-o](https://github.com/michael-o) in [#&#8203;1361](https://github.com/apache/maven/pull/1361) - \[MNG-8055] Ability to force build number by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1415](https://github.com/apache/maven/pull/1415) - \[MNG-8029] improve documentation about mirror settings by [@&#8203;hboutemy](https://github.com/hboutemy) in [#&#8203;1395](https://github.com/apache/maven/pull/1395) - MNG-8019 streamline central update policy by [@&#8203;kwin](https://github.com/kwin) in [#&#8203;1381](https://github.com/apache/maven/pull/1381) - MNG-5726 (backport for Maven 3.9) by [@&#8203;kwin](https://github.com/kwin) in [#&#8203;1431](https://github.com/apache/maven/pull/1431) - \[MNG-4840] document requiredMavenVersion in plugin descriptor by [@&#8203;hboutemy](https://github.com/hboutemy) in [#&#8203;1444](https://github.com/apache/maven/pull/1444) - \[MNG-8085] switch png+imagemap to svg by [@&#8203;hboutemy](https://github.com/hboutemy) in [#&#8203;1452](https://github.com/apache/maven/pull/1452) - \[MNG-4840] fix requiredMavenVersion description [#&#8203;1444](https://github.com/apache/maven/issues/1444) by [@&#8203;hboutemy](https://github.com/hboutemy) in [#&#8203;1456](https://github.com/apache/maven/pull/1456) - \[MNG-6399] Lift JDK minimum to JDK 8 by [@&#8203;turbanoff](https://github.com/turbanoff) in [#&#8203;1382](https://github.com/apache/maven/pull/1382) - Update GitHub actions to v4 by [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) in [#&#8203;1472](https://github.com/apache/maven/pull/1472) - \[MNG-8101] Upgrade Parent to 42 by [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) in [#&#8203;1473](https://github.com/apache/maven/pull/1473) - \[MNG-8100] Upgrade default plugin bindings by [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) in [#&#8203;1474](https://github.com/apache/maven/pull/1474) - \[MNG-8031] Backport concurrent friendly transport listener by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1471](https://github.com/apache/maven/pull/1471) - \[MNG-8030] Backport itr: ignore transitive repositories by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1469](https://github.com/apache/maven/pull/1469) - \[MNG-8011] Neuter the README by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1470](https://github.com/apache/maven/pull/1470) - \[MNG-8094] Resolver 1.9.19 by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1468](https://github.com/apache/maven/pull/1468) - \[3.9.x]\[MNG-8106] Fix metadata merge by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1480](https://github.com/apache/maven/pull/1480) - \[3.9.x]\[MNG-8109] Resolver 1.9.20 by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1490](https://github.com/apache/maven/pull/1490) - \[MNG-8081] Interpolate available properties during default profile selection (Maven 3.9.x) by [@&#8203;mbenson](https://github.com/mbenson) in [#&#8203;1447](https://github.com/apache/maven/pull/1447) - \[3.9.x]\[MNG-8117] Backport to Maven 3.9.x by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1505](https://github.com/apache/maven/pull/1505) - \[MNG-8115] Upgrade dependencies by [@&#8203;slachiewicz](https://github.com/slachiewicz) in [#&#8203;1496](https://github.com/apache/maven/pull/1496) - \[MNG-8121] Fix NPE in metadata merge by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1508](https://github.com/apache/maven/pull/1508) - \[MNG-8126] Mild updates by [@&#8203;cstamas](https://github.com/cstamas) in [#&#8203;1533](https://github.com/apache/maven/pull/1533) #### New Contributors - [@&#8203;turbanoff](https://github.com/turbanoff) made their first contribution in [#&#8203;1382](https://github.com/apache/maven/pull/1382) **Full Changelog**: <https://github.com/apache/maven/compare/maven-3.9.6...maven-3.9.7> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjkuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE0MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
mars3142 added 1 commit 2026-04-19 02:55:12 +00:00
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/maven-3.x:renovate/maven-3.x
git checkout renovate/maven-3.x
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mars3142/tide-display#2