Bump the plugins group with 6 updates #2364
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=80&v=4){kind=small}
dependabot
bot
force-pushed
the
dependabot/maven/1.2/plugins-ed13b94b3d
branch
from
de45c3b to
ee06f11
Compare
acoburn
approved these changes
Oct 15, 2025
dependabot
bot
force-pushed
the
dependabot/maven/1.2/plugins-ed13b94b3d
branch
from
ee06f11 to
c8c78ea
Compare
Bumps the plugins group with 6 updates: | Package | From | To | | --- | --- | --- | | [org.apache.maven.plugins:maven-archetype-plugin](https://github.com/apache/maven-archetype) | `3.4.0` | `3.4.1` | | [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.8.1` | `3.9.0` | | [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.1` | `3.6.2` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.13` | `0.8.14` | | [org.apache.maven.plugins:maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) | `3.27.0` | `3.28.0` | | [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) | `12.1.6` | `12.1.8` | Updates `org.apache.maven.plugins:maven-archetype-plugin` from 3.4.0 to 3.4.1 - [Release notes](https://github.com/apache/maven-archetype/releases) - [Commits](apache/maven-archetype@maven-archetype-3.4.0...maven-archetype-3.4.1) Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.8.1 to 3.9.0 - [Release notes](https://github.com/apache/maven-dependency-plugin/releases) - [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.8.1...maven-dependency-plugin-3.9.0) Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.1 to 3.6.2 - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](apache/maven-enforcer@enforcer-3.6.1...enforcer-3.6.2) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.13 to 0.8.14 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.13...v0.8.14) Updates `org.apache.maven.plugins:maven-pmd-plugin` from 3.27.0 to 3.28.0 - [Release notes](https://github.com/apache/maven-pmd-plugin/releases) - [Commits](apache/maven-pmd-plugin@maven-pmd-plugin-3.27.0...maven-pmd-plugin-3.28.0) Updates `org.owasp:dependency-check-maven` from 12.1.6 to 12.1.8 - [Release notes](https://github.com/dependency-check/DependencyCheck/releases) - [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md) - [Commits](dependency-check/DependencyCheck@v12.1.6...v12.1.8) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-archetype-plugin dependency-version: 3.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: plugins - dependency-name: org.apache.maven.plugins:maven-dependency-plugin dependency-version: 3.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: plugins - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: plugins - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: plugins - dependency-name: org.apache.maven.plugins:maven-pmd-plugin dependency-version: 3.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: plugins - dependency-name: org.owasp:dependency-check-maven dependency-version: 12.1.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: plugins ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/maven/1.2/plugins-ed13b94b3d
branch
from
c8c78ea to
1d41e0b
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the plugins group with 6 updates:
3.4.03.4.13.8.13.9.03.6.13.6.20.8.130.8.143.27.03.28.012.1.612.1.8Updates
org.apache.maven.plugins:maven-archetype-pluginfrom 3.4.0 to 3.4.1Release notes
Sourced from org.apache.maven.plugins:maven-archetype-plugin's releases.
Commits
9097959[maven-release-plugin] prepare release maven-archetype-3.4.138d00bfUse RESOLVED_VERSION for tag-template in release-draftere344a94Remove jira from README, update social media links4a40785Remove not existing module archetype-testing from documentation7a4e240Use Maven 3.9.11 in dependencies, still requires 3.6.3 as minimum741ed2eBump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.10.20fbc317Restore http in archetype descriptors444324a- Fixed resource files without extension missing in create-from-project9cab90fAdd hacktoberfest label to projectff25739Bump m-invoker-p to 3.9.1 - to allow build by JDK 25Updates
org.apache.maven.plugins:maven-dependency-pluginfrom 3.8.1 to 3.9.0Release notes
Sourced from org.apache.maven.plugins:maven-dependency-plugin's releases.
... (truncated)
Commits
826e5f0[maven-release-plugin] prepare release maven-dependency-plugin-3.9.00db1accUse Resolver API in go-offline for dependencies resolving (#1533)e50031aUse Resolver API in go-offline for plugins resolving6ed4b1aBump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.08776c61Bump org.assertj:assertj-core from 3.27.5 to 3.27.6d2af78eIgnore Mockito 5.x and SLF4j 2.x by dependabotdcd4b7dBump org.assertj:assertj-core from 3.27.4 to 3.27.57523948Strict check of dependencies usage23186d4Fixes #1522, add render-dependencies mojo (#1523)bc1893fUse Resolver API in resolve-pluginUpdates
org.apache.maven.plugins:maven-enforcer-pluginfrom 3.6.1 to 3.6.2Release notes
Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.
Commits
82ba770[maven-release-plugin] prepare release enforcer-3.6.25313c70Bump m-invoker-p to 3.9.1ee5abeeBump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.06c5a152Bump org.assertj:assertj-core from 3.27.5 to 3.27.689ccb70Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#931)03ed82dUpdate Version Ranges link in site.xml (#926)d282dc4Fixes #920 - Remove usage of Stack27e1f46Use SessionData for cache storage (#930)a1bac9bFix formatting typo in dependencyConvergence.apt.vm870a1edCorrect support parameters documentation for banned repositories ruleUpdates
org.jacoco:jacoco-maven-pluginfrom 0.8.13 to 0.8.14Release notes
Sourced from org.jacoco:jacoco-maven-plugin's releases.
Commits
2eb2483Prepare release v0.8.14de76181KotlinSerializableFilter should filter more methods (#1971)89c4bd5Fix NPE in KotlinSerializableFilter (#1970)0981128Migrate release staging to the Central Publisher Portal (#1968)d07bc6bAdd filter for bytecode generated by Kotlin serialization compiler plugin (#1...5e35fd5Upgrade maven-dependency-plugin to 3.9.0 (#1966)c2fe5ccUpgrade ASM to 9.9 (#1965)b0f8e23KotlinSafeCallOperatorFilter should filter "unoptimized" safe call followed b...c7bd3f4Upgrade spotless-maven-plugin to 3.0.0 (#1961)faa289dKotlinSafeCallOperatorFilter should not be affected by presence of pseudo ins...Updates
org.apache.maven.plugins:maven-pmd-pluginfrom 3.27.0 to 3.28.0Release notes
Sourced from org.apache.maven.plugins:maven-pmd-plugin's releases.
Commits
f152a3a[maven-release-plugin] prepare release maven-pmd-plugin-3.28.00678fd1Update historical PMD version in docs41d5069Bump org.apache.commons:commons-lang3 from 3.8.1 to 3.18.0 in ITs (#648)3ef805bBump pmdVersion from 7.16.0 to 7.17.0592d703Add hacktoberfest label to projectced9373Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 (#658)3cf5bc1Bump org.codehaus.plexus:plexus-resources from 1.3.0 to 1.3.1 (#654)9077c3bBump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#655)12ed57afeat: enable prevent branch protection rules (#653)fff2b95Bump pmdVersion from 7.15.0 to 7.16.0 (#652)Updates
org.owasp:dependency-check-mavenfrom 12.1.6 to 12.1.8Release notes
Sourced from org.owasp:dependency-check-maven's releases.
Changelog
Sourced from org.owasp:dependency-check-maven's changelog.
Commits
2d29a0bbuild: prepare release v12.1.8a06ba2edocs: release 12.1.88230ba2fix: improve VulnerableSoftware comparison (#8031)c4696c0docs: add note about central analyzer for gradle (#8038)a8e00c8build: fix flaky central test (#8039)52eefb7build(deps): bump org.apache.maven.plugins:maven-artifact-plugin from 3.6.0 t...fd8371cbuild(deps): bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 ...5ac1edbbuild(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14 (#8032)8ceb175docs: Improve Gradle docs wrt experimental analyzers, use of Central and Prox...986afb0build: release 12.1.7 (#8030)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions