Skip to content

Update dependency maven to v3.9.14#149

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/maven-3.x
Open

Update dependency maven to v3.9.14#149
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/maven-3.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 16, 2023 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
maven (source) 3.5.0 → 3.9.14 age confidence

Release Notes

apache/maven (maven)

v3.9.14

Compare Source

v3.9.13

Compare Source

v3.9.12: 3.9.12

Compare Source

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

v3.9.11: 3.9.11

Compare Source

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

v3.9.10: 3.9.10

Compare Source

Release Notes - Maven - Version 3.9.10

Bug

  • [MNG-8096] - Inconsistent dependency resolution behaviour for concurrent multi-module build can cause failures
  • [MNG-8169] - MINGW support requires --add-opens java.base/java.lang=ALL-UNNAMED
  • [MNG-8170] - Maven 3.9.8 contains weird native library for Jansi on Windows/arm64
  • [MNG-8211] - Maven should fail builds that use CI Friendly versions but have no values set
  • [MNG-8248] - WARNING: A restricted method in java.lang.System has been called
  • [MNG-8256] - ProjectDependencyGraph bug: in case of filtering, non-direct module links are lost
  • [MNG-8315] - Failure of mvn.cmd if a .mvn directory is located at drive root
  • [MNG-8396] - Maven takes forever to resume
  • [MNG-8711] - "Duplicate artifact" in LifecycleDependencyResolver

Improvement

  • [MNG-8370] - Introduce maven.repo.local.head
  • [MNG-8399] - JDK 24+ issues warning about usage of sun.misc.Unsafe
  • [MNG-8707] - Add methods to remove compile and test source roots
  • [MNG-8712] - improve dependency version explanation: it&#​39;s a requirement, not always effective version
  • [MNG-8717] - Remove maven-plugin-plugin:addPluginArtifactMetadata from default binding
  • [MNG-8722] - Use a single standalone version of asm
  • [MNG-8731] - Use https for xsi:schemaLocation in generated descriptors
  • [MNG-8734] - Simplify scripting like "get project version" cases

Task

  • [MNG-8728] - Bump Eclipse Sisu from 0.9.0.M3 to 0.9.0.M4 and use Java 24 on CI

Dependency upgrade

  • [MNG-8289] - Update Plexus annotations to 2.2.0
  • [MNG-8443] - Bump com.google.guava:guava from 33.2.1-jre to 33.4.0-jre
  • [MNG-8531] - Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0
  • [MNG-8532] - Bump commons-io:commons-io from 2.16.1 to 2.18.0
  • [MNG-8534] - Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.0 to 3.2.1
  • [MNG-8635] - Bump com.google.guava:failureaccess from 1.0.2 to 1.0.3
  • [MNG-8636] - Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre
  • [MNG-8640] - Bump org.apache.maven:maven-parent from 43 to 44
  • [MNG-8661] - Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre
  • [MNG-8701] - Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28
  • [MNG-8702] - Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0
  • [MNG-8703] - Bump commons-io:commons-io from 2.18.0 to 2.19.0
  • [MNG-8704] - Bump com.google.guava:guava from 33.4.6-jre to 33.4.8-jre
  • [MNG-8705] - Bump commons-jxpath:commons-jxpath from 1.3 to 1.4.0
  • [MNG-8706] - Bump commons-cli:commons-cli from 1.8.0 to 1.9.0
  • [MNG-8715] - Bump org.fusesource.jansi:jansi from 2.4.1 to 2.4.2
  • [MNG-8716] - Bump resolver to 1.9.23
  • [MNG-8745] - Bump xmlunitVersion from 2.10.0 to 2.10.2

What's Changed

New Contributors

Full Changelog: apache/maven@maven-3.9.9...maven-3.9.10

v3.9.9: 3.9.9

Compare Source

Release Notes - Maven - Version 3.9.9

Bug

  • [MNG-8159] - Fix search for topDirectory when using -f / --file for Maven 3.9.x
  • [MNG-8165] - Maven does not find extensions for -f when current dir is root
  • [MNG-8177] - Warning "&#​39;dependencyManagement.dependencies.dependency.systemPath&#​39; for com.sun:tools:jar refers to a non-existing file C:\Temp\jdk-11.0.23\..\lib\tools.jar"
  • [MNG-8178] - Profile activation based on OS properties is broken for "mvn site"
  • [MNG-8180] - Resolver will blindly assume it is deploying a plugin by presence of META-INF/maven/plugins.xml in JAR
  • [MNG-8182] - Missing or mismatching Trusted Checksum for some artifacts is not properly reported
  • [MNG-8188] - [REGRESSION] Property not resolved in profile pluginManagement

Task

  • [MNG-8206] - Remove Maven 2.1 (v 2.0) compatibility bits

Dependency upgrade

What's Changed

New Contributors

Full Changelog: apache/maven@maven-3.9.8...maven-3.9.9

v3.9.8: 3.9.8

Compare Source

Release Notes - Maven - Version 3.9.8

Bug

  • [MNG-7758] - o.e.aether.resolution.ArtifactResolutionException incorrectly examined when multiple repositories are involved
  • [MNG-8066] - Maven hangs on self-referencing exceptions
  • [MNG-8116] - Plugin configuration can randomly fail in case of method overloading as it doesn&#​39;t take into account implementation attribute
  • [MNG-8131] - Property replacement in dependency pom no longer works
  • [MNG-8135] - Profile activation based on OS properties is no longer case insensitive
  • [MNG-8142] - If JDK profile activator gets "invalid" JDK version for whatever reason, it chokes but does not tell why
  • [MNG-8147] - Profile interpolation broke their evaluation in case of duplicate IDs

Improvement

  • [MNG-7902] - Sort plugins in validation report
  • [MNG-8140] - When a model is discarded (by model builder) for whatever reason, show why it happened
  • [MNG-8141] - Model Builder should report if not sure about "fully correct" outcome
  • [MNG-8150] - Make SimplexTransferListener handle absent source/target files

Task

Dependency upgrade

  • [MNG-8136] - Update to Eclipse Sisu 0.9.0.M3
  • [MNG-8143] - Update to commons-cli 1.8.0
  • [MNG-8144] - Update to Guava 32.2.1-jre
  • [MNG-8154] - Upgrade default plugin bindings

What's Changed

Full Changelog: apache/maven@maven-3.9.7...maven-3.9.8

v3.9.7: 3.9.7

Compare Source

Release Notes - Maven - Version 3.9.7

Bug

  • [MNG-8106] - Maven Metadata corruption if repository directory role overlaps
  • [MNG-8121] - NullPointerException at org.apache.maven.artifact.repository.metadata.Metadata.merge (Metadata.java:293)

New Feature

  • [MNG-5726] - Update OS Activation To Allow Wildcards In OS Version
  • [MNG-8030] - Backport: Add ability to ignore dependency repositories: mvn -itr

Improvement

  • [MNG-8019] - Streamline update policy of pluginRepository/repository of Maven Central in Super POM
  • [MNG-8029] - improve documentation of mirror in settings
  • [MNG-8031] - Backport: Make Maven transfer listener used with Resolver more concurrent friendly
  • [MNG-8081] - default profile activation should consider available system and user properties
  • [MNG-8085] - swtich from png+imagemap to svg
  • [MNG-8117] - Improve prerequisite evaluation and plugin version selection logging

Task

  • [MNG-7309] - Remove redundant MojoDescriptor parameterMap
  • [MNG-8011] - Minimize and make generic the README.txt
  • [MNG-8055] - Investigate possible solutions for build number diffs on deploy

Dependency upgrade

  • [MNG-8094] - Resolver 1.9.19
  • [MNG-8100] - Upgrade default plugin bindings
  • [MNG-8101] - Upgrade Parent to 42
  • [MNG-8109] - Resolver 1.9.20
  • [MNG-8115] - Upgrade minimal set of dependencies
  • [MNG-8125] - (build) Bump buildhelper-maven-plugin to 3.6.0 (was 3.4.0)
  • [MNG-8126] - Bump logback classic to 1.2.13 (was 1.2.12)
  • [MNG-8127] - Bump guava to 33.2.0-jre

What's Changed

New Contributors

Full Changelog: apache/maven@maven-3.9.6...maven-3.9.7

v3.9.6: 3.9.6

Compare Source

Release Notes - Maven - Version 3.9.6

Improvement

  • [MNG-7939] - Allow to exclude plugins from validation

Dependency upgrade

  • [MNG-7913] - Upgrade Sisu version to 0.9.0.M2
  • [MNG-7934] - Upgrade Resolver version to 1.9.18
  • [MNG-7942] - Upgrade to parent POM 41
  • [MNG-7943] - Upgrade default plugin bindings

v3.9.5: 3.9.5

Compare Source

Release Notes - Maven - Version 3.9.5

Bug

  • [MNG-7851] - Error message when modelVersion is 4.0 is confusing

Improvement

  • [MNG-7875] - colorize transfer messages
  • [MNG-7895] - Support ${project.basedir} in file profile activation

Task

  • [MNG-7856] - Maven Resolver Provider classes ctor change
  • [MNG-7870] - Undeprecate wrongly deprecated repository metadata
  • [MNG-7872] - Deprecate org.apache.maven.repository.internal.MavenResolverModule
  • [MNG-7874] - maven-resolver-provider: introduce NAME constants.

Dependency upgrade

  • [MNG-7859] - Update to Resolver 1.9.16

v3.9.4: 3.9.4

Compare Source

Release Notes - Maven - Version 3.9.4

Bug

  • [MNG-7846] - endless loop in DefaultExceptionHandler.getMessage()

Dependency upgrade

  • [MNG-7828] - Bump guava from 31.1-jre to 32.0.1-jre
  • [MNG-7847] - Upgrade to Resolver 1.9.14

Full Changelog: apache/maven@maven-3.9.3...maven-3.9.4

v3.9.3: 3.9.3

Compare Source

Release Notes - Maven - Version 3.9.3

Bug

  • [MNG-7786] - Maven Plugin Validation message is misleading
  • [MNG-7795] - IllegalArgumentException: 'other' has different root during plugin validation
  • [MNG-7796] - Top directory cannot be computed
  • [MNG-7799] - Plugin validation falsely reports there are issues (but shows none)
  • [MNG-7811] - Plugins verification - reports are inconsistent
  • [MNG-7818] - [REGRESSION] maven improperly excludes hamcrest-core from junit
  • [MNG-7819] - Create IT that exercise file locking with snapshots

Improvement

  • [MNG-7698] - Allow comments in .mvn/maven.config
  • [MNG-7785] - Clean usage of SessionData
  • [MNG-7787] - Introduce new options for plugin validation
  • [MNG-7788] - Plugin Validation Report should be printed before build summary
  • [MNG-7789] - Plugin Dependency Validations use wrong data set
  • [MNG-7806] - Plugins verification - remove used in module(s) report
  • [MNG-7823] - Make plugin validation level parsing more consistent

Task

  • [MNG-5987] - Document the algorithm calculating the order of plugin executions inside a phase.
  • [MNG-7743] - Make the build work on JDK 20
  • [MNG-7790] - Update lifecycle plugins
  • [MNG-7791] - Split validation issues into "user actionable" and "plugin dev actionable"
  • [MNG-7797] - Return BRIEF mode, simply map it onto SUMMARY
  • [MNG-7807] - Update Super POM plugins

Dependency upgrade

  • [MNG-7800] - Upgrade to Maven Resolver 1.9.13
  • [MNG-7816] - Bump maven parent from 39 to 40

v3.9.2: 3.9.2

Compare Source

Release Notes - Maven - Version 3.9.2

Bug

  • [MNG-7750] - Interpolated properties in originalModel in an active profile.
  • [MNG-7759] - java.lang.NullPointerException at org.apache.maven.repository.internal.DefaultModelCache.newInstance (DefaultModelCache.java:37)

Improvement

  • [MNG-7712] - Core should issue a warning if plugin depends on maven-compat
  • [MNG-7741] - Add more information when using -Dmaven.repo.local.recordReverseTree=true
  • [MNG-7754] - Improvement and extension of plugin validation
  • [MNG-7767] - Tone down plugin validation report
  • [MNG-7778] - Maven should print suppressed exceptions when a mojo fails

Task

  • [MNG-7749] - Upgrade animal-sniffer from 1.21 to 1.23
  • [MNG-7774] - Maven config and command line interpolation

Dependency upgrade

  • [MNG-7670] - Upgrade misc dependencies
  • [MNG-7753] - Upgrade to Maven Resolver 1.9.8
  • [MNG-7769] - Upgrade to Maven Resolver 1.9.10

v3.9.1: 3.9.1

Compare Source

Release Notes - Maven - Version 3.9.1

Overview About the Changes

Regression fixes from Maven 3.9.0. General performance and other fixes.

Potentially Breaking Core Changes (if migrating from 3.8.x)

  • The Maven Resolver transport has changed from Wagon to “native HTTP”, see Resolver Transport guide.

  • Maven 2.x was auto-injecting an ancient version of plexus-utils dependency into the plugin classpath, and Maven 3.x continued doing this to preserve backward compatibility. Starting with Maven 3.9, it does not happen anymore. This change may lead to plugin breakage. The fix for affected plugin maintainers is to explicitly declare a dependency on plexus-utils. The workaround for affected plugin users is to add this dependency to plugin dependencies until issue is fixed by the affected plugin maintainer. See MNG-6965.

  • Mojos are prevented to boostrap new instance of RepositorySystem (for example by using deprecated ServiceLocator), they should reuse RepositorySystem instance provided by Maven instead. See MNG-7471.

  • Each line in .mvn/maven.config is now interpreted as a single argument. That is, if the file contains multiple arguments, these must now be placed on separate lines, see MNG-7684.

Bug

  • [MNG-7213] - StackOverflowError when version ranges are unsolvable and graph contains a cycle
  • [MNG-7544] - MavenMetadataSource#retrieve(MetadataResolutionRequest) does not check for null when reading from project map
  • [MNG-7676] - On Maven 3.9.0+ release, sha512 hashes have "null" classifier
  • [MNG-7677] - Maven 3.9.0 is ~10% slower than 3.8.7 in large multi-module builds
  • [MNG-7679] - [REGRESSION] Build fails when executing a single mojo without a POM
  • [MNG-7685] - Unable to ignore certificate errors with v3.9.0
  • [MNG-7693] - NPE in createModelCache, modelCacheFactory is null
  • [MNG-7697] - Cannot parse POM that contains an emoji in a comment
  • [MNG-7708] - Resolver in Maven 3.9+ no longer retries on a conection failure
  • [MNG-7709] - plexus-utils upgrade changes the way configuration is parsed
  • [MNG-7710] - Upgrade plexus-utils to 3.5.1
  • [MNG-7716] - ConcurrencyDependencyGraph deadlock if no root can be selected
  • [MNG-7717] - Maven warns wrongly about ${localRepository} expression
  • [MNG-7720] - [REGRESSION] Build order is incorrect and does not respect Reactor Build Order
  • [MNG-7721] - Maven 3.9 resolver ignores proxy configured via MAVEN_OPTS
  • [MNG-7726] - Maven 3.9.0 resolves properties in file profile activation incorrectly
  • [MNG-7731] - MNG-7520 incorrectly back ported to Maven 3.9.0

Improvement

  • [MNG-5185] - Improve "missing dependency" error message when _maven.repositories/_remote.repositories contains other repository ids than requested
  • [MNG-7686] - Speed up by replacing non-pattern #replaceAll() with #replace() or precompiled patterns
  • [MNG-7706] - Deprecate ${localRepository} mojo parameter expression

Task

  • [MNG-7197] - Simplify exit code handling in Windows command startup script
  • [MNG-7583] - Allow concurrent access to the MavenPluginManager
  • [MNG-7702] - Update to Maven Deploy Plugin 3.1.0
  • [MNG-7713] -

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title Update dependency maven to v3.9.0 Update dependency maven to v3.9.1 Mar 23, 2023
@renovate renovate bot force-pushed the renovate/maven-3.x branch from 767e007 to 9e3b8c4 Compare March 23, 2023 15:53
@renovate renovate bot changed the title Update dependency maven to v3.9.1 Update dependency maven to v3.9.2 May 28, 2023
@renovate renovate bot force-pushed the renovate/maven-3.x branch from 9e3b8c4 to 1b1ba17 Compare May 28, 2023 10:06
@renovate renovate bot changed the title Update dependency maven to v3.9.2 Update dependency maven to v3.9.3 Jun 26, 2023
@renovate renovate bot force-pushed the renovate/maven-3.x branch from 1b1ba17 to c9c3021 Compare June 26, 2023 15:10
@renovate renovate bot changed the title Update dependency maven to v3.9.3 Update dependency maven to v3.9.4 Aug 3, 2023
@renovate renovate bot force-pushed the renovate/maven-3.x branch from c9c3021 to e485c00 Compare August 3, 2023 11:27
@renovate renovate bot changed the title Update dependency maven to v3.9.4 Update dependency maven to v3.9.5 Oct 4, 2023
@renovate renovate bot force-pushed the renovate/maven-3.x branch from e485c00 to 32c0aab Compare October 4, 2023 22:48
@renovate renovate bot changed the title Update dependency maven to v3.9.5 Update dependency maven to v3.9.6 Dec 1, 2023
@renovate renovate bot force-pushed the renovate/maven-3.x branch from 32c0aab to 496502f Compare December 1, 2023 12:34
@renovate renovate bot changed the title Update dependency maven to v3.9.6 Update dependency maven to v3.9.7 May 25, 2024
@renovate renovate bot force-pushed the renovate/maven-3.x branch from 496502f to 62b1ded Compare May 25, 2024 13:02
@renovate renovate bot changed the title Update dependency maven to v3.9.7 Update dependency maven to v3.9.8 Jun 17, 2024
@renovate renovate bot force-pushed the renovate/maven-3.x branch from 62b1ded to 12650dd Compare June 17, 2024 10:17
@renovate renovate bot changed the title Update dependency maven to v3.9.8 Update dependency maven to v3.9.9 Aug 17, 2024
@renovate renovate bot force-pushed the renovate/maven-3.x branch from 12650dd to 8b0c74e Compare August 17, 2024 19:06
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Aug 17, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

@renovate renovate bot changed the title Update dependency maven to v3.9.9 Update dependency maven to v3.9.10 Jun 6, 2025
@renovate renovate bot force-pushed the renovate/maven-3.x branch from 8b0c74e to 57ee8d7 Compare June 6, 2025 20:50
@renovate renovate bot changed the title Update dependency maven to v3.9.10 Update dependency maven to v3.9.11 Jul 15, 2025
@renovate renovate bot force-pushed the renovate/maven-3.x branch from 57ee8d7 to b83892f Compare July 15, 2025 23:57
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Jul 15, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@renovate renovate bot force-pushed the renovate/maven-3.x branch from b83892f to 37d9e6d Compare December 17, 2025 01:05
@renovate renovate bot changed the title Update dependency maven to v3.9.11 Update dependency maven to v3.9.12 Dec 17, 2025
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Dec 17, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@renovate renovate bot force-pushed the renovate/maven-3.x branch from 37d9e6d to c184480 Compare March 6, 2026 13:45
@renovate renovate bot changed the title Update dependency maven to v3.9.12 Update dependency maven to v3.9.13 Mar 6, 2026
@renovate renovate bot force-pushed the renovate/maven-3.x branch from c184480 to aae98d4 Compare March 12, 2026 14:31
@renovate renovate bot changed the title Update dependency maven to v3.9.13 Update dependency maven to v3.9.14 Mar 12, 2026
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Mar 12, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants