anthorob/netneutrality
1
0 Fork 0
Code Issues 1 Pull Requests 9 Actions Packages Projects Releases Wiki Activity

Update dependency maven to v3.10.0 - autoclosed #29

Closed
renovate-bot wants to merge 1 commits from renovate/maven-3.x into main
pull from: renovate/maven-3.x
merge into: anthorob:main
Conversation 0 Commits 1 Files Changed 1
+1 -1
renovate-bot commented 2026-08-24 18:02:00 -04:00
Collaborator
Copy link
Copy source

This PR contains the following updates:

Package Change Age Confidence
maven (source) 3.9.15 → 3.10.0 age confidence

Release Notes

apache/maven (maven)

v3.10.0: 3.10.0

Compare Source

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

v3.9.16: 3.9.16

Compare Source

🐛 Bug Fixes

📦 Dependency updates

Configuration

📅 Schedule: (in timezone America/Toronto)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [maven](https://maven.apache.org/) ([source](https://github.com/apache/maven)) | `3.9.15` → `3.10.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.apache.maven:apache-maven/3.10.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.apache.maven:apache-maven/3.9.15/3.10.0?slim=true) | --- ### Release Notes <details> <summary>apache/maven (maven)</summary> ### [`v3.10.0`](https://github.com/apache/maven/releases/tag/maven-3.10.0): 3.10.0 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.16...maven-3.10.0) <!-- Optional: add a release summary here --> #### 🚀 New features and improvements - Maven 3.10.x should use Maven 3.1 validation in strict mode ([#&#8203;1542](https://github.com/apache/maven/pull/1542)) [@&#8203;gnodet](https://github.com/gnodet) - Do not depend on maven-resolver-supplier-mvn3 ([#&#8203;13266](https://github.com/apache/maven/pull/13266)) [@&#8203;cstamas](https://github.com/cstamas) - [\[MNG-6797\]](https://issues.apache.org/jira/browse/MNG-6797) - Remember if Maven model problems were encountered. ([#&#8203;298](https://github.com/apache/maven/pull/298)) [@&#8203;wilx](https://github.com/wilx) - feat: add relativePath validation ([#&#8203;12742](https://github.com/apache/maven/pull/12742)) [@&#8203;cstamas](https://github.com/cstamas) - Add validation for Plexus-based plugin dependency injection ([#&#8203;12651](https://github.com/apache/maven/pull/12651)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Introduce validation control ([#&#8203;12549](https://github.com/apache/maven/pull/12549)) [@&#8203;cstamas](https://github.com/cstamas) - Update to Resolver 2.0.21 ([#&#8203;12504](https://github.com/apache/maven/pull/12504)) [@&#8203;cstamas](https://github.com/cstamas) - [\[MNG-5913\]](https://issues.apache.org/jira/browse/MNG-5913) - Allow defining aliases for existing server configurations in settings.xml ([#&#8203;12475](https://github.com/apache/maven/pull/12475)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 🐛 Bug Fixes - Issue [#&#8203;13265](https://github.com/apache/maven/issues/13265): let a settings server declare the repository origins its credentials may be used with ([#&#8203;13275](https://github.com/apache/maven/pull/13275)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Backport [#&#8203;13040](https://github.com/apache/maven/issues/13040): treat reactor BOM imports as ProjectSorter edges so -am includes them ([#&#8203;13263](https://github.com/apache/maven/pull/13263)) [@&#8203;gnodet](https://github.com/gnodet) - [\[MNG-8174\]](https://issues.apache.org/jira/browse/MNG-8174) - Fix NPE when a property references itself in a plugin configuration (backport [#&#8203;12932](https://github.com/apache/maven/issues/12932)) ([#&#8203;12936](https://github.com/apache/maven/pull/12936)) [@&#8203;elharo](https://github.com/elharo) - Fix [#&#8203;13200](https://github.com/apache/maven/issues/13200): publish a complete set from MavenProject.getArtifacts ([#&#8203;13204](https://github.com/apache/maven/pull/13204)) [@&#8203;gnodet](https://github.com/gnodet) - Fixes [#&#8203;13135](https://github.com/apache/maven/issues/13135): ensure completeness of the reactor summary, privilege f… ([#&#8203;13173](https://github.com/apache/maven/pull/13173)) [@&#8203;rmannibucau](https://github.com/rmannibucau) - \[3.10.x] Fix [#&#8203;13084](https://github.com/apache/maven/issues/13084): sandbox profile activation context for external model builds ([#&#8203;13114](https://github.com/apache/maven/pull/13114)) [@&#8203;gnodet](https://github.com/gnodet) - Fix [#&#8203;13100](https://github.com/apache/maven/issues/13100): honor repositories from legitimately-active external model profiles ([#&#8203;13116](https://github.com/apache/maven/pull/13116)) [@&#8203;gnodet](https://github.com/gnodet) - Add support for MAVEN_PROJECTBASEDIR substitution in jvm.config (backport of MNG-8598 to 3.10.x) ([#&#8203;13115](https://github.com/apache/maven/pull/13115)) [@&#8203;gnodet](https://github.com/gnodet) - Scope server credentials and validate legacy relocation coordinates ([#&#8203;12954](https://github.com/apache/maven/pull/12954)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Honour configured policy and validate inputs on the legacy compat paths ([#&#8203;12978](https://github.com/apache/maven/pull/12978)) [@&#8203;gnodet](https://github.com/gnodet) - Add unit test for [#&#8203;12600](https://github.com/apache/maven/issues/12600) null-guard in forked executions ([#&#8203;12923](https://github.com/apache/maven/pull/12923)) [@&#8203;gnodet](https://github.com/gnodet) - Fix: make ProjectIndex thread-safe for parallel builds (backport [#&#8203;12832](https://github.com/apache/maven/issues/12832)) ([#&#8203;12927](https://github.com/apache/maven/pull/12927)) [@&#8203;gnodet](https://github.com/gnodet) - Fail on misconfigured plugin-requested toolchains ([#&#8203;12616](https://github.com/apache/maven/pull/12616)) [@&#8203;wilx](https://github.com/wilx) - Resolve classified POM artifacts from the reactor in Maven 3.x ([#&#8203;12659](https://github.com/apache/maven/pull/12659)) [@&#8203;wilx](https://github.com/wilx) - \[3.10.x] Convert paths for MSYS2 and jvm.config placeholders in bin/mvn ([#&#8203;12567](https://github.com/apache/maven/pull/12567)) [@&#8203;gnodet](https://github.com/gnodet) - Preserve dependency scope in plugin artifacts - fix [#&#8203;12497](https://github.com/apache/maven/issues/12497) ([#&#8203;12503](https://github.com/apache/maven/pull/12503)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 📝 Documentation updates - docs: document plugin.xml V4 vs V3 ([#&#8203;13261](https://github.com/apache/maven/pull/13261)) [@&#8203;gnodet](https://github.com/gnodet) - \[maven-3.10.x] Port the site documentation from APT to Markdown ([#&#8203;12712](https://github.com/apache/maven/pull/12712)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - improve doc about deprecating plugin descriptor's requirement ([#&#8203;12555](https://github.com/apache/maven/pull/12555)) [@&#8203;hboutemy](https://github.com/hboutemy) - Drop mention of Plexus XML ([#&#8203;12482](https://github.com/apache/maven/pull/12482)) [@&#8203;cstamas](https://github.com/cstamas) #### 👻 Maintenance - \[3.10.x] maintenance: Align use of profiles ([#&#8203;13274](https://github.com/apache/maven/pull/13274)) [@&#8203;cstamas](https://github.com/cstamas) - Remove version from rat directory deployment ([#&#8203;13046](https://github.com/apache/maven/pull/13046)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Update NOTICE file in distribution packages ([#&#8203;13044](https://github.com/apache/maven/pull/13044)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Restrict what a repository-resolved model contributes to the build ([#&#8203;12953](https://github.com/apache/maven/pull/12953)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Validate coordinates and repository precedence during artifact resolution ([#&#8203;12952](https://github.com/apache/maven/pull/12952)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - [\[MNG-8129\]](https://issues.apache.org/jira/browse/MNG-8129) - Clarify relativePath validation comment ([#&#8203;12966](https://github.com/apache/maven/pull/12966)) [@&#8203;gnodet](https://github.com/gnodet) - \[12811] Keep plexus-cipher at 2.0: POM note ([#&#8203;12879](https://github.com/apache/maven/pull/12879)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - \[3.10.x] Use try-with-resources ([#&#8203;12845](https://github.com/apache/maven/pull/12845)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Migrate the embedder-test-project fixture to JUnit 5 ([#&#8203;12717](https://github.com/apache/maven/pull/12717)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - \[maven-3.10.x] Port the site documentation from APT to Markdown ([#&#8203;12712](https://github.com/apache/maven/pull/12712)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Migrate legacy plugin Javadoc annotations in Maven Embedder tests ([#&#8203;12708](https://github.com/apache/maven/pull/12708)) [@&#8203;wilx](https://github.com/wilx) - Replace custom `GraphLogger` with `DependencyGraphDumper` in dependency resolution ([#&#8203;12639](https://github.com/apache/maven/pull/12639)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Fix UT: do not use checkout directly ([#&#8203;12483](https://github.com/apache/maven/pull/12483)) [@&#8203;cstamas](https://github.com/cstamas) #### 🔧 Build - Replace nicoulaj checksum plugin with maveniverse checksum plugin ([#&#8203;13053](https://github.com/apache/maven/pull/13053)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - 3.10.x Build by JDK 25, limit JDK to min and max LTS in build ([#&#8203;12848](https://github.com/apache/maven/pull/12848)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Update Maven version to 3.10.0-rc-1 in GH configuration ([#&#8203;12847](https://github.com/apache/maven/pull/12847)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 📦 Dependency updates - \[3.10.x] deps: Update to Maven Resolver 2.0.24 ([#&#8203;13271](https://github.com/apache/maven/pull/13271)) [@&#8203;cstamas](https://github.com/cstamas) - build: bump xmlunitVersion from 2.13.0 to 2.14.0 ([#&#8203;13237](https://github.com/apache/maven/pull/13237)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build: bump org.apache.maven:maven-parent from 49 to 50 ([#&#8203;13242](https://github.com/apache/maven/pull/13242)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Resolver 2.0.23 and validation cleanup ([#&#8203;13078](https://github.com/apache/maven/pull/13078)) [@&#8203;cstamas](https://github.com/cstamas) - Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 ([#&#8203;13134](https://github.com/apache/maven/pull/13134)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.3.0 to 3.3.1 ([#&#8203;13132](https://github.com/apache/maven/pull/13132)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 ([#&#8203;13130](https://github.com/apache/maven/pull/13130)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.27 to 1.28 ([#&#8203;13129](https://github.com/apache/maven/pull/13129)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/setup-java from 6.0.0 to 6.0.1 ([#&#8203;13110](https://github.com/apache/maven/pull/13110)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump jlineVersion from 3.30.16 to 3.30.17 ([#&#8203;13111](https://github.com/apache/maven/pull/13111)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump slf4jVersion from 2.0.18 to 2.0.19 ([#&#8203;13074](https://github.com/apache/maven/pull/13074)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.modello:modello-maven-plugin from 2.8.0 to 2.8.1 ([#&#8203;13028](https://github.com/apache/maven/pull/13028)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - \[12811] Keep plexus-cipher at 2.0: POM note ([#&#8203;12879](https://github.com/apache/maven/pull/12879)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Bump actions/setup-java from 5.7.0 to 6.0.0 ([#&#8203;12860](https://github.com/apache/maven/pull/12860)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Deps: Bump to Resolver 2.0.22 ([#&#8203;12803](https://github.com/apache/maven/pull/12803)) [@&#8203;cstamas](https://github.com/cstamas) - Bump resolverVersion from 2.0.21 to 2.0.22 ([#&#8203;12823](https://github.com/apache/maven/pull/12823)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0 ([#&#8203;12825](https://github.com/apache/maven/pull/12825)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump com.google.guava:guava from 33.7.0-jre to 33.7.1-jre ([#&#8203;12796](https://github.com/apache/maven/pull/12796)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.plexus:plexus-utils from 3.6.1 to 3.6.2 ([#&#8203;12795](https://github.com/apache/maven/pull/12795)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.plexus:plexus-testing from 2.1.0 to 2.2.0 ([#&#8203;12794](https://github.com/apache/maven/pull/12794)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.modello:modello-maven-plugin from 2.7.0 to 2.8.0 ([#&#8203;12793](https://github.com/apache/maven/pull/12793)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.plexus:plexus-classworlds from 2.12.0 to 2.12.1 ([#&#8203;12792](https://github.com/apache/maven/pull/12792)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump com.google.guava:guava from 33.6.0-jre to 33.7.0-jre ([#&#8203;12776](https://github.com/apache/maven/pull/12776)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump xmlunitVersion from 2.12.0 to 2.13.0 ([#&#8203;12673](https://github.com/apache/maven/pull/12673)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/setup-java from 5.6.0 to 5.7.0 ([#&#8203;12666](https://github.com/apache/maven/pull/12666)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 ([#&#8203;12496](https://github.com/apache/maven/pull/12496)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Deps: Bump to Eclipse Sisu 1.1.0 ([#&#8203;12547](https://github.com/apache/maven/pull/12547)) [@&#8203;cstamas](https://github.com/cstamas) - Bump resolverVersion from 2.0.21-SNAPSHOT to 2.0.21 ([#&#8203;12545](https://github.com/apache/maven/pull/12545)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump jlineVersion from 3.30.15 to 3.30.16 ([#&#8203;12518](https://github.com/apache/maven/pull/12518)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/checkout from 7.0.0 to 7.0.1 ([#&#8203;12514](https://github.com/apache/maven/pull/12514)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Update to Resolver 2.0.21 ([#&#8203;12504](https://github.com/apache/maven/pull/12504)) [@&#8203;cstamas](https://github.com/cstamas) - Bump actions/setup-java from 5.5.0 to 5.6.0 ([#&#8203;12501](https://github.com/apache/maven/pull/12501)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 ([#&#8203;12495](https://github.com/apache/maven/pull/12495)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/setup-java from 5.4.0 to 5.5.0 ([#&#8203;12439](https://github.com/apache/maven/pull/12439)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ### [`v3.9.16`](https://github.com/apache/maven/releases/tag/maven-3.9.16): 3.9.16 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.15...maven-3.9.16) <!-- Optional: add a release summary here --> #### 🐛 Bug Fixes - Trim `threadConfiguration` to accept input surrounded with spaces ([#&#8203;12042](https://github.com/apache/maven/pull/12042)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Backport: Maven 3.10.x fixed plugin resolution ([#&#8203;12022](https://github.com/apache/maven/pull/12022)) [@&#8203;cstamas](https://github.com/cstamas) #### 📦 Dependency updates - Bump org.codehaus.plexus:plexus-classworlds from 2.9.0 to 2.11.0 ([#&#8203;12039](https://github.com/apache/maven/pull/12039)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - \[3.9.x] Bump to parent POM 48 ([#&#8203;12024](https://github.com/apache/maven/pull/12024)) [@&#8203;cstamas](https://github.com/cstamas) - Bump commons-io:commons-io from 2.21.0 to 2.22.0 ([#&#8203;11980](https://github.com/apache/maven/pull/11980)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre ([#&#8203;11951](https://github.com/apache/maven/pull/11951)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/cache from 5.0.4 to 5.0.5 ([#&#8203;11943](https://github.com/apache/maven/pull/11943)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) </details> --- ### Configuration 📅 **Schedule**: (in timezone America/Toronto) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODguMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE1MS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
anthorob was assigned by renovate-bot 2026-08-24 18:02:01 -04:00
renovate-bot added 1 commit 2026-10-01 05:02:45 -04:00
Update dependency maven to v3.10.0
CI / Package (pull_request) Successful in 43s
Details
CI / Publish Maven Package (pull_request) Has been skipped
Details
CI / Docker Build and Push (pull_request) Has been skipped
Details
72d817cfb9
renovate-bot force-pushed renovate/maven-3.x from d7700d9c74 to 72d817cfb9 2026-10-01 05:02:45 -04:00 Compare
renovate-bot changed title from Update dependency maven to v3.9.16 to Update dependency maven to v3.10.0 2026-10-01 05:02:48 -04:00
renovate-bot changed title from Update dependency maven to v3.10.0 to Update dependency maven to v3.10.0 - autoclosed 2026-10-25 22:05:27 -04:00
renovate-bot closed this pull request 2026-10-25 22:05:27 -04:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
renovate-bot anthorob (anthorob)
No Assignees anthorob
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anthorob/netneutrality#29