Skip to content

build(deps): bump the maven-plugins group across 1 directory with 8 updates - #190

Open
dependabot[bot] wants to merge 1 commit into
lockefrom
dependabot/maven/maven-plugins-1d6f635bce
Open

dependabot[bot] wants to merge 1 commit into
lockefrom
dependabot/maven/maven-plugins-1d6f635bce

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown

Bumps the maven-plugins group with 8 updates in the / directory:

Package From To
org.apache.maven.shared:maven-dependency-analyzer 1.17.1 1.17.2
com.puppycrawl.tools:checkstyle 12.3.1 14.3.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.6 3.6.0
org.apache.maven.plugins:maven-compiler-plugin 3.15.0 3.16.0
org.apache.maven.plugins:maven-jar-plugin 3.5.0 3.5.1
org.codehaus.mojo:flatten-maven-plugin 1.7.3 1.8.0
org.codehaus.mojo:buildnumber-maven-plugin 3.3.0 3.3.1
org.sonatype.central:central-publishing-maven-plugin 0.11.0 0.12.0

Updates org.apache.maven.shared:maven-dependency-analyzer from 1.17.1 to 1.17.2

Release notes

Sourced from org.apache.maven.shared:maven-dependency-analyzer's releases.

1.17.2

🚀 New features and improvements

  • Preserve exact dependency class names containing dollar signs (#296) @​wilx

🐛 Bug Fixes

  • Account for non-test transitive dependency scopes (#294) @​wilx

👻 Maintenance

📦 Dependency updates

Commits
  • 81dbeb8 [maven-release-plugin] prepare release maven-dependency-analyzer-1.17.2
  • 2003eb8 Add project metadata for ATR
  • 8b71df8 Preserve exact dependency class names containing dollar signs (#296)
  • 5afa652 Fix Javadoc warnings
  • 5d2fec3 Account for non-test transitive dependency scopes (#294)
  • 8a4081a Port the index page from APT to Markdown
  • c529f25 Rename the site documents ahead of converting them
  • 8edaab0 Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • f602f12 Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml (#291)
  • 576d06e Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml (#290)
  • Additional commits viewable in compare view

Updates com.puppycrawl.tools:checkstyle from 12.3.1 to 14.3.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-14.3.0

Checkstyle 14.3.0 - https://checkstyle.org/releasenotes.html#Release_14.3.0

New:

#14120 - Make Checkstyle an java module with module-info.java.

checkstyle-14.2.0

Checkstyle 14.2.0 - https://checkstyle.org/releasenotes.html#Release_14.2.0

New:

#19513 - ModifiedOrder: New property modifierOrder. #17723 - WhitespaceAfter: new token SINGLE_LINE_COMMENT to catch missing whitespace checks around // comments. #8312 - NoWhitespaceAfter: Allow for use of DO_WHILE, LITERAL_CATCH, LITERAL_FOR, LITERAL_IF, and LITERAL_WHILE. #17172 - AnnotationLocation new token MODULE_DEF. Google-style: incomplete coverage on annotation rules for modules. #14986 - New Check UnnecessaryPermitsClause. #7541 - new Check: GoolgeRightCurly. #19949 - New check: JavadocSeeTagOrder. #20639 - new Check: OpenjdkMethodThrowsAlignment.

Bug fixes:

#17663 - Indentation: missing violations for '->' and ',' in return statement continuation. #20541 - False Positive: Lambda is incorrectly flaged by OperatorWrap. #21739 - UnusedLocalVariable: false positive on unnamed variable _ inside anonymous class. #21613 - False negative: UnusedTryResourceShouldBeUnnamed treats same-named identifiers in catch/finally blocks as resource usage. #21695 - openjdk style: use custon modifierOrder at RedundantModifier. #21689 - Add GoogleRightCurly to google_checks.xml instead of RightCurly. #10924 - All checks that use AbstractCheck#getLine() should check code points instead of characters for spacing. #21139 - Performance: Avoid duplicate regex match in SuppressFilterElement.isFileMatch. #21528 - Add checks for Sun Style [4.2 - Wrapping Lines]. #21578 - False Negative: LambdaParameterName silently passes lambdas in switch rule. #21579 - False Negative: NeedBraces silently passes lambdas in switch rule. #5895 - CLI XML output file: file stops dead when an execption occurs. #11410 - False Negative: LeftCurlyCheck. #21583 - Update Documentation Comments Style Guide: add JavadocSeeTagOrder. #21609 - NPE in RightCurlyCheck. #19724 - google_checks.xml: JavadocMethod accessModifiers should include protected to match MissingJavadocMethod scope. #20963 - False negative in LeftCurly for types with option=eol. #21547 - add OpenjdkMethodThrowsAlignment check in openjdk_checks.xml. #20636 - False negatives regarding LeftCurly in openjdk_checks.xml. #17170 - Google-style: unfollowed rule on ordering and spacing of module directives. #21454 - google_checks.xml: false negative 4.3 One statement per line. #21501 - CommonUtil.getFileExtension includes parent-directory dots in the extension. #21445 - google_checks.xml: false negative 3.3.1.1 No module imports. #21477 - Add checks for Sun Style [4.1 - Line Length]. #21444 - google_checks.xml: false negative 3.2 Package declaration.

... (truncated)

Commits
  • bc58fc6 [maven-release-plugin] prepare release checkstyle-14.3.0
  • 5711c72 doc: release notes for 14.3.0
  • 4b8a5b3 minor: Bump version to 14.3.0-SNAPSHOT
  • a93f8f2 Issue #14120: add module-info.java to make Checkstyle an explicit Java module
  • 9e3482f [maven-release-plugin] prepare for next development iteration
  • 6a200bc [maven-release-plugin] prepare release checkstyle-14.2.0
  • 2d2b135 doc: release notes for 14.2.0
  • 194e7a2 Issue #20590: Improve Input coverage for compact sources for SuperCloneCheck
  • 123f477 Issue #17663: Indentation: missing violations for '->' and ',' in return stat...
  • 4b2f353 Issue #20541: fix OperatorWrap false positive for lambda with block body
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 0ff622b [maven-release-plugin] prepare release surefire-3.6.0
  • bb3932a Let's go for 3.6.0 release
  • 3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
  • 61a531d Bump Maven parent version from 47 to 49 (#3449)
  • e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
  • 45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @​Nested classes (#3447)
  • b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
  • c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
  • db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
  • 77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
  • c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
  • ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
  • beb0eda Recompile when dependencies change (#1102)
  • a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
  • 2e81228 Fix incremental detection of empty sources, 3.x (#1075)
  • 2132f5b configure ATR project
  • 5992b77 Build fails when annotation processor list is empty (but present) (#1077)
  • acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
  • 72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.1

📝 Documentation updates

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk

👻 Maintenance

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk
  • Use plugin version properties (3.x) (#535) @​Bukama

📦 Dependency updates

Commits
  • b0cd63d [maven-release-plugin] prepare release maven-jar-plugin-3.5.1
  • 5318a4f Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability
  • 8e0b9bb Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547)
  • d5a438b Fix javadoc
  • 774fac9 Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0
  • b71f403 Bump mavenVersion from 3.9.15 to 3.9.16 (#536)
  • 9f2a001 Use plugin version properties (3.x) (#535)
  • 68a978f Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534)
  • e105821 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529)
  • 953dc1a Bump mavenVersion from 3.9.14 to 3.9.15 (#528)
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:flatten-maven-plugin from 1.7.3 to 1.8.0

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.8.0

🚀 New features and improvements

🐛 Bug Fixes

🔧 Build

📦 Dependency updates

Commits
  • 1b21193 [maven-release-plugin] prepare release 1.8.0
  • f693210 Add PR automation workflow to GitHub Actions
  • cff2c4f Document revisionVariableName parameter with @since 1.8.0 tag
  • f18a67d Fix for #408, ensure nested dependency exclusions aren't overrided (#485)
  • 35396b6 Bump mavenVersion from 3.9.15 to 3.9.16
  • f78e07e Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • 25f849e Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml
  • 5fcc98f Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml
  • 4bd9eda Bump org.codehaus.mojo:mojo-parent from 96 to 97
  • 7bacd0e Fix for Maven 3.10.x (#517)
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:buildnumber-maven-plugin from 3.3.0 to 3.3.1

Release notes

Sourced from org.codehaus.mojo:buildnumber-maven-plugin's releases.

3.3.1

📦 Dependency updates

Commits
  • ca6350c [maven-release-plugin] prepare release buildnumber-maven-plugin-3.3.1
  • f473c17 Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0
  • 3403ebe Bump release-drafter/release-drafter from 7.6.0 to 7.7.0
  • b98bcaf Bump actions/stale from 10 to 11
  • fa57d5e Bump release-drafter/release-drafter from 7 to 7.6.0
  • 2e3146b Bump org.codehaus.mojo:mojo-parent from 96 to 97
  • fb6ec9b Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml
  • bb5007d Bump org.apache.maven:apache-maven from 3.9.15 to 3.9.16
  • bab066f Bump com.google.code.gson:gson from 2.13.2 to 2.14.0
  • 9c75c86 Bump org.apache.maven:apache-maven from 3.9.14 to 3.9.15
  • Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.11.0 to 0.12.0

Release notes

Sourced from org.sonatype.central:central-publishing-maven-plugin's releases.

release-0.12.0

What's Changed

Full Changelog: sonatype-nexus-community/central-publishing-maven-plugin@release-0.11.1...release-0.12.0

0.11.1

This is the same source as for release 0.11.0, but now open-sourced under Apache-2.0 license.

Full Changelog: https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.11.1

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
com.puppycrawl.tools:checkstyle [>= 13.a0, < 14]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates

Bumps the maven-plugins group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache.maven.shared:maven-dependency-analyzer](https://github.com/apache/maven-dependency-analyzer) | `1.17.1` | `1.17.2` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `12.3.1` | `14.3.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.15.0` | `3.16.0` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.5.0` | `3.5.1` |
| [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.7.3` | `1.8.0` |
| [org.codehaus.mojo:buildnumber-maven-plugin](https://github.com/mojohaus/buildnumber-maven-plugin) | `3.3.0` | `3.3.1` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin) | `0.11.0` | `0.12.0` |



Updates `org.apache.maven.shared:maven-dependency-analyzer` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/apache/maven-dependency-analyzer/releases)
- [Commits](apache/maven-dependency-analyzer@maven-dependency-analyzer-1.17.1...maven-dependency-analyzer-1.17.2)

Updates `com.puppycrawl.tools:checkstyle` from 12.3.1 to 14.3.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-12.3.1...checkstyle-14.3.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1)

Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.7.3 to 1.8.0
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.7.3...1.8.0)

Updates `org.codehaus.mojo:buildnumber-maven-plugin` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/mojohaus/buildnumber-maven-plugin/releases)
- [Commits](mojohaus/buildnumber-maven-plugin@buildnumber-maven-plugin-3.3.0...buildnumber-maven-plugin-3.3.1)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/releases)
- [Commits](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.12.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.shared:maven-dependency-analyzer
  dependency-version: 1.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-plugins
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 14.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-plugins
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-plugins
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-plugins
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-plugins
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-plugins
- dependency-name: org.codehaus.mojo:buildnumber-maven-plugin
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-plugins
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-plugins
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants