)]}'
{
  "commit": "fcba1b0345faed30621863af85a102c6d2fc1362",
  "tree": "30a9ef53c94159763b8c11d91dc1adc0cc57d7f7",
  "parents": [
    "301d3d8f889d3e4d1f45fc6e1707460ae5baaeb4"
  ],
  "author": {
    "name": "dependabot[bot]",
    "email": "49699333+dependabot[bot]@users.noreply.github.com",
    "time": "Wed Jul 01 07:51:48 2026 +0200"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Wed Jul 01 07:51:48 2026 +0200"
  },
  "message": "MINOR: Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 (#1198)\n\nBumps\n[org.cyclonedx:cyclonedx-maven-plugin](https://github.com/CycloneDX/cyclonedx-maven-plugin)\nfrom 2.9.1 to 2.9.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/releases\"\u003eorg.cyclonedx:cyclonedx-maven-plugin\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.9.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: upgrade maven-dependency-analyzer/asm, support Java 25 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/630\"\u003e#630\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/shihyuho\"\u003e\u003ccode\u003e@​shihyuho\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📦 Dependency updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump commons-codec:commons-codec from 1.17.1 to 1.22.0 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/650\"\u003e#650\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.commons:commons-lang3 from 3.17.0 to 3.19.0 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/622\"\u003e#622\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: upgrade maven-dependency-analyzer/asm, support Java 25 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/630\"\u003e#630\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/shihyuho\"\u003e\u003ccode\u003e@​shihyuho\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🔧 Build\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eupdate scm urls (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/662\"\u003e#662\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eswitch to Central Publishing Portal (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/659\"\u003e#659\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-project-info-reports-plugin from\n3.8.0 to 3.9.0 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/655\"\u003e#655\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump plugin-tools.version from 3.15.0 to 3.15.2 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/654\"\u003e#654\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump io.takari.maven.plugins:takari-plugin-integration-testing from\n3.0.1 to 3.1.1 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/616\"\u003e#616\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-invoker-plugin from 3.7.0 to\n3.9.1 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/617\"\u003e#617\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump io.takari.maven.plugins:takari-plugin-testing from 3.0.0 to\n3.1.1 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/618\"\u003e#618\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to\n3.14.1 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/621\"\u003e#621\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 6.0.1 to 6.0.2 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/639\"\u003e#639\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/setup-java from 4 to 5 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/620\"\u003e#620\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003euse shields.io badge (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/648\"\u003e#648\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 6.0.0 to 6.0.1 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/635\"\u003e#635\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 4.2.2 to 6.0.0 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/633\"\u003e#633\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: GH workflow permissions (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/606\"\u003e#606\u003c/a\u003e)\n\u003ca\nhref\u003d\"https://github.com/jkowalleck\"\u003e\u003ccode\u003e@​jkowalleck\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esimplify compiler release configuration (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/518\"\u003e#518\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump JamesIves/github-pages-deploy-action from 4.7.1 to 4.7.3 (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/590\"\u003e#590\u003c/a\u003e)\n@\u003ca href\u003d\"https://github.com/apps/dependabot\"\u003edependabot[bot]\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupgrade to Doxia 2: m-site-p and skin (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/593\"\u003e#593\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eadd Reproducible Central report (\u003ca\nhref\u003d\"https://redirect.github.com/CycloneDX/cyclonedx-maven-plugin/pull/592\"\u003e#592\u003c/a\u003e)\n\u003ca href\u003d\"https://github.com/hboutemy\"\u003e\u003ccode\u003e@​hboutemy\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/0fe189d0cd2c80acb1f518e53fbb703456e6534a\"\u003e\u003ccode\u003e0fe189d\u003c/code\u003e\u003c/a\u003e\n[maven-release-plugin] prepare release cyclonedx-maven-plugin-2.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/96c218c71646aa987d5778b9f0f035f40ff45239\"\u003e\u003ccode\u003e96c218c\u003c/code\u003e\u003c/a\u003e\nupdate scm urls\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/0fe08b4215263965690c0a0a022c1fdbc396cad8\"\u003e\u003ccode\u003e0fe08b4\u003c/code\u003e\u003c/a\u003e\nRevert \u0026quot;Bump JamesIves/github-pages-deploy-action from 4.7.3 to\n4.8.0\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/6779e48e4108e5c1881109f39ebda293311ec591\"\u003e\u003ccode\u003e6779e48\u003c/code\u003e\u003c/a\u003e\nRevert \u0026quot;Bump release-drafter/release-drafter from 6 to 7\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/955fead7657740f51b738de11961d4c1eb233bb3\"\u003e\u003ccode\u003e955fead\u003c/code\u003e\u003c/a\u003e\nswitch to Central Publishing Portal\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/50dbac7e4cd969764e2bfb8e971b0fcf5fcbebba\"\u003e\u003ccode\u003e50dbac7\u003c/code\u003e\u003c/a\u003e\nBump release-drafter/release-drafter from 6 to 7\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/d50bc582155e15a6a1560edab0f1e94d019601e1\"\u003e\u003ccode\u003ed50bc58\u003c/code\u003e\u003c/a\u003e\nBump org.apache.maven.plugins:maven-project-info-reports-plugin\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/1034644886969032df5552fd4132102baeca40c8\"\u003e\u003ccode\u003e1034644\u003c/code\u003e\u003c/a\u003e\nBump plugin-tools.version from 3.15.0 to 3.15.2\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/018ab8e4fdf3b73049497a76bea952983b88389f\"\u003e\u003ccode\u003e018ab8e\u003c/code\u003e\u003c/a\u003e\nBump commons-codec:commons-codec from 1.17.1 to 1.22.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/commit/e3597051e8c6eb694e9ccd044b9b5a0829166add\"\u003e\u003ccode\u003ee359705\u003c/code\u003e\u003c/a\u003e\nBump JamesIves/github-pages-deploy-action from 4.7.3 to 4.8.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/CycloneDX/cyclonedx-maven-plugin/compare/cyclonedx-maven-plugin-2.9.1...cyclonedx-maven-plugin-2.9.2\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dorg.cyclonedx:cyclonedx-maven-plugin\u0026package-manager\u003dmaven\u0026previous-version\u003d2.9.1\u0026new-version\u003d2.9.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c39eafc209b0a527a4fba6ab3665225f6fb99390",
      "old_mode": 33188,
      "old_path": "pom.xml",
      "new_id": "6a97ac46208ab3730b597eef9ad50f986dd284e2",
      "new_mode": 33188,
      "new_path": "pom.xml"
    }
  ]
}