)]}' { "log": [ { "commit": "82a1b98ccbe95a5732bae1734f11535944238cc8", "tree": "dbd3714f15e1ad881959e33b2263aea1f6e361f8", "parents": [ "606fee8b19d374f2a88b90c4da131d3bb3c05be5" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Sep 09 21:23:56 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 10 12:38:42 2026 +0200" }, "message": "Implement getOutputPath() and deprecate getOutputName()\n\nMaven Reporting API 4.0.0 keeps getOutputName() abstract, so it cannot simply\nbe renamed: it stays, deprecated, delegating to the new method. Do not collapse\nthe pair until the API drops getOutputName().\n" }, { "commit": "606fee8b19d374f2a88b90c4da131d3bb3c05be5", "tree": "fbc5fe5468d9101c0cfa67fc90d8831f0844801e", "parents": [ "acf804ad577ac5916013bb50fc1e73433269f279" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Aug 31 22:02:57 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 13:42:27 2026 +0200" }, "message": "Bump org.jsoup:jsoup from 1.23.1 to 1.23.2\n\nBumps [org.jsoup:jsoup](https://github.com/jhy/jsoup) from 1.23.1 to 1.23.2.\n- [Release notes](https://github.com/jhy/jsoup/releases)\n- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)\n- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.23.1...jsoup-1.23.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.jsoup:jsoup\n dependency-version: 1.23.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "acf804ad577ac5916013bb50fc1e73433269f279", "tree": "62e205f02c8fcc8d2074ba46e4869680ed9f61aa", "parents": [ "93c1c7325710caf11ed5e02d74bc74602cc89b43" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Aug 25 07:38:07 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 25 07:38:07 2026 +0200" }, "message": "Bump org.codehaus.plexus:plexus-i18n from 1.1.0 to 1.2.0 (#1687)\n\nBumps [org.codehaus.plexus:plexus-i18n](https://github.com/codehaus-plexus/plexus-i18n) from 1.1.0 to 1.2.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-i18n/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-i18n/compare/plexus-i18n-1.1.0...plexus-i18n-1.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-i18n\n dependency-version: 1.2.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "93c1c7325710caf11ed5e02d74bc74602cc89b43", "tree": "9d64d3cf1dda6dcbe9e8dee89b5cfdc528ec1223", "parents": [ "45cb99fa14349119840efbb0902699e71329f3eb" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Aug 25 07:37:59 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 25 07:37:59 2026 +0200" }, "message": "Bump org.codehaus.plexus:plexus-io from 3.6.0 to 3.7.0 (#1688)\n\nBumps [org.codehaus.plexus:plexus-io](https://github.com/codehaus-plexus/plexus-io) from 3.6.0 to 3.7.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-io/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-io/compare/plexus-io-3.6.0...plexus-io-3.7.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-io\n dependency-version: 3.7.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "45cb99fa14349119840efbb0902699e71329f3eb", "tree": "c2508ef79d60cabb65a496fd8005f4fad5a02ad5", "parents": [ "d8a43d37ddccd65ae255da0e0a910d949838d102" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 23 15:22:57 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 23 20:48:34 2026 +0200" }, "message": "Bump org.codehaus.plexus:plexus-archiver from 4.12.0 to 4.14.0\n\nBumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.12.0 to 4.14.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.12.0...plexus-archiver-4.14.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-archiver\n dependency-version: 4.14.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n..." }, { "commit": "d8a43d37ddccd65ae255da0e0a910d949838d102", "tree": "da1b7dc811777075f07fd1372daf09248ff859c7", "parents": [ "5a8609af7618e58f173fca4da2c170cc5ff5bc0c" ], "author": { "name": "Vaclav Haisman", "email": "vhaisman@gmail.com", "time": "Mon Aug 10 00:24:46 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 21 22:34:29 2026 +0200" }, "message": "[MDEP-858] Preserve artifact coordinate fallbacks\n\nUse separately configured packaging and classifier values when the artifact string omits those segments. Keep packaging and classifier values from explicit artifact coordinates at higher precedence.\n\nFixes #1355.\n" }, { "commit": "5a8609af7618e58f173fca4da2c170cc5ff5bc0c", "tree": "e41a27dd79444ebe0cc5edd700299e80c51c09fc", "parents": [ "31f27dfee17bdc72083c8ed773f516ceed9011d9" ], "author": { "name": "Vaclav Haisman", "email": "vhaisman@gmail.com", "time": "Sun Aug 09 23:29:27 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 21 22:34:29 2026 +0200" }, "message": "[MDEP-858] Preserve get repository refresh policy\n\nKeep dependency:get compatible with its historical behavior by applying the always-update policy to user-supplied repositories. Leave the existing session-controlled policy available to other ResolverUtil callers.\n\nFixes #1355.\n" }, { "commit": "31f27dfee17bdc72083c8ed773f516ceed9011d9", "tree": "68a1ad2c745b8d8eb03a6d62e9ef1bcacd42ced8", "parents": [ "3d65dcba2bc7a2e0d1591ff8102875ace26a0324" ], "author": { "name": "Vaclav Haisman", "email": "vhaisman@gmail.com", "time": "Sun Aug 02 11:35:03 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 21 22:34:29 2026 +0200" }, "message": "[MDEP-858] Remove Maven Artifact Transfer dependency\n\nDrop the unused DependableCoordinate interface from ArtifactItem and remove the now-unused Maven Artifact Transfer dependency. Keep the artifact configuration getters unchanged.\n\nFixes #1355.\n" }, { "commit": "3d65dcba2bc7a2e0d1591ff8102875ace26a0324", "tree": "395846de6225846d16e8cec9c2fff55a4ccdc02f", "parents": [ "3d22929cbebf0799dfc42076018505a3d75deb65" ], "author": { "name": "Vaclav Haisman", "email": "vhaisman@gmail.com", "time": "Sun Aug 02 11:13:51 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 21 22:34:29 2026 +0200" }, "message": "[MDEP-858] Migrate dependency:purge-local-repository to Maven Resolver\n\nReplace the Maven Artifact Transfer resolvers while preserving dependency filtering, fallback resolution, and aggregated failure reporting. Re-resolve each artifact once because Resolver descriptor resolution also restores its POM.\n\nFixes #1355.\n" }, { "commit": "3d22929cbebf0799dfc42076018505a3d75deb65", "tree": "5fa8ce94681779d123fe1b7348c30e91ada067f4", "parents": [ "5e03fd8962ab3f97e3299f91ab39fc42f6f33883" ], "author": { "name": "Vaclav Haisman", "email": "vhaisman@gmail.com", "time": "Sun Aug 02 10:30:56 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 21 22:34:29 2026 +0200" }, "message": "[MDEP-858] Migrate dependency:copy-dependencies installation to Maven Resolver\n\nReplace Maven Artifact Transfer installation used by dependency:copy-dependencies in the repository-layout path while preserving Maven local-repository metadata, copied POMs, and snapshot behavior.\n\nFixes #1355.\n" }, { "commit": "5e03fd8962ab3f97e3299f91ab39fc42f6f33883", "tree": "da99c86c61cce8e8bc2a18c78f20da352840ba6a", "parents": [ "1108aba3c5b66e1709d39ac205587aff6c1e4157" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 23:40:15 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 23:51:25 2026 +0200" }, "message": "Use a MojoExecutionException constructor that exists in Maven 3.6.3\n\nMojoExecutionException(Throwable) arrived in Maven 3.9.0, so on the version\n\u003cprerequisites\u003e declares this branch raised NoSuchMethodError instead of the\nexception it meant to throw. Do not collapse it back to the single-argument\nform while the declared prerequisite is still 3.6.3.\n\nThe message follows the sibling catch a few lines below, which already names\nthe file it failed on.\n\nVerified: mvn -DmavenVersion\u003d3.6.3 clean test-compile -\u003e BUILD SUCCESS, and\nfails to compile without this change.\n\nFixes #1682\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "1108aba3c5b66e1709d39ac205587aff6c1e4157", "tree": "46b709abf632efb523b6c0ef714eac1beecf4309", "parents": [ "db75574318f504dd96f01294a5055a52bee93a3f" ], "author": { "name": "Bruno Borges", "email": "brborges@microsoft.com", "time": "Tue Aug 04 16:48:52 2026 -0400" }, "committer": { "name": "Gerd Aschemann", "email": "github@aschemann.net", "time": "Mon Aug 10 21:46:34 2026 +0200" }, "message": "Fix ResolverUtilTest closing brace\n\nCo-authored-by: Copilot App \u003c223556219+Copilot@users.noreply.github.com\u003e\n\nCopilot-Session: 32540765-8b96-4d21-aafb-e09cc896cd8f\n" }, { "commit": "db75574318f504dd96f01294a5055a52bee93a3f", "tree": "7ba7a7664bca3cb5791be66ee0ddbb921e20f79a", "parents": [ "7e18284553a1cc866acee0683c95224450654946" ], "author": { "name": "Bruno Borges", "email": "bruno.borges@gmail.com", "time": "Fri Jul 17 23:38:10 2026 -0400" }, "committer": { "name": "Gerd Aschemann", "email": "github@aschemann.net", "time": "Mon Aug 10 21:46:34 2026 +0200" }, "message": "Apply suggestions from code review\n\nCo-authored-by: Copilot Autofix powered by AI \u003c175728472+Copilot@users.noreply.github.com\u003e" }, { "commit": "7e18284553a1cc866acee0683c95224450654946", "tree": "2e899e7cd44ac200b7cc825c30aba8121fb031fc", "parents": [ "bd4fd90c7a7d0b4eac57772f1c0c98a93ef84bdb" ], "author": { "name": "Bruno Borges", "email": "brborges@microsoft.com", "time": "Wed Jul 15 14:35:49 2026 -0400" }, "committer": { "name": "Gerd Aschemann", "email": "github@aschemann.net", "time": "Mon Aug 10 21:46:34 2026 +0200" }, "message": "Fix copy and unpack with broken artifact parents\n\nPreserve descriptor-based relocation while falling back to direct artifact resolution when an artifact descriptor cannot be read.\n\nCo-authored-by: Copilot App \u003c223556219+Copilot@users.noreply.github.com\u003e\n\nCopilot-Session: 32540765-8b96-4d21-aafb-e09cc896cd8f\n" }, { "commit": "bd4fd90c7a7d0b4eac57772f1c0c98a93ef84bdb", "tree": "281891390359cdbd76ada19090224437f7123e90", "parents": [ "2aa3e82c0f835f9633ebccf91dd736bc02d0c8b7" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 01:58:02 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 02:52:34 2026 +0200" }, "message": "Convert the FAQ from FML to Markdown\n\ndoxia-converter cannot target FML usefully - the questions come out as\nlink-reference syntax rather than headings, the [top] back-links become\nlinks to a nonexistent \u0027top\u0027 page, and the contents links lose their #\nanchors. The page is written out by hand instead.\n\nFive of the six ids are valid XML names and are served unchanged: #cli,\n#missing, #question, #includes and #unused. The sixth, \u003cfaq id\u003d\"plugin\nname\"\u003e, is not, so DoxiaUtils.encodeId serves it as #plugin_name. The\n\u003ca id\u003e elements written here reproduce the rendered forms, not the\nraw attributes, so the live deep links still resolve.\n\nVerified by building the site before and after and comparing the set of\nanchors the generated faq.html actually serves. Every anchor present\nbefore is still present after, and the \u003chead\u003e is byte-identical, so the\ntitle and metadata are unchanged.\n\nsite.xml needs no edit: src/site/fml/faq.fml and\nsrc/site/markdown/faq.md both render to faq.html, so the menu entry and\nthe link from index.md keep working.\n\nOne broken outbound link is corrected while the page is being\nrewritten. The cli answer pointed at examples/copying-artifacts.html\n#Copying From the Command Line. Doxia encodes the fragment, so the live\npage serves #Copying_From_the_Command_Line - but copying-artifacts.md.vm\ngenerates #Copying_from_the_command_line, lower case. The capitalised\nform has therefore never resolved. The link now uses the anchor the\ntarget page actually has.\n\nFML generates a [top] back-link after each answer; those are dropped\nrather than hand-written. The question becomes an h3 heading instead of\na definition term. The \u003cpre\u003e block in the cli answer becomes a fenced\ncode block. Nothing else on the page changes.\n\nThe anchors are written as \u003ca id\u003d\"...\"\u003e, not \u003ca name\u003d\"...\"\u003e.\nmaven-site-plugin 3.21.0 strips the name attribute from inline HTML, which\nwould silently delete every anchor on the page while the build stays green;\n3.22.0 keeps it. Xhtml5BaseParser reads Attribute.ID first and only falls\nback to NAME, so id\u003d is the primary path rather than a workaround, and name\non \u003ca\u003e is obsolete in HTML5. Each anchor is kept on its own line: folding one\ninto the heading text suppresses the section\u0027s own generated id.\n\nStraight double quotes in prose are written as \u0026quot;. flexmark\u0027s\nsmart-punctuation would otherwise turn them into typographic quotes, which\nchanges the visible text against what FML rendered - XML has no such\nrewriting. Quotes inside code spans and fenced blocks are left alone.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "2aa3e82c0f835f9633ebccf91dd736bc02d0c8b7", "tree": "0471a45a827656e4d110291bbfc7dd1537bb2f9a", "parents": [ "933c220cd0345ac2f1fdf04eeac2a24d8170ef42" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 01:58:02 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 02:52:34 2026 +0200" }, "message": "Rename the FAQ ahead of converting it\n\nGit records a rename plus a rewrite in one commit as a delete and an\nadd, which stops \u0027git log --follow\u0027. Splitting the rename out keeps the\nhistory. Please merge or rebase rather than squash.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "933c220cd0345ac2f1fdf04eeac2a24d8170ef42", "tree": "58c2350eb58e75288edd19df426532037e2d40ef", "parents": [ "b70b5d181afd56bef900e983d26d767d724afff4" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 09 21:35:51 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 02:51:52 2026 +0200" }, "message": "Drop the maven-compat test dependency\n\nNothing needs LegacyRepositorySystem any more: the get goal stopped using\norg.apache.maven.repository.RepositorySystem in the previous commit, and that\ninterface\u0027s only implementation is the one maven-compat supplies.\n\nThe one other thing the plugin took from maven-compat is\nSnapshotArtifactRepositoryMetadata, copied here into the test tree rather than\ndeleting its two usages. TestCopyDependenciesMojo2.assertArtifactExists\niterates artifact.getMetadataList() and asserts a file exists, so dropping the\nattachment would leave that loop empty and silently remove the check. The whole\nhierarchy above the class is in maven-core and only the leaf is compat-only.\nSame approach as MPLUGIN-384.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "b70b5d181afd56bef900e983d26d767d724afff4", "tree": "d63108064577ff557aa89c1e7dfbc8c58b7e38ae", "parents": [ "163074725130cbc29b3806cc2ad179592c4090d4" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 01:35:27 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 01:57:32 2026 +0200" }, "message": "Prove the comma-separated remoteRepositories form still works\n\nReview raised that turning remoteRepositories from a comma-separated String\ninto a List\u003cString\u003e could leave \"-DremoteRepositories\u003da,b\" arriving as a single\nelement that still contains the comma. The existing unit test only ruled that\nout implicitly -- such an element would split on \"::\" into five tokens and\nthrow -- so make it explicit and cover the paths a user actually goes through.\n\ntestRemoteRepositories now asserts the injected field holds one element per\nrepository rather than only executing the mojo.\n\nTwo integration tests cover real Maven, one per binding path: a user property\n(get-remote-repositories) and the text of a single \u003cremoteRepositories\u003e element\nin a POM (get-remote-repositories-pom-config), which is how the parameter was\nwritten while it was a String. Both name two repositories in one comma\nseparated value and use both accepted forms, id::layout::url and id::url. The\nmrm mirror matches \"*\", so the .invalid hosts are never contacted; collapsing\nthe value into one element instead fails the goal with \"Invalid repository\",\nwhich is what makes these tests worth having.\n\nAlso document the per-element POM form on the parameter itself.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "163074725130cbc29b3806cc2ad179592c4090d4", "tree": "f6784d4fefbf41ad297106306ec74e660cca76ed", "parents": [ "145ff530f276352acd2010db5feeff55d6634636" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 09 21:53:57 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 01:57:32 2026 +0200" }, "message": "Keep the get goal\u0027s argument handling as strict as it was\n\nTwo gaps in ResolverUtil that the previous commit would otherwise expose to\nusers of the get goal, because parseRepository and the mojo\u0027s own token check\nused to cover them:\n\nRepository specs were not trimmed. parseRepository trimmed the id, layout and\nurl it took from the regex, so\n\n -DremoteRepositories\u003d\"repo1::https://a, repo2::https://b\"\n\nworked. The converter that turns that property into a List\u003cString\u003e splits on\n\",\" without trimming, so the second element arrives as \" repo2::https://b\" and\nthe repository is registered under the id \" repo2\" -- a \u003cserver\u003e entry for\nrepo2 then no longer matches it and the credentials are silently not applied.\n\nAn artifact string with more than five tokens was rejected; ResolverUtil only\nchecked for fewer than three. -Dartifact\u003dg:a:v:jar:c:junk went from a failure\nnaming the expected format to silently ignoring the tail.\n\nBoth live in shared code, so list-classes gets the same fix.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "145ff530f276352acd2010db5feeff55d6634636", "tree": "b1e2fe615ee26a6e113ebdde51af3bf139910cdd", "parents": [ "61270997903675f260da275993214635994d329f" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 09 21:34:52 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 01:57:32 2026 +0200" }, "message": "[MDEP-858] Get rid of maven-artifact-transfer from the get goal\n\nResolve through ResolverUtil, the way list-classes has since MDEP-924.\n\nResolverUtil.remoteRepositories() parses the same id::layout::url syntax into\nResolver\u0027s RemoteRepository and passes the result to\nRepositorySystem.newResolutionRepositories(), which applies the session\u0027s\nmirror, proxy and authentication selectors. That is the supported replacement\nfor the legacy injectMirror/injectProxy/injectAuthentication calls on\norg.apache.maven.repository.RepositorySystem -- and the same selectors Resolver\nconsults when it performs the transfer.\n\nDoing so drops the goal\u0027s use of maven-artifact-transfer along with the\ndeprecated Maven 3 repository model: ArtifactRepository,\nMavenArtifactRepository, ArtifactRepositoryPolicy, ArtifactRepositoryLayout and\nProjectBuildingRequest. GetMojo now compiles without a deprecation warning.\nmaven-artifact-transfer stays in the pom; purge-local-repository,\ncopy-dependencies and ArtifactItem still use it.\n\nThree visible consequences, all shared with list-classes: remoteRepositories\nbecomes a List\u003cString\u003e rather than a comma-separated String, the repository\nsyntax accepts id::url and no longer rejects an unknown layout id, and extra\nrepositories follow the session\u0027s update policy rather than being forced to\nalways.\n\nThe proxy and credential tests keep working unchanged in substance -- they now\npopulate the repository session\u0027s selectors rather than only the Settings,\nbecause that is where the selection now reads from. testParseRepository goes\naway with parseRepository; ResolverUtilTest covers the same syntax, and two\ntests replace the argument validation that stayed in the mojo.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "61270997903675f260da275993214635994d329f", "tree": "ab5d2fe5de2dad4e1b0f2bbabde4f7729e313077", "parents": [ "96ddff06196545aa62eb401ce54556cb8be453d9" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 09 21:32:55 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 09 22:21:07 2026 +0200" }, "message": "Make the get goal\u0027s repository tests capable of failing\n\ntestRemoteRepositoriesAuthentication was not testing anything. Once any run has\nresolved test:test:1.0, it persists in the local repository the tests share\nunder target/test-classes/unit/get-test/target/local-repo, so on any subsequent\nrun without a clean the artifact is served from there and the test passes even\nwith GetMojo\u0027s injectAuthentication call deleted outright.\n\nResolve into a @TempDir local repository instead, so the assertion depends on\nthe transfer actually happening, and cover the two paths that had no test at\nall: an active proxy from the settings must be applied to the repositories\nnamed by remoteRepositories, and nonProxyHosts must exclude a repository from\nit. The proxy points at a name in a reserved TLD that cannot resolve, so\napplying it is always observable, and the test asserts the failure mentions\nthat host -- it cannot pass because the artifact was missing or the login was\nrejected.\n\nThe nonProxyHosts test asserts a success, so it only distinguishes \"honoured\"\nfrom \"proxies never applied\" when read together with the proxy test; that is\nnoted on it so the pair is not split up later.\n\nWith this in place, deleting the three inject calls from GetMojo fails all\nthree tests.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "96ddff06196545aa62eb401ce54556cb8be453d9", "tree": "061a995f735733e08388fe8c97dd553d3a49ba98", "parents": [ "6ef6e3517f42fe8628102fd266d4c1c90b0ef817" ], "author": { "name": "Vaclav Haisman", "email": "vhaisman@gmail.com", "time": "Sun Aug 02 14:38:33 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 09 20:01:13 2026 +0200" }, "message": "Remove unreachable null check from BuildClasspathMojo\n\nRely on getResolvedDependencies(boolean) to return a non-null set while retaining the existing empty-set handling.\n\nFixes #1648.\n" }, { "commit": "6ef6e3517f42fe8628102fd266d4c1c90b0ef817", "tree": "407ec9aabc04ce9b1152c89e664a0b15320ab205", "parents": [ "919074c6f490d8617a00fb5d1886f3c86a1e9466" ], "author": { "name": "Vaclav Haisman", "email": "vhaisman@gmail.com", "time": "Sun Aug 02 12:07:33 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 09 19:38:26 2026 +0200" }, "message": "[MDEP-870] Overwrite copied artifact POMs\n\nWhen dependency:copy-dependencies copies an artifact, also overwrite its associated POM so version-stripped output cannot mix versions. Preserve copy-only-if-missing behavior for artifacts skipped by the overwrite policy.\n\nFixes #1370\n" }, { "commit": "919074c6f490d8617a00fb5d1886f3c86a1e9466", "tree": "65b0887f7725aafdecdf9623801fde6968defdf5", "parents": [ "645f3102fd6842eadf87e40423e1dc9581ef3193" ], "author": { "name": "Vaclav Haisman", "email": "vhaisman@gmail.com", "time": "Sun Aug 02 20:24:27 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 23:19:13 2026 +0200" }, "message": "[MDEP-425] List plugin repositories\n\nShow effective plugin repositories in a separate, mirror-aware section of the list-repositories output. Extend the existing integration test to cover the new section.\n\nFixes #868.\n" }, { "commit": "645f3102fd6842eadf87e40423e1dc9581ef3193", "tree": "7a667048b8149e2ef325d223a32fd547e96d3168", "parents": [ "6fd8522a5d1b5e6e884f3f2b5e84256ccb0fa78d" ], "author": { "name": "Vaclav Haisman", "email": "vhaisman@gmail.com", "time": "Sun Aug 02 21:51:05 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 23:17:51 2026 +0200" }, "message": "[MDEP-927] Make dependency:tree excludes prune subtrees\n\nFixes #1427\n\nFixes #1334\n" }, { "commit": "6fd8522a5d1b5e6e884f3f2b5e84256ccb0fa78d", "tree": "5c15923ce3d0170b8d0674cefda29cf1b87b0c10", "parents": [ "4b36dbd5908e9a4d3a48d4be4d9dcb3f3ab68ab3" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Aug 08 07:43:52 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 19:33:14 2026 +0200" }, "message": "Bump org.jsoup:jsoup\n\nBumps [org.jsoup:jsoup](https://github.com/jhy/jsoup) from 1.15.3 to 1.23.1.\n- [Release notes](https://github.com/jhy/jsoup/releases)\n- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)\n- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.15.3...jsoup-1.23.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.jsoup:jsoup\n dependency-version: 1.23.1\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "4b36dbd5908e9a4d3a48d4be4d9dcb3f3ab68ab3", "tree": "45000889dc12f0f37d1c4f2133998788ac24dedd", "parents": [ "5c174eb123437182c6dd69a0bfe5cb997ccf6362" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 11:41:10 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 16:18:24 2026 +0200" }, "message": "Restore the document metadata dropped when the pages were ported\n\nAn APT document opens with a header block giving its title, authors and date, and\ndoxia-converter turns that into YAML front matter. The port removed the front\nmatter along with the converter\u0027s per-line licence comments, so the generated\npages lost their author and date meta tags, and took their title from the first\nheading rather than from the document title.\n\nThe front matter has to come first in the file: the Markdown parser only looks for\nit when the source begins with \"---\". A licence header ahead of it would hide it,\nand RAT is happy either way.\n" }, { "commit": "5c174eb123437182c6dd69a0bfe5cb997ccf6362", "tree": "431b96d2a53710093ad1d0eb5d46e15bf741461a", "parents": [ "6e61d56208c3fd8bc889dad5d7f17f8bb7007504" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Aug 06 13:53:04 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Aug 06 19:23:18 2026 +0200" }, "message": "Port the site documentation from APT to Markdown\n\n15 page(s) converted with doxia-converter and then cleaned up by hand:\n\n- \u003c\u003c\u003ccode\u003e\u003e\u003e becomes backticks, \u003c\u003cbold\u003e\u003e becomes **bold**, {{{url}text}}\n becomes [text](url)\n- the ASF license header becomes a single block HTML comment\n- a page whose only Velocity reference was ${project.name} is now a plain\n .md with the title spelled out\n- a page that keeps a reference stays a .vm. Velocity reads ## as a line\n comment and would silently swallow every ATX heading below level one, so\n subsections use setext underlines and anything deeper is wrapped in\n #[[ ... ]]#\n- a reference APT rendered literally is escaped with ${esc.d}, which always\n yields a literal dollar; a backslash only works when the reference itself\n resolves\n\nVerified by building the site before and after and comparing every generated\npage: the visible text and the link targets are unchanged apart from\n\u003cb\u003e/\u003ci\u003e becoming \u003cstrong\u003e/\u003cem\u003e and quotes and ellipses in prose picking up\nthe Markdown module\u0027s typographic substitution.\n" }, { "commit": "6e61d56208c3fd8bc889dad5d7f17f8bb7007504", "tree": "03ce9e818f74cea5cec0d8f42f7b85b6b64524bf", "parents": [ "f962a0878d3ff7ae8e99e60260bf752ecfc9c05d" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Aug 06 13:53:04 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Aug 06 19:23:18 2026 +0200" }, "message": "Rename the site documents ahead of converting them\n\nA pure rename, so that git records it and `git log --follow` and `git blame` still\nreach the history of each page after the conversion that follows. The content is\nstill APT at this point and the site does not build between the two commits.\n" }, { "commit": "f962a0878d3ff7ae8e99e60260bf752ecfc9c05d", "tree": "f0e786e0db1111e7079083b6353996cb4fe9549d", "parents": [ "4979272639a66ba10a612290b7d59e9e6b2797ce" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Aug 03 22:02:33 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Aug 04 00:27:02 2026 +0200" }, "message": "Bump org.jsoup:jsoup from 1.22.2 to 1.23.1\n\nBumps [org.jsoup:jsoup](https://github.com/jhy/jsoup) from 1.22.2 to 1.23.1.\n- [Release notes](https://github.com/jhy/jsoup/releases)\n- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)\n- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.22.2...jsoup-1.23.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.jsoup:jsoup\n dependency-version: 1.23.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "4979272639a66ba10a612290b7d59e9e6b2797ce", "tree": "4ef5b0cb4b696254d972a10e1ec85a6980b492ec", "parents": [ "4d10ff2c49a24922cde94227fbce1d496cee0147" ], "author": { "name": "Elliotte Rusty Harold", "email": "elharo@users.noreply.github.com", "time": "Sun Aug 02 10:35:41 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Aug 02 10:35:41 2026 +0000" }, "message": "Update AGENTS.md with TDD and formatting (#1665)\n\n* Update AGENTS.md with TDD and formatting\n\nAdded guidelines for coding practices and testing.\n\n* Fix typos in AGENTS.md" }, { "commit": "4d10ff2c49a24922cde94227fbce1d496cee0147", "tree": "647d84486a974392d0d1844519679ba4158b0bef", "parents": [ "f21135fe6ea623e749d19eb7f0eac6bede89e3b8" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 13 22:02:13 2026 +0000" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Fri Jul 17 18:55:08 2026 +0200" }, "message": "Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml\n dependency-version: \u00275\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "f21135fe6ea623e749d19eb7f0eac6bede89e3b8", "tree": "263fed5000fc07255a528da1941157ee97bfc550", "parents": [ "5a1d25a46886b3c101327fd86482a15000a68cd9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 15 06:45:37 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 15 06:45:37 2026 +0200" }, "message": "Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml (#1661)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml\n dependency-version: \u00275\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "5a1d25a46886b3c101327fd86482a15000a68cd9", "tree": "ea9a4792448153c20ddfa27c1310a885c144138b", "parents": [ "10a4452a4644c1265ee49c9d5ab534e9e1a46792" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 15 06:45:25 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 15 06:45:25 2026 +0200" }, "message": "Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml (#1660)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/stale.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/stale.yml\n dependency-version: \u00275\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "10a4452a4644c1265ee49c9d5ab534e9e1a46792", "tree": "e7d141db3c190e6f2634e67d2e025481d7569441", "parents": [ "ade1f2fb35b37402fc51202b161ee9b2c8deb37d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 15 06:45:17 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 15 06:45:17 2026 +0200" }, "message": "Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml (#1663)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml\n dependency-version: \u00275\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ade1f2fb35b37402fc51202b161ee9b2c8deb37d", "tree": "b9d47d845543db3afae579bef5944b04ad6a6d4c", "parents": [ "1cfc6f26897f62c825269ca38831ba10333ad558" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 08 22:02:49 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Jul 11 20:00:07 2026 +0200" }, "message": "Bump eu.maveniverse.maven.domtrip:domtrip-maven from 1.5.2 to 1.6.0\n\nBumps [eu.maveniverse.maven.domtrip:domtrip-maven](https://github.com/maveniverse/domtrip) from 1.5.2 to 1.6.0.\n- [Release notes](https://github.com/maveniverse/domtrip/releases)\n- [Commits](https://github.com/maveniverse/domtrip/compare/1.5.2...1.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: eu.maveniverse.maven.domtrip:domtrip-maven\n dependency-version: 1.6.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "1cfc6f26897f62c825269ca38831ba10333ad558", "tree": "bafa32e0e903a601a693b1c684d1b9b608ad866d", "parents": [ "5e0cec9cf9a314e384e53b1711a154d037e67654" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 08 22:03:01 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Jul 11 19:59:52 2026 +0200" }, "message": "Bump eu.maveniverse.maven.domtrip:domtrip-core from 1.5.2 to 1.6.0\n\nBumps [eu.maveniverse.maven.domtrip:domtrip-core](https://github.com/maveniverse/domtrip) from 1.5.2 to 1.6.0.\n- [Release notes](https://github.com/maveniverse/domtrip/releases)\n- [Commits](https://github.com/maveniverse/domtrip/compare/1.5.2...1.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: eu.maveniverse.maven.domtrip:domtrip-core\n dependency-version: 1.6.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "5e0cec9cf9a314e384e53b1711a154d037e67654", "tree": "cf5305b6e3e30418f86b4abca98ceaf602eacf32", "parents": [ "09e97e39e29d870356ce121f9d5e4f229a555caf" ], "author": { "name": "Jarek Potiuk", "email": "jarek@potiuk.com", "time": "Wed Jul 08 12:38:51 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Jul 08 14:17:56 2026 +0200" }, "message": "Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability\n\nGenerated-by: Claude Code\n" }, { "commit": "09e97e39e29d870356ce121f9d5e4f229a555caf", "tree": "cdecc956c1291e113c9cd89868488f4a8fe239b5", "parents": [ "d9d8d6ec2564e3cbf38a6275724869957e76ad72" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 29 22:02:45 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Jun 30 09:10:27 2026 +0200" }, "message": "Bump org.apache.maven.plugins:maven-plugins from 48 to 49\n\nBumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 48 to 49.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n dependency-version: \u002749\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "d9d8d6ec2564e3cbf38a6275724869957e76ad72", "tree": "5fe59a8771aa057bbc7743791baeb2bc9d368ada", "parents": [ "fdd2b51b3af56946be2d67a91d21b4430fc9b51c" ], "author": { "name": "Harsh Mehta", "email": "harshmehta010102@gmail.com", "time": "Tue Jun 02 14:50:29 2026 +0530" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Thu Jun 18 19:48:54 2026 +0200" }, "message": "fix: log swallowed exceptions in module descriptor extraction\n\nSigned-off-by: Harsh Mehta \u003charshmehta010102@gmail.com\u003e\n" }, { "commit": "fdd2b51b3af56946be2d67a91d21b4430fc9b51c", "tree": "9eee848ae32e9c08de4118daf8e1144b96cbea7c", "parents": [ "ff77e43635ced00b3e9f8661fa5edd73682ba27f" ], "author": { "name": "Bruno Borges", "email": "brborges@microsoft.com", "time": "Fri May 29 16:44:39 2026 -0400" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Thu Jun 11 23:13:48 2026 +0200" }, "message": "[#1637] Fix dependency:add routing versioned deps into dependencyManagement\n\nThe `dependency:add` goal incorrectly added a versioned dependency to the\ncurrent POM\u0027s \u003cdependencyManagement\u003e instead of \u003cdependencies\u003e when the\nproject\u0027s existing dependencies are version-less because their versions come\nfrom a BOM import (the standard maven-archetype-quickstart layout).\n\nWith align\u003dtrue (default), detectConventions() set useManaged\u003dtrue purely\nbecause most \u003cdependencies\u003e were version-less, even though no parent POM\nexisted to host the managed entry. The result was written to the current\nPOM\u0027s \u003cdependencyManagement\u003e, which contradicts the documented behavior of\nthe `align` parameter (\"add managed dependency to parent POM\") and means the\ndependency was never actually added to the project.\n\nThe auto-detected useManaged convention now only applies when a separate\nparent POM exists to host the managed dependency. For a single/leaf POM a\nversioned add goes to \u003cdependencies\u003e. Explicit -Dmanaged\u003dtrue is unchanged.\n\nAdds an integration test (add-dependency/bom-import) reproducing the case.\n\nCo-authored-by: Copilot \u003c223556219+Copilot@users.noreply.github.com\u003e\n" }, { "commit": "ff77e43635ced00b3e9f8661fa5edd73682ba27f", "tree": "c7e4505cf48a9fdbd4b21cc2344ab48b146eff90", "parents": [ "6fe0525f8b7fbec686e996a77257ed2a78121ba2" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 22:02:57 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Jun 09 00:15:07 2026 -0400" }, "message": "Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0\n\nBumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.11.0 to 4.12.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)\n- [Commits](https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.11.0...plexus-archiver-4.12.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-archiver\n dependency-version: 4.12.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "6fe0525f8b7fbec686e996a77257ed2a78121ba2", "tree": "986eea5191a77bb2dcece25bffd1df1af7cb86d8", "parents": [ "735e479a3587979c2e27eb143990b8b8ce179c9b" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu May 28 22:58:28 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Jun 07 23:06:00 2026 -0400" }, "message": "Bump eu.maveniverse.maven.domtrip:domtrip-maven from 1.5.1 to 1.5.2\n\nBumps [eu.maveniverse.maven.domtrip:domtrip-maven](https://github.com/maveniverse/domtrip) from 1.5.1 to 1.5.2.\n- [Release notes](https://github.com/maveniverse/domtrip/releases)\n- [Commits](https://github.com/maveniverse/domtrip/compare/1.5.1...1.5.2)\n\n---\nupdated-dependencies:\n- dependency-name: eu.maveniverse.maven.domtrip:domtrip-maven\n dependency-version: 1.5.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "735e479a3587979c2e27eb143990b8b8ce179c9b", "tree": "f0f34f198f43782e6491e055ef6775cc9c510527", "parents": [ "0942ac1341f320a252216ef661ca5aa75b902ace" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu May 28 22:59:02 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Jun 07 23:05:47 2026 -0400" }, "message": "Bump eu.maveniverse.maven.domtrip:domtrip-core from 1.5.1 to 1.5.2\n\nBumps [eu.maveniverse.maven.domtrip:domtrip-core](https://github.com/maveniverse/domtrip) from 1.5.1 to 1.5.2.\n- [Release notes](https://github.com/maveniverse/domtrip/releases)\n- [Commits](https://github.com/maveniverse/domtrip/compare/1.5.1...1.5.2)\n\n---\nupdated-dependencies:\n- dependency-name: eu.maveniverse.maven.domtrip:domtrip-core\n dependency-version: 1.5.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "0942ac1341f320a252216ef661ca5aa75b902ace", "tree": "1f4768cae11503bd0514b94074d546631c2efc51", "parents": [ "33b446462248e14e1ff96d6de457aa3eaae4b97b" ], "author": { "name": "Matthias Bünger", "email": "Bukama@users.noreply.github.com", "time": "Sun May 31 18:38:12 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 31 18:38:12 2026 +0200" }, "message": "Use version properties in ITs (#1639)" }, { "commit": "33b446462248e14e1ff96d6de457aa3eaae4b97b", "tree": "13382863ed127360fee9df9bc1f308d9dbc28d48", "parents": [ "66189e8482b0862a65d6d518ce49562f599cb7ab" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri May 29 09:21:25 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri May 29 09:21:25 2026 +0200" }, "message": "Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1634)\n\nBumps org.ow2.asm:asm from 9.10 to 9.10.1.\n\n---\nupdated-dependencies:\n- dependency-name: org.ow2.asm:asm\n dependency-version: 9.10.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "66189e8482b0862a65d6d518ce49562f599cb7ab", "tree": "2d0fc045fffa49d722b81e6596f033a234d6e7d5", "parents": [ "c186d05d80e15cd18651a3071a5186e275e04029" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun May 24 19:18:36 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun May 24 19:18:36 2026 +0200" }, "message": "[maven-release-plugin] prepare for next development iteration\n" }, { "commit": "c186d05d80e15cd18651a3071a5186e275e04029", "tree": "3d66af5290443172739b18dbd1867bc06a5e6bcd", "parents": [ "371261124f9cff27cf0439fe3abaec4e322fae7e" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun May 24 19:18:15 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun May 24 19:18:15 2026 +0200" }, "message": "[maven-release-plugin] prepare release maven-dependency-plugin-3.11.0\n" }, { "commit": "371261124f9cff27cf0439fe3abaec4e322fae7e", "tree": "2cc7cd695545daaa7c7de97a503d332c36ad45fd", "parents": [ "e873e0eb87775c0346b22cf6fe0c565e93e0b01f" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sat May 23 22:05:00 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun May 24 14:28:55 2026 +0200" }, "message": "Fix artifact relocation support\n\n- Update ITs for `copy`, `unpack`, and relocation use cases.\n- Simplify and align artifact verification in integration tests.\n" }, { "commit": "e873e0eb87775c0346b22cf6fe0c565e93e0b01f", "tree": "27157dae51361e82330c1bb65207b15fa4a035be", "parents": [ "70b535690ecbf985e795cabca9869d66a2c68e10" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Thu May 21 23:24:54 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sat May 23 21:50:42 2026 +0200" }, "message": "Manage ASM version 9.10 to support JDK 27\n" }, { "commit": "70b535690ecbf985e795cabca9869d66a2c68e10", "tree": "84fac558cae627823c24542c964b93a909d5694a", "parents": [ "51d893970655d18dade1f06ca48e2bf676349629" ], "author": { "name": "Keith Wall", "email": "kwall@redhat.com", "time": "Wed May 20 23:17:21 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 21 00:17:21 2026 +0200" }, "message": "fix: fix addParentPoms\u003dtrue causes repositories to be ignored. (#1585)\n\n* fix: fix addParentPoms\u003dtrue causes repositories to be ignored.\n\nSigned-off-by: Keith Wall \u003ckwall@apache.org\u003e\n\n* test: add integration test for MDEP-592 addParentPoms repository fix\n\nAdd integration test to verify that when using copy-dependencies with\naddParentPoms\u003dtrue, the plugin correctly propagates the project\u0027s remote\nrepositories to the ProjectBuildingRequest when resolving parent POMs.\n\nThe test uses the \"fake-remote-repository\" pattern to ensure the custom\nrepository is NOT mirrored by MRM (Mock Repository Manager). This is critical\nbecause MRM is configured as a global mirror in src/it/mrm/settings.xml with:\n \u003cmirrorOf\u003e*,!fake-remote-repository\u003c/mirrorOf\u003e\n\nBy using id \"fake-remote-repository\", the repository is:\n- NOT mirrored by MRM\n- NOT inherited in the session\u0027s repository configuration\n- ONLY available if explicitly propagated via setRemoteRepositories()\n\nThis ensures the test actually validates the fix.\n\nTEST VALIDATION:\n- WITHOUT fix: Test FAILS with \"Could not build project\" error at\n buildProjectFromArtifact() because fake-remote-repository is not propagated\n- WITH fix: Test PASSES, parent POM successfully resolved and copied\n\nTest structure (following copy-from-remote-repository pattern):\n- repo/: Local repository with test artifacts (test-parent, test-child)\n- pom.xml: Declares fake-remote-repository and dependency on test-child\n- setup.bsh: Cleans local cache to force fresh resolution\n- verify.bsh: Validates parent POM was copied to output\n\nAssisted-by: Claude Sonnet 4.5 \u003cnoreply@anthropic.com\u003e\nSigned-off-by: Keith Wall \u003ckwall@apache.org\u003e\n\n* fix: simplify MDEP-592 fix per reviewer feedback\n\nRemove unnecessary null and empty checks for getProject().getRemoteArtifactRepositories()\nas the reviewer (slawekjaranowski) noted these should never be null or empty in Maven.\n\nSigned-off-by: Keith Wall \u003ckwall@apache.org\u003e\n\n---------\n\nSigned-off-by: Keith Wall \u003ckwall@apache.org\u003e" }, { "commit": "51d893970655d18dade1f06ca48e2bf676349629", "tree": "3e9e86c670bcfeff1313bf734393aa4e878f2220", "parents": [ "02b865b98376be8e9a0c31a028b87a4e1d4ff7a3" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue May 19 22:05:40 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 19 22:05:40 2026 +0200" }, "message": "Fix false positive in analyze-exclusions with transitive dependency exclusion (#1628)\n\n* Add IT for analyze-exclusions with transitive dependency exclusion\n\n* Add mock dependencies for analyze-exclusions-gh-1598 tests\n\n* Add fix\n\n* Use null as root node\n\n* restore exclusion in example" }, { "commit": "02b865b98376be8e9a0c31a028b87a4e1d4ff7a3", "tree": "ad0135190aba47fb905c8d0c5b7d716ab963079d", "parents": [ "04f4de17e7bd73276baeacc7275308d20f1257fd" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 19 07:29:46 2026 +0000" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue May 19 15:24:07 2026 +0200" }, "message": "Bump eu.maveniverse.maven.domtrip:domtrip-core from 1.5.0 to 1.5.1\n\nBumps [eu.maveniverse.maven.domtrip:domtrip-core](https://github.com/maveniverse/domtrip) from 1.5.0 to 1.5.1.\n- [Release notes](https://github.com/maveniverse/domtrip/releases)\n- [Commits](https://github.com/maveniverse/domtrip/compare/1.5.0...1.5.1)\n\n---\nupdated-dependencies:\n- dependency-name: eu.maveniverse.maven.domtrip:domtrip-core\n dependency-version: 1.5.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "04f4de17e7bd73276baeacc7275308d20f1257fd", "tree": "637ad21f91a5fae8bf1dc154d3aa200494a2e476", "parents": [ "2812490a1263d186950becfe2d214f03e807048f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 19 07:29:32 2026 +0000" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue May 19 11:27:29 2026 +0200" }, "message": "Bump eu.maveniverse.maven.domtrip:domtrip-maven from 1.5.0 to 1.5.1\n\nBumps [eu.maveniverse.maven.domtrip:domtrip-maven](https://github.com/maveniverse/domtrip) from 1.5.0 to 1.5.1.\n- [Release notes](https://github.com/maveniverse/domtrip/releases)\n- [Commits](https://github.com/maveniverse/domtrip/compare/1.5.0...1.5.1)\n\n---\nupdated-dependencies:\n- dependency-name: eu.maveniverse.maven.domtrip:domtrip-maven\n dependency-version: 1.5.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "2812490a1263d186950becfe2d214f03e807048f", "tree": "1e3f0dc042ccf170c2fcba3c5f3f209497ff9706", "parents": [ "ce117da219149e28f4253f85a805093222b8f868" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 18 15:47:54 2026 +0000" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue May 19 00:40:42 2026 +0200" }, "message": "Bump mavenVersion from 3.9.15 to 3.9.16\n\nBumps `mavenVersion` from 3.9.15 to 3.9.16.\n\nUpdates `org.apache.maven:maven-artifact` from 3.9.15 to 3.9.16\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.15 to 3.9.16\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.15...maven-3.9.16)\n\nUpdates `org.apache.maven:maven-model` from 3.9.15 to 3.9.16\n\nUpdates `org.apache.maven:maven-core` from 3.9.15 to 3.9.16\n\nUpdates `org.apache.maven:maven-repository-metadata` from 3.9.15 to 3.9.16\n\nUpdates `org.apache.maven:maven-settings` from 3.9.15 to 3.9.16\n\nUpdates `org.apache.maven:maven-compat` from 3.9.15 to 3.9.16\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.15...maven-3.9.16)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-artifact\n dependency-version: 3.9.16\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-plugin-api\n dependency-version: 3.9.16\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-model\n dependency-version: 3.9.16\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-core\n dependency-version: 3.9.16\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-repository-metadata\n dependency-version: 3.9.16\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-settings\n dependency-version: 3.9.16\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-compat\n dependency-version: 3.9.16\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "ce117da219149e28f4253f85a805093222b8f868", "tree": "9da4924d0157ec816291d995ff8332e8f2743cb1", "parents": [ "aea7a6400a73696f8819071c607e3c0d16bb9294" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 18 15:48:17 2026 +0000" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Mon May 18 22:20:58 2026 +0200" }, "message": "Bump org.apache.maven.shared:maven-dependency-analyzer\n\nBumps [org.apache.maven.shared:maven-dependency-analyzer](https://github.com/apache/maven-dependency-analyzer) from 1.17.0 to 1.17.1.\n- [Release notes](https://github.com/apache/maven-dependency-analyzer/releases)\n- [Commits](https://github.com/apache/maven-dependency-analyzer/compare/maven-dependency-analyzer-1.17.0...maven-dependency-analyzer-1.17.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.shared:maven-dependency-analyzer\n dependency-version: 1.17.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "aea7a6400a73696f8819071c607e3c0d16bb9294", "tree": "8f6e35d43935ea8d14ad464b48fa7b192a1788cf", "parents": [ "a22006d42628172dbd7093533a8374eeea42e533" ], "author": { "name": "Elliotte Rusty Harold", "email": "elharo@users.noreply.github.com", "time": "Sun May 17 21:40:07 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 17 21:40:07 2026 +0000" }, "message": "Prevent NPE (#1622)" }, { "commit": "a22006d42628172dbd7093533a8374eeea42e533", "tree": "d38024493b8d5c3d66990d630b84f5e36d6e7145", "parents": [ "9bb5af763a294c0e08523d3cce0ee5ed33898a5b" ], "author": { "name": "Elliotte Rusty Harold", "email": "elharo@users.noreply.github.com", "time": "Sun May 17 21:39:53 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 17 21:39:53 2026 +0000" }, "message": "Prevent NPE (#1623)" }, { "commit": "9bb5af763a294c0e08523d3cce0ee5ed33898a5b", "tree": "8b3321121ea3aa5d42b1fa510bcfeed3f41fbe48", "parents": [ "450cac24bd56a075aaa03a65da57ad8389e74c6e" ], "author": { "name": "Elliotte Rusty Harold", "email": "elharo@users.noreply.github.com", "time": "Sun May 17 19:53:43 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 17 19:53:43 2026 +0000" }, "message": "Log unpacking at debug level (#1624)\n\n* Debug log unpacking\n\n* Debug log unpacking" }, { "commit": "450cac24bd56a075aaa03a65da57ad8389e74c6e", "tree": "4a3453f19e8fdb19e4248f54cf88b1c9dac914f6", "parents": [ "2e14a0ad1c392aa0e8ebcff0796acdb06bca86d9" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sat May 16 15:07:36 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun May 17 17:26:58 2026 +0200" }, "message": "Enable ITs for dependecy:remove and use mock dependencies\n\n- new ITs are in subdirectory so should be added to invoker configuration\n- use mock dependencies to avoid updates by dependabot\n" }, { "commit": "2e14a0ad1c392aa0e8ebcff0796acdb06bca86d9", "tree": "096d188483d3d0e265d6668eca1684eeecf00a6a", "parents": [ "3326f3d98e38c6aa902ad25fe713b235f4bd7ca2" ], "author": { "name": "Elliotte Rusty Harold", "email": "elharo@users.noreply.github.com", "time": "Sun May 17 12:02:16 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 17 12:02:16 2026 +0000" }, "message": "More meaningful assertions (#1611)\n\n* Simplify assertions\n\n* spotless" }, { "commit": "3326f3d98e38c6aa902ad25fe713b235f4bd7ca2", "tree": "07335e8d390bbc0bc0b2737695ddd16fb5a88cb9", "parents": [ "c27eb3df26f3baf343a99d639b9c9b073cc686ac" ], "author": { "name": "Elliotte Rusty Harold", "email": "elharo@users.noreply.github.com", "time": "Sun May 17 12:01:06 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun May 17 12:01:06 2026 +0000" }, "message": "typos (#1612)" }, { "commit": "c27eb3df26f3baf343a99d639b9c9b073cc686ac", "tree": "5cf3e5390ef68031dff8511b0b2b428506890a33", "parents": [ "0e833cf0746e3901ddaca732613bda9e2c06347e" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue May 12 23:43:52 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sat May 16 18:14:30 2026 +0200" }, "message": "Remove unused jansi dependency\n" }, { "commit": "0e833cf0746e3901ddaca732613bda9e2c06347e", "tree": "9840c14c233cfbcdffe3d160e39e66e57110b977", "parents": [ "408ad8a1333ddf13c624eab553b4efb16b7e96b7" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat May 16 12:40:07 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat May 16 17:51:27 2026 +0200" }, "message": "Bump org.apache.commons:commons-lang3\n\nBumps org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-lang3\n dependency-version: 3.18.0\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "408ad8a1333ddf13c624eab553b4efb16b7e96b7", "tree": "520b1d8b78eb6c598a78d2e8760d8a5922f4c5ae", "parents": [ "ec5a98bc977fa96ab9eaebf497557ee81e676685" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sat May 16 11:54:55 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sat May 16 14:38:28 2026 +0200" }, "message": "Enable ITs for dependecy:add and use mock dependencies\n\n- new ITs are in subdirectory so should be added to invoker configuration\n- use mock dependencies to avoid updates by dependabot\n- remove unused test files\n" }, { "commit": "ec5a98bc977fa96ab9eaebf497557ee81e676685", "tree": "a6f5f7e403b3d58a1fc59c51d704a813faf4eedc", "parents": [ "f38279d038e20180b2f2ed0d0eca3a36f0c02996" ], "author": { "name": "Elliotte Rusty Harold", "email": "elharo@users.noreply.github.com", "time": "Sat May 16 11:24:57 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 16 11:24:57 2026 +0000" }, "message": "Better exception handling (#1566)" }, { "commit": "f38279d038e20180b2f2ed0d0eca3a36f0c02996", "tree": "459ff1d11d11e2f0333ae52e2cfd79fe660f0a7f", "parents": [ "e6927848f98dbfb2c2e58786c2548225589a43c7" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sat May 16 10:22:33 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sat May 16 11:29:10 2026 +0200" }, "message": "Bump maven-dependency-plugin to 3.11.0-SNAPSHOT\n" }, { "commit": "e6927848f98dbfb2c2e58786c2548225589a43c7", "tree": "d872141712a89198e65613a85897c93ebe626f57", "parents": [ "b1a9f589b6f1dbbdd3ef2950f63eea0b7da59a46" ], "author": { "name": "Bruno Borges", "email": "bruno.borges@gmail.com", "time": "Sat May 16 03:22:46 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 16 09:22:46 2026 +0200" }, "message": "Add dependency:add and dependency:remove goals (#1599)\n\n* Add dependency management goals\n\nCo-authored-by: Copilot \u003c223556219+Copilot@users.noreply.github.com\u003e\n\n* Update domtrip to 1.5.0\n\nCo-authored-by: Copilot \u003c223556219+Copilot@users.noreply.github.com\u003e\n\n---------\n\nCo-authored-by: Copilot \u003c223556219+Copilot@users.noreply.github.com\u003e" }, { "commit": "b1a9f589b6f1dbbdd3ef2950f63eea0b7da59a46", "tree": "83b53994dcfffa351a126d049067a7314343618b", "parents": [ "79d908062c5ee1d4c6a441c0c4e2432e87167f56" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 04:16:04 2026 +0000" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue May 12 18:16:45 2026 +0200" }, "message": "Bump org.apache.maven.plugins:maven-plugins from 47 to 48\n\nBumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 47 to 48.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n dependency-version: \u002748\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "79d908062c5ee1d4c6a441c0c4e2432e87167f56", "tree": "baefa7693a844a4077209bf732757eef4c0c5695", "parents": [ "963fd3c87b5933e07c131ca19b1eef4a12839740" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Mon May 04 23:38:20 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun May 10 22:06:28 2026 +0200" }, "message": "Resolve plugins declared in pluginManagement for resolve-plugins and go-offline\n\nParent POMs can declare plugin versions only in pluginManagement.\nSuch plugins should also be taken into account during resolution.\n" }, { "commit": "963fd3c87b5933e07c131ca19b1eef4a12839740", "tree": "e90fb14bc22da159bbbac4ad765ce460cf494716", "parents": [ "23a6bb5688b026d29127e933581923f118fdc867" ], "author": { "name": "treilhes", "email": "p.treilhes@free.fr", "time": "Thu May 07 23:45:41 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 07 23:45:41 2026 +0200" }, "message": "Added ability to provide arbitrary dependencies to properties mojo (#1561)" }, { "commit": "23a6bb5688b026d29127e933581923f118fdc867", "tree": "3ea2d90b17666fb83bb7d77b6d87d2723a4c137d", "parents": [ "0b2aa1724df7371d158b849dd770e8742e9c4ed0" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Apr 17 22:02:38 2026 +0000" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue May 05 20:33:22 2026 +0200" }, "message": "Bump mavenVersion from 3.9.14 to 3.9.15\n\nBumps `mavenVersion` from 3.9.14 to 3.9.15.\n\nUpdates `org.apache.maven:maven-artifact` from 3.9.14 to 3.9.15\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.14 to 3.9.15\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.14...maven-3.9.15)\n\nUpdates `org.apache.maven:maven-model` from 3.9.14 to 3.9.15\n\nUpdates `org.apache.maven:maven-core` from 3.9.14 to 3.9.15\n\nUpdates `org.apache.maven:maven-repository-metadata` from 3.9.14 to 3.9.15\n\nUpdates `org.apache.maven:maven-settings` from 3.9.14 to 3.9.15\n\nUpdates `org.apache.maven:maven-compat` from 3.9.14 to 3.9.15\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.14...maven-3.9.15)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-artifact\n dependency-version: 3.9.15\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-plugin-api\n dependency-version: 3.9.15\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-model\n dependency-version: 3.9.15\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-core\n dependency-version: 3.9.15\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-repository-metadata\n dependency-version: 3.9.15\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-settings\n dependency-version: 3.9.15\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-compat\n dependency-version: 3.9.15\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "0b2aa1724df7371d158b849dd770e8742e9c4ed0", "tree": "ab0b9ee329a85e13ffe54d3d9ff304715c658e82", "parents": [ "cb12ce6555ca3dd678ba42cab017672484b0724c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 21 06:14:51 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 06:14:51 2026 +0200" }, "message": "Bump org.jsoup:jsoup from 1.22.1 to 1.22.2 (#1602)\n\nBumps [org.jsoup:jsoup](https://github.com/jhy/jsoup) from 1.22.1 to 1.22.2.\n- [Release notes](https://github.com/jhy/jsoup/releases)\n- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)\n- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.22.1...jsoup-1.22.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.jsoup:jsoup\n dependency-version: 1.22.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "cb12ce6555ca3dd678ba42cab017672484b0724c", "tree": "4a12fe99966824cdb99d44b48665b9af47afd9da", "parents": [ "d4ae6aef6152a4211206caf808914ad8951f2443" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Mar 31 17:33:53 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 31 17:33:53 2026 +0200" }, "message": "Bump org.apache.maven.doxia:doxia-sink-api from 2.0.0 to 2.1.0 (#1595)\n\nBumps [org.apache.maven.doxia:doxia-sink-api](https://github.com/apache/maven-doxia) from 2.0.0 to 2.1.0.\n- [Release notes](https://github.com/apache/maven-doxia/releases)\n- [Commits](https://github.com/apache/maven-doxia/compare/doxia-2.0.0...doxia-2.1.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.doxia:doxia-sink-api\n dependency-version: 2.1.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d4ae6aef6152a4211206caf808914ad8951f2443", "tree": "1d682253e57286cdee993a1126f5d3f462d791cb", "parents": [ "a99bc570747b2623a4f3e5ca5a3dc98e379bd58b" ], "author": { "name": "Jack Green", "email": "JackPGreen@Gmail.com", "time": "Mon Mar 30 14:29:20 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Mar 30 13:29:20 2026 +0000" }, "message": "Fix `analyze-exclusions` crashes if there is no `dependencyManagement` element (#1597)\n\n* Fix `analyze-exclusions` crashes if there is no `dependencyManagement element\n\nAs reported in https://github.com/apache/maven-dependency-plugin/issues/1474, when executed on a project without a `dependencyManagement` tag defined, an exception is thrown:\n\n```\n[ERROR] Failed to execute goal org.apache.maven.plugins:maven-dependency-plugin:3.10.0:analyze-exclusions (default-cli) on project reproducer: Execution default-cli of goal org.apache.maven.plugins:maven-dependency-plugin:3.10.0:analyze-exclusions failed: Cannot invoke \"org.apache.maven.model.DependencyManagement.getDependencies()\" because the return value of \"org.apache.maven.project.MavenProject.getDependencyManagement()\" is null -\u003e [Help 1]\norg.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.apache.maven.plugins:maven-dependency-plugin:3.10.0:analyze-exclusions (default-cli) on project reproducer: Execution default-cli of goal org.apache.maven.plugins:maven-dependency-plugin:3.10.0:analyze-exclusions failed: Cannot invoke \"org.apache.maven.model.DependencyManagement.getDependencies()\" because the return value of \"org.apache.maven.project.MavenProject.getDependencyManagement()\" is null\n{...}\nCaused by: java.lang.NullPointerException: Cannot invoke \"org.apache.maven.model.DependencyManagement.getDependencies()\" because the return value of \"org.apache.maven.project.MavenProject.getDependencyManagement()\" is null\n at org.apache.maven.plugins.dependency.exclusion.AnalyzeExclusionsMojo.execute (AnalyzeExclusionsMojo.java:106)\n at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)\n at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328)\n at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316)\n at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212)\n at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174)\n at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75)\n at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162)\n at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39)\n at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159)\n at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105)\n at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73)\n at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53)\n at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118)\n at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)\n at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)\n at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)\n at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919)\n at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285)\n at org.apache.maven.cli.MavenCli.main (MavenCli.java:207)\n at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103)\n at java.lang.reflect.Method.invoke (Method.java:580)\n at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255)\n at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201)\n at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:361)\n at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314)\n```\n\nWhen executing `analyze-exclusions`, we simply assume `getDependencyManagement` returns non-`null`.\nWhereas in other mojos a more cautious approach is taken, e.g.:\nhttps://github.com/apache/maven-dependency-plugin/blob/a99bc570747b2623a4f3e5ca5a3dc98e379bd58b/src/main/java/org/apache/maven/plugins/dependency/analyze/AnalyzeDepMgt.java#L118-L123\n\nUpdated this mojo (and corresponding test) to suit.\n\nFixes: https://github.com/apache/maven-dependency-plugin/issues/1474\n\n* Add tests\n\nAs requested in https://github.com/apache/maven-dependency-plugin/pull/1597#discussion_r3006620619\n\n* Spotless changes\n\n* Simplify test" }, { "commit": "a99bc570747b2623a4f3e5ca5a3dc98e379bd58b", "tree": "7d6ff81ace222b4380347abda067cf5c076738dd", "parents": [ "73bc5c003e90094a27553c2ddbd55e9990db089d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Mar 28 18:59:28 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Mar 28 18:59:28 2026 +0100" }, "message": "Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (#1596)\n\nBumps [org.fusesource.jansi:jansi](https://github.com/fusesource/jansi) from 2.4.2 to 2.4.3.\n- [Release notes](https://github.com/fusesource/jansi/releases)\n- [Changelog](https://github.com/fusesource/jansi/blob/master/changelog.md)\n- [Commits](https://github.com/fusesource/jansi/compare/jansi-2.4.2...jansi-2.4.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.fusesource.jansi:jansi\n dependency-version: 2.4.3\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "73bc5c003e90094a27553c2ddbd55e9990db089d", "tree": "c13cc7dc1258469187e7069d27be176fae6c62ca", "parents": [ "7d69fb06a3a2cecce1cf79c50d512acdeeeccc1c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Mar 16 17:45:19 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Mar 16 17:45:19 2026 +0100" }, "message": "Bump mavenVersion from 3.9.12 to 3.9.14 (#1594)\n\nBumps `mavenVersion` from 3.9.12 to 3.9.14.\n\nUpdates `org.apache.maven:maven-artifact` from 3.9.12 to 3.9.14\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.12 to 3.9.14\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.12...maven-3.9.14)\n\nUpdates `org.apache.maven:maven-model` from 3.9.12 to 3.9.14\n\nUpdates `org.apache.maven:maven-core` from 3.9.12 to 3.9.14\n\nUpdates `org.apache.maven:maven-repository-metadata` from 3.9.12 to 3.9.14\n\nUpdates `org.apache.maven:maven-settings` from 3.9.12 to 3.9.14\n\nUpdates `org.apache.maven:maven-compat` from 3.9.12 to 3.9.14\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.12...maven-3.9.14)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-artifact\n dependency-version: 3.9.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-plugin-api\n dependency-version: 3.9.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-model\n dependency-version: 3.9.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-core\n dependency-version: 3.9.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-repository-metadata\n dependency-version: 3.9.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-settings\n dependency-version: 3.9.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-compat\n dependency-version: 3.9.14\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7d69fb06a3a2cecce1cf79c50d512acdeeeccc1c", "tree": "b73596a75cf633d5b81f70c559a0c50ba52c7e82", "parents": [ "f7c7f97d167940a0240189e853c25ae76ff281c3" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Feb 10 17:32:28 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Feb 10 17:32:28 2026 +0100" }, "message": "Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#1589)\n\nBumps org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugin-testing:maven-plugin-testing-harness\n dependency-version: 3.5.1\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f7c7f97d167940a0240189e853c25ae76ff281c3", "tree": "52aae36bd35bab0435f1c808663c4bdbbded3b27", "parents": [ "4127c336cc2420d0f19e7927371f979841df6e7b" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Thu Feb 05 22:15:10 2026 +0100" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Thu Feb 05 22:15:10 2026 +0100" }, "message": "[maven-release-plugin] prepare for next development iteration\n" }, { "commit": "4127c336cc2420d0f19e7927371f979841df6e7b", "tree": "87640b8b2e1d36ac978cea00cf4fade389b722d5", "parents": [ "68b5e4733ab4c908ce782eaa1eb7315dda9af034" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Thu Feb 05 22:15:00 2026 +0100" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Thu Feb 05 22:15:00 2026 +0100" }, "message": "[maven-release-plugin] prepare release maven-dependency-plugin-3.10.0\n" }, { "commit": "68b5e4733ab4c908ce782eaa1eb7315dda9af034", "tree": "e53e7e5003199c094ef20430d561e083aad45d01", "parents": [ "09d5860369068c74a21e0f3153912cbf6f73ed5b" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Wed Feb 04 23:54:38 2026 +0100" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Thu Feb 05 21:42:24 2026 +0100" }, "message": "Add analyze-only to usage page\n\nfix #1556\n" }, { "commit": "09d5860369068c74a21e0f3153912cbf6f73ed5b", "tree": "1aa2596aa5754775ddab6a05b8b090c81a577985", "parents": [ "4308f6ccfe82f60fdff18ddaeabb85b44e80ee0d" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Wed Feb 04 23:13:33 2026 +0100" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Wed Feb 04 23:41:26 2026 +0100" }, "message": "Fix Jenkin bages in README\n" }, { "commit": "4308f6ccfe82f60fdff18ddaeabb85b44e80ee0d", "tree": "1e2628dee692a19710d5f7a454a28503fdbcddb2", "parents": [ "ba3c570e3de0b113a07acce0be7e50686fc48c84" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Feb 02 13:33:10 2026 +0000" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Mon Feb 02 17:33:07 2026 +0100" }, "message": "Bump org.apache.maven.shared:maven-dependency-analyzer\n\nBumps [org.apache.maven.shared:maven-dependency-analyzer](https://github.com/apache/maven-dependency-analyzer) from 1.16.0 to 1.17.0.\n- [Release notes](https://github.com/apache/maven-dependency-analyzer/releases)\n- [Commits](https://github.com/apache/maven-dependency-analyzer/compare/v1.16.0...maven-dependency-analyzer-1.17.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.shared:maven-dependency-analyzer\n dependency-version: 1.17.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "ba3c570e3de0b113a07acce0be7e50686fc48c84", "tree": "0741d10365447de78a3395e269b3b970f1f98d5b", "parents": [ "0d88b668ca4e192534bbba6402e9051aae8229ab" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue Jan 27 22:09:18 2026 +0100" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Wed Jan 28 21:27:22 2026 +0100" }, "message": "Apply excludeReactor to plugin dependencies in go-offline and resolve-plugins\n\nfix #1543\n" }, { "commit": "0d88b668ca4e192534bbba6402e9051aae8229ab", "tree": "c39f305a98cf804f5213b2117e2d0c32009c1407", "parents": [ "0075e3140a2986fef6eae41253dbc69fb287957e" ], "author": { "name": "Michael Walser", "email": "michael.walser@device-insight.com", "time": "Fri Nov 07 12:09:26 2025 +0100" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Wed Jan 28 00:18:04 2026 +0100" }, "message": "Only log dependency classpath when no property/file output is specified\n" }, { "commit": "0075e3140a2986fef6eae41253dbc69fb287957e", "tree": "77e7b2797a3743603481ebf43494412e8cf2c17a", "parents": [ "65d53bba0a0e829ca0ed8f17e9803d86755df61f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jan 27 17:32:44 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jan 27 17:32:44 2026 +0100" }, "message": "Bump org.assertj:assertj-core (#1581)\n\nBumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 2.9.1 to 3.27.7.\n- [Release notes](https://github.com/assertj/assertj/releases)\n- [Commits](https://github.com/assertj/assertj/compare/assertj-core-2.9.1...assertj-build-3.27.7)\n\n---\nupdated-dependencies:\n- dependency-name: org.assertj:assertj-core\n dependency-version: 3.27.7\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "65d53bba0a0e829ca0ed8f17e9803d86755df61f", "tree": "8198017caae27af473690e99587740ac3e442c39", "parents": [ "eaf54f044b31d450646c7b0cc40297cb0b829400" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jan 27 17:32:34 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jan 27 17:32:34 2026 +0100" }, "message": "Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (#1582)\n\nBumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.6 to 3.27.7.\n- [Release notes](https://github.com/assertj/assertj/releases)\n- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.6...assertj-build-3.27.7)\n\n---\nupdated-dependencies:\n- dependency-name: org.assertj:assertj-core\n dependency-version: 3.27.7\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "eaf54f044b31d450646c7b0cc40297cb0b829400", "tree": "93320f65559b92a5627b5eb94718cef9e1802ac6", "parents": [ "ece9a38fdc29ca84eb278ea7c4e38be7735af4af" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jan 20 19:13:13 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jan 20 19:13:13 2026 +0100" }, "message": "Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (#1580)\n\nBumps [org.codehaus.mojo:mrm-maven-plugin](https://github.com/mojohaus/mrm) from 1.7.0 to 1.7.1.\n- [Release notes](https://github.com/mojohaus/mrm/releases)\n- [Commits](https://github.com/mojohaus/mrm/compare/1.7.0...mrm-1.7.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.mojo:mrm-maven-plugin\n dependency-version: 1.7.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ece9a38fdc29ca84eb278ea7c4e38be7735af4af", "tree": "788043a45ffa7564ec00ac211bdb367faedfba6e", "parents": [ "4e021c0ce0d71c1f33662443b75acb0f4c083f3a" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun Jan 18 11:27:04 2026 +0100" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun Jan 18 22:07:24 2026 +0100" }, "message": "Improve dependencies filtering in AbstractAnalyzeMojo\n\nFor empty exclusion we cen return the same collection of artifacts\n" }, { "commit": "4e021c0ce0d71c1f33662443b75acb0f4c083f3a", "tree": "2471035f636a84000ef6b96c271bf7bef7e7ae16", "parents": [ "933e203d1b20deb57dca6f8cedb6cbf2f12a9ec8" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun Jan 18 08:59:56 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Jan 18 08:59:56 2026 +0100" }, "message": "Migration to JUnit 5 - avoid using AbstractMojoTestCase (#1574)\n\n* Migration to JUnit 5 - avoid using AbstractMojoTestCase\n\n- bump plugin-testing to 3.5.0\n- cleanups after parent\n\n" }, { "commit": "933e203d1b20deb57dca6f8cedb6cbf2f12a9ec8", "tree": "eff9967c90fd5c3f4e885d0c17cb87cb44f8b0af", "parents": [ "d0511ef7418b44cce418e23139ef4a1047fe9b73" ], "author": { "name": "Robert Scholte", "email": "rfscholte@apache.org", "time": "Fri Jan 16 17:56:12 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jan 16 17:56:12 2026 +0100" }, "message": "Introduce graphRoots for dependencyFilter based mojos (#1571)\n\nWith graphRoots it is possible to select one or more dependencies as the root of the artifact filters. By doing this you can isolate a set of jars for further purpose, like giving them their own classloader.\n\n---------\n\nCo-authored-by: Maarten Mulders \u003cmthmulders@users.noreply.github.com\u003e" }, { "commit": "d0511ef7418b44cce418e23139ef4a1047fe9b73", "tree": "f6f26700e287f51561fa48bc10e6ed33b6e6b362", "parents": [ "1cad2a567760d94bf5b06d42fa93ebfb999aca2a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jan 15 12:46:07 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jan 15 12:46:07 2026 +0100" }, "message": "Bump org.apache.maven.plugins:maven-plugins from 46 to 47 (#1578)\n\n* Bump org.apache.maven.plugins:maven-plugins from 46 to 47\n\nBumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 46 to 47.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n dependency-version: \u002747\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* cleanups\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Slawomir Jaranowski \u003cs.jaranowski@gmail.com\u003e" }, { "commit": "1cad2a567760d94bf5b06d42fa93ebfb999aca2a", "tree": "e03ac6a419096bc5dd93c01c9093099aeb677dfe", "parents": [ "bd0a4785aae6416ad6445d2c74d73479de8f9f44" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jan 13 17:48:11 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jan 13 17:48:11 2026 +0100" }, "message": "Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0 (#1576)\n\nBumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.10.4 to 4.11.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)\n- [Commits](https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.10.4...plexus-archiver-4.11.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-archiver\n dependency-version: 4.11.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "bd0a4785aae6416ad6445d2c74d73479de8f9f44", "tree": "3c55c2a6afd6721620150200c727e5feb44f71ae", "parents": [ "d6830bcbffde3129dc528642f292ae7cd9e053e6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jan 07 06:34:48 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jan 07 06:34:48 2026 +0100" }, "message": "Bump org.apache.maven.plugins:maven-plugins from 45 to 46 (#1573)\n\nBumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 45 to 46.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n dependency-version: \u002746\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d6830bcbffde3129dc528642f292ae7cd9e053e6", "tree": "e3e280f4a5382f64c7176f274b822c03b15bc569", "parents": [ "9876c7e8ce99387c021f5d85f5e0716ec539372a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jan 02 15:52:12 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jan 02 15:52:12 2026 +0100" }, "message": "Bump org.jsoup:jsoup from 1.21.2 to 1.22.1 (#1572)\n\nBumps [org.jsoup:jsoup](https://github.com/jhy/jsoup) from 1.21.2 to 1.22.1.\n- [Release notes](https://github.com/jhy/jsoup/releases)\n- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)\n- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.21.2...jsoup-1.22.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.jsoup:jsoup\n dependency-version: 1.22.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "9876c7e8ce99387c021f5d85f5e0716ec539372a", "tree": "b1aede8a76e32b4cb2e66303bbf55785fbec1a95", "parents": [ "c132819c76e3e520c66befb0a93ee621670a9ada" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun Dec 28 13:22:48 2025 +0100" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Wed Dec 31 10:11:29 2025 +0100" }, "message": "Migration to JUnit 5 - avoid using AbstractMojoTestCase\n\nNext part\n" }, { "commit": "c132819c76e3e520c66befb0a93ee621670a9ada", "tree": "aebb19afc55d286f6273d2c5cf0e8e4faf3d5248", "parents": [ "cc9cc12d4faf38ae80ab2795c624a220065eb766" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sun Dec 28 17:39:22 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Dec 28 17:39:22 2025 +0100" }, "message": "Bump mavenVersion from 3.9.11 to 3.9.12 (#1570)\n\n* Bump mavenVersion from 3.9.11 to 3.9.12\n\nBumps `mavenVersion` from 3.9.11 to 3.9.12.\n\nUpdates `org.apache.maven:maven-artifact` from 3.9.11 to 3.9.12\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.11 to 3.9.12\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.11...maven-3.9.12)\n\nUpdates `org.apache.maven:maven-model` from 3.9.11 to 3.9.12\n\nUpdates `org.apache.maven:maven-core` from 3.9.11 to 3.9.12\n\nUpdates `org.apache.maven:maven-repository-metadata` from 3.9.11 to 3.9.12\n\nUpdates `org.apache.maven:maven-settings` from 3.9.11 to 3.9.12\n\nUpdates `org.apache.maven:maven-compat` from 3.9.11 to 3.9.12\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.11...maven-3.9.12)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-artifact\n dependency-version: 3.9.12\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-plugin-api\n dependency-version: 3.9.12\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-model\n dependency-version: 3.9.12\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-core\n dependency-version: 3.9.12\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-repository-metadata\n dependency-version: 3.9.12\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-settings\n dependency-version: 3.9.12\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-compat\n dependency-version: 3.9.12\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Bump resolver to 1.9.25\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Slawomir Jaranowski \u003cs.jaranowski@gmail.com\u003e" }, { "commit": "cc9cc12d4faf38ae80ab2795c624a220065eb766", "tree": "4d8395bfb9cb2c8e305ef6af640f0d0d9f6f5f74", "parents": [ "38664c4a51a48205edd10a5b4bc29fb150707d0d" ], "author": { "name": "Elliotte Rusty Harold", "email": "elharo@users.noreply.github.com", "time": "Mon Dec 22 17:55:31 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Dec 22 17:55:31 2025 +0000" }, "message": "Move doc comment to correct location (#1568)\n\n* Move doc comment to correct location" }, { "commit": "38664c4a51a48205edd10a5b4bc29fb150707d0d", "tree": "c62d211e64292745f971ea7e78d9d5bb624a5497", "parents": [ "4f045a2134e1b09c48f1a6bc99b5cf051116e624" ], "author": { "name": "Elliotte Rusty Harold", "email": "elharo@users.noreply.github.com", "time": "Fri Dec 19 18:26:17 2025 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Dec 19 18:26:17 2025 +0000" }, "message": "[MDEP-974] strip ansi codes when writing to a file (#1564)\n\n* strip ansi codes when writing to a file\n* Correct test name\n* expected output depends on whether we have a version of Java that supports modules or not" }, { "commit": "4f045a2134e1b09c48f1a6bc99b5cf051116e624", "tree": "80cb1ec8b1bb3de30caf4d39a44c2898f9f76c5c", "parents": [ "793cceb993986a257072477250cba25a0ec8fd44" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sat Nov 29 19:15:04 2025 +0100" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue Dec 02 17:00:31 2025 +0100" }, "message": "Migration to JUnit 5 - avoid using AbstractMojoTestCase\n\nNext part\n" } ], "next": "793cceb993986a257072477250cba25a0ec8fd44" }