)]}'
{
  "log": [
    {
      "commit": "c2705d60f0a0c756941464051cc0cf4de4f39772",
      "tree": "10903d0df48c96c9288bd9107953cd47e8a4da90",
      "parents": [
        "5ebfb4dbcddf1e4a6932e6f510d45e98929d9d90"
      ],
      "author": {
        "name": "Arturo Bernal",
        "email": "abernal@apache.org",
        "time": "Thu Oct 29 08:50:35 2026 +0100"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Nov 02 16:20:01 2026 +0100"
      },
      "message": "[MSHADE-456] Remove test-jar dependencies from the dependency reduced POM\n\nA dependency declared with \u003ctype\u003etest-jar\u003c/type\u003e has no classifier in\nthe POM, but Maven resolves it to classifier \"tests\" once it becomes\nan Artifact (DefaultArtifact falls back to the artifact handler\u0027s\nclassifier when none is given). ShadeMojo built the comparison id for\na Dependency straight from its (empty) classifier, so it never matched\nthe id of the shaded artifact and the dependency survived in\ndependency-reduced-pom.xml.\n\nResolve the dependency\u0027s effective classifier through the injected\nArtifactHandlerManager before building the id, the same way Maven\nitself derives it for the resolved artifact.\n\nClaude-Session: https://claude.ai/code/session_0153qyh22xBMN1vPfWGz3jSH\n"
    },
    {
      "commit": "5ebfb4dbcddf1e4a6932e6f510d45e98929d9d90",
      "tree": "6bd7f38d0b78dae321c381c267076f7e0c965bcb",
      "parents": [
        "828530e4bad42ee6c5ef4150c8bc8ee4b2ad1f41"
      ],
      "author": {
        "name": "Arturo Bernal",
        "email": "abernal@apache.org",
        "time": "Thu Oct 29 11:50:53 2026 +0100"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Nov 02 16:19:02 2026 +0100"
      },
      "message": "Fix shaded artifact placement when outputDirectory is customized\n\nWhen outputDirectory is set to something other than the default build\ndirectory and finalName is left at its default, ShadeMojo replaced the\nproject\u0027s main artifact in place at its original (default) location\ninstead of the configured outputDirectory. This left the shaded jar in\ntarget/ while only the pre-shade backup ended up under outputDirectory.\n\nRoute the main artifact replacement through a helper that places the\nshaded jar in outputDirectory, matching how the sources/test/test-sources\nartifacts already behave, and update the project artifact\u0027s file so\ndownstream plugins pick up the right jar.\n\nClaude-Session: https://claude.ai/code/session_0153qyh22xBMN1vPfWGz3jSH\n"
    },
    {
      "commit": "828530e4bad42ee6c5ef4150c8bc8ee4b2ad1f41",
      "tree": "8418d50c58dfa8d734843ee1a17a277d9abaa664",
      "parents": [
        "300630f0f12aced53f6ebf34b6ce87c12d3eb65d"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Nov 02 14:49:43 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Nov 02 16:16:47 2026 +0100"
      },
      "message": "[MSHADE-380] Explain the overlap warnings of a build without clean in the FAQ\n"
    },
    {
      "commit": "300630f0f12aced53f6ebf34b6ce87c12d3eb65d",
      "tree": "8ab13d164fab957f7632c5cc74975429ac724b15",
      "parents": [
        "78105b3944880aa2b985a6279db1676c89377b41"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Nov 02 13:20:58 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Nov 02 15:16:22 2026 +0100"
      },
      "message": "Explain the manifest overlap warning and where the dependency-reduced POM goes\n"
    },
    {
      "commit": "78105b3944880aa2b985a6279db1676c89377b41",
      "tree": "8c765a205dd2b1d2f17161258589c49522e338f7",
      "parents": [
        "bd50e65cbd4510cbe44483f24cec8117ff8a1ee0"
      ],
      "author": {
        "name": "Efe",
        "email": "efe@rexcode.co.uk",
        "time": "Mon Nov 02 13:58:35 2026 +0300"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Nov 02 05:58:35 2026 -0500"
      },
      "message": "fix: write Maven namespace by default (#859)\n\nSigned-off-by: Efe Gökdemir \u003cefe@rexcode.co.uk\u003e"
    },
    {
      "commit": "bd50e65cbd4510cbe44483f24cec8117ff8a1ee0",
      "tree": "1fd64f49210e737cb1a8d8fc4e00be08b191ee4a",
      "parents": [
        "f0b3fa4be28329e37dba9451416f733b7b292c50"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Nov 01 16:10:23 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Nov 01 17:13:44 2026 +0100"
      },
      "message": "Show a custom Shader as a JSR-330 component\n"
    },
    {
      "commit": "f0b3fa4be28329e37dba9451416f733b7b292c50",
      "tree": "08b1aa87f853424aa4cc53499d8b2296f68dda88",
      "parents": [
        "8edd64a2c1ec3257c9b9d776372889e381041960"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Nov 01 15:13:32 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Nov 01 16:40:35 2026 +0100"
      },
      "message": "Give code blocks a real language instead of unknown\n"
    },
    {
      "commit": "8edd64a2c1ec3257c9b9d776372889e381041960",
      "tree": "560ca7a7e238c4a4a4287d063e792941bd69a232",
      "parents": [
        "50315ba7f9e73ca2f4a3960b65bf910e1a79d0c1"
      ],
      "author": {
        "name": "Efe",
        "email": "efe@rexcode.co.uk",
        "time": "Sat Oct 31 19:05:09 2026 +0300"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Oct 31 12:05:09 2026 -0400"
      },
      "message": "fix: use Gregorian year for generated NOTICE files (#885)"
    },
    {
      "commit": "50315ba7f9e73ca2f4a3960b65bf910e1a79d0c1",
      "tree": "c27812622cc3437dea0e7262304f66b1d32a174b",
      "parents": [
        "aeb788a3166db2b20a19be4f259524bba1bcb325"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 31 11:31:24 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 31 13:10:03 2026 +0100"
      },
      "message": "Replace the Hamcrest assertions in DefaultShaderTest\n\nThey had no Hamcrest imports, so master failed to compile its tests.\n"
    },
    {
      "commit": "aeb788a3166db2b20a19be4f259524bba1bcb325",
      "tree": "6ea4d26ef36510d10f29df7391a61cb1e5bc76ce",
      "parents": [
        "5803bbd3b759d9fcb7ec6a76f4444122968305b9"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 31 09:58:14 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 31 13:10:03 2026 +0100"
      },
      "message": "Drop JUnit 4 and the vintage engine from the tests\n\nxmlunit-legacy brings junit 3.8.1, and surefire adds the vintage engine whenever JUnit is on the test classpath, so ComponentsXmlResourceTransformerTest uses xmlunit-core instead.\n"
    },
    {
      "commit": "5803bbd3b759d9fcb7ec6a76f4444122968305b9",
      "tree": "b198481fd7b83b50cd68b8408131fcfa9cc49daa",
      "parents": [
        "5cf937fff684575ff644eda75d1f57fd8ef542a8"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 31 09:58:14 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 31 13:10:03 2026 +0100"
      },
      "message": "Move ShadeMojoTest to the JUnit 5 plugin testing harness\n"
    },
    {
      "commit": "5cf937fff684575ff644eda75d1f57fd8ef542a8",
      "tree": "69c2d519eccab52adacaceed877e726348310626",
      "parents": [
        "98f3a0a9976e660b1857dd63370fec4fd17a96b6"
      ],
      "author": {
        "name": "Abdullah",
        "email": "89297042+AzazelSensei@users.noreply.github.com",
        "time": "Sat Oct 31 14:15:32 2026 +0300"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Oct 31 07:15:32 2026 -0400"
      },
      "message": "Write an empty relativePath on dependency-reduced-pom.xml (#843)\n\n* Write an empty relativePath on dependency-reduced-pom.xml\n\nMaven 4 treats a missing relativePath as \"..\". When the generated\nPOM sits next to a pom that is not the parent, that default walks\ninto the wrong file and reports a parent cycle.\n\nIf the file at the configured relativePath is not the actual parent,\nI write an empty relativePath so Maven goes to the repository.\nLocal-only parents still keep a real relative path.\n\nFixes #813\n\n* Rename parent path helper to isSameFile\n\n* Make isSameFile private and drop its unit test\n\nThe helper is only reached from rewriteDependencyReducedPomIfWeHaveReduction.\n\n* Assert the full relativePath element in PomWriter tests\n\n* Let isSameFile throw IOException\n\nA failed canonicalization is not the same as a missing parent file.\n\n---------\n\nCo-authored-by: Sylwester Lachiewicz \u003cslachiewicz@gmail.com\u003e"
    },
    {
      "commit": "98f3a0a9976e660b1857dd63370fec4fd17a96b6",
      "tree": "cd2d3bd000451624ddca7d4c89bf75d82f160882",
      "parents": [
        "ccc91b6efe652dd04002f7b0bf1d2c2d78da711b"
      ],
      "author": {
        "name": "Vaclav Haisman",
        "email": "vhaisman@gmail.com",
        "time": "Wed Aug 26 20:31:59 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 31 11:42:35 2026 +0100"
      },
      "message": "[MSHADE-265] Allow overriding the shaded module name\n"
    },
    {
      "commit": "ccc91b6efe652dd04002f7b0bf1d2c2d78da711b",
      "tree": "2f4f64f4672556220c74d59a1a821daf3e6cf875",
      "parents": [
        "d2c3d71aedbfb52823e1d0223af3ca887c6c5eca"
      ],
      "author": {
        "name": "Vaclav Haisman",
        "email": "vhaisman@gmail.com",
        "time": "Wed Aug 26 19:37:58 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 31 11:42:35 2026 +0100"
      },
      "message": "[MSHADE-265] Parse module info options case-insensitively\n"
    },
    {
      "commit": "d2c3d71aedbfb52823e1d0223af3ca887c6c5eca",
      "tree": "c9421b63a8476bf3ce8286a871e64c54c50cf626",
      "parents": [
        "86014e8600019e801006e856885faced22919bcb"
      ],
      "author": {
        "name": "Vaclav Haisman",
        "email": "vhaisman@gmail.com",
        "time": "Tue Aug 25 20:20:46 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 31 11:42:35 2026 +0100"
      },
      "message": "[MSHADE-265] Limit forced manifest state to output writing\n"
    },
    {
      "commit": "86014e8600019e801006e856885faced22919bcb",
      "tree": "ad121e4d0e7017623ef3ba7ab76c02860cd4d087",
      "parents": [
        "5282d8dbf2ee1617e5b24af0dc0721e9c7b8f471"
      ],
      "author": {
        "name": "Vaclav Haisman",
        "email": "vhaisman@gmail.com",
        "time": "Thu Jul 30 19:53:00 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 31 11:42:35 2026 +0100"
      },
      "message": "[MSHADE-265] Add module-info merging support\n\nAdd opt-in merging for root and multi-release module descriptors while preserving the primary module boundary. Cover relocation, services, modular-floor handling, filtering failures, Maven 3/4 compatibility, and reactor output directories during manifest processing.\n\nKeep the PR-owned tests aligned with the JUnit 5 migration on master.\n\nFixes #629.\n\nFixes #581.\n\nFixes #588.\n"
    },
    {
      "commit": "5282d8dbf2ee1617e5b24af0dc0721e9c7b8f471",
      "tree": "cf058b5c84b6f0a08b1e7b72be98d52cdf9b5ceb",
      "parents": [
        "89bc65be199372d30352ab7d05685fb8a5e2af62"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Thu Oct 29 19:12:11 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 31 00:02:14 2026 +0100"
      },
      "message": "Declare the Maven artifacts the code uses\n\nmaven-shade-plugin: maven-resolver-api, maven-resolver-util (provided); maven-resolver-impl (test).\nAlso adds: resolverVersion property (1.9.27) in maven-shade-plugin.\n"
    },
    {
      "commit": "89bc65be199372d30352ab7d05685fb8a5e2af62",
      "tree": "5ca18624052d700c6d69831ee94813b3b16fa401",
      "parents": [
        "b790dacaba7aabc5a80ab6bf8acebecbe4cc17e9"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Fri Oct 30 00:24:11 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Fri Oct 30 08:26:10 2026 +0100"
      },
      "message": "Remove redundant `javaVersion` property\n"
    },
    {
      "commit": "b790dacaba7aabc5a80ab6bf8acebecbe4cc17e9",
      "tree": "fcae60878163f8357afe0ad7a2b40ae55e1c75e8",
      "parents": [
        "f4dcb0b4535da7a8be8f663062354c1cf321cca2"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Thu Oct 29 07:23:49 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Thu Oct 29 19:43:48 2026 +0100"
      },
      "message": "Point ciManagement at GitHub Actions\n"
    },
    {
      "commit": "f4dcb0b4535da7a8be8f663062354c1cf321cca2",
      "tree": "6b353db4a8be862f0199fc636fba1b67a89ef5fe",
      "parents": [
        "0e5a3be2a770e7c03a4419b3f8a00d27ec7cdb18"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 23:53:08 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Wed Oct 28 01:03:39 2026 +0100"
      },
      "message": "Configure the NOTICE transformer in one pass over the transformers\n"
    },
    {
      "commit": "0e5a3be2a770e7c03a4419b3f8a00d27ec7cdb18",
      "tree": "9e9ef6153e3c736d813e21b2d8146800b4ef1cf0",
      "parents": [
        "3d6ce4e39b74906a86e8862724baac0aa56e2df8"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 23:06:35 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Wed Oct 28 01:03:39 2026 +0100"
      },
      "message": "Mark the copyright year settings @since 3.7.0\n"
    },
    {
      "commit": "3d6ce4e39b74906a86e8862724baac0aa56e2df8",
      "tree": "75da240a4850d416745fb7830b5a0965c58a7ff1",
      "parents": [
        "6b94fed9081627a6e6102bf079f8a3beb8e9c081"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 22:19:32 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Wed Oct 28 01:03:39 2026 +0100"
      },
      "message": "[#679] Take the NOTICE copyright year from project.build.outputTimestamp\n\nApacheNoticeResourceTransformer ended its copyright line with the current\nyear, so the shaded jar changed with the year it was built in. It now uses\nthe year of project.build.outputTimestamp when that is set, and a new\ncopyrightYear setting takes precedence over both.\n"
    },
    {
      "commit": "6b94fed9081627a6e6102bf079f8a3beb8e9c081",
      "tree": "2577e58925db1cf9c988d3f700d55bebf0085b99",
      "parents": [
        "e9d6e9dac608174d07c4b154b469aef27196e2de"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 21:43:36 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Wed Oct 28 01:01:58 2026 +0100"
      },
      "message": "[#870] Warn when an artifactSet include or exclude matches no artifact\n\nA typo in an include, or one left behind after a dependency is removed,\nwent unnoticed. Unmatched includes and filters are now logged at WARN and\nunmatched excludes at INFO.\n"
    },
    {
      "commit": "e9d6e9dac608174d07c4b154b469aef27196e2de",
      "tree": "ca03f9ff2b3b43e3ff0861ff57289f6b7318877c",
      "parents": [
        "2043101bba9ac6ff37c9741702dd9e6c0c5e25a2"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 23:06:15 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Wed Oct 28 00:42:07 2026 +0100"
      },
      "message": "Prepare 3.7.0\n\nThe next release requires Maven 3.9.0 (#874) and carries a breaking change\n(#772), so it is a minor release, not 3.6.3.\n"
    },
    {
      "commit": "2043101bba9ac6ff37c9741702dd9e6c0c5e25a2",
      "tree": "a415c5ac61d0f8d09ce18f7064a8d7fff9858f62",
      "parents": [
        "3d9d575228cc05e436c72ba2053fce5a1b118a60"
      ],
      "author": {
        "name": "Vaclav Haisman",
        "email": "vhaisman@gmail.com",
        "time": "Fri Jul 31 01:44:22 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 23:35:20 2026 +0100"
      },
      "message": "Use project name in generated Apache NOTICE\n\nDefault an unset ApacheNoticeResourceTransformer project name from MavenProject while preserving explicit configuration and the empty fallback.\n\nFixes #742.\n"
    },
    {
      "commit": "3d9d575228cc05e436c72ba2053fce5a1b118a60",
      "tree": "fc3a101f42a8448c9bca56812ac95ba9a5188348",
      "parents": [
        "65b9ef4a04cb22bf9cd1831832cc9ad32a374f90"
      ],
      "author": {
        "name": "Efe Gökdemir",
        "email": "efe@rexcode.co.uk",
        "time": "Thu Sep 24 07:08:25 2026 +0300"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 23:33:29 2026 +0100"
      },
      "message": "[MSHADE-847] Use explicit ASM API in remapper\n"
    },
    {
      "commit": "65b9ef4a04cb22bf9cd1831832cc9ad32a374f90",
      "tree": "42fc259e9e2b1b74c77e626acf492d40802bba87",
      "parents": [
        "e0b4ab35911787ccd33cdb3593f112bd09c807f3"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 22:05:36 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 23:31:51 2026 +0100"
      },
      "message": "[#876] Let IncludeResourceTransformer replace an existing entry\n\nThe transformer never claimed an entry of its own resource name, so when a\nshaded jar already contained it the build failed with a duplicate entry.\n"
    },
    {
      "commit": "e0b4ab35911787ccd33cdb3593f112bd09c807f3",
      "tree": "cb38ed70178c079231e7694f0c04015ef0698bba",
      "parents": [
        "cd62ffb1e2845aa4ee37e851d6f5bf8756d40471"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 22:03:52 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 23:30:31 2026 +0100"
      },
      "message": "Compile against the Maven 3.9.x API\n\nmavenVersion went to 3.10.0 through a Dependabot bump, so the plugin\ncompiled against a newer API than the oldest Maven it supports. Dependabot\nnow ignores Maven core 3.10 and later for the artifacts the plugin uses.\n"
    },
    {
      "commit": "cd62ffb1e2845aa4ee37e851d6f5bf8756d40471",
      "tree": "fecd8ceb5fd00e88532f7a51bbecb065938414c6",
      "parents": [
        "07f3df32384df109b6695e2ed8826e341441cab4"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 21:31:14 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 23:25:15 2026 +0100"
      },
      "message": "[#595] Fail the build when an IncludeResourceTransformer file does not exist\n\nThe transformer reported nothing to write for a missing file, so a typo in\n\u003cfile\u003e silently dropped the resource from the jar.\n"
    },
    {
      "commit": "07f3df32384df109b6695e2ed8826e341441cab4",
      "tree": "1bc04e3d9d790080bb996d6633f4a2c2e005618a",
      "parents": [
        "826694d92f378f539217c6a8008d51ebc86a3018"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 21:53:17 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 23:21:21 2026 +0100"
      },
      "message": "Require Maven 3.9.0\n"
    },
    {
      "commit": "826694d92f378f539217c6a8008d51ebc86a3018",
      "tree": "1e91e385436bd32ecd3d84b751104a83b44998c4",
      "parents": [
        "c69ecd4b8fb3e1eec59c570415f875880104e588"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 21:35:03 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Oct 27 22:48:39 2026 +0100"
      },
      "message": "Document that the first matching resource transformer consumes a resource\n"
    },
    {
      "commit": "c69ecd4b8fb3e1eec59c570415f875880104e588",
      "tree": "4280ce50febab706ceb23d88691f61958f9d2128",
      "parents": [
        "cdb5b6b27499f51c6f55b4ea65849907fbea1e22"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 24 16:37:55 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Oct 24 22:47:41 2026 +0200"
      },
      "message": "Ignore SLF4J 2.x in Dependabot\n\nMaven 3 exports slf4j-api 1.7.x to plugins, so this component stays on\nSLF4J 1.7.x. See apache/maven-parent#623."
    },
    {
      "commit": "cdb5b6b27499f51c6f55b4ea65849907fbea1e22",
      "tree": "3e9afdeb82489eec85146b4a77602f4479b2dd8e",
      "parents": [
        "d366a2261ab91586f1bdfb7c098ab58522ec2221"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Oct 22 07:45:30 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Oct 22 07:45:30 2026 +0200"
      },
      "message": "Bump asmVersion from 9.11 to 9.11.1 (#868)\n\nBumps `asmVersion` from 9.11 to 9.11.1.\n\nUpdates `org.ow2.asm:asm` from 9.11 to 9.11.1\n\nUpdates `org.ow2.asm:asm-commons` from 9.11 to 9.11.1\n\n---\nupdated-dependencies:\n- dependency-name: org.ow2.asm:asm\n  dependency-version: 9.11.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.ow2.asm:asm-commons\n  dependency-version: 9.11.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d366a2261ab91586f1bdfb7c098ab58522ec2221",
      "tree": "5c3581f5082bf3483b1dd27f9a4576aacd99432f",
      "parents": [
        "c46f0e38d80cf3e59da40dc0c493997ddd2dfc3c"
      ],
      "author": {
        "name": "Slawomir Jaranowski",
        "email": "s.jaranowski@gmail.com",
        "time": "Sun Oct 18 19:00:07 2026 +0200"
      },
      "committer": {
        "name": "Slawomir Jaranowski",
        "email": "s.jaranowski@gmail.com",
        "time": "Sun Oct 18 19:20:52 2026 +0200"
      },
      "message": "Use push for PR Automation and add PR Check\n\n[ci skip]\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "c46f0e38d80cf3e59da40dc0c493997ddd2dfc3c",
      "tree": "8972f703d3c33fe4d8468f76bfa57b2faa70ce53",
      "parents": [
        "f4605ed5f9de8e07c04b1c1ca718c587f83bff2e"
      ],
      "author": {
        "name": "Slawomir Jaranowski",
        "email": "s.jaranowski@gmail.com",
        "time": "Tue Oct 13 23:16:52 2026 +0200"
      },
      "committer": {
        "name": "Slawomir Jaranowski",
        "email": "s.jaranowski@gmail.com",
        "time": "Tue Oct 13 23:16:52 2026 +0200"
      },
      "message": "Update ATR metadata\n\n[ci skip]\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "f4605ed5f9de8e07c04b1c1ca718c587f83bff2e",
      "tree": "7f16db707b605eedf33ca4afbfb78551d2347098",
      "parents": [
        "5c3b94bcaf7a07d2562a7e64e51d39cc3c703323"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Oct 13 07:13:19 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Oct 13 07:13:19 2026 +0200"
      },
      "message": "Bump asmVersion from 9.10.1 to 9.11 (#866)\n\nBumps `asmVersion` from 9.10.1 to 9.11.\n\nUpdates `org.ow2.asm:asm` from 9.10.1 to 9.11\n\nUpdates `org.ow2.asm:asm-commons` from 9.10.1 to 9.11\n\n---\nupdated-dependencies:\n- dependency-name: org.ow2.asm:asm\n  dependency-version: \u00279.11\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.ow2.asm:asm-commons\n  dependency-version: \u00279.11\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5c3b94bcaf7a07d2562a7e64e51d39cc3c703323",
      "tree": "cb756bc7fe5c3ea822fd0d34dc35c327bc3902bc",
      "parents": [
        "7aa69b25ef02ff9e7751f7aefa982973ab1bc8fa"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Oct 04 12:59:23 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Oct 04 12:59:23 2026 +0200"
      },
      "message": "Bump mavenVersion from 3.9.16 to 3.10.0 (#863)\n\nBumps `mavenVersion` from 3.9.16 to 3.10.0.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.16 to 3.10.0\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.16...maven-3.10.0)\n\nUpdates `org.apache.maven:maven-model` from 3.9.16 to 3.10.0\n\nUpdates `org.apache.maven:maven-core` from 3.9.16 to 3.10.0\n\nUpdates `org.apache.maven:maven-artifact` from 3.9.16 to 3.10.0\n\nUpdates `org.apache.maven:maven-resolver-provider` from 3.9.16 to 3.10.0\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-plugin-api\n  dependency-version: 3.10.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.apache.maven:maven-model\n  dependency-version: 3.10.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.apache.maven:maven-core\n  dependency-version: 3.10.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.apache.maven:maven-artifact\n  dependency-version: 3.10.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.apache.maven:maven-resolver-provider\n  dependency-version: 3.10.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7aa69b25ef02ff9e7751f7aefa982973ab1bc8fa",
      "tree": "01d9488792a592697f6d23935ec04d697152573d",
      "parents": [
        "7388b574d8a222499fd07b8b6060691c4ceebabd"
      ],
      "author": {
        "name": "Slawomir Jaranowski",
        "email": "s.jaranowski@gmail.com",
        "time": "Fri Oct 02 20:20:23 2026 +0200"
      },
      "committer": {
        "name": "Slawomir Jaranowski",
        "email": "s.jaranowski@gmail.com",
        "time": "Fri Oct 02 20:20:23 2026 +0200"
      },
      "message": "Simplify GH PR template boilerplate\n\n[ci skip]\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e"
    },
    {
      "commit": "7388b574d8a222499fd07b8b6060691c4ceebabd",
      "tree": "b5cc4a209a3f3ca354d8685b6a2577f331ce2571",
      "parents": [
        "f06627e5c1e4949aed23a77895d0b899bb0504e0"
      ],
      "author": {
        "name": "Michael Osipov",
        "email": "michaelo@apache.org",
        "time": "Sun Sep 20 12:07:08 2026 +0200"
      },
      "committer": {
        "name": "Michael Osipov",
        "email": "michaelo@apache.org",
        "time": "Sat Sep 26 17:56:09 2026 +0200"
      },
      "message": "Improve log messages\n"
    },
    {
      "commit": "f06627e5c1e4949aed23a77895d0b899bb0504e0",
      "tree": "3e9de44390d58cff2160ccdb22df90d5c99a10e0",
      "parents": [
        "b1311c96509e7b6e20ddacece27240de9c917baf"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Sep 25 18:20:36 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Sep 25 18:20:36 2026 +0200"
      },
      "message": "Bump org.apache.maven.plugins:maven-plugins from 49 to 50 (#857)\n\n* Bump org.apache.maven.plugins:maven-plugins from 49 to 50\n\nBumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 49 to 50.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-version: \u002750\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Fix IT compatibility with maven-parent 50\n\nProperty version.maven-surefire was removed in maven-apache-parent#588;\nuse the dedicated version.maven-surefire-plugin instead.\n\nCo-Authored-By: Claude Opus 5 (1M context) \u003cnoreply@anthropic.com\u003e\n\n* Use inputExcludes instead of the deprecated excludes\n\nThe excludes parameter is deprecated for removal since RAT 0.17.\n\nCo-Authored-By: Claude Opus 5 (1M context) \u003cnoreply@anthropic.com\u003e\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Slawomir Jaranowski \u003cs.jaranowski@gmail.com\u003e\nCo-authored-by: Claude Opus 5 (1M context) \u003cnoreply@anthropic.com\u003e"
    },
    {
      "commit": "b1311c96509e7b6e20ddacece27240de9c917baf",
      "tree": "340e3a0cc2935eb69a3e0f695459f8dc7425e0c2",
      "parents": [
        "5bc727a7b1b43249d6a04aad8509c309a889138e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Sep 23 13:21:18 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Sep 23 13:21:18 2026 +0200"
      },
      "message": "Bump org.xmlunit:xmlunit-legacy from 2.13.0 to 2.14.0 (#856)\n\nBumps [org.xmlunit:xmlunit-legacy](https://github.com/xmlunit/xmlunit) from 2.13.0 to 2.14.0.\n- [Release notes](https://github.com/xmlunit/xmlunit/releases)\n- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)\n- [Commits](https://github.com/xmlunit/xmlunit/compare/v2.13.0...v2.14.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.xmlunit:xmlunit-legacy\n  dependency-version: 2.14.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5bc727a7b1b43249d6a04aad8509c309a889138e",
      "tree": "6bb36f1f57f8a13f2911ca30098db06f744f1806",
      "parents": [
        "31f69d096c4c030a3aab739d280317afe3a1d0a7"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Sep 20 13:59:30 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Sep 20 14:47:17 2026 +0200"
      },
      "message": "Port the IT scripts from BeanShell to Groovy\n\nBeanShell is being retired across Maven (apache/maven#13207); the scripts keep the same checks.\n"
    },
    {
      "commit": "31f69d096c4c030a3aab739d280317afe3a1d0a7",
      "tree": "06caa5612339406eb5a9d345a04d4fa876f9e812",
      "parents": [
        "f78024760541d8a1aa6adaf7e574ae63c5773077"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Sep 20 13:52:41 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Sep 20 14:47:17 2026 +0200"
      },
      "message": "Rename the BeanShell IT scripts ahead of porting them\n"
    },
    {
      "commit": "f78024760541d8a1aa6adaf7e574ae63c5773077",
      "tree": "e57a260bba5af87493cdf8a736fff4ffbf72dbb0",
      "parents": [
        "17e699324758cecda9eb0f2b7b0be967abbdf842"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sat Sep 19 23:52:16 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Sep 20 00:25:24 2026 +0200"
      },
      "message": "Drop Hamcrest from tests\n"
    },
    {
      "commit": "17e699324758cecda9eb0f2b7b0be967abbdf842",
      "tree": "faa062bcdbce07eeff45bbbbfc697f291fea35d4",
      "parents": [
        "8f8c521c02169b2742823d75073e22774a384526"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Thu Sep 17 22:49:58 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Thu Sep 17 23:10:52 2026 +0200"
      },
      "message": "Ignore mrm-maven-plugin 2.x in Dependabot\n\nmrm-maven-plugin 2.0.0 declares a Java 17 prerequisite and this project\nstill builds on an older Java level. Drop this rule once javaVersion is 17.\n"
    },
    {
      "commit": "8f8c521c02169b2742823d75073e22774a384526",
      "tree": "6b7bf0de3347fd9a00337f379d9010d46e655702",
      "parents": [
        "c43bf5f63f38380c86de8902ef90aa4fbafdfb48"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Sep 11 18:13:24 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Sep 11 18:13:24 2026 +0200"
      },
      "message": "Bump org.apache.maven.plugin-tools:maven-plugin-annotations (#850)\n\nBumps [org.apache.maven.plugin-tools:maven-plugin-annotations](https://github.com/apache/maven-plugin-tools) from 3.15.2 to 3.16.0.\n- [Release notes](https://github.com/apache/maven-plugin-tools/releases)\n- [Commits](https://github.com/apache/maven-plugin-tools/compare/maven-plugin-tools-3.15.2...maven-plugin-tools-3.16.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugin-tools:maven-plugin-annotations\n  dependency-version: 3.16.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c43bf5f63f38380c86de8902ef90aa4fbafdfb48",
      "tree": "3ff47dc6fccdec9e515bbdb51abb94b1ab554121",
      "parents": [
        "20112534be64b1b3a47f53b540071356d3a8c432"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Sep 02 15:56:05 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Thu Sep 03 13:44:45 2026 +0200"
      },
      "message": "Bump org.codehaus.plexus:plexus-utils\n\nBumps [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 3.5.1 to 3.6.1.\n- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.5.1...plexus-utils-3.6.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-utils\n  dependency-version: 3.6.1\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "20112534be64b1b3a47f53b540071356d3a8c432",
      "tree": "5ab28a4da7cc45b2a6855d0ed70f49f9313448ef",
      "parents": [
        "fd718ca51d09ee974aeafcca0d9c04cd043ed1a1"
      ],
      "author": {
        "name": "Gerd Aschemann",
        "email": "ascheman@apache.org",
        "time": "Wed Aug 19 23:54:13 2026 +0200"
      },
      "committer": {
        "name": "Gerd Aschemann",
        "email": "github@aschemann.net",
        "time": "Wed Sep 02 17:35:24 2026 +0200"
      },
      "message": "Bump exec-maven-plugin to 3.6.3 in ITs\n\nSeveral ITs ran the shaded jar via exec-maven-plugin 1.1.1 (one at\n1.6.0), whose ancient transitive deps reference the dead maven.java.net\nrepo. Its SSL certificate expired 2026-04-01, so on a cold cache the\nplugin descriptor fails to resolve and the exec never runs -- an\nintermittent failure that surfaced on the Windows/JDK-25 M4 cell once\nMSHADE-374 was fixed. Bump to the current 3.6.3, which no longer pulls\nfrom that dead repo.\n\nCo-Authored-By: Claude Opus 4.8 \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "fd718ca51d09ee974aeafcca0d9c04cd043ed1a1",
      "tree": "be80f37ae40ed5a3f49bc301fe4026ec671d4188",
      "parents": [
        "d23031e32afd788ffba752ef53678fc1d73b6b58"
      ],
      "author": {
        "name": "Gerd Aschemann",
        "email": "ascheman@apache.org",
        "time": "Wed Aug 19 22:55:08 2026 +0200"
      },
      "committer": {
        "name": "Gerd Aschemann",
        "email": "github@aschemann.net",
        "time": "Wed Sep 02 17:35:24 2026 +0200"
      },
      "message": "Pin jar-plugin version in MSHADE-374 IT for Maven 4\n\nThe MSHADE-374_testJarArtifactSet IT left maven-jar-plugin unversioned,\nso under Maven 4 it resolved to a pre-release that failed to build the\ntest-jar (uber jar missing -\u003e NoSuchFileException, only surfaced once\nthe M4 CI matrix was enabled). Pin it via @version.maven-jar-plugin@,\nmatching the other ITs.\n\nCo-Authored-By: Claude Opus 4.8 \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "d23031e32afd788ffba752ef53678fc1d73b6b58",
      "tree": "7ba1691a7caf66712010a908965c7526f83a4f2a",
      "parents": [
        "adf384f1143da7bfb9c16450422ce64491982c5f"
      ],
      "author": {
        "name": "Hervé Boutemy",
        "email": "hboutemy@apache.org",
        "time": "Mon May 11 22:27:53 2026 +0200"
      },
      "committer": {
        "name": "Gerd Aschemann",
        "email": "github@aschemann.net",
        "time": "Wed Sep 02 17:35:24 2026 +0200"
      },
      "message": "enable build with Maven 4\n"
    },
    {
      "commit": "adf384f1143da7bfb9c16450422ce64491982c5f",
      "tree": "f5d682a2959e15027e1f16e854a4af930290f56b",
      "parents": [
        "184075af8c6c1c8ce47f3e47c3e27e8af7478675"
      ],
      "author": {
        "name": "Elliotte Rusty Harold",
        "email": "elharo@users.noreply.github.com",
        "time": "Fri Aug 28 14:30:44 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 28 10:30:44 2026 -0400"
      },
      "message": "Oracle javadoc guidelines (#751)"
    },
    {
      "commit": "184075af8c6c1c8ce47f3e47c3e27e8af7478675",
      "tree": "7df752efdf967b5288df9c4abbd1c663aa58a44e",
      "parents": [
        "b48867cd5212705bd787f2866a29510320cdd390"
      ],
      "author": {
        "name": "Václav Haisman",
        "email": "vhaisman@gmail.com",
        "time": "Tue Aug 25 01:07:40 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 24 19:07:40 2026 -0400"
      },
      "message": "[MSHADE-368] Preserve one-sided Groovy extensions (#832)\n\n* [MSHADE-368] Add Groovy extension integration test\n\nReproduce shading an extension module that only declares instance extension classes. Verify that the transformed descriptor and its extension class survive in the shaded JAR.\n\n* [MSHADE-368] Preserve one-sided Groovy extensions\n\nWrite the aggregated descriptor when either instance or static extension classes were collected. Groovy extension modules do not need to declare both kinds.\n\nFixes #572."
    },
    {
      "commit": "b48867cd5212705bd787f2866a29510320cdd390",
      "tree": "e3c1a97af2199095f9e5c4a1eab036981f2920fa",
      "parents": [
        "1a12026fce5e5fd2b76781aad0c25f55bb510275"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 24 11:27:47 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Aug 24 17:07:19 2026 +0200"
      },
      "message": "Bump org.codehaus.plexus:plexus-utils in /src/test/projects/test-project\n\nBumps [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 3.3.0 to 3.6.1.\n- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.3.0...plexus-utils-3.6.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-utils\n  dependency-version: 3.6.1\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "1a12026fce5e5fd2b76781aad0c25f55bb510275",
      "tree": "7156b8b527fa1dd377bcc8247be12842ac0a1852",
      "parents": [
        "db65da2df3feaa9ddfee7f46ab9a646974f499da"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 24 04:07:35 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Aug 24 13:24:27 2026 +0200"
      },
      "message": "Bump org.codehaus.plexus:plexus-utils from 3.6.1 to 3.6.2\n\nBumps [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 3.6.1 to 3.6.2.\n- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.6.1...plexus-utils-3.6.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-utils\n  dependency-version: 3.6.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "db65da2df3feaa9ddfee7f46ab9a646974f499da",
      "tree": "95a4c9bae8c2aed02828253b154697947e94d3d6",
      "parents": [
        "eb835aff8447fa0cc085728d97fa01e671e43112"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Aug 10 02:40:57 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Aug 10 02:59:50 2026 +0200"
      },
      "message": "Use \u003ca id\u003e rather than \u003ca name\u003e for the FAQ anchors\n\nFollow-up to the FML to Markdown conversion.\n\nmaven-site-plugin 3.21.0 strips the name\u003d attribute from an inline HTML\nanchor; 3.22.0 keeps it. On 3.21.0 every anchor on the page is therefore\nlost silently, on a green build. This repo builds with a parent that\npulls 3.22.0, so the pages are correct today, but \u003ca id\u003e is the form\nthat survives either way - and Xhtml5BaseParser reads Attribute.ID\nfirst, falling back to NAME only if it is absent, so id\u003d is the primary\npath. name\u003d on \u003ca\u003e is obsolete in HTML5 besides.\n\nEach anchor stays on its own line; folding one into the heading text\nsuppresses the section\u0027s own generated id.\n\nVerified by rendering faq.html before and after: the anchor set is\nunchanged and still a superset of what the original FML page served,\nthe \u003chead\u003e is byte-identical, the visible text matches the FML original\nword for word, and the site log reports no \"used more than once\"\nwarning.\n\nGenerated-by: Claude Opus 5 (1M context)\n"
    },
    {
      "commit": "eb835aff8447fa0cc085728d97fa01e671e43112",
      "tree": "b235e71adfcd78bd255a5908e99f8c1d45318109",
      "parents": [
        "e9d4288cbe3f2586a9c6123e87e0af5fe14d823c"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Aug 10 01:50:17 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Aug 10 02:37:10 2026 +0200"
      },
      "message": "Convert the FAQ from FML to Markdown\n\ndoxia-converter cannot target FML usefully - the questions come out as\nlink-reference syntax rather than headings, the [top] back-links become\nlinks to a nonexistent \u0027top\u0027 page, and the contents links lose their #\nanchors. The page is written out by hand instead.\n\nExplicit anchors keep the existing deep links working. The \u003ca name\u003e\nemitted here reproduces the anchor the rendered page serves today, not\nthe raw \u003cfaq id\u003e attribute, which FML rewrites whenever it is not a\nvalid XML name.\n\nVerified by building the site before and after and comparing the set of\nanchors the generated faq.html actually serves. Every anchor present\nbefore is still present after:\n\n  before: two-executions, top, bodyColumn\n  after:  the same three, plus two heading-derived ids\n\nThe \u003chead\u003e is byte-identical, so the title and metadata are unchanged.\nsite.xml needs no edit - src/site/fml/faq.fml and\nsrc/site/markdown/faq.md both render to faq.html.\n\nFML generates a [top] back-link after each answer; those are dropped\nrather than hand-written. The question now renders as an h3 heading\ninstead of a definition term. Those are the only rendering losses.\n\nGenerated-by: Claude Opus 5 (1M context)\n"
    },
    {
      "commit": "e9d4288cbe3f2586a9c6123e87e0af5fe14d823c",
      "tree": "fef9eccb6c06dcd0b9a6a0306f7a8e27f15d3e67",
      "parents": [
        "12eb8f98d803977e0a370f64435d9ef1daf2a346"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Aug 10 01:44:33 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Aug 10 02:37:10 2026 +0200"
      },
      "message": "Rename the FAQ ahead of converting it\n\nGit records a rename plus a rewrite in one commit as a delete and an\nadd, which stops \u0027git log --follow\u0027. Splitting the rename out keeps the\nhistory. Please merge or rebase rather than squash.\n\nGenerated-by: Claude Opus 5 (1M context)\n"
    },
    {
      "commit": "12eb8f98d803977e0a370f64435d9ef1daf2a346",
      "tree": "1c098fc9de896e7957815b1da32be3836e0bccc5",
      "parents": [
        "ee0189f949a8e30b1b3309ec0d45f030c1bc8461"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Aug 09 23:24:12 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Aug 10 00:01:25 2026 +0200"
      },
      "message": "Migrate JUnit 4 tests to JUnit 5\n\nConvert the 18 remaining JUnit 4 test classes under src/test/java to\nJUnit Jupiter using OpenRewrite\u0027s JUnit4to5Migration recipe, with\nhand fixes for what the recipe could not handle automatically:\n\n- TransformerTesterRule, a custom @Rule/TestRule, is rewritten as a\n  JUnit 5 InvocationInterceptor extension and PropertiesTransformerTest\n  now uses @ExtendWith instead of @Rule.\n- MinijarFilterTest\u0027s TemporaryFolder.builder() field is replaced with\n  a plain package-private @TempDir File field (the recipe produced a\n  non-compiling File.builder() call).\n- DefaultShaderTest\u0027s public static @ClassRule TemporaryFolder becomes\n  a package-private static @TempDir File field, renamed to camelCase\n  to satisfy checkstyle\u0027s VisibilityModifier and StaticVariableName\n  rules, which do not exempt @TempDir the way they exempt @Rule.\n\nShadeMojoTest is deliberately left on JUnit 4: it extends\nAbstractMojoTestCase, which extends PlexusTestCase, which extends\njunit.framework.TestCase. The pom now declares junit-jupiter-api and\njunit-vintage-engine (versions managed by the parent\u0027s junit-bom) test\ndependencies so both engines are discovered by the JUnit Platform\nprovider, alongside the existing junit:junit dependency that\nShadeMojoTest still needs.\n\nsrc/it and src/test/resources are untouched; they hold JUnit 4 based\nIT/sample fixtures and JAR/class-file shading inputs, not code to\nmigrate.\n\nGenerated-by: Claude Opus 5 (1M context)\n"
    },
    {
      "commit": "ee0189f949a8e30b1b3309ec0d45f030c1bc8461",
      "tree": "bb570ce7414c1196f136d5d86ed9e73666a1c671",
      "parents": [
        "659953d0df503e4d3f9389e206f32442d43af010"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Fri Aug 07 11:41:08 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Fri Aug 07 16:00:59 2026 +0200"
      },
      "message": "Restore the document metadata dropped when the pages were ported\n\nAn APT document opens with a header block giving its title, authors and date, and\ndoxia-converter turns that into YAML front matter. The port removed the front\nmatter along with the converter\u0027s per-line licence comments, so the generated\npages lost their author and date meta tags, and took their title from the first\nheading rather than from the document title.\n\nThe front matter has to come first in the file: the Markdown parser only looks for\nit when the source begins with \"---\". A licence header ahead of it would hide it,\nand RAT is happy either way.\n"
    },
    {
      "commit": "659953d0df503e4d3f9389e206f32442d43af010",
      "tree": "63915d4346687eee1a6c6a0a5724ec41979f36a0",
      "parents": [
        "a1dc273d544debfbe533951413df9ccc5805e5a4"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Thu Aug 06 13:52:59 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Thu Aug 06 15:24:28 2026 +0200"
      },
      "message": "Port the site documentation from APT to Markdown\n\n9 page(s) converted with doxia-converter and then cleaned up by hand:\n\n- \u003c\u003c\u003ccode\u003e\u003e\u003e becomes backticks, \u003c\u003cbold\u003e\u003e becomes **bold**, {{{url}text}}\n  becomes [text](url)\n- the ASF license header becomes a single block HTML comment\n- a page whose only Velocity reference was ${project.name} is now a plain\n  .md with the title spelled out\n- a page that keeps a reference stays a .vm. Velocity reads ## as a line\n  comment and would silently swallow every ATX heading below level one, so\n  subsections use setext underlines and anything deeper is wrapped in\n  #[[ ... ]]#\n- references APT rendered literally are escaped, so they do not resolve\n\nVerified by building the site before and after and comparing every\ngenerated page: the visible text and the link targets are unchanged apart\nfrom \u003cb\u003e/\u003ci\u003e becoming \u003cstrong\u003e/\u003cem\u003e and quotes in prose picking up the\nMarkdown module\u0027s typographic substitution.\n"
    },
    {
      "commit": "a1dc273d544debfbe533951413df9ccc5805e5a4",
      "tree": "32da2adf07f579ac51caeb206f67e953b93438e7",
      "parents": [
        "35408d52dcf8f8dd56c51a2a3cc8242f830491b3"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Thu Aug 06 13:52:59 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Thu Aug 06 15:24:28 2026 +0200"
      },
      "message": "Rename the site documents ahead of converting them\n\nA pure rename, so that git records it and `git log --follow` and `git blame` still\nreach the history of each page after the conversion that follows. The content is\nstill APT at this point and the site does not build between the two commits.\n"
    },
    {
      "commit": "35408d52dcf8f8dd56c51a2a3cc8242f830491b3",
      "tree": "0a70888e502e6c1e0504f4b561ae79550f802502",
      "parents": [
        "180384db15401edb354ff0cee99ec62b725698c7"
      ],
      "author": {
        "name": "Matthias Bünger",
        "email": "Bukama@users.noreply.github.com",
        "time": "Wed Aug 05 16:33:18 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 05 16:33:18 2026 +0200"
      },
      "message": "Update PR template (#834)"
    },
    {
      "commit": "180384db15401edb354ff0cee99ec62b725698c7",
      "tree": "8f4687d8d92aca51e75c4fb0414efc1d62c71cc8",
      "parents": [
        "0e7b80cca8881f4d786bddc6e03b6d22733a5e67"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Aug 04 19:23:37 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Aug 04 19:23:37 2026 +0200"
      },
      "message": "Bump org.xmlunit:xmlunit-legacy from 2.12.0 to 2.13.0 (#836)\n\nBumps [org.xmlunit:xmlunit-legacy](https://github.com/xmlunit/xmlunit) from 2.12.0 to 2.13.0.\n- [Release notes](https://github.com/xmlunit/xmlunit/releases)\n- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)\n- [Commits](https://github.com/xmlunit/xmlunit/compare/v2.12.0...v2.13.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.xmlunit:xmlunit-legacy\n  dependency-version: 2.13.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "0e7b80cca8881f4d786bddc6e03b6d22733a5e67",
      "tree": "ea59bd3e4737101a6f5aafe5c7e600903eeb120a",
      "parents": [
        "70f54a26a020b5a46cdc7c6aa0b5fa72569cda24"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Aug 04 01:47:29 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Tue Aug 04 02:00:47 2026 +0200"
      },
      "message": "Remove duplicate org.eclipse.sisu.plexus test dependency\n\n70f54a2 (\"Guice isn\u0027t needed (#752)\") added a test-scoped\norg.eclipse.sisu.plexus declaration under the \"Test\" marker, but the same\ndependency was already declared a few lines further down. Maven 4 treats a\nduplicate dependencies.dependency.(groupId:artifactId:type:classifier) as a\nmodel-building error rather than a warning, so the project no longer loads\nat all under 4.0.0-rc-5 or 4.0.0-rc-6:\n\n  \u0027dependencies.dependency.(groupId:artifactId:type:classifier)\u0027 must be\n  unique: org.eclipse.sisu:org.eclipse.sisu.plexus:jar -\u003e duplicate\n  declaration of version (?) @ line 217, column 5\n\nDrop the older bare declaration and keep the one carrying the \"Used by:\nTransformerTesterRule only\" comment. Nothing changes for Maven 3, where\nthis was only a warning.\n\nCo-Authored-By: Claude Opus 5 (1M context) \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "70f54a26a020b5a46cdc7c6aa0b5fa72569cda24",
      "tree": "dd204422dd9dbb18ba39dd04128c6d09a8297863",
      "parents": [
        "a23a6bf8480a9fa634fbcba04af70406297a4099"
      ],
      "author": {
        "name": "Elliotte Rusty Harold",
        "email": "elharo@users.noreply.github.com",
        "time": "Wed Jul 29 13:31:24 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jul 29 13:31:24 2026 +0000"
      },
      "message": "Guice isn\u0027t needed (#752)"
    },
    {
      "commit": "a23a6bf8480a9fa634fbcba04af70406297a4099",
      "tree": "d0e3e3d68428999a52cd322fe6dbe26597c48cc8",
      "parents": [
        "da203bfd41ba8526222ce1c226d3df04087e430b"
      ],
      "author": {
        "name": "Gerd Aschemann",
        "email": "ascheman@apache.org",
        "time": "Mon Jun 29 22:46:28 2026 +0200"
      },
      "committer": {
        "name": "Gerd Aschemann",
        "email": "github@aschemann.net",
        "time": "Sat Jul 25 12:21:37 2026 +0200"
      },
      "message": "[#819] Fix DRP exclusion loss on classifier dups\n\nUnder Maven 4, ShadeMojo.updateExcludesInDeps() walks a single\nconflict-resolved collect graph. The resolver prunes the duplicate\ntransitive node (\"omitted for duplicate\") under one of two\nclassifier-distinct variants of the same artifact, so the generated\ndependency-reduced-pom keeps the \u003cexclusion\u003e on only one variant.\n\nCollect that graph with verbose conflict resolution\n(ConflictResolver.CONFIG_PROP_VERBOSE \u003d STANDARD) so the omitted-duplicate\nnode is retained as a marker; the existing walk then re-attaches the\nexclusion to both variants. No behaviour change on Maven 3.9.16.\n\nCovered by the existing dep-reduced-pom-exclusions and\nMSHADE-467_parallel-dependency-reduced-pom ITs.\n\nCloses #819\n\nCo-Authored-By: Claude Opus 4.8 (1M context) \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "da203bfd41ba8526222ce1c226d3df04087e430b",
      "tree": "1e89ca5ecef24d057a8d4e5a30f5ab63ad13117a",
      "parents": [
        "72b7bcf50798413bc45de12eee33d7131d12f86d"
      ],
      "author": {
        "name": "Thomas Rebele",
        "email": "thomas.rebele@gmail.com",
        "time": "Thu Nov 13 14:25:53 2025 +0100"
      },
      "committer": {
        "name": "Gerd Aschemann",
        "email": "github@aschemann.net",
        "time": "Sat Jul 25 10:19:59 2026 +0200"
      },
      "message": "[MSHADE-374] Exclude test shading when shadeTestJar is enabled\n\nApply the artifact set to sources, tests, and test-sources as well.\n\n---\n\nhttps://issues.apache.org/jira/browse/MSHADE-374\n"
    },
    {
      "commit": "72b7bcf50798413bc45de12eee33d7131d12f86d",
      "tree": "2add877bb2382c42dfba92588c8e0586e1767a46",
      "parents": [
        "2449023e61ab5aa38fde5f76d9ee3a78a46ce6bc"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 14 04:09:59 2026 +0000"
      },
      "committer": {
        "name": "Slawomir Jaranowski",
        "email": "s.jaranowski@gmail.com",
        "time": "Thu Jul 16 01:05:33 2026 +0200"
      },
      "message": "Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml\n  dependency-version: \u00275\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "2449023e61ab5aa38fde5f76d9ee3a78a46ce6bc",
      "tree": "59b151a01cdc28c60703bdf1542015f3a9355de6",
      "parents": [
        "460c2c32089c82b98b7354aa228e919c80f49407"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 14 20:56:02 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 14 20:56:02 2026 +0200"
      },
      "message": "Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml (#825)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/stale.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/stale.yml\n  dependency-version: \u00275\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "460c2c32089c82b98b7354aa228e919c80f49407",
      "tree": "4931dfe41446efe03679e9aa3722696ce2bc51a0",
      "parents": [
        "9c110ab518418c833d29928a351dc37491c20445"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 14 20:55:51 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 14 20:55:51 2026 +0200"
      },
      "message": "Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml (#823)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml\n  dependency-version: \u00275\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "9c110ab518418c833d29928a351dc37491c20445",
      "tree": "88e678da3f81a7673b5f0acfd729aa7c04cd9de2",
      "parents": [
        "60269c00e386061e6a2590757767f5d0ca0fdb6c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 14 20:55:35 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 14 20:55:35 2026 +0200"
      },
      "message": "Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml (#824)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml\n  dependency-version: \u00275\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "60269c00e386061e6a2590757767f5d0ca0fdb6c",
      "tree": "8ad8dfead437ab91b20f3d234101736911526325",
      "parents": [
        "ba62a7b7c553e42c586bc6cc86b721f66b838ce1"
      ],
      "author": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Wed Jul 08 12:39:13 2026 +0200"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Wed Jul 08 14:41:11 2026 +0200"
      },
      "message": "Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability\n\nGenerated-by: Claude Code\n"
    },
    {
      "commit": "ba62a7b7c553e42c586bc6cc86b721f66b838ce1",
      "tree": "43aef5af73e99517de3eef23f05a68d5a4f61194",
      "parents": [
        "67a921b671b790332c1b0e3905f743d83542b09e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 29 17:20:29 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 29 17:20:29 2026 +0200"
      },
      "message": "Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#818)\n\nBumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 48 to 49.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-version: \u002749\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "67a921b671b790332c1b0e3905f743d83542b09e",
      "tree": "ea405b71da086c011fef3c28d13a43dbeff7abfc",
      "parents": [
        "f040f991071f27cb5bae4e322b2061d6c69507c2"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 01 07:14:54 2026 +0000"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Jun 07 14:39:18 2026 -0400"
      },
      "message": "Bump org.xmlunit:xmlunit-legacy from 2.11.0 to 2.12.0\n\nBumps [org.xmlunit:xmlunit-legacy](https://github.com/xmlunit/xmlunit) from 2.11.0 to 2.12.0.\n- [Release notes](https://github.com/xmlunit/xmlunit/releases)\n- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)\n- [Commits](https://github.com/xmlunit/xmlunit/compare/v2.11.0...v2.12.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.xmlunit:xmlunit-legacy\n  dependency-version: 2.12.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "f040f991071f27cb5bae4e322b2061d6c69507c2",
      "tree": "bd9c1a81727deced71fc12dcb3edd7e722cc02bb",
      "parents": [
        "b2b61910539003cc1c444508022522e4f1b1c6a2"
      ],
      "author": {
        "name": "Gerd Aschemann",
        "email": "gerd@aschemann.net",
        "time": "Sun Jun 07 11:32:27 2026 +0200"
      },
      "committer": {
        "name": "Hervé Boutemy",
        "email": "herve.boutemy@free.fr",
        "time": "Sun Jun 07 13:36:25 2026 +0200"
      },
      "message": "Fix ITs for Maven 4.0.0-rc-5 builds\n\nSix integration tests failed when building under Maven 4.0.0-rc-5 because their POMs do not pin the versions of maven-jar-plugin, maven-resources-plugin, maven-source-plugin, or (via oss-parent:7) maven-enforcer-plugin. Maven 4 then picked the 4.0.0-beta-1 of those plugins as the default, and the beta versions were built against an earlier Maven 4 rc API that has since changed; they throw NoSuchMethodError on Project.getPomArtifact, ProjectManager.getResources, or PluginParameterExpressionEvaluator.\u003cinit\u003e at runtime.\n\nPin the affected plugin versions in:\n- src/it/projects/MSHADE-105/pom.xml (pluginManagement)\n- src/it/projects/MSHADE-284_shadeTestJar/pom.xml\n- src/it/projects/MSHADE-285_createTestSourcesJar/pom.xml\n- src/it/projects/MSHADE-340_shadedTestJarArtifactAttached/pom.xml\n- src/it/projects/MSHADE-467_parallel-dependency-reduced-pom/pom.xml (pluginManagement)\n\nFor maven-source-plugin in MSHADE-285 and MSHADE-340, use the @version.maven-source-plugin@ filter property provided by the maven-plugins parent (per @hboutemy review feedback), matching the existing pattern for maven-jar-plugin and maven-resources-plugin.\n\nIn src/it/projects/mshade-123/pom.xml, drop the inherited org.sonatype.oss:oss-parent:7 parent which transitively pinned maven-enforcer-plugin to 1.0.\n\nVerified: mvn -P run-its clean verify with sdkman-installed Maven 4.0.0-rc-5 (fb3ecaef...) on JDK 17 Temurin / macOS aarch64 — Passed: 83, Failed: 0, Errors: 0, Skipped: 1.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "b2b61910539003cc1c444508022522e4f1b1c6a2",
      "tree": "b9d6cb06d78b829b5173f88ed39fdc751dfa2016",
      "parents": [
        "16c79860ea0e3f18560ce1ac63f833c1e4d52245"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri May 29 09:23:26 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri May 29 09:23:26 2026 +0200"
      },
      "message": "Bump asmVersion from 9.10 to 9.10.1 (#814)\n\nBumps `asmVersion` from 9.10 to 9.10.1.\n\nUpdates `org.ow2.asm:asm` from 9.10 to 9.10.1\n\nUpdates `org.ow2.asm:asm-commons` from 9.10 to 9.10.1\n\n---\nupdated-dependencies:\n- dependency-name: org.ow2.asm:asm\n  dependency-version: 9.10.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.ow2.asm:asm-commons\n  dependency-version: 9.10.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "16c79860ea0e3f18560ce1ac63f833c1e4d52245",
      "tree": "b2ec1a14633d7e74dd87998ae18d9d882322080d",
      "parents": [
        "ad7350fc21e546443d51ce697569e955f9ba1991"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 19 07:12:31 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 19 07:12:31 2026 +0200"
      },
      "message": "Bump mavenVersion from 3.9.15 to 3.9.16 (#812)\n\nBumps `mavenVersion` from 3.9.15 to 3.9.16.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.15 to 3.9.16\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.15...maven-3.9.16)\n\nUpdates `org.apache.maven:maven-model` from 3.9.15 to 3.9.16\n\nUpdates `org.apache.maven:maven-core` from 3.9.15 to 3.9.16\n\nUpdates `org.apache.maven:maven-artifact` from 3.9.15 to 3.9.16\n\nUpdates `org.apache.maven:maven-resolver-provider` from 3.9.15 to 3.9.16\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-plugin-api\n  dependency-version: 3.9.16\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-model\n  dependency-version: 3.9.16\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-core\n  dependency-version: 3.9.16\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-artifact\n  dependency-version: 3.9.16\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-resolver-provider\n  dependency-version: 3.9.16\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "ad7350fc21e546443d51ce697569e955f9ba1991",
      "tree": "779c87b5ddf0c8f37750ec52fa1523175f047cec",
      "parents": [
        "0b893721eec667718fc2f8452f3bd16a84f273b5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat May 16 22:15:30 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat May 16 22:15:30 2026 +0200"
      },
      "message": "Bump asmVersion from 9.9.1 to 9.10 (#811)\n\nBumps `asmVersion` from 9.9.1 to 9.10.\n\nUpdates `org.ow2.asm:asm` from 9.9.1 to 9.10\n\nUpdates `org.ow2.asm:asm-commons` from 9.9.1 to 9.10\n\n---\nupdated-dependencies:\n- dependency-name: org.ow2.asm:asm\n  dependency-version: \u00279.10\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.ow2.asm:asm-commons\n  dependency-version: \u00279.10\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "0b893721eec667718fc2f8452f3bd16a84f273b5",
      "tree": "211d36b934474afcc8719496a48674fb898e1732",
      "parents": [
        "e41b8368ed9a97eb1558c8693e838afdf0722cc8"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat May 16 22:15:14 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat May 16 22:15:14 2026 +0200"
      },
      "message": "Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#809)\n\nBumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 47 to 48.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-version: \u002748\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e41b8368ed9a97eb1558c8693e838afdf0722cc8",
      "tree": "7e646c6859cf71fd8f734c632e0fd0573ee8676b",
      "parents": [
        "c52adda94198bd88a19fe9eae509fc5d4801f801"
      ],
      "author": {
        "name": "Kamil Wójcik",
        "email": "59067671+KWojcik-sudo@users.noreply.github.com",
        "time": "Sun May 10 18:10:57 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun May 10 18:10:57 2026 +0200"
      },
      "message": "[MSHADE-260] shading does not rewrite Lambda deserializers (#807)\n\nAdded additional relocator that is able to detect java\u0027s function\ndefinitions, inside raw strings. This is enabled only by adding tag\nin plugin configuration, e.g.\n\u003crelocation\u003e\n  \u003cpattern\u003ecom.example\u003c/pattern\u003e\n  \u003cshadedPattern\u003ecom.shaded.example\u003c/shadedPattern\u003e\n  \u003cshadeSerializedLambda/\u003e\n\u003c/relocation\u003e\n\nNew relocator uses regex to find function definitions inside raw strings,\nupon detecting such definition it proceeds to replace all references to original\npackage.\n\nAdded new integration test to test if new behavior is really replacing\noriginal pattern in serialized lambdas."
    },
    {
      "commit": "c52adda94198bd88a19fe9eae509fc5d4801f801",
      "tree": "dc4d55b09345c721dc88bb36e86eb3bb856e369d",
      "parents": [
        "cbb3df17a613111dd39593f1ab8f97b16c985a65"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 20 14:06:03 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 20 14:06:03 2026 +0200"
      },
      "message": "Bump mavenVersion from 3.9.14 to 3.9.15 (#808)\n\nBumps `mavenVersion` from 3.9.14 to 3.9.15.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.14 to 3.9.15\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.14...maven-3.9.15)\n\nUpdates `org.apache.maven:maven-model` from 3.9.14 to 3.9.15\n\nUpdates `org.apache.maven:maven-core` from 3.9.14 to 3.9.15\n\nUpdates `org.apache.maven:maven-artifact` from 3.9.14 to 3.9.15\n\nUpdates `org.apache.maven:maven-resolver-provider` from 3.9.14 to 3.9.15\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-plugin-api\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-model\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-core\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-artifact\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-resolver-provider\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "cbb3df17a613111dd39593f1ab8f97b16c985a65",
      "tree": "072f3f3b9a06fbb720fb5f9ed9e98a15f763fb92",
      "parents": [
        "b1b39fda298ab71b7194f30de443bdc90852b60e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 03 07:35:31 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 03 07:35:31 2026 +0200"
      },
      "message": "Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 3.6.1 (#805)\n\nBumps [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 3.6.0 to 3.6.1.\n- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.6.0...plexus-utils-3.6.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-utils\n  dependency-version: 3.6.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b1b39fda298ab71b7194f30de443bdc90852b60e",
      "tree": "a74d2ac1fe36b02ae617a923f6dee155813e016a",
      "parents": [
        "014eabcc47a26c8a781a01d085a3e245577dca81"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Mar 13 04:02:46 2026 +0000"
      },
      "committer": {
        "name": "Slawomir Jaranowski",
        "email": "s.jaranowski@gmail.com",
        "time": "Sat Mar 14 17:21:58 2026 +0100"
      },
      "message": "Bump mavenVersion from 3.9.12 to 3.9.14\n\nBumps `mavenVersion` from 3.9.12 to 3.9.14.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.12 to 3.9.14\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.12...maven-3.9.14)\n\nUpdates `org.apache.maven:maven-model` from 3.9.12 to 3.9.14\n\nUpdates `org.apache.maven:maven-core` from 3.9.12 to 3.9.14\n\nUpdates `org.apache.maven:maven-artifact` from 3.9.12 to 3.9.14\n\nUpdates `org.apache.maven:maven-resolver-provider` from 3.9.12 to 3.9.14\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-plugin-api\n  dependency-version: 3.9.14\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-model\n  dependency-version: 3.9.14\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-core\n  dependency-version: 3.9.14\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-artifact\n  dependency-version: 3.9.14\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-resolver-provider\n  dependency-version: 3.9.14\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "014eabcc47a26c8a781a01d085a3e245577dca81",
      "tree": "14c0115953131977e655f14696f2804da45b4d84",
      "parents": [
        "f2dfe51ac49294fec442eab825dd720ed07702f6"
      ],
      "author": {
        "name": "Konrad Windszus",
        "email": "kwin@apache.org",
        "time": "Sun Mar 08 20:40:10 2026 +0100"
      },
      "committer": {
        "name": "Konrad Windszus",
        "email": "konrad@windszus.net",
        "time": "Wed Mar 11 23:35:16 2026 +0100"
      },
      "message": "Improve description of \"shade\" goal"
    },
    {
      "commit": "f2dfe51ac49294fec442eab825dd720ed07702f6",
      "tree": "883cda59561f22ac9d120abb7daa3c996c851080",
      "parents": [
        "fd5dde5c7f11d56a85a053f74382e6a5204aef12"
      ],
      "author": {
        "name": "Konrad Windszus",
        "email": "kwin@apache.org",
        "time": "Thu Mar 05 11:37:07 2026 +0100"
      },
      "committer": {
        "name": "Konrad Windszus",
        "email": "konrad@windszus.net",
        "time": "Sun Mar 08 19:44:29 2026 +0100"
      },
      "message": "Quote text within regular expression patterns correctly\n\nUse compiled RegEx patterns to speed up replacement\nClarify which pattern fields allow which wildcard (follow which syntax)\nPrevent using empty patterns.\nClarify javadoc for mojo parameter \"relocations\"\n\nThis closes #790\nThis closes #793"
    },
    {
      "commit": "fd5dde5c7f11d56a85a053f74382e6a5204aef12",
      "tree": "a51a41626eb4a696a13433dc6db7261cecd49f91",
      "parents": [
        "1e2b45718424bf59ac30c410f3dea779f598c06a"
      ],
      "author": {
        "name": "Konrad Windszus",
        "email": "kwin@apache.org",
        "time": "Thu Mar 05 10:32:26 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Mar 05 10:32:26 2026 +0100"
      },
      "message": "Prevent infinite loop in ManifestResourceTransformer.relocate(...) (#789)\n\nIntroduce Relocator.relocateAllClasses() to replace all patterns in a\ngiven string instead of only the first one and use that.\nOtherwise recursively using Relocator.relocateClass() on already\nrelocated string over and over again leads to endless loop when pattern\nis a prefix of the shaded pattern.\n\nThis closes #478"
    },
    {
      "commit": "1e2b45718424bf59ac30c410f3dea779f598c06a",
      "tree": "9e02d9e893588c8c16dac63ae777fa407c7e01e8",
      "parents": [
        "ad8de59b38b373a7a601209bc3e2e192805ad7cd"
      ],
      "author": {
        "name": "Tamas Cservenak",
        "email": "tamas@cservenak.net",
        "time": "Mon Mar 02 11:52:20 2026 +0100"
      },
      "committer": {
        "name": "Tamas Cservenak",
        "email": "tamas@cservenak.net",
        "time": "Mon Mar 02 11:52:20 2026 +0100"
      },
      "message": "[maven-release-plugin] prepare for next development iteration\n"
    },
    {
      "commit": "ad8de59b38b373a7a601209bc3e2e192805ad7cd",
      "tree": "d0afb1c7f31d0bf163cb7e0bae792856593014a9",
      "parents": [
        "8eb19dce1f587a6f67f3ab00254925e1a437afbb"
      ],
      "author": {
        "name": "Tamas Cservenak",
        "email": "tamas@cservenak.net",
        "time": "Mon Mar 02 11:52:18 2026 +0100"
      },
      "committer": {
        "name": "Tamas Cservenak",
        "email": "tamas@cservenak.net",
        "time": "Mon Mar 02 11:52:18 2026 +0100"
      },
      "message": "[maven-release-plugin] prepare release maven-shade-plugin-3.6.2\n"
    },
    {
      "commit": "8eb19dce1f587a6f67f3ab00254925e1a437afbb",
      "tree": "0f4b1ef87359c3397b3100077fcc306367437a66",
      "parents": [
        "397b2cd7a6315cc9f0ce14b87d6a9108edee25b1"
      ],
      "author": {
        "name": "Tamas Cservenak",
        "email": "tamas@cservenak.net",
        "time": "Thu Feb 26 22:11:06 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Feb 26 22:11:06 2026 +0100"
      },
      "message": "Drop unneeded dependencies (#788)\n\nDrops commons-io (one method used from it), and some other deps as well."
    },
    {
      "commit": "397b2cd7a6315cc9f0ce14b87d6a9108edee25b1",
      "tree": "d916ae510685730d113c8b8301a110f9ea3df1d4",
      "parents": [
        "eca6398fd26db22a8f94da99682251ab85a758d8"
      ],
      "author": {
        "name": "Tamas Cservenak",
        "email": "tamas@cservenak.net",
        "time": "Thu Feb 26 18:41:28 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Feb 26 18:41:28 2026 +0100"
      },
      "message": "Drop excessive dependencies (#786)\n\nThis plugin drags TOO MUCH just for too few things. Drop them.\n\nThis PR drops:\n* commons-compress w/ transitive deps\n* commons-io (makes it test)\n\nDropped A LOT of transitive deps:\nhttps://gist.github.com/cstamas/57755aeef69d71f8b7bc88a584c8c524\n\nResult: 3.9MiB vs 1.4MiB\n"
    },
    {
      "commit": "eca6398fd26db22a8f94da99682251ab85a758d8",
      "tree": "05d0a6e89d8af75d8e9f0e9983ce4a41fd56263b",
      "parents": [
        "7edce171e15fccee898a69d264bdfdbe21229952"
      ],
      "author": {
        "name": "Tamas Cservenak",
        "email": "tamas@cservenak.net",
        "time": "Thu Feb 26 15:12:35 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Feb 26 15:12:35 2026 +0100"
      },
      "message": "Bug: Extra JARs and Artifacts were not subjected to filtering (#785)\n\nThe `extraJars` and `extraArtifacts` were added to shaded JAR as is, without subjecting them to filtering."
    },
    {
      "commit": "7edce171e15fccee898a69d264bdfdbe21229952",
      "tree": "fff6a63dc1daef7c586bfb58bbf6f2460138d954",
      "parents": [
        "3171a34b15528336c5e7baaf74d18a9140076973"
      ],
      "author": {
        "name": "Matthias Bünger",
        "email": "Bukama@users.noreply.github.com",
        "time": "Thu Feb 26 14:33:17 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Feb 26 14:33:17 2026 +0100"
      },
      "message": "Update to parent POM v 47 (#781)\n\nUpdates parent POM and dependencies, and fixes ITs to not use ancient plugins and Java versions.\n\n---------\n\nCo-authored-by: Tamas Cservenak \u003ctamas@cservenak.net\u003e"
    },
    {
      "commit": "3171a34b15528336c5e7baaf74d18a9140076973",
      "tree": "95e81d68554a8781f9e3ab6b37003d5103030e3c",
      "parents": [
        "678844bd0330fef60f29c5b9d9476867c82c0699"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@gmail.com",
        "time": "Sat Feb 14 15:35:51 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Feb 14 15:35:51 2026 +0100"
      },
      "message": "Mockito improvements (#783)\n\nCo-authored-by: Moderne \u003cteam@moderne.io\u003e"
    },
    {
      "commit": "678844bd0330fef60f29c5b9d9476867c82c0699",
      "tree": "a5856ce860e0ec8a1af2de8fe2727b2facb6f3a6",
      "parents": [
        "73ec909916f71e018508b4d39e78d939578ee9fa"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Feb 09 08:23:49 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Feb 09 08:23:49 2026 +0100"
      },
      "message": "Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#782)\n\nBumps org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugin-testing:maven-plugin-testing-harness\n  dependency-version: 3.5.1\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "73ec909916f71e018508b4d39e78d939578ee9fa",
      "tree": "c7772d9e51bda079d854a3bc187e31a9aa10f883",
      "parents": [
        "5f7a87719217bae4b18cf9d29d326e2b064edd4a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jan 19 07:37:36 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jan 19 07:37:36 2026 +0100"
      },
      "message": "Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (#780)\n\nBumps [org.codehaus.mojo:mrm-maven-plugin](https://github.com/mojohaus/mrm) from 1.7.0 to 1.7.1.\n- [Release notes](https://github.com/mojohaus/mrm/releases)\n- [Commits](https://github.com/mojohaus/mrm/compare/1.7.0...mrm-1.7.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.mojo:mrm-maven-plugin\n  dependency-version: 1.7.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5f7a87719217bae4b18cf9d29d326e2b064edd4a",
      "tree": "6533aad1825d70906361eb1b819d020b83a1f057",
      "parents": [
        "73c52477a0e1b67eee420ec207a8f50c1d3e99f0"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jan 12 06:11:57 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jan 12 06:11:57 2026 +0100"
      },
      "message": "Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#778)\n\nBumps org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugin-testing:maven-plugin-testing-harness\n  dependency-version: 3.5.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "73c52477a0e1b67eee420ec207a8f50c1d3e99f0",
      "tree": "0af38e1ce1bdd3da81ca3deea654b65901b7de8c",
      "parents": [
        "22c92f6b1881dd942d0dbf4d8501fcc9baf0a5fb"
      ],
      "author": {
        "name": "Sandra Parsick",
        "email": "sparsick@users.noreply.github.com",
        "time": "Sat Dec 20 07:44:06 2025 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Dec 20 07:44:06 2025 +0000"
      },
      "message": "chore: remove junit3 reference (#762)\n\n* chore: remove junit3 reference\n\n- in three cases, there are still junit3 reference because they are part of a test.\n\n\nSigned-off-by: Sandra Parsick \u003csandra@parsick.dev\u003e"
    },
    {
      "commit": "22c92f6b1881dd942d0dbf4d8501fcc9baf0a5fb",
      "tree": "febbac71c30b1424bf19e3fecafdf4fdf3e76072",
      "parents": [
        "369d3fa246d2e5144f46f13bc2d8c35b8758479a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Dec 16 07:11:57 2025 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Dec 16 07:11:57 2025 +0100"
      },
      "message": "Bump asmVersion from 9.9 to 9.9.1 (#774)\n\nBumps `asmVersion` from 9.9 to 9.9.1.\n\nUpdates `org.ow2.asm:asm` from 9.9 to 9.9.1\n\nUpdates `org.ow2.asm:asm-commons` from 9.9 to 9.9.1\n\n---\nupdated-dependencies:\n- dependency-name: org.ow2.asm:asm\n  dependency-version: 9.9.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.ow2.asm:asm-commons\n  dependency-version: 9.9.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "369d3fa246d2e5144f46f13bc2d8c35b8758479a",
      "tree": "f1baebd55b4331ccfe695166604e955e7b7d4fea",
      "parents": [
        "328dd5e57944d48f3980321551d339770ae7f23c"
      ],
      "author": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Nov 16 02:18:37 2025 +0100"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Sun Nov 16 02:30:27 2025 +0100"
      },
      "message": "Exclude Java 25\n"
    },
    {
      "commit": "328dd5e57944d48f3980321551d339770ae7f23c",
      "tree": "0da2abf56c7232d5dd5260fc338aa51ee70d9636",
      "parents": [
        "19e685d6c85199581f3031351a2f2623da8bef61"
      ],
      "author": {
        "name": "Matthias Bünger",
        "email": "hardcore_army@web.de",
        "time": "Tue Nov 04 20:37:16 2025 +0100"
      },
      "committer": {
        "name": "Sylwester Lachiewicz",
        "email": "slachiewicz@apache.org",
        "time": "Mon Nov 10 03:29:58 2025 +0100"
      },
      "message": "Update compiler plugin\n"
    }
  ],
  "next": "19e685d6c85199581f3031351a2f2623da8bef61"
}
