Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the maven-build-plugins group with 10 updates in the / directory:

Package From To
me.fabriciorby:maven-surefire-junit5-tree-reporter 1.4.0 1.5.1
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
org.apache.maven.plugins:maven-enforcer-plugin 3.6.1 3.6.2
org.apache.maven.plugins:maven-dependency-plugin 3.8.1 3.9.0
org.apache.maven.plugins:maven-resources-plugin 3.3.1 3.4.0
org.apache.maven.plugins:maven-source-plugin 3.3.1 3.4.0
org.apache.maven.plugins:maven-javadoc-plugin 3.11.3 3.12.0
org.owasp:dependency-check-maven 12.1.3 12.1.9
org.codehaus.mojo:exec-maven-plugin 3.5.1 3.6.2
org.sonatype.central:central-publishing-maven-plugin 0.8.0 0.9.0

Updates me.fabriciorby:maven-surefire-junit5-tree-reporter from 1.4.0 to 1.5.1

Release notes

Sourced from me.fabriciorby:maven-surefire-junit5-tree-reporter's releases.

v1.5.1

What's Changed

  • Still not compatible with maven-surefire 3.5.4

Full Changelog: fabriciorby/maven-surefire-junit5-tree-reporter@v1.5.0...v1.5.1

v1.5.0

What's Changed

Full Changelog: fabriciorby/maven-surefire-junit5-tree-reporter@v1.4.0...v1.5.0

Commits
  • 87a29ad bump version to 1.5.1
  • ac3676c check if nested test starts with the parent's name before cleaning it (#71)
  • 29593ec Fix Node traversal and cleanup during printing phase (#70)
  • cdae8bb Enable maven-gpg-plugin
  • 4565faf Update deploy action
  • d72b36a Donwgrade JUnit to 5.14.0
  • b2fb769 Maven Build on CI (#66)
  • 7f9f9d5 Add Emoji Theme and remove deprecated JUnit5StatelessTestsetInfoTreeReporterU...
  • 964e2d7 cleanup and version bump (#65)
  • ab9b17a Print the tests while traversing an actual tree (#63)
  • See full diff in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.1 to 3.6.2

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.2

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 82ba770 [maven-release-plugin] prepare release enforcer-3.6.2
  • 5313c70 Bump m-invoker-p to 3.9.1
  • ee5abee Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
  • 6c5a152 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  • 89ccb70 Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#931)
  • 03ed82d Update Version Ranges link in site.xml (#926)
  • d282dc4 Fixes #920 - Remove usage of Stack
  • 27e1f46 Use SessionData for cache storage (#930)
  • a1bac9b Fix formatting typo in dependencyConvergence.apt.vm
  • 870a1ed Correct support parameters documentation for banned repositories rule
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-dependency-plugin from 3.8.1 to 3.9.0

Release notes

Sourced from org.apache.maven.plugins:maven-dependency-plugin's releases.

3.9.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 826e5f0 [maven-release-plugin] prepare release maven-dependency-plugin-3.9.0
  • 0db1acc Use Resolver API in go-offline for dependencies resolving (#1533)
  • e50031a Use Resolver API in go-offline for plugins resolving
  • 6ed4b1a Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
  • 8776c61 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  • d2af78e Ignore Mockito 5.x and SLF4j 2.x by dependabot
  • dcd4b7d Bump org.assertj:assertj-core from 3.27.4 to 3.27.5
  • 7523948 Strict check of dependencies usage
  • 23186d4 Fixes #1522, add render-dependencies mojo (#1523)
  • bc1893f Use Resolver API in resolve-plugin
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-resources-plugin from 3.3.1 to 3.4.0

Release notes

Sourced from org.apache.maven.plugins:maven-resources-plugin's releases.

3.4.0

🚀 New features and improvements

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • b07d56e [maven-release-plugin] prepare for next development iteration
  • 21e646c [maven-release-plugin] prepare release maven-resources-plugin-3.4.0
  • 61801af Migrate site to Doxia 2
  • 146ebb8 Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 (#439)
  • 5013682 Bump org.apache.maven.resolver:maven-resolver-api from 1.6.3 to 1.9.24
  • d7c4d28 Bump Maven to 3.9.11 while keep prerequisites on 3.6.3
  • e33f1ec Bump org.codehaus.plexus:plexus-interpolation from 1.28 to 1.29
  • ce77f50 Bump m-invoker-p to 3.9.1
  • 726f429 Bump org.apache.maven.plugins:maven-plugins from 43 to 45
  • a747bae PlexusFileUtils Refaster recipes
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0

Release notes

Sourced from org.apache.maven.plugins:maven-source-plugin's releases.

3.4.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • ecf937a [maven-release-plugin] prepare release maven-source-plugin-3.4.0
  • 95b3bf4 Revert "[maven-release-plugin] prepare for next development iteration"
  • 7a9a770 [maven-release-plugin] prepare for next development iteration
  • 292c1ce Use plexus-utils version from parent
  • bf79b71 Bump m-invoker-p to 3.9.1
  • 4f3fcb9 Bump commons-io:commons-io from 2.20.0 to 2.21.0
  • a867442 Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4
  • 51c66ac Bump org.apache.maven:maven-archiver from 3.6.4 to 3.6.5
  • 267df46 Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.10.3
  • ef85324 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.12.0

💥 Breaking changes

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 2a06bed [maven-release-plugin] prepare release maven-javadoc-plugin-3.12.0
  • a71ecf9 bump version 3.12.0-SNAPSHOT
  • 88f2b71 [maven-release-plugin] prepare for next development iteration
  • 7e18956 [maven-release-plugin] prepare release maven-javadoc-plugin-3.11.4
  • c11b76c In legacyMode, don't use -sourcepath, unless excludePackageNames is not empty...
  • bc9904b remove fix mojo (#1263)
  • f310135 Fix package {...} does not exist in legacyMode (#1243)
  • c8270f9 detectOfflineLinks is now false per default for all jar mojo issue #1258 ...
  • 953e609 Delete flaky test (#1260)
  • 2bba7a4 Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
  • Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 12.1.3 to 12.1.9

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 12.1.9

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 12.1.8

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 12.1.7

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 12.1.6

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Version 12.1.5

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 12.1.9 (2025-11-11)

  • fix: correct bundle audit gem in Dockerfile (#8121)
  • fix: normalization during comparisons (#8046)
  • docs: document multiple configurations for gradle (#8111)
  • docs: fix typos in some files (#8106)
  • docs: Update SBT plugin link; fix dead report link (#8086)
  • chore: Replace deprecated lucene methods (#8079)
  • docs: fix #8076 - Error in documentation "Suppressing False Positives" (#8077)
  • fix(fp): Improve false positive suppression for matches against golang web_project (#8059)
  • fix(fp): Consolidate/update icu4j suppressions for false positives (#8062)
  • fix(fp): Correct GRPC java suppressions for newer C/C++/native false positives (#8063)
  • fix(fp): Suppress false positive CPEs for protobuf-java per #7854 (#8064)

See the full listing of changes

Version 12.1.8 (2025-10-13)

  • fix: improve VulnerableSoftware comparison (#8031)
  • build: fix flaky central test (#8039)
  • docs: Improve Gradle docs wrt experimental analyzers, use of Central and Proxy configuration (#8036)
  • docs: add note about central analyzer for gradle (#8038)

See the full listing of changes

Version 12.1.7 (2025-10-12)

  • fix: disable central analyzer after failures (#7993)
  • fix: Suppress JVM warnings from Lucene within CLI (#8003)
  • fix: Clean up Apache Lucene logging via SLF4j redirect (#7979)
  • fix: Correct Archive Analyzer behaviour on certain tgz archives (#7986)
  • fix: Update NVD CPE search URLs in generated reports to match new search interface (#7970)
  • fix: improve OSS Index Error Reporting (#7977)
  • fix(fp): Consolidate false positive suppression for false positives on Redis client libs (#8017)
  • fix(fp): Fix more common false positives for popular PHP/composer frameworks with generic names (#7994)
  • docs: improve slack notification documentation (#8026)
  • docs: Documentation artifactory settings fix (#7999)
  • docs: Clarify Nexus Analyzer requirements and usage (#8000)
  • build: Build amd64 and arm64 multi-platform Docker image (#7952)

See the full listing of changes

Version 12.1.6 (2025-09-24)

  • fix: Disable OSS Index if its credentials are missing (#7963)
  • fix: Correct CVSSv4 parsing for low precision OSSIndex values (#7935)
  • fix(fp): Fix false positives for Redis Server against NPM/JS client libs (#7942)
  • docs: Fix legacy GitHub links within docs and CHANGELOG (#7944)
  • chore: fix version typo in security policy (#7936)

... (truncated)

Commits
  • c709ca1 build: prepare release v12.1.9
  • 25e3f13 docs: release 12.1.9
  • cd7e8ab fix: correct bundle audit gem in Dockerfile (#8121)
  • a663aa2 build(deps): bump us.springett:cpe-parser from 3.0.0 to 3.0.1 (#8120)
  • e553277 docs: document multiple configurations for gradle (#8111)
  • 3adb7f5 build(deps): bump org.apache.maven.plugins:maven-release-plugin from 3.1.1 to...
  • 5f6e74a build(deps): bump commons-io:commons-io from 2.20.0 to 2.21.0 (#8110)
  • 3717a9a build(deps): bump commons-io:commons-io from 2.20.0 to 2.21.0
  • f765457 build(deps): bump JamesIves/github-pages-deploy-action from 4.7.3 to 4.7.4 (#...
  • 239e9bf build(deps): bump commons-codec:commons-codec from 1.19.0 to 1.20.0 (#8103)
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:exec-maven-plugin from 3.5.1 to 3.6.2

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.6.2

🚀 New features and improvements

  • Add JPMS ServiceLo...

    Description has been truncated

Bumps the maven-build-plugins group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [me.fabriciorby:maven-surefire-junit5-tree-reporter](https://github.com/fabriciorby/maven-surefire-junit5-tree-reporter) | `1.4.0` | `1.5.1` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.14.1` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.1` | `3.6.2` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.8.1` | `3.9.0` |
| [org.apache.maven.plugins:maven-resources-plugin](https://github.com/apache/maven-resources-plugin) | `3.3.1` | `3.4.0` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.1` | `3.4.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.11.3` | `3.12.0` |
| [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) | `12.1.3` | `12.1.9` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.5.1` | `3.6.2` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.8.0` | `0.9.0` |



Updates `me.fabriciorby:maven-surefire-junit5-tree-reporter` from 1.4.0 to 1.5.1
- [Release notes](https://github.com/fabriciorby/maven-surefire-junit5-tree-reporter/releases)
- [Commits](fabriciorby/maven-surefire-junit5-tree-reporter@v1.4.0...v1.5.1)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.1...enforcer-3.6.2)

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.8.1 to 3.9.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.8.1...maven-dependency-plugin-3.9.0)

Updates `org.apache.maven.plugins:maven-resources-plugin` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/apache/maven-resources-plugin/releases)
- [Commits](apache/maven-resources-plugin@maven-resources-plugin-3.3.1...v3.4.0)

Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.1...maven-source-plugin-3.4.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.11.3 to 3.12.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.3...maven-javadoc-plugin-3.12.0)

Updates `org.owasp:dependency-check-maven` from 12.1.3 to 12.1.9
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](dependency-check/DependencyCheck@v12.1.3...v12.1.9)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.5.1 to 3.6.2
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.5.1...3.6.2)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.8.0 to 0.9.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

---
updated-dependencies:
- dependency-name: me.fabriciorby:maven-surefire-junit5-tree-reporter
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-resources-plugin
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.owasp:dependency-check-maven
  dependency-version: 12.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-build-plugins
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-build-plugins
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant