Release: com.io7m.xstructural 2.0.0

Change: Add a new max-width and line-height.
Change: Update org.codehaus.mojo:jaxb2-maven-plugin:3.1.0 → 3.3.0.
Change: Update org.junit:junit-bom:5.10.2 → 5.14.2.
Change: Update ch.qos.logback:logback-classic:1.5.24 → 1.5.28.
Change: Update actions/setup-java:5.1.0 → 5.2.0.
Change: Update ch.qos.logback:logback-classic:1.5.21 → 1.5.24.
Change: Update net.sf.saxon:Saxon-HE:12.4 → 12.9.
Change: Update org.immutables:value:2.12.0 → 2.12.1.
Change: Update actions/checkout:6.0.1 → 6.0.2.
Change: Update io7m.maven-api.version:3.9.11 → 3.9.12.
Change: Update org.immutables:value:2.10.1 → 2.12.0.
Change: Update org.slf4j:slf4j-api:2.0.13 → 2.0.17.
Change: Update com.github.marschall:memoryfilesystem:2.8.0 → 2.8.2.
Change: Update org.apache.tika:tika-core:3.2.2 → 3.2.3.
Change: Update ch.qos.logback:logback-classic:1.5.6 → 1.5.21.
Change: Update actions/checkout:5.0.0 → 6.0.1.
Change: Add a type checker for type attributes. (Ticket: #40)
Change: (Backwards incompatible) Rename the .xml module due to a long-standing Dependabot bug.
Change: Unify the XSLT stylesheets. (Ticket: #41)
Change: Ensure paragraph CSS includes type attributes. (Ticket: #17)
Change: Update org.apache.tika:tika-core:2.9.2 → 3.2.2.
Change: Update io7m.maven-api.version:3.9.6 → 3.9.11.
Change: Update commons-io:commons-io:2.16.1 → 2.21.0.
Change: Update org.apache.maven.plugins:maven-plugin-plugin:3.11.0 → 3.15.2.
Change: Update org.w3c:epubcheck:5.1.0 → 5.3.0.
Change: Update org.apache.commons:commons-compress:1.26.1 → 1.28.0.
Change: Update codecov/codecov-action:5.1.2 → 5.3.1.

Author: io7m

.github/dependabot.yml

@@ -5,12 +5,16 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "daily"
+      interval: "monthly"
+    cooldown:
+      default-days: 21
 
   - package-ecosystem: "maven"
     directory: "/"
     schedule:
-      interval: "daily"
+      interval: "monthly"
+    cooldown:
+      default-days: 21
 
     target-branch: "develop"
     ignore:

.github/workflows/deploy-release.sh

@@ -45,12 +45,7 @@ fi
 
   <servers>
     <server>
-      <id>sonatype-nexus-snapshots</id>
-      <username>${MAVEN_CENTRAL_USERNAME}</username>
-      <password>${MAVEN_CENTRAL_PASSWORD}</password>
-    </server>
-    <server>
-      <id>sonatype-nexus-staging</id>
+      <id>central</id>
       <username>${MAVEN_CENTRAL_USERNAME}</username>
       <password>${MAVEN_CENTRAL_PASSWORD}</password>
     </server>

.github/workflows/deploy-snapshot.sh

@@ -34,12 +34,7 @@ fi
 
   <servers>
     <server>
-      <id>sonatype-nexus-snapshots</id>
-      <username>${MAVEN_CENTRAL_USERNAME}</username>
-      <password>${MAVEN_CENTRAL_PASSWORD}</password>
-    </server>
-    <server>
-      <id>sonatype-nexus-staging</id>
+      <id>central</id>
       <username>${MAVEN_CENTRAL_USERNAME}</username>
       <password>${MAVEN_CENTRAL_PASSWORD}</password>
     </server>

.github/workflows/deploy.linux.temurin.lts.yml

@@ -11,18 +11,21 @@ on:
   push:
     tags: [ com.io7m.xstructural-* ]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           submodules: true
 
       - name: JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
         with:
-          java-version: 21
+          java-version: 25
           distribution: temurin
 
       - name: Check PGP version
@@ -34,7 +37,7 @@ jobs:
         run: echo "${PGP_SIGNING_KEY}" | gpg -v --import
 
       - name: Log in to Quay.io.
-        uses: redhat-actions/podman-login@v1.7
+        uses: redhat-actions/podman-login@4934294ad0449894bcd1e9f191899d7292469603
         with:
           username: ${{ secrets.QUAY_IO_USERNAME }}
           password: ${{ secrets.QUAY_IO_PASSWORD }}

.github/workflows/main.linux.temurin.current.yml

@@ -9,20 +9,27 @@ name: main.linux.temurin.current
 
 on:
   push:
-    branches: [ develop, feature/*, release/* ]
+    branches: [ master, main, develop, feature/*, release/* ]
+
+permissions:
+  contents: read
+
+env:
+  NO_VULKAN_DEVICE_TESTS: false
 
 jobs:
   build:
+    name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           submodules: true
 
       - name: JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
         with:
-          java-version: 22
+          java-version: 25
           distribution: 'temurin'
 
       - name: Collect project version
@@ -40,7 +47,7 @@ jobs:
         run: mvn --batch-mode --strict-checksums --errors clean verify site
 
       - name: Upload test logs
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         if: always()
         with:
           name: test-logs

.github/workflows/main.linux.temurin.lts.yml

@@ -9,20 +9,27 @@ name: main.linux.temurin.lts
 
 on:
   push:
-    branches: [ develop, feature/*, release/* ]
+    branches: [ master, main, develop, feature/*, release/* ]
+
+permissions:
+  contents: read
+
+env:
+  NO_VULKAN_DEVICE_TESTS: false
 
 jobs:
   build:
+    name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           submodules: true
 
       - name: JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
         with:
-          java-version: 21
+          java-version: 25
           distribution: 'temurin'
 
       - name: Collect project version
@@ -40,20 +47,20 @@ jobs:
         run: mvn --batch-mode --strict-checksums --errors clean verify site
 
       - name: Upload test logs
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         if: always()
         with:
           name: test-logs
           path: ./com.io7m.xstructural.tests/target/surefire-reports
 
       - name: Coverage
-        uses: codecov/codecov-action@v4.5.0
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
-          file: com.io7m.xstructural.tests/target/site/jacoco-aggregate/jacoco.xml
+          files: com.io7m.xstructural.tests/target/site/jacoco-aggregate/jacoco.xml
 
       - name: Log in to Quay.io.
-        uses: redhat-actions/podman-login@v1.7
+        uses: redhat-actions/podman-login@4934294ad0449894bcd1e9f191899d7292469603
         with:
           username: ${{ secrets.QUAY_IO_USERNAME }}
           password: ${{ secrets.QUAY_IO_PASSWORD }}

.github/workflows/main.windows.temurin.current.yml

@@ -9,20 +9,27 @@ name: main.windows.temurin.current
 
 on:
   push:
-    branches: [ develop, feature/*, release/* ]
+    branches: [ master, main, develop, feature/*, release/* ]
+
+permissions:
+  contents: read
+
+env:
+  NO_VULKAN_DEVICE_TESTS: true
 
 jobs:
   build:
+    name: Build
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           submodules: true
 
       - name: JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
         with:
-          java-version: 22
+          java-version: 25
           distribution: 'temurin'
 
       - name: Collect project version
@@ -40,7 +47,7 @@ jobs:
         run: mvn --batch-mode --strict-checksums --errors clean verify site
 
       - name: Upload test logs
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         if: always()
         with:
           name: test-logs

.github/workflows/main.windows.temurin.lts.yml

@@ -9,20 +9,27 @@ name: main.windows.temurin.lts
 
 on:
   push:
-    branches: [ develop, feature/*, release/* ]
+    branches: [ master, main, develop, feature/*, release/* ]
+
+permissions:
+  contents: read
+
+env:
+  NO_VULKAN_DEVICE_TESTS: true
 
 jobs:
   build:
+    name: Build
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           submodules: true
 
       - name: JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
         with:
-          java-version: 21
+          java-version: 25
           distribution: 'temurin'
 
       - name: Collect project version
@@ -40,7 +47,7 @@ jobs:
         run: mvn --batch-mode --strict-checksums --errors clean verify site
 
       - name: Upload test logs
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         if: always()
         with:
           name: test-logs

.github/workflows/pr.linux.temurin.current.yml

@@ -9,20 +9,27 @@ name: pr.linux.temurin.current
 
 on:
   pull_request:
-    branches: [ develop, feature/*, release/* ]
+    branches: [ master, main, develop, feature/*, release/* ]
+
+permissions:
+  contents: read
+
+env:
+  NO_VULKAN_DEVICE_TESTS: false
 
 jobs:
   build:
+    name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           submodules: true
 
       - name: JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
         with:
-          java-version: 22
+          java-version: 25
           distribution: 'temurin'
 
       - name: Collect project version
@@ -40,7 +47,7 @@ jobs:
         run: mvn --batch-mode --strict-checksums --errors clean verify site
 
       - name: Upload test logs
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         if: always()
         with:
           name: test-logs

.github/workflows/pr.linux.temurin.lts.yml

@@ -9,20 +9,27 @@ name: pr.linux.temurin.lts
 
 on:
   pull_request:
-    branches: [ develop, feature/*, release/* ]
+    branches: [ master, main, develop, feature/*, release/* ]
+
+permissions:
+  contents: read
+
+env:
+  NO_VULKAN_DEVICE_TESTS: false
 
 jobs:
   build:
+    name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           submodules: true
 
       - name: JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
         with:
-          java-version: 21
+          java-version: 25
           distribution: 'temurin'
 
       - name: Collect project version
@@ -40,7 +47,7 @@ jobs:
         run: mvn --batch-mode --strict-checksums --errors clean verify site
 
       - name: Upload test logs
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
         if: always()
         with:
           name: test-logs