Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package maven-jar-plugin for
openSUSE:Factory checked in at 2026-07-23 23:10:03
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/maven-jar-plugin (Old)
and /work/SRC/openSUSE:Factory/.maven-jar-plugin.new.2004 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "maven-jar-plugin"
Thu Jul 23 23:10:03 2026 rev:15 rq:1367170 version:3.5.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/maven-jar-plugin/maven-jar-plugin.changes
2025-11-17 12:22:56.032645202 +0100
+++
/work/SRC/openSUSE:Factory/.maven-jar-plugin.new.2004/maven-jar-plugin.changes
2026-07-23 23:12:23.712603836 +0200
@@ -1,0 +2,25 @@
+Wed Jul 22 17:43:40 UTC 2026 - Fridrich Strba <[email protected]>
+
+- Update to upstream version 3.5.1
+ * Documentation updates
+ + Add AGENTS.md + SECURITY.md security-model pointer for scanner
+ discoverability
+ * Maintenance
+ + Add AGENTS.md + SECURITY.md security-model pointer for scanner
+ discoverability
+ + Use plugin version properties (3.x)
+ * Dependency updates
+ + Bump org.apache.maven.plugins:maven-plugins from 45 to 49
+ + Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.12.0
+ + Bump mavenVersion from 3.9.11 to 3.9.16
+ + Bump commons-io:commons-io from 2.21.0 to 2.22.0
+ + Bump org.apache.maven.plugin-testing
+ :maven-plugin-testing-harness from 3.4.0 to 3.5.1
+ + Bump org.apache.maven:maven-archiver from 3.6.5 to 3.6.6
+- Added pom_properties.py: To create a build.properties file, gather
+ the properties from the pom.xml file instead of hand-crafting them
+- Modified patch:
+ * maven-jar-plugin-bootstrap-resources.patch
+ + regenerate from non-bootstrap build
+
+-------------------------------------------------------------------
Old:
----
maven-jar-plugin-3.5.0-source-release.zip
New:
----
maven-jar-plugin-3.5.1-source-release.zip
pom_properties.py
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ maven-jar-plugin.spec ++++++
--- /var/tmp/diff_new_pack.BQ2e0w/_old 2026-07-23 23:12:24.828642819 +0200
+++ /var/tmp/diff_new_pack.BQ2e0w/_new 2026-07-23 23:12:24.832642959 +0200
@@ -1,7 +1,7 @@
#
# spec file for package maven-jar-plugin
#
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2026 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -23,7 +23,7 @@
%bcond_with bootstrap
%endif
%global base_name maven-jar-plugin
-Version: 3.5.0
+Version: 3.5.1
Release: 0
Summary: Maven JAR Plugin
License: Apache-2.0
@@ -31,8 +31,10 @@
URL: https://maven.apache.org/plugins/maven-jar-plugin/
Source0:
https://repo1.maven.org/maven2/org/apache/maven/plugins/%{base_name}/%{version}/%{base_name}-%{version}-source-release.zip
Source1: %{base_name}-build.xml
+Source100: pom_properties.py
Patch0: %{base_name}-bootstrap-resources.patch
-BuildRequires: atinject apache-commons-io
+BuildRequires: apache-commons-io
+BuildRequires: atinject
BuildRequires: fdupes
BuildRequires: java-devel >= 1.8
BuildRequires: javapackages-local
@@ -89,6 +91,7 @@
%if %{with bootstrap}
cp %{SOURCE1} build.xml
%patch -P 0 -p1
+python3 %{SOURCE100} pom.xml >build.properties
%endif
# Remove all dependencies with scope test, since a raw xmvn does not hide them
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.BQ2e0w/_old 2026-07-23 23:12:24.880644636 +0200
+++ /var/tmp/diff_new_pack.BQ2e0w/_new 2026-07-23 23:12:24.884644776 +0200
@@ -1,6 +1,6 @@
-mtime: 1763217700
-commit: 95de1b1447cece1221c0b58c7cf41bd42e4ad7ab452d9adb6c2e58c50a4aadb0
-url: https://src.opensuse.org/java-packages/maven-jar-plugin.git
-revision: 95de1b1447cece1221c0b58c7cf41bd42e4ad7ab452d9adb6c2e58c50a4aadb0
+mtime: 1784742633
+commit: d14ab53e94b2e22fb62ac581ec4d0c96d62184504f856f23383cb0d2bf1cb21d
+url: https://src.opensuse.org/java-packages/maven-jar-plugin
+revision: d14ab53e94b2e22fb62ac581ec4d0c96d62184504f856f23383cb0d2bf1cb21d
projectscmsync: https://src.opensuse.org/java-packages/_ObsPrj
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-07-22 19:50:33.000000000 +0200
@@ -0,0 +1 @@
+.osc
++++++ maven-jar-plugin-3.5.0-source-release.zip ->
maven-jar-plugin-3.5.1-source-release.zip ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/maven-jar-plugin-3.5.0/.gitignore
new/maven-jar-plugin-3.5.1/.gitignore
--- old/maven-jar-plugin-3.5.0/.gitignore 2025-11-11 09:48:28.000000000
+0100
+++ new/maven-jar-plugin-3.5.1/.gitignore 1970-01-01 01:00:00.000000000
+0100
@@ -1,17 +0,0 @@
-target/
-.project
-.classpath
-.settings/
-.svn/
-bin/
-# Intellij
-*.ipr
-*.iml
-.idea
-out/
-.DS_Store
-/bootstrap
-/dependencies.xml
-.java-version
-.checkstyle
-/.factorypath
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/maven-jar-plugin-3.5.0/AGENTS.md
new/maven-jar-plugin-3.5.1/AGENTS.md
--- old/maven-jar-plugin-3.5.0/AGENTS.md 1970-01-01 01:00:00.000000000
+0100
+++ new/maven-jar-plugin-3.5.1/AGENTS.md 2026-07-19 13:58:28.000000000
+0200
@@ -0,0 +1,32 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+
+# Agent Guide for maven-jar-plugin
+
+This file is read by automated agents (security scanners, code
+analyzers, AI assistants) operating on this repository.
+
+## Security
+
+Security model: [SECURITY.md](./SECURITY.md)
+
+Agents that scan this repository should consult `SECURITY.md` and the
+threat model it links before reporting issues.
+
+Points at the Apache Maven family umbrella security model.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/maven-jar-plugin-3.5.0/DEPENDENCIES
new/maven-jar-plugin-3.5.1/DEPENDENCIES
--- old/maven-jar-plugin-3.5.0/DEPENDENCIES 2025-11-11 09:48:28.000000000
+0100
+++ new/maven-jar-plugin-3.5.1/DEPENDENCIES 2026-07-19 13:58:28.000000000
+0200
@@ -8,29 +8,26 @@
From: 'an unknown organization'
- - aircompressor (https://github.com/airlift/aircompressor)
io.airlift:aircompressor:jar:0.27
- License: Apache License 2.0
(https://www.apache.org/licenses/LICENSE-2.0.html)
-
- javax.inject (http://code.google.com/p/atinject/)
javax.inject:javax.inject:jar:1
License: The Apache Software License, Version 2.0
(http://www.apache.org/licenses/LICENSE-2.0.txt)
- - XZ for Java (https://tukaani.org/xz/java.html) org.tukaani:xz:jar:1.10
+ - XZ for Java (https://tukaani.org/xz/java.html) org.tukaani:xz:jar:1.12
License: 0BSD
From: 'Codehaus Plexus' (https://codehaus-plexus.github.io/)
- - Plexus Archiver Component
(https://codehaus-plexus.github.io/plexus-archiver/)
org.codehaus.plexus:plexus-archiver:jar:4.10.4
+ - Plexus Archiver Component
(https://codehaus-plexus.github.io/plexus-archiver/)
org.codehaus.plexus:plexus-archiver:jar:4.12.0
License: Apache-2.0 (https://www.apache.org/licenses/LICENSE-2.0.txt)
- - Plexus Interpolation API
(https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/)
org.codehaus.plexus:plexus-interpolation:bundle:1.28
+ - Plexus Interpolation API
(https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/)
org.codehaus.plexus:plexus-interpolation:bundle:1.29
License: Apache-2.0 (https://www.apache.org/licenses/LICENSE-2.0.txt)
- Plexus IO Components
(https://codehaus-plexus.github.io/plexus-pom/plexus-io/)
org.codehaus.plexus:plexus-io:jar:3.6.0
License: Apache-2.0 (https://www.apache.org/licenses/LICENSE-2.0.txt)
- - Plexus Common Utilities (https://codehaus-plexus.github.io/plexus-utils/)
org.codehaus.plexus:plexus-utils:jar:4.0.2
- License: Apache License, Version 2.0
(https://www.apache.org/licenses/LICENSE-2.0.txt)
+ - Plexus Common Utilities (https://codehaus-plexus.github.io/plexus-utils/)
org.codehaus.plexus:plexus-utils:jar:4.0.3
+ License: Apache-2.0 (https://www.apache.org/licenses/LICENSE-2.0.txt)
- Plexus XML Utilities (https://codehaus-plexus.github.io/plexus-xml/)
org.codehaus.plexus:plexus-xml:jar:3.0.1
License: Apache License, Version 2.0
(https://www.apache.org/licenses/LICENSE-2.0.txt)
@@ -38,7 +35,7 @@
From: 'com.github.luben'
- - zstd-jni (https://github.com/luben/zstd-jni)
com.github.luben:zstd-jni:jar:1.5.7-6
+ - zstd-jni (https://github.com/luben/zstd-jni)
com.github.luben:zstd-jni:jar:1.5.7-9
License: BSD 2-Clause License
(https://opensource.org/licenses/BSD-2-Clause)
@@ -53,7 +50,7 @@
- Apache Commons Codec (https://commons.apache.org/proper/commons-codec/)
commons-codec:commons-codec:jar:1.19.0
License: Apache-2.0 (https://www.apache.org/licenses/LICENSE-2.0.txt)
- - Apache Commons IO (https://commons.apache.org/proper/commons-io/)
commons-io:commons-io:jar:2.21.0
+ - Apache Commons IO (https://commons.apache.org/proper/commons-io/)
commons-io:commons-io:jar:2.22.0
License: Apache-2.0 (https://www.apache.org/licenses/LICENSE-2.0.txt)
- Apache Commons Compress
(https://commons.apache.org/proper/commons-compress/)
org.apache.commons:commons-compress:jar:1.28.0
@@ -62,7 +59,7 @@
- Apache Commons Lang (https://commons.apache.org/proper/commons-lang/)
org.apache.commons:commons-lang3:jar:3.18.0
License: Apache-2.0 (https://www.apache.org/licenses/LICENSE-2.0.txt)
- - Apache Maven Archiver (https://maven.apache.org/shared/maven-archiver/)
org.apache.maven:maven-archiver:jar:3.6.5
+ - Apache Maven Archiver (https://maven.apache.org/shared/maven-archiver/)
org.apache.maven:maven-archiver:jar:3.6.6
License: Apache-2.0 (https://www.apache.org/licenses/LICENSE-2.0.txt)
- Apache Maven File Management API
(https://maven.apache.org/shared/file-management/)
org.apache.maven.shared:file-management:jar:3.2.0
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/maven-jar-plugin-3.5.0/NOTICE
new/maven-jar-plugin-3.5.1/NOTICE
--- old/maven-jar-plugin-3.5.0/NOTICE 2025-11-11 09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/NOTICE 2026-07-19 13:58:28.000000000 +0200
@@ -1,5 +1,5 @@
Apache Maven JAR Plugin
-Copyright 2002-2025 The Apache Software Foundation
+Copyright 2002-2026 The Apache Software Foundation
This product includes software developed at
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/maven-jar-plugin-3.5.0/SECURITY.md
new/maven-jar-plugin-3.5.1/SECURITY.md
--- old/maven-jar-plugin-3.5.0/SECURITY.md 1970-01-01 01:00:00.000000000
+0100
+++ new/maven-jar-plugin-3.5.1/SECURITY.md 2026-07-19 13:58:28.000000000
+0200
@@ -0,0 +1,32 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+
+# Security Policy
+
+## Reporting a Vulnerability
+
+`apache/maven-jar-plugin` follows the [Apache Software Foundation security
process](https://www.apache.org/security/). Please report suspected
+vulnerabilities privately to `[email protected]`; do not open public
+GitHub issues or pull requests for security reports.
+
+## Threat Model
+
+What the project treats as in scope and out of scope, the security
+properties it provides and disclaims, the adversary model, and how
+findings are triaged are documented in
<https://github.com/apache/maven/blob/master/THREAT_MODEL.md>.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/maven-jar-plugin-3.5.0/pom.xml
new/maven-jar-plugin-3.5.1/pom.xml
--- old/maven-jar-plugin-3.5.0/pom.xml 2025-11-11 09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/pom.xml 2026-07-19 13:58:28.000000000 +0200
@@ -23,12 +23,12 @@
<parent>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-plugins</artifactId>
- <version>45</version>
+ <version>49</version>
<relativePath />
</parent>
<artifactId>maven-jar-plugin</artifactId>
- <version>3.5.0</version>
+ <version>3.5.1</version>
<packaging>maven-plugin</packaging>
<name>Apache Maven JAR Plugin</name>
@@ -54,7 +54,7 @@
<scm>
<connection>scm:git:https://gitbox.apache.org/repos/asf/maven-jar-plugin.git</connection>
<developerConnection>scm:git:https://gitbox.apache.org/repos/asf/maven-jar-plugin.git</developerConnection>
- <tag>maven-jar-plugin-3.5.0</tag>
+ <tag>maven-jar-plugin-3.5.1</tag>
<url>https://github.com/apache/maven-jar-plugin/tree/${project.scm.tag}</url>
</scm>
<issueManagement>
@@ -74,12 +74,13 @@
<properties>
<javaVersion>8</javaVersion>
- <mavenVersion>3.9.11</mavenVersion>
- <mavenArchiverVersion>3.6.5</mavenArchiverVersion>
+ <mavenVersion>3.9.16</mavenVersion>
+ <mavenArchiverVersion>3.6.6</mavenArchiverVersion>
- <!-- for JDK 25 -->
- <version.maven-invoker-plugin>3.9.1</version.maven-invoker-plugin>
-
<project.build.outputTimestamp>2025-11-11T09:48:28Z</project.build.outputTimestamp>
+
<project.build.outputTimestamp>2026-07-19T13:58:27Z</project.build.outputTimestamp>
+
+ <!-- For ITs -->
+ <version.maven-toolchains-plugin>3.1.0</version.maven-toolchains-plugin>
</properties>
<dependencies>
@@ -127,7 +128,7 @@
<dependency>
<groupId>org.codehaus.plexus</groupId>
<artifactId>plexus-archiver</artifactId>
- <version>4.10.4</version>
+ <version>4.12.0</version>
</dependency>
<!-- Other used dependencies -->
@@ -146,7 +147,7 @@
<dependency>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
- <version>2.21.0</version>
+ <version>2.22.0</version>
</dependency>
<!-- Test -->
@@ -158,7 +159,7 @@
<dependency>
<groupId>org.apache.maven.plugin-testing</groupId>
<artifactId>maven-plugin-testing-harness</artifactId>
- <version>3.4.0</version>
+ <version>3.5.1</version>
<scope>test</scope>
</dependency>
<dependency>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/maven-jar-plugin-3.5.0/src/it/MJAR-162/pom.xml
new/maven-jar-plugin-3.5.1/src/it/MJAR-162/pom.xml
--- old/maven-jar-plugin-3.5.0/src/it/MJAR-162/pom.xml 2025-11-11
09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/MJAR-162/pom.xml 2026-07-19
13:58:28.000000000 +0200
@@ -33,7 +33,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-resources-plugin</artifactId>
- <version>3.3.0</version>
+ <version>@version.maven-resources-plugin@</version>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/maven-jar-plugin-3.5.0/src/it/MJAR-162/src/test/java/.gitignore
new/maven-jar-plugin-3.5.1/src/it/MJAR-162/src/test/java/.gitignore
--- old/maven-jar-plugin-3.5.0/src/it/MJAR-162/src/test/java/.gitignore
2025-11-11 09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/MJAR-162/src/test/java/.gitignore
1970-01-01 01:00:00.000000000 +0100
@@ -1 +0,0 @@
-# just here to make the directory non-empty
\ No newline at end of file
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/maven-jar-plugin-3.5.0/src/it/MJAR-162/src/test/resources/.gitignore
new/maven-jar-plugin-3.5.1/src/it/MJAR-162/src/test/resources/.gitignore
--- old/maven-jar-plugin-3.5.0/src/it/MJAR-162/src/test/resources/.gitignore
2025-11-11 09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/MJAR-162/src/test/resources/.gitignore
1970-01-01 01:00:00.000000000 +0100
@@ -1 +0,0 @@
-# just here to make the directory non-empty
\ No newline at end of file
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/maven-jar-plugin-3.5.0/src/it/MJAR-275-reproducible-module-info/pom.xml
new/maven-jar-plugin-3.5.1/src/it/MJAR-275-reproducible-module-info/pom.xml
--- old/maven-jar-plugin-3.5.0/src/it/MJAR-275-reproducible-module-info/pom.xml
2025-11-11 09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/MJAR-275-reproducible-module-info/pom.xml
2026-07-19 13:58:28.000000000 +0200
@@ -51,7 +51,7 @@
<plugins>
<plugin>
<artifactId>maven-compiler-plugin</artifactId>
- <version>3.10.1</version>
+ <version>@version.maven-compiler-plugin@</version>
<configuration>
<release>8</release>
</configuration>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/maven-jar-plugin-3.5.0/src/it/MJAR-292-detect-mjar/pom.xml
new/maven-jar-plugin-3.5.1/src/it/MJAR-292-detect-mjar/pom.xml
--- old/maven-jar-plugin-3.5.0/src/it/MJAR-292-detect-mjar/pom.xml
2025-11-11 09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/MJAR-292-detect-mjar/pom.xml
2026-07-19 13:58:28.000000000 +0200
@@ -62,7 +62,7 @@
<plugins>
<plugin>
<artifactId>maven-compiler-plugin</artifactId>
- <version>3.10.1</version>
+ <version>@version.maven-compiler-plugin@</version>
<configuration>
<release>8</release>
</configuration>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/maven-jar-plugin-3.5.0/src/it/MJAR-292-detect-mjar-no-versions/pom.xml
new/maven-jar-plugin-3.5.1/src/it/MJAR-292-detect-mjar-no-versions/pom.xml
--- old/maven-jar-plugin-3.5.0/src/it/MJAR-292-detect-mjar-no-versions/pom.xml
2025-11-11 09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/MJAR-292-detect-mjar-no-versions/pom.xml
2026-07-19 13:58:28.000000000 +0200
@@ -54,7 +54,7 @@
<plugins>
<plugin>
<artifactId>maven-compiler-plugin</artifactId>
- <version>3.10.1</version>
+ <version>@version.maven-compiler-plugin@</version>
<configuration>
<release>8</release>
</configuration>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/maven-jar-plugin-3.5.0/src/it/MJAR-292-disable-detect-mjar/pom.xml
new/maven-jar-plugin-3.5.1/src/it/MJAR-292-disable-detect-mjar/pom.xml
--- old/maven-jar-plugin-3.5.0/src/it/MJAR-292-disable-detect-mjar/pom.xml
2025-11-11 09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/MJAR-292-disable-detect-mjar/pom.xml
2026-07-19 13:58:28.000000000 +0200
@@ -54,7 +54,7 @@
<plugins>
<plugin>
<artifactId>maven-compiler-plugin</artifactId>
- <version>3.10.1</version>
+ <version>@version.maven-compiler-plugin@</version>
<configuration>
<release>8</release>
</configuration>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/maven-jar-plugin-3.5.0/src/it/MJAR-62-toolchain/pom.xml
new/maven-jar-plugin-3.5.1/src/it/MJAR-62-toolchain/pom.xml
--- old/maven-jar-plugin-3.5.0/src/it/MJAR-62-toolchain/pom.xml 2025-11-11
09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/MJAR-62-toolchain/pom.xml 2026-07-19
13:58:28.000000000 +0200
@@ -33,7 +33,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-toolchains-plugin</artifactId>
- <version>3.1.0</version>
+ <version>@version.maven-toolchains-plugin@</version>
<executions>
<execution>
<goals>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/maven-jar-plugin-3.5.0/src/it/MJAR-70-no-recreation/pom.xml
new/maven-jar-plugin-3.5.1/src/it/MJAR-70-no-recreation/pom.xml
--- old/maven-jar-plugin-3.5.0/src/it/MJAR-70-no-recreation/pom.xml
2025-11-11 09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/MJAR-70-no-recreation/pom.xml
2026-07-19 13:58:28.000000000 +0200
@@ -43,12 +43,12 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-compiler-plugin</artifactId>
- <version>3.11.0</version>
+ <version>@version.maven-compiler-plugin@</version>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-antrun-plugin</artifactId>
- <version>1.2</version>
+ <version>@version.maven-antrun-plugin@</version>
<executions>
<execution>
<id>touch</id>
@@ -57,12 +57,12 @@
<goal>run</goal>
</goals>
<configuration>
- <tasks>
+ <target>
<!-- Save the JAR and especially its timestamp for evaluation
by the post-build hook script -->
<copy file="target/MJAR-70-no-recreation-1.0-SNAPSHOT.jar"
tofile="target/reference.jar"
preservelastmodified="true" overwrite="true"/>
- </tasks>
+ </target>
</configuration>
</execution>
</executions>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/maven-jar-plugin-3.5.0/src/it/MJAR-70-recreation/pom.xml
new/maven-jar-plugin-3.5.1/src/it/MJAR-70-recreation/pom.xml
--- old/maven-jar-plugin-3.5.0/src/it/MJAR-70-recreation/pom.xml
2025-11-11 09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/MJAR-70-recreation/pom.xml
2026-07-19 13:58:28.000000000 +0200
@@ -42,7 +42,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-antrun-plugin</artifactId>
- <version>1.2</version>
+ <version>@version.maven-antrun-plugin@</version>
<executions>
<execution>
<id>touch</id>
@@ -51,14 +51,14 @@
<goal>run</goal>
</goals>
<configuration>
- <tasks>
+ <target>
<!-- Save the JAR and especially its timestamp for evaluation
by the post-build hook script -->
<copy file="target/MJAR-70-recreation-1.0-SNAPSHOT.jar"
tofile="target/reference.jar"
preservelastmodified="true" overwrite="true"/>
<!-- Enforce some time difference prior to building JAR again
-->
<sleep seconds="2"/>
- </tasks>
+ </target>
</configuration>
</execution>
</executions>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/maven-jar-plugin-3.5.0/src/it/github-470/pom.xml
new/maven-jar-plugin-3.5.1/src/it/github-470/pom.xml
--- old/maven-jar-plugin-3.5.0/src/it/github-470/pom.xml 2025-11-11
09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/github-470/pom.xml 2026-07-19
13:58:28.000000000 +0200
@@ -33,7 +33,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-toolchains-plugin</artifactId>
- <version>3.1.0</version>
+ <version>@version.maven-toolchains-plugin@</version>
<executions>
<execution>
<goals>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/maven-jar-plugin-3.5.0/src/it/github-470-1.8/pom.xml
new/maven-jar-plugin-3.5.1/src/it/github-470-1.8/pom.xml
--- old/maven-jar-plugin-3.5.0/src/it/github-470-1.8/pom.xml 2025-11-11
09:48:28.000000000 +0100
+++ new/maven-jar-plugin-3.5.1/src/it/github-470-1.8/pom.xml 2026-07-19
13:58:28.000000000 +0200
@@ -33,7 +33,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-toolchains-plugin</artifactId>
- <version>3.1.0</version>
+ <version>@version.maven-toolchains-plugin@</version>
<executions>
<execution>
<goals>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/maven-jar-plugin-3.5.0/src/main/java/org/apache/maven/plugins/jar/AbstractJarMojo.java
new/maven-jar-plugin-3.5.1/src/main/java/org/apache/maven/plugins/jar/AbstractJarMojo.java
---
old/maven-jar-plugin-3.5.0/src/main/java/org/apache/maven/plugins/jar/AbstractJarMojo.java
2025-11-11 09:48:28.000000000 +0100
+++
new/maven-jar-plugin-3.5.1/src/main/java/org/apache/maven/plugins/jar/AbstractJarMojo.java
2026-07-19 13:58:28.000000000 +0200
@@ -172,7 +172,7 @@
private boolean addDefaultExcludes;
/**
- * Specifies whether to attach the jar to the project
+ * Specifies whether to attach the jar to the project.
*
* @since 3.5.0
*/
@@ -246,7 +246,7 @@
* Returns the Jar file to generate, based on an optional classifier.
*
* @param basedir the output directory
- * @param resultFinalName the name of the ear file
+ * @param resultFinalName the name of the JAR file
* @param classifier an optional classifier
* @return the file to generate
*/
@@ -382,7 +382,7 @@
}
/**
- * Return {@code true} in case where the classifier is not {@code null}
and contains something else than white spaces.
+ * Return {@code true} if the classifier is not {@code null} and contains
something other than white spaces.
*
* @return {@code true} if the classifier is set.
*/
++++++ maven-jar-plugin-bootstrap-resources.patch ++++++
--- /var/tmp/diff_new_pack.BQ2e0w/_old 2026-07-23 23:12:25.588669367 +0200
+++ /var/tmp/diff_new_pack.BQ2e0w/_new 2026-07-23 23:12:25.604669926 +0200
@@ -1,6 +1,6 @@
---
a/src/main/filtered-resources/META-INF/maven/org.apache.maven.plugins/maven-jar-plugin/plugin-help.xml
1970-01-01 01:00:00.000000000 +0100
+++
b/src/main/filtered-resources/META-INF/maven/org.apache.maven.plugins/maven-jar-plugin/plugin-help.xml
2025-11-12 07:39:01.197711212 +0100
-@@ -0,0 +1,364 @@
+@@ -0,0 +1,363 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!-- Generated by maven-plugin-tools 4.0 (for help mojo with limited
elements)-->
@@ -11,7 +11,6 @@
+ <groupId>${project.groupId}</groupId>
+ <artifactId>${project.artifactId}</artifactId>
+ <version>${project.version}</version>
-+ <version>3.5.0</version>
+ <goalPrefix>jar</goalPrefix>
+ <mojos>
+ <mojo>
@@ -121,7 +120,7 @@
+ <since>3.5.0</since>
+ <required>false</required>
+ <editable>true</editable>
-+ <description>Specifies whether to attach the jar to the
project</description>
++ <description>Specifies whether to attach the jar to the
project.</description>
+ </parameter>
+ <parameter>
+ <name>classesDirectory</name>
@@ -265,7 +264,7 @@
+ <since>3.5.0</since>
+ <required>false</required>
+ <editable>true</editable>
-+ <description>Specifies whether to attach the jar to the
project</description>
++ <description>Specifies whether to attach the jar to the
project.</description>
+ </parameter>
+ <parameter>
+ <name>classifier</name>
@@ -365,9 +364,10 @@
+ </mojo>
+ </mojos>
+</plugin>
+
--- a/src/main/filtered-resources/META-INF/maven/plugin.xml 1970-01-01
01:00:00.000000000 +0100
+++ b/src/main/filtered-resources/META-INF/maven/plugin.xml 2025-11-12
07:38:35.933303056 +0100
-@@ -0,0 +1,469 @@
+@@ -0,0 +1,475 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!-- Generated by maven-plugin-tools 4.0-->
@@ -491,7 +491,7 @@
+ <since>3.5.0</since>
+ <required>false</required>
+ <editable>true</editable>
-+ <description>Specifies whether to attach the jar to the
project</description>
++ <description>Specifies whether to attach the jar to the
project.</description>
+ </parameter>
+ <parameter>
+ <name>classesDirectory</name>
@@ -643,7 +643,7 @@
+ <since>3.5.0</since>
+ <required>false</required>
+ <editable>true</editable>
-+ <description>Specifies whether to attach the jar to the
project</description>
++ <description>Specifies whether to attach the jar to the
project.</description>
+ </parameter>
+ <parameter>
+ <name>classifier</name>
@@ -755,19 +755,13 @@
+ <groupId>org.codehaus.plexus</groupId>
+ <artifactId>plexus-utils</artifactId>
+ <type>jar</type>
-+ <version>4.0.2</version>
-+ </dependency>
-+ <dependency>
-+ <groupId>org.codehaus.plexus</groupId>
-+ <artifactId>plexus-xml</artifactId>
-+ <type>jar</type>
-+ <version>3.0.1</version>
++ <version>4.0.3</version>
+ </dependency>
+ <dependency>
+ <groupId>org.codehaus.plexus</groupId>
+ <artifactId>plexus-interpolation</artifactId>
+ <type>jar</type>
-+ <version>1.28</version>
++ <version>1.29</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.maven.shared</groupId>
@@ -776,28 +770,40 @@
+ <version>3.2.0</version>
+ </dependency>
+ <dependency>
++ <groupId>org.codehaus.plexus</groupId>
++ <artifactId>plexus-xml</artifactId>
++ <type>jar</type>
++ <version>3.0.1</version>
++ </dependency>
++ <dependency>
+ <groupId>org.apache.maven</groupId>
+ <artifactId>maven-archiver</artifactId>
+ <type>jar</type>
-+ <version>3.6.5</version>
++ <version>3.6.6</version>
+ </dependency>
+ <dependency>
+ <groupId>org.codehaus.plexus</groupId>
+ <artifactId>plexus-archiver</artifactId>
+ <type>jar</type>
-+ <version>4.10.4</version>
++ <version>4.12.0</version>
+ </dependency>
+ <dependency>
+ <groupId>org.codehaus.plexus</groupId>
+ <artifactId>plexus-io</artifactId>
+ <type>jar</type>
-+ <version>3.5.1</version>
++ <version>3.6.0</version>
+ </dependency>
+ <dependency>
+ <groupId>org.tukaani</groupId>
+ <artifactId>xz</artifactId>
+ <type>jar</type>
-+ <version>1.10</version>
++ <version>1.12</version>
++ </dependency>
++ <dependency>
++ <groupId>com.github.luben</groupId>
++ <artifactId>zstd-jni</artifactId>
++ <type>jar</type>
++ <version>1.5.7-9</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
@@ -809,13 +815,13 @@
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-lang3</artifactId>
+ <type>jar</type>
-+ <version>3.14.0</version>
++ <version>3.18.0</version>
+ </dependency>
+ <dependency>
+ <groupId>commons-codec</groupId>
+ <artifactId>commons-codec</artifactId>
+ <type>jar</type>
-+ <version>1.16.1</version>
++ <version>1.19.0</version>
+ </dependency>
+ <dependency>
+ <groupId>javax.inject</groupId>
@@ -833,10 +839,11 @@
+ <groupId>commons-io</groupId>
+ <artifactId>commons-io</artifactId>
+ <type>jar</type>
-+ <version>2.21.0</version>
++ <version>2.22.0</version>
+ </dependency>
+ </dependencies>
+</plugin>
+
diff -urEbwBN
a/src/main/java/org/apache/maven/plugins/maven_jar_plugin/HelpMojo.java
b/src/main/java/org/apache/maven/plugins/maven_jar_plugin/HelpMojo.java
--- a/src/main/java/org/apache/maven/plugins/maven_jar_plugin/HelpMojo.java
1970-01-01 01:00:00.000000000 +0100
+++ b/src/main/java/org/apache/maven/plugins/maven_jar_plugin/HelpMojo.java
2025-11-12 07:37:39.888350095 +0100
++++++ maven-jar-plugin-build.xml ++++++
--- /var/tmp/diff_new_pack.BQ2e0w/_old 2026-07-23 23:12:25.652671603 +0200
+++ /var/tmp/diff_new_pack.BQ2e0w/_new 2026-07-23 23:12:25.660671883 +0200
@@ -14,15 +14,9 @@
value="Builds a Java Archive (JAR) file from the compiled project
classes and resources."/>
<property name="project.groupId" value="org.apache.maven.plugins"/>
<property name="project.artifactId" value="maven-jar-plugin"/>
- <property name="project.version" value="3.5.0"/>
+ <property name="project.version" value="3.5.1"/>
<property name="project.organization.name" value="The Apache Software
Foundation"/>
- <property name="version.maven-resources-plugin" value="3.3.1"/>
- <property name="version.maven-compiler-plugin" value="3.11.0"/>
- <property name="version.maven-surefire" value="3.2.2"/>
- <property name="version.maven-install-plugin" value="3.1.1"/>
- <property name="version.maven-deploy-plugin" value="3.1.1"/>
-
<property name="spec.version" value="3.5"/>
<property name="compiler.source" value="1.8"/>
@@ -87,18 +81,9 @@
<fileset dir="${build.resourceDir}"/>
<filterchain>
<expandproperties>
- <propertyset>
- <propertyref name="project.name"/>
- <propertyref name="project.version"/>
- <propertyref name="project.groupId"/>
- <propertyref name="project.artifactId"/>
- <propertyref name="project.description"/>
- <!-- substitution for components.xml -->
- <propertyref name="version.maven-resources-plugin"/>
- <propertyref name="version.maven-compiler-plugin"/>
- <propertyref name="version.maven-surefire"/>
- <propertyref name="version.maven-install-plugin"/>
- <propertyref name="version.maven-deploy-plugin"/>
+ <propertyset negate="true">
+ <!-- this one should stay unexpanded; the expansion is for the
plugin users -->
+ <propertyref name="project.build.outputTimestamp"/>
</propertyset>
</expandproperties>
</filterchain>
++++++ pom_properties.py ++++++
from javapackages.maven.pom import POM, PomLoadingException
from javapackages.xmvn.xmvn_resolve import (XMvnResolve, ResolutionRequest,
XMvnResolveException)
from javapackages.common.exception import JavaPackagesToolsException
import sys
import os
def get_parent_pom(pom):
req = ResolutionRequest(pom.groupId, pom.artifactId,
extension="pom", version=pom.version)
result = XMvnResolve.process_raw_request([req])[0]
if not result:
raise XMvnResolveException("Unable to resolve parent POM
{g}:{a}:{e}:{v}"
.format(g=pom.groupId, a=pom.artifactId,
e="pom", v=pom.version))
return POM(result.artifactPath)
def gather_properties(pom_path):
pom = POM(pom_path)
props = pom.properties
curr_pom = pom
parent = pom.parent
while parent:
ppom = None
if hasattr(parent, "relativePath") and parent.relativePath != "":
try:
ppom_path = os.path.join(os.path.dirname(curr_pom._path),
parent.relativePath)
if os.path.isdir(ppom_path):
ppom_path = os.path.join(ppom_path, 'pom.xml')
ppom = POM(ppom_path)
except PomLoadingException:
pass
else:
try:
ppom_path = os.path.join(os.path.dirname(curr_pom._path), '..')
if os.path.isdir(ppom_path):
ppom_path = os.path.join(ppom_path, 'pom.xml')
ppom = POM(ppom_path)
except PomLoadingException:
pass
if not ppom:
try:
ppom = get_parent_pom(parent)
except XMvnResolveException:
break
parent = ppom.parent
pprops = ppom.properties
# merge "properties" sections
for pkey in pprops:
if pkey not in props:
props[pkey] = pprops[pkey]
curr_pom = ppom
return props
def _main():
if not os.path.exists(sys.argv[1]):
message = ("The first argument '{0}' doesn't point to an existing file
").format(sys.argv[1])
parser.error(message)
pom_path = sys.argv[1]
props = gather_properties(pom_path)
for key, value in props.items():
print(f"{key}={value}")
if __name__ == "__main__":
try:
_main()
except JavaPackagesToolsException as e:
sys.exit(e)
