dependabot[bot] opened a new pull request, #9192: URL: https://github.com/apache/camel-quarkus/pull/9192
Bumps [eu.maveniverse.maven.scalpel:extension](https://github.com/maveniverse/scalpel) from 0.3.10 to 0.4.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maveniverse/scalpel/releases";>eu.maveniverse.maven.scalpel:extension's releases</a>.</em></p> <blockquote> <h2>Scalpel 0.4.1</h2> <h2>What's Changed</h2> <h2>🔍 Summary</h2> <p>0.4.1 is a focused patch release that fixes several correctness issues discovered after 0.4.0. The central theme is <strong>report and gate reliability</strong>: status reports now consistently carry decision fields and the disable-trigger file path (<a href="https://redirect.github.com/maveniverse/scalpel/issues/186";>#186</a>), <code>buildAllIfNoChanges</code> is now correctly honoured by both the all-changes-excluded (<a href="https://redirect.github.com/maveniverse/scalpel/issues/184";>#184</a>) and the no-changes gate (<a href="https://redirect.github.com/maveniverse/scalpel/issues/199";>#199</a>), and files under non-reactor modules no longer incorrectly cascade a rebuild to the root module (<a href="https://redirect.github.com/maveniverse/scalpel/issues/185";>#185</a>). The decision report gains a <code>reactorModuleCount</code> field (<a href="https://redirect.github.com/maveniverse/scalpel/issues/200";>#200</a>) for direct N-of-M readability, and the full set of decision in puts is emitted alongside an explicit build-set split (<a href="https://redirect.github.com/maveniverse/scalpel/issues/187";>#187</a>). Dependency bumps bring in JGit 7.8, SLF4J 2.0, and updated GitHub Actions.</p> <h2>🐛 Bug Fixes</h2> <ul> <li>fix: no-changes gate now honours buildAllIfNoChanges (<a href="https://redirect.github.com/maveniverse/scalpel/issues/199";>#199</a>) (<a href="https://redirect.github.com/maveniverse/scalpel/issues/202";>#202</a>) <a href="https://github.com/gnodet";><code>@gnodet</code></a></li> <li>Fix <a href="https://redirect.github.com/maveniverse/scalpel/issues/186";>#186</a>: status reports carry the decision fields and the disable-trigger file (<a href="https://redirect.github.com/maveniverse/scalpel/issues/192";>#192</a>) <a href="https://github.com/paoloantinori";><code>@paoloantinori</code></a></li> <li>Fix <a href="https://redirect.github.com/maveniverse/scalpel/issues/185";>#185</a>: files under non-reactor modules no longer cascade to the root (<a href="https://redirect.github.com/maveniverse/scalpel/issues/191";>#191</a>) <a href="https://github.com/paoloantinori";><code>@paoloantinori</code></a></li> <li>Fix <a href="https://redirect.github.com/maveniverse/scalpel/issues/184";>#184</a>: all-changes-excluded honours buildAllIfNoChanges (<a href="https://redirect.github.com/maveniverse/scalpel/issues/190";>#190</a>) <a href="https://github.com/paoloantinori";><code>@paoloantinori</code></a></li> <li>Fix <a href="https://redirect.github.com/maveniverse/scalpel/issues/188";>#188</a>: status-path report writes honour failSafe (<a href="https://redirect.github.com/maveniverse/scalpel/issues/189";>#189</a>) <a href="https://github.com/paoloantinori";><code>@paoloantinori</code></a></li> </ul> <h2>🚀 Enhancements</h2> <ul> <li>Fix <a href="https://redirect.github.com/maveniverse/scalpel/issues/193";>#193</a> residual: add reactorModuleCount for direct N-of-M readability (<a href="https://redirect.github.com/maveniverse/scalpel/issues/200";>#200</a>) <a href="https://github.com/gnodet";><code>@gnodet</code></a></li> <li>Fix <a href="https://redirect.github.com/maveniverse/scalpel/issues/187";>#187</a>: emit the decision inputs and an honest build-set split (<a href="https://redirect.github.com/maveniverse/scalpel/issues/193";>#193</a>) <a href="https://github.com/paoloantinori";><code>@paoloantinori</code></a></li> </ul> <h2>🧰 Maintenance</h2> <ul> <li>test: verify reactor is not mutated on passive no-changes run (<a href="https://redirect.github.com/maveniverse/scalpel/issues/203";>#203</a>) <a href="https://github.com/gnodet";><code>@gnodet</code></a></li> <li>Post-merge nits from <a href="https://redirect.github.com/maveniverse/scalpel/issues/192";>#192</a>: drop the always-true detected flag, fix the test comment (<a href="https://redirect.github.com/maveniverse/scalpel/issues/201";>#201</a>) <a href="https://github.com/paoloantinori";><code>@paoloantinori</code></a></li> <li>chore(deps): bump eu.maveniverse.maven.nisse:extension from 0.9.10 to 0.9.11 (<a href="https://redirect.github.com/maveniverse/scalpel/issues/198";>#198</a>) <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]</li> <li>chore(deps): bump actions/cache from 4.3.0 to 6.1.0 (<a href="https://redirect.github.com/maveniverse/scalpel/issues/196";>#196</a>) <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]</li> <li>chore(deps): bump actions/setup-java from 6.0.0 to 6.0.1 (<a href="https://redirect.github.com/maveniverse/scalpel/issues/195";>#195</a>) <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]</li> <li>chore(deps): bump version.slf4j from 1.7.36 to 2.0.19 (<a href="https://redirect.github.com/maveniverse/scalpel/issues/194";>#194</a>) <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]</li> <li>chore(deps): bump org.eclipse.jgit:org.eclipse.jgit from 7.7.1 to 7.8.0 (<a href="https://redirect.github.com/maveniverse/scalpel/issues/197";>#197</a>) <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot]</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/maveniverse/scalpel/compare/0.4.0...0.4.1";>https://github.com/maveniverse/scalpel/compare/0.4.0...0.4.1</a></p> <h2>Scalpel 0.4.0</h2> <h2>What's Changed</h2> <h2>⚠️ Breaking Changes</h2> <ul> <li><strong>Java 17 is now required.</strong> The minimum Java version has been raised from 8 to 17 (<code>maven.compiler.release</code> bump <a href="https://redirect.github.com/maveniverse/scalpel/issues/87";>#87</a>). Projects still running on Java 8–16 must stay on 0.3.x.</li> </ul> <h2>🌟 Highlights</h2> <p>0.4.0 is a major milestone — this is effectively a 0.3.x → 0.4.0 rewrite in terms of scope. A short tour of what's new:</p> <p><strong>Shadow mode</strong> (<code>-Dscalpel.mode=shadow</code>) runs Scalpel silently alongside full builds to measure how many modules it would have skipped and detect false negatives before you trust it in CI. Pair it with <strong><code>verifyFullBuild</code></strong> (<code>-Dscalpel.verifyFullBuild=true</code>) for periodic correctness verification that fails the build if any module Scalpel would have skipped actually fails — naming the module, its skip reason, and a stable <code>decisionId</code> for correlation.</p> <p><strong>Explain mode</strong> (<code>-Dscalpel.explain=true</code>) adds per-module decision evidence to the report: each affected module gets an <code>evidence</code> array naming the exact file, property, dependency, or graph edge that put it in the build set.</p> <p><strong>Effective-POM managed dependency tracking</strong> (<a href="https://redirect.github.com/maveniverse/scalpel/issues/145";>#145</a>): Scalpel now uses effective POM models to detect managed dependency changes propagated through parent or import BOMs — previously silent, now correctly triggering rebuilds.</p> <p><strong>Fine-grained POM change filtering</strong> (<code>scalpel.excludeChanges</code> / <code>scalpel.includeChanges</code>): glob patterns over a normalised change-path scheme (<code>properties/<name></code>, <code>dependencies/<ga></code>, …). Volatile properties (<code>build.timestamp</code>, <code>project.build.outputTimestamp</code>) are excluded by default.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maveniverse/scalpel/commit/1ce6a53024d0478721248508f4dbd2215a08fac8";><code>1ce6a53</code></a> fix: no-changes gate now honours buildAllIfNoChanges (<a href="https://redirect.github.com/maveniverse/scalpel/issues/199";>#199</a>) (<a href="https://redirect.github.com/maveniverse/scalpel/issues/202";>#202</a>)</li> <li><a href="https://github.com/maveniverse/scalpel/commit/4656ede028609d604c6cd0f9d789fe53aad60b2b";><code>4656ede</code></a> test: verify session.setProjects never called on passive no-changes run (<a href="https://redirect.github.com/maveniverse/scalpel/issues/203";>#203</a>)</li> <li><a href="https://github.com/maveniverse/scalpel/commit/ac3fea51cd277cb978b6ee345afd55aef7874492";><code>ac3fea5</code></a> review: post-merge nits from <a href="https://redirect.github.com/maveniverse/scalpel/issues/192";>#192</a> (<a href="https://redirect.github.com/maveniverse/scalpel/issues/201";>#201</a>)</li> <li><a href="https://github.com/maveniverse/scalpel/commit/c6d7b07869d88a3395677f9522c1e6744fb7023c";><code>c6d7b07</code></a> Fix <a href="https://redirect.github.com/maveniverse/scalpel/issues/193";>#193</a> residual: add reactorModuleCount for direct N-of-M readability (<a href="https://redirect.github.com/maveniverse/scalpel/issues/200";>#200</a>)</li> <li><a href="https://github.com/maveniverse/scalpel/commit/e34503533bad68182ac14d9111cf86f253a1e8c6";><code>e345035</code></a> chore(deps): bump eu.maveniverse.maven.nisse:extension (<a href="https://redirect.github.com/maveniverse/scalpel/issues/198";>#198</a>)</li> <li><a href="https://github.com/maveniverse/scalpel/commit/cc0b5823acc207d0d6d36f2e94dd84e0aba126f0";><code>cc0b582</code></a> chore(deps): bump actions/cache from 4.3.0 to 6.1.0 (<a href="https://redirect.github.com/maveniverse/scalpel/issues/196";>#196</a>)</li> <li><a href="https://github.com/maveniverse/scalpel/commit/0a2394fb12001237f28fb8ac3ddc05a5fc5684f9";><code>0a2394f</code></a> chore(deps): bump actions/setup-java from 6.0.0 to 6.0.1 (<a href="https://redirect.github.com/maveniverse/scalpel/issues/195";>#195</a>)</li> <li><a href="https://github.com/maveniverse/scalpel/commit/8915aa71ef13157b66ef189d3e3297a497e71dd3";><code>8915aa7</code></a> chore(deps): bump version.slf4j from 1.7.36 to 2.0.19 (<a href="https://redirect.github.com/maveniverse/scalpel/issues/194";>#194</a>)</li> <li><a href="https://github.com/maveniverse/scalpel/commit/632dcd2883e37704e15dc6793ef229633e93c7d6";><code>632dcd2</code></a> Fix <a href="https://redirect.github.com/maveniverse/scalpel/issues/186";>#186</a>: status reports carry the decision fields and the disable-trigger fi...</li> <li><a href="https://github.com/maveniverse/scalpel/commit/ee121b55f2c187ca14c652538206047204de740e";><code>ee121b5</code></a> chore(deps): bump org.eclipse.jgit:org.eclipse.jgit (<a href="https://redirect.github.com/maveniverse/scalpel/issues/197";>#197</a>)</li> <li>Additional commits viewable in <a href="https://github.com/maveniverse/scalpel/compare/0.3.10...0.4.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
