This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a change to branch
dependabot/maven/biz.aQute.bnd-biz.aQute.bnd.annotation-7.0.0
in repository https://gitbox.apache.org/repos/asf/logging-parent.git
discard afa7bf7 Bump biz.aQute.bnd:biz.aQute.bnd.annotation from 6.4.1 to
7.0.0
add c708cb9 Add website-specific release instructions
add a9fc596 Fix website release instructions
add f15ec64 Keep the BND baseline below 6, 7+ requires Java 17 (#41)
add b3abbf9 Fixed the archiving of symbolically linked directories (#43)
add 08b34b4 Build `site` in CI, if requested
add 8a51eeb Avoid `--non-recursive` while running Maven `site` goal
add 4a4b2e7 Add CodeQL Analysis
add 1095045 Add Scorecards analysis
add 8772c8d Remove unused parameter
add bccb293 Issue `install` before `site` in reusable CI workflow
add f693825 added line break to retrigger build
add 890ee9c Update `github/codeql-action` to version `2.22.3`
(#1558328036)
add f7fbeee Update `ossf/scorecard-action` to version `2.3.0`
(#1553916310)
add f78e01d Update `com.github.spotbugs:spotbugs-annotations` to version
`4.8.0` (#1553835070)
add 53062ea Update `actions/checkout` to version `4.1.1` (#1562197994)
add 4af1637 Moves `.flattened-pom.xml` to the same directory as `pom.xml`
add ebc246f Add SBOM support via `cyclonedx-maven-plugin`
(apache/logging-log4j2#1707)
add 81dfd72 Add compulsory `bnd-baseline-maven-plugin` execution
add 423bcb3 Apply a common configuration to all `bnd-maven-plugin` goals
add 5307a88 Update `log4j-changelog` and its XSD version to `0.5.0` and
`0.1.2`, respectively
add c44c782 Update auto-generated files
add f294d2a Fix GitHub PR ID in the `dependabot` workflow
add a5346d6 Clean-up changelog
add b90d29e Update `com.google.errorprone:error_prone_core` to version
`2.23.0` (#49)
add c2cfd52 Set the version to `10.2.0`
add 203f15b Release changelog for version `10.2.0`
add d980925 Add concurrency limit
add 13ee5ca Add --force to the release pushes performed by the CI
add 995a1b9 Merge tag 'rel/10.2.0'
add 8c841b6 Set version to `10.3.0-SNAPSHOT`
add cd0f78c Improve release instructions
add e329d5f Improve release instructions
add fc8fd36 Enhance SBOM integration and its docs
add 0ccf1d3 Update `github/codeql-action` to version `2.22.4` (#51)
add 6d87af0 Attach `flatten:clean` to `clean` phase
add cfdda22 Improve plugin execution IDs
add d4c2081 Improve BND config (apache/logging-log4j2#1895)
add 6b66b9c Fix broken changelog validation
add d3e0af2 Remove `author` from changelogs
add 54deb26 Update `ossf/scorecard-action` to version `2.3.1` (#52)
add 519c980 Allow to override most BND properties
add 9c48549 Auto-derive distribution attachments from the deployed ones
add e3a127a Remove uninteresting changelog entries
add ae5b110 Accept `*.pom` as a distribution attachment for testing
purposes
add aa47813 Match attachments against relative path in `distribution` BSH
add eaaebe5 Fix auto-generated attachment filepath pattern in CI
add 87266da Replace `project.build.outputTimestamp` in CI (#50)
add 88d3ffe Fix `sed` in CI (#50)
add d49fe10 Fix vote duration in `generate-email.sh`
add 0ccafb1 Update `github/codeql-action` to version `2.22.5` (#53)
add 0f06898 Update `org.cyclonedx:cyclonedx-maven-plugin` to version
`2.7.10` (#54)
add f39223f Update `actions/setup-java` to version `3.13.0` (#55)
add fa0f758 Add `*.zip` files to reproducibility report
add fc9cc55 Changes to `bnd-baseline-maven-plugin`
add 2e488c5 Use `github.head_ref` for the `pull_request_target` event
add a43a0b2 Add missing `Implementation-` and `Specification-` entries in
`MANIFEST.MF` to `bnd-maven-plugin` configuration (apache/logging-log4j2#1923)
add f3be97b Remove redundant changelog entries
add 25df2e8 Change plugin version props naming convention
add b69f628 Fix missing version property change
add 47e93f8 Revert "Change plugin version props naming convention"
add 954f7f2 Add `serialNumber` and VEX references to generate SBOMs (#56)
add 0ed43aa Use the last commit date for setting
`project.build.outputTimestamp`
add 770f18d Update `org.apache.maven.plugins:maven-artifact-plugin` to
version `3.5.0`
add a1fe5ab Replace '/security' with '/cyclonedx'
add 4c5ecc1 Update `com.github.spotbugs:spotbugs-maven-plugin` to version
`4.8.1.0` (#57)
add b34cfa7 Update `com.github.spotbugs:spotbugs-annotations` to version
`4.8.1` (#58)
add 0c7c23e Set version to `10.3.0`
add d5a36f2 Release changelog for version `10.3.0`
add 3677658 Dummy commit to trigger CI
add 10e616c Match attachments against relative path in `distribution` BSH
add 8812914 Fix auto-generated attachment filepath pattern in CI
add 2f107f1 Release changelog for version `10.3.0`
add 2658a6d Replace `project.build.outputTimestamp` in CI (#50)
add 62a4916 Fix `sed` in CI (#50)
add f67d349 Update the `project.build.outputTimestamp` property
add 396b4a8 Release changelog for version `10.3.0`
add 15165d8 Shorten GitHub URLs in `generate-email.sh`
add a8374c4 Update the `project.build.outputTimestamp` property
add 2e6b58a Update features list in the website
add 7b62e2e Fix typo in YAML to trigger CI
add 55614e3 Update the `project.build.outputTimestamp` property
add 139c490 Merge remote-tracking branch 'origin/main' into release/10.3.0
add ad7671f Release changelog entries
add 7700c97 Add `serialNumber` and VEX references to generate SBOMs (#56)
add 1ce1d31 Rename VDR URL from `/security` to `/cyclonedx` (#56)
add 7427cad Update docs (#56)
add de45112 Use the last commit date for setting
`project.build.outputTimestamp`
add 48353a2 Update the `project.build.outputTimestamp` property
add 5213b6f Release changelog for version `10.3.0`
add dde47fa Clean up `project.build.outputTimestamp` duplicate
add 6df4570 Update the `project.build.outputTimestamp` property
add 871e193 Add support for an optional `spotbugs-exclude.xml` file
add ca99077 Update the `project.build.outputTimestamp` property
add 9f28f38 Fix VDR references
add 47bae11 Update `org.apache.maven.plugins:maven-artifact-plugin` to
version `3.5.0`
add c6b713e Update `com.github.spotbugs:spotbugs-maven-plugin` to version
`4.8.1.0` (#57)
add 2fbf2df Update `com.github.spotbugs:spotbugs-annotations` to version
`4.8.1` (#58)
add 01122c0 Organize changelog entries
add 56d6d87 Update the `project.build.outputTimestamp` property
add 44c6dd8 Release changelog for version `10.3.0`
add 84d70d8 Merge tag 'rel/10.3.0'
add 1276549 Set the version to `10.4.0-SNAPSHOT`
add c6f639f Improve release instructions
add f671c57 Switch to Palantir Java formatter
add 856cb1a Fail release on missing `project.build.outputTimestamp`
property
add 960c98d Fix regex
add 1a5bdd6 Increase directory scanning depth from 8 to 32 in the
distribution BeanShell script
add c7772f3 Troubleshoot `log4j-tools` issue
add 7e446a1 Revert troubleshooting aid
add 98d4231 Remove redundant `cyclonedx.json` attachment pattern from CI
add 9c5c595 Remove incorrect changelog entry
add da3fdfb Set the version to `10.4.0`
add 9debe4e Update the `project.build.outputTimestamp` property
add 08224ec Release changelog for version `10.4.0`
add 87b97a9 Fix changelog
add e45457c Update the `project.build.outputTimestamp` property
add 97b2aad Set the version to `10.5.0-SNAPSHOT`
add 6beb223 Update `github/codeql-action` to version `2.22.6` (#60)
add 033864c Update `github/codeql-action` to version `2.22.7` (#61)
add 7eae44e Provide a review kit in the vote email
add faebd7a Save CycloneDX SBOMs if reproducibility fails
add 4129611 Update `github/codeql-action` to version `2.22.8` (#64)
add 5f31d0d Update `org.codehaus.mojo:build-helper-maven-plugin` to
version `3.5.0` (#65)
add abe5d74 Update `com.diffplug.spotless:spotless-maven-plugin` to
version `2.41.0` (#66)
add dfd3892 Update `actions/setup-java` to version `4.0.0` (#67)
add 2e862f8 Update `com.github.spotbugs:spotbugs-annotations` to version
`4.8.2` (#68)
add c1e9125 Add Maven Central explictly to Dependabot config
add bf44981 Update `com.diffplug.spotless:spotless-maven-plugin` to
version `2.41.1` (#70)
add eec898c Update
`org.apache.logging.log4j:log4j-changelog-maven-plugin` to version `0.6.0` (#72)
add 905401d Update `com.github.spotbugs:spotbugs-maven-plugin` to version
`4.8.2.0` (#71)
add 68a7747 Update `org.apache:apache` to version `31` (#73)
add fff71c4 Update `org.eclipse.jgit:org.eclipse.jgit` to version
`6.8.0.202311291450-r` (#74)
add 91abec3 Update `github/codeql-action` to version `2.22.9` (#76)
add edbda8a Switch from `bnd:jar` to `bnd:bnd-process` (#69, #77)
add 19f2c3d Allow BND 7.x upgrade
add 27335fb Update `biz.aQute.bnd:bnd-baseline-maven-plugin` to version
`7.0.0` (#78)
add 546b183 Update `github/codeql-action` to version `2.22.10` (#79)
add f98ce83 Update `com.github.spotbugs:spotbugs-annotations` to version
`4.8.3` (#80)
add 6aa28cb Update `github/codeql-action` to version `3.22.11` (#81)
add 7750fb0 Update `actions/upload-artifact` to version `4.0.0` (#83)
add bc803a1 Update
`org.apache.logging.log4j:log4j-changelog-maven-plugin` to version `0.7.0` (#84)
add 9a5acc9 Bump biz.aQute.bnd:biz.aQute.bnd.annotation from 6.4.1 to
7.0.0
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (afa7bf7)
\
N -- N -- N
refs/heads/dependabot/maven/biz.aQute.bnd-biz.aQute.bnd.annotation-7.0.0
(9a5acc9)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/dependabot.yaml | 10 +
.github/generate-email.sh | 28 +-
.github/release-review-kit.txt | 40 ++
.github/workflows/build-reusable.yaml | 27 +-
.github/workflows/build.yaml | 9 +-
.github/workflows/codeql-analysis-reusable.yaml | 66 +++
.github/workflows/deploy-release-reusable.yaml | 83 ++-
.github/workflows/deploy-snapshot-reusable.yaml | 4 +-
.github/workflows/merge-dependabot-reusable.yaml | 11 +-
.../workflows/scorecards-analysis-reusable.yaml | 59 +++
pom.xml | 561 +++++++++++++++++----
src/changelog/.10.x.x/bnd-process.xml | 8 +
.../update_actions_setup_java.xml} | 6 +-
.../update_actions_upload_artifact.xml} | 6 +-
...te_biz_aqute_bnd_bnd_baseline_maven_plugin.xml} | 6 +-
...com_diffplug_spotless_spotless_maven_plugin.xml | 6 +-
...e_com_github_spotbugs_spotbugs_annotations.xml} | 6 +-
...e_com_github_spotbugs_spotbugs_maven_plugin.xml | 6 +-
.../update_github_codeql_action.xml} | 6 +-
.../update_org_apache_apache.xml | 6 +-
..._logging_log4j_log4j_changelog_maven_plugin.xml | 8 +
...rg_codehaus_mojo_build_helper_maven_plugin.xml} | 6 +-
.../update_org_eclipse_jgit_org_eclipse_jgit.xml | 8 +
.../10.0.0/add-changelog-export-profile.xml | 3 +-
.../10.0.0/add-changelog-release-profile.xml | 3 +-
src/changelog/10.0.0/add-deploy-profile.xml | 3 +-
src/changelog/10.0.0/add-distribution-profile.xml | 3 +-
src/changelog/10.0.0/add-release-instructions.xml | 3 +-
src/changelog/10.0.0/add-release-profile.xml | 3 +-
.../10.0.0/add-reusable-build-workflow.xml | 3 +-
src/changelog/10.0.0/use-changelog-plugin.xml | 3 +-
src/changelog/10.0.0/use-semver.xml | 3 +-
src/changelog/10.1.0/add-asciidoc-profile.xml | 3 +-
src/changelog/10.1.0/add-dependabot-changelog.xml | 3 +-
.../10.1.0/add-osgi-jpms-descriptor-generation.xml | 4 +-
src/changelog/10.1.0/add-reports-on-failure.xml | 3 +-
src/changelog/10.1.0/add-website.xml | 3 +-
src/changelog/10.1.0/fix-java-version.xml | 3 +-
src/changelog/10.1.0/remove-outputTimestamp.xml | 3 +-
src/changelog/10.1.0/switch-changelog-to-adoc.xml | 3 +-
src/changelog/10.1.0/update_actions_checkout.xml | 2 +-
...e_com_github_spotbugs_spotbugs_maven_plugin.xml | 2 +-
...date_com_google_errorprone_error_prone_core.xml | 2 +-
src/changelog/10.1.0/update_org_apache_apache.xml | 3 +-
.../10.1.0/update_org_osgi_osgi_annotation.xml | 2 +-
.../10.1.1/change_default_module_name.xml | 3 +-
src/changelog/10.1.1/checksum_file.xml | 3 +-
.../10.1.1/fix_bnd_required_module_names.xml | 3 +-
src/changelog/10.1.1/timestamp.xml | 3 +-
...com_diffplug_spotless_spotless_maven_plugin.xml | 3 +-
.../{.10.x.x => 10.2.0}/.release-notes.adoc.ftl | 0
src/changelog/{10.1.0 => 10.2.0}/.release.xml | 4 +-
.../add-sbom-support.xml} | 5 +-
.../add_bnd_baseline_plugin.xml} | 7 +-
.../apply_bnd_config_all_goals.xml} | 7 +-
src/changelog/10.2.0/change_flattened_pom.xml | 10 +
.../{.10.x.x => 10.2.0}/fix_bnd_extra_options.xml | 5 +-
.../keep-parent-in-flatten-bom.xml | 4 +-
.../remove-build-in-flatten-bom.xml | 4 +-
src/changelog/10.2.0/skip-symlink-dirs.xml | 8 +
.../update-changelog-version.xml} | 5 +-
.../update-changelog-xsd-version.xml} | 5 +-
...e_com_github_spotbugs_spotbugs_annotations.xml} | 6 +-
.../use-specific-defaultGoal.xml | 3 +-
.../{.10.x.x => 10.3.0}/.release-notes.adoc.ftl | 0
src/changelog/{10.1.0 => 10.3.0}/.release.xml | 4 +-
src/changelog/10.3.0/add-bnd-extra-config.xml | 8 +
.../10.3.0/add-pom-xml-timestamp-substitution.xml | 8 +
.../add-sbom-serialNumber-and-vex.xml} | 7 +-
.../add-spotbugs-exclude.xml} | 7 +-
.../10.3.0/auto-derive-dist-attachments.xml | 10 +
.../change-bnd-baseline.xml} | 7 +-
src/changelog/10.3.0/fail-bnd-on-api-leak.xml | 8 +
.../fix-changelog-validation.xml} | 5 +-
.../fix-flatten-clean.xml} | 5 +-
src/changelog/10.3.0/fix-manifest.xml | 8 +
...e_com_github_spotbugs_spotbugs_annotations.xml} | 6 +-
...e_com_github_spotbugs_spotbugs_maven_plugin.xml | 6 +-
...date_com_google_errorprone_error_prone_core.xml | 6 +-
...apache_maven_plugins_maven_artifact_plugin.xml} | 5 +-
...pdate_org_cyclonedx_cyclonedx_maven_plugin.xml} | 6 +-
.../{.10.x.x => 10.4.0}/.release-notes.adoc.ftl | 0
src/changelog/{10.1.0 => 10.4.0}/.release.xml | 4 +-
.../add-deterministic-formatter.xml} | 7 +-
.../increase-file-walk-depth.xml} | 5 +-
src/site/_constants.adoc | 7 +-
src/site/_constants.tmpl.adoc | 5 +
src/site/_features.adoc | 13 +
src/site/_release-instructions.adoc | 117 ++++-
src/site/_release-notes.adoc | 3 +
src/site/_release-notes/_10.1.0.adoc | 8 +-
.../_release-notes/{_10.x.x.adoc => _10.2.0.adoc} | 22 +-
.../_release-notes/{_10.x.x.adoc => _10.3.0.adoc} | 29 +-
.../_release-notes/_10.4.0.adoc} | 15 +-
src/site/_release-notes/_10.x.x.adoc | 18 +-
src/site/_usage.adoc | 2 +-
src/site/index.adoc | 3 +-
97 files changed, 1169 insertions(+), 322 deletions(-)
create mode 100644 .github/release-review-kit.txt
create mode 100644 .github/workflows/codeql-analysis-reusable.yaml
create mode 100644 .github/workflows/scorecards-analysis-reusable.yaml
create mode 100644 src/changelog/.10.x.x/bnd-process.xml
copy src/changelog/{10.0.0/use-semver.xml =>
.10.x.x/update_actions_setup_java.xml} (52%)
copy src/changelog/{10.0.0/use-semver.xml =>
.10.x.x/update_actions_upload_artifact.xml} (52%)
copy src/changelog/{10.0.0/use-semver.xml =>
.10.x.x/update_biz_aqute_bnd_bnd_baseline_maven_plugin.xml} (50%)
copy src/changelog/{10.1.1 =>
.10.x.x}/update_com_diffplug_spotless_spotless_maven_plugin.xml (62%)
copy
src/changelog/{10.1.0/update_com_github_spotbugs_spotbugs_maven_plugin.xml =>
.10.x.x/update_com_github_spotbugs_spotbugs_annotations.xml} (63%)
copy src/changelog/{10.1.0 =>
.10.x.x}/update_com_github_spotbugs_spotbugs_maven_plugin.xml (62%)
copy src/changelog/{10.0.0/use-semver.xml =>
.10.x.x/update_github_codeql_action.xml} (52%)
copy src/changelog/{10.1.0 => .10.x.x}/update_org_apache_apache.xml (66%)
create mode 100644
src/changelog/.10.x.x/update_org_apache_logging_log4j_log4j_changelog_maven_plugin.xml
copy src/changelog/{10.0.0/use-semver.xml =>
.10.x.x/update_org_codehaus_mojo_build_helper_maven_plugin.xml} (50%)
create mode 100644
src/changelog/.10.x.x/update_org_eclipse_jgit_org_eclipse_jgit.xml
copy src/changelog/{.10.x.x => 10.2.0}/.release-notes.adoc.ftl (100%)
copy src/changelog/{10.1.0 => 10.2.0}/.release.xml (90%)
copy src/changelog/{10.0.0/add-release-instructions.xml =>
10.2.0/add-sbom-support.xml} (57%)
copy src/changelog/{10.1.0/update_org_osgi_osgi_annotation.xml =>
10.2.0/add_bnd_baseline_plugin.xml} (55%)
copy src/changelog/{10.1.0/update_org_apache_apache.xml =>
10.2.0/apply_bnd_config_all_goals.xml} (56%)
create mode 100644 src/changelog/10.2.0/change_flattened_pom.xml
rename src/changelog/{.10.x.x => 10.2.0}/fix_bnd_extra_options.xml (68%)
rename src/changelog/{.10.x.x => 10.2.0}/keep-parent-in-flatten-bom.xml (77%)
rename src/changelog/{.10.x.x => 10.2.0}/remove-build-in-flatten-bom.xml (74%)
create mode 100644 src/changelog/10.2.0/skip-symlink-dirs.xml
copy src/changelog/{10.1.0/update_actions_checkout.xml =>
10.2.0/update-changelog-version.xml} (57%)
copy src/changelog/{10.1.0/update_org_osgi_osgi_annotation.xml =>
10.2.0/update-changelog-xsd-version.xml} (56%)
copy
src/changelog/{10.1.0/update_com_github_spotbugs_spotbugs_maven_plugin.xml =>
10.2.0/update_com_github_spotbugs_spotbugs_annotations.xml} (63%)
rename src/changelog/{.10.x.x => 10.2.0}/use-specific-defaultGoal.xml (81%)
copy src/changelog/{.10.x.x => 10.3.0}/.release-notes.adoc.ftl (100%)
copy src/changelog/{10.1.0 => 10.3.0}/.release.xml (90%)
create mode 100644 src/changelog/10.3.0/add-bnd-extra-config.xml
create mode 100644 src/changelog/10.3.0/add-pom-xml-timestamp-substitution.xml
copy src/changelog/{10.1.0/add-dependabot-changelog.xml =>
10.3.0/add-sbom-serialNumber-and-vex.xml} (54%)
copy src/changelog/{10.0.0/add-release-instructions.xml =>
10.3.0/add-spotbugs-exclude.xml} (57%)
create mode 100644 src/changelog/10.3.0/auto-derive-dist-attachments.xml
copy src/changelog/{10.0.0/use-semver.xml => 10.3.0/change-bnd-baseline.xml}
(53%)
create mode 100644 src/changelog/10.3.0/fail-bnd-on-api-leak.xml
copy src/changelog/{10.1.1/checksum_file.xml =>
10.3.0/fix-changelog-validation.xml} (58%)
copy src/changelog/{10.1.1/checksum_file.xml => 10.3.0/fix-flatten-clean.xml}
(58%)
create mode 100644 src/changelog/10.3.0/fix-manifest.xml
copy
src/changelog/{10.1.0/update_com_github_spotbugs_spotbugs_maven_plugin.xml =>
10.3.0/update_com_github_spotbugs_spotbugs_annotations.xml} (63%)
copy src/changelog/{10.1.0 =>
10.3.0}/update_com_github_spotbugs_spotbugs_maven_plugin.xml (62%)
copy src/changelog/{10.1.0 =>
10.3.0}/update_com_google_errorprone_error_prone_core.xml (63%)
copy src/changelog/{10.1.0/update_org_apache_apache.xml =>
10.3.0/update_org_apache_maven_plugins_maven_artifact_plugin.xml} (58%)
copy src/changelog/{10.0.0/use-semver.xml =>
10.3.0/update_org_cyclonedx_cyclonedx_maven_plugin.xml} (50%)
copy src/changelog/{.10.x.x => 10.4.0}/.release-notes.adoc.ftl (100%)
copy src/changelog/{10.1.0 => 10.4.0}/.release.xml (90%)
copy src/changelog/{10.0.0/add-release-instructions.xml =>
10.4.0/add-deterministic-formatter.xml} (57%)
copy src/changelog/{10.1.0/update_org_apache_apache.xml =>
10.4.0/increase-file-walk-depth.xml} (57%)
copy src/site/_release-notes/{_10.x.x.adoc => _10.2.0.adoc} (65%)
copy src/site/_release-notes/{_10.x.x.adoc => _10.3.0.adoc} (51%)
copy src/{changelog/.10.x.x/.release-notes.adoc.ftl =>
site/_release-notes/_10.4.0.adoc} (90%)
