This is an automated email from the ASF dual-hosted git repository.
dongjoon pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/orc.git
The following commit(s) were added to refs/heads/main by this push:
new 8b05638ce ORC-2023: Upgrade `maven-dependency-plugin` to 3.9.0
8b05638ce is described below
commit 8b05638ce720cc56f9533f8d63fb4804c5c997a7
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Oct 13 08:37:38 2025 -0700
ORC-2023: Upgrade `maven-dependency-plugin` to 3.9.0
Bumps
[org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin)
from 3.8.1 to 3.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/apache/maven-dependency-plugin/releases";>org.apache.maven.plugins:maven-dependency-plugin's
releases</a>.</em></p>
<blockquote>
<h2>3.9.0</h2>
<h2>🚀 New features and improvements</h2>
<ul>
<li>Use Resolver API in go-offline for dependencies resolving (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1533";>#1533</a>)
<a
href="https://github.com/slawekjaranowski";><code>slawekjaranowski</code></a></li>
<li>Use Resolver API in go-offline for plugins resolving (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1532";>#1532</a>)
<a
href="https://github.com/slawekjaranowski";><code>slawekjaranowski</code></a></li>
<li>Fixes <a
href="https://redirect.github.com/apache/maven-dependency-plugin/issues/1522";>#1522</a>,
add render-dependencies mojo (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1523";>#1523</a>)
<a href="https://github.com/rmannibucau";><code>rmannibucau</code></a></li>
<li>Use Resolver API in resolve-plugin (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1521";>#1521</a>)
<a
href="https://github.com/slawekjaranowski";><code>slawekjaranowski</code></a></li>
<li><a href="https://issues.apache.org/jira/browse/MEDP-964";>[MEDP-964]</a>
- unconditionally ignore dependencies known to be loaded by reflection (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1492";>#1492</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
<li>Update maven-dependency-analyzer to support Java24 (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/528";>#528</a>)
<a href="https://github.com/talios";><code>talios</code></a></li>
<li><a href="https://issues.apache.org/jira/browse/MDEP-972";>[MDEP-972]</a>
- copy-dependencies: copy signatures alongside artifacts (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/514";>#514</a>)
<a
href="https://github.com/Ndacyayisenga-droid";><code>Ndacyayisenga-droid</code></a></li>
<li><a href="https://issues.apache.org/jira/browse/MDEP-776";>[MDEP-776]</a>
- Warn when multiple dependencies have the same file name (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/463";>#463</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
<li><a href="https://issues.apache.org/jira/browse/MDEP-966";>[MDEP-966]</a>
- Migrate AnalyzeDepMgt to Sisu (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/473";>#473</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
<li><a href="https://issues.apache.org/jira/browse/MDEP-957";>[MDEP-957]</a>
- By default, don't report slf4j-simple as unused (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/433";>#433</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>ProjectBuildingRequest should not be modified (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1520";>#1520</a>)
<a
href="https://github.com/slawekjaranowski";><code>slawekjaranowski</code></a></li>
<li>Fix - markersDirectory is not working when unpack goal is executed from
command line (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/537";>#537</a>)
<a
href="https://github.com/vaibhavbatra15";><code>vaibhavbatra15</code></a></li>
<li>Fix broken link for analyze-exclusions-mojo on usage-page (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/521";>#521</a>)
<a href="https://github.com/Bukama";><code>Bukama</code></a></li>
<li><a href="https://issues.apache.org/jira/browse/MDEP-839";>[MDEP-839]</a>
- Avoid extra blank lines in file (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/495";>#495</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
<li>Update collect URL (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/510";>#510</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
<li><a href="https://issues.apache.org/jira/browse/MDEP-689";>[MDEP-689]</a>
- Fixes ignored dependency filtering in go-offline goal (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/417";>#417</a>)
<a href="https://github.com/ldhardy";><code>ldhardy</code></a></li>
<li><a href="https://issues.apache.org/jira/browse/MDEP-960";>[MDEP-960]</a>
- Repair silent logging (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/447";>#447</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
</ul>
<h2>📝 Documentation updates</h2>
<ul>
<li><a href="https://issues.apache.org/jira/browse/MDEP-933";>[MDEP-933]</a>
- Document dependency tree output formats (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/535";>#535</a>)
<a
href="https://github.com/Ndacyayisenga-droid";><code>Ndacyayisenga-droid</code></a></li>
<li>Add additional comment to clarify the minimal supported version of ou…
(<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/465";>#465</a>)
<a href="https://github.com/gluxhappy";><code>gluxhappy</code></a></li>
<li><a
href="https://issues.apache.org/jira/browse/MNGSITE-529";>[MNGSITE-529]</a> -
Rename "Goals" to "Plugin Documentation" (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/511";>#511</a>)
<a href="https://github.com/Bukama";><code>Bukama</code></a></li>
<li>Unix file separators (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/507";>#507</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
</ul>
<h2>👻 Maintenance</h2>
<ul>
<li>Simplify usage of RepositoryManager and DependencyResolver (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1518";>#1518</a>)
<a
href="https://github.com/slawekjaranowski";><code>slawekjaranowski</code></a></li>
<li>Use Resolver API in copy and unpack (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1514";>#1514</a>)
<a
href="https://github.com/slawekjaranowski";><code>slawekjaranowski</code></a></li>
<li>Update site descriptor to 2.0.0 (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1508";>#1508</a>)
<a
href="https://github.com/slawekjaranowski";><code>slawekjaranowski</code></a></li>
<li>Enable prevent branch protection rules (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1503";>#1503</a>)
<a
href="https://github.com/slawekjaranowski";><code>slawekjaranowski</code></a></li>
<li>Fix <a
href="https://issues.apache.org/jira/browse/MDEP-931";>[MDEP-931]</a> - Replace
PrintWriter with Writer in AbstractSerializing Visitor and subclasses (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/530";>#530</a>)
<a
href="https://github.com/Ndacyayisenga-droid";><code>Ndacyayisenga-droid</code></a></li>
<li>Cleanups dependencies (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1496";>#1496</a>)
<a
href="https://github.com/slawekjaranowski";><code>slawekjaranowski</code></a></li>
<li>Copy edit parameter descriptions (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/1488";>#1488</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
<li>Small Javadoc clarifications (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/533";>#533</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
<li><a href="https://issues.apache.org/jira/browse/MDEP-967";>[MDEP-967]</a>
- Change info to debug logging in AbstractFromConfigurationMojo (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/529";>#529</a>)
<a
href="https://github.com/Ndacyayisenga-droid";><code>Ndacyayisenga-droid</code></a></li>
<li>fix: remove duplicate maven-resolver-api and maven-resolver-util
dependencies in pom.xml (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/526";>#526</a>)
<a
href="https://github.com/Ndacyayisenga-droid";><code>Ndacyayisenga-droid</code></a></li>
<li>Enable GH issues (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/522";>#522</a>)
<a href="https://github.com/Bukama";><code>Bukama</code></a></li>
<li>Remove redundant/unneeded code (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/519";>#519</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
<li>Add PR Automation and Stale actions (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/513";>#513</a>)
<a
href="https://github.com/slawekjaranowski";><code>slawekjaranowski</code></a></li>
<li>Keep files in temporary directory to be deleted after test (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/508";>#508</a>)
<a href="https://github.com/pzygielo";><code>pzygielo</code></a></li>
<li>Drop unnecessary call (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/509";>#509</a>)
<a href="https://github.com/pzygielo";><code>pzygielo</code></a></li>
<li>Avoid deprecated ArtifactFactory (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/pull/489";>#489</a>)
<a href="https://github.com/elharo";><code>elharo</code></a></li>
</ul>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/apache/maven-dependency-plugin/commit/826e5f064fb023b3b714280e9d2007dec1fae189";><code>826e5f0</code></a>
[maven-release-plugin] prepare release maven-dependency-plugin-3.9.0</li>
<li><a
href="https://github.com/apache/maven-dependency-plugin/commit/0db1acc3929ab2b91998d3910078d6f494af8f8b";><code>0db1acc</code></a>
Use Resolver API in go-offline for dependencies resolving (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/issues/1533";>#1533</a>)</li>
<li><a
href="https://github.com/apache/maven-dependency-plugin/commit/e50031a17b4349ddd80c41371fe43f2f2ce8ecfd";><code>e50031a</code></a>
Use Resolver API in go-offline for plugins resolving</li>
<li><a
href="https://github.com/apache/maven-dependency-plugin/commit/6ed4b1abf463556391e957b1c3201662276ef0b1";><code>6ed4b1a</code></a>
Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0</li>
<li><a
href="https://github.com/apache/maven-dependency-plugin/commit/8776c61b557b162a364d5d7eef7b2c75069787f8";><code>8776c61</code></a>
Bump org.assertj:assertj-core from 3.27.5 to 3.27.6</li>
<li><a
href="https://github.com/apache/maven-dependency-plugin/commit/d2af78edcf2f8b59fcb6df0f8b02c54a4963d47c";><code>d2af78e</code></a>
Ignore Mockito 5.x and SLF4j 2.x by dependabot</li>
<li><a
href="https://github.com/apache/maven-dependency-plugin/commit/dcd4b7d18a10906c56ad2e4f5a602479d68aa7dc";><code>dcd4b7d</code></a>
Bump org.assertj:assertj-core from 3.27.4 to 3.27.5</li>
<li><a
href="https://github.com/apache/maven-dependency-plugin/commit/752394802bb182db81dc9348540cbae850a0d571";><code>7523948</code></a>
Strict check of dependencies usage</li>
<li><a
href="https://github.com/apache/maven-dependency-plugin/commit/23186d4462bf16ddd566a5e64f1e1c21580e7f51";><code>23186d4</code></a>
Fixes <a
href="https://redirect.github.com/apache/maven-dependency-plugin/issues/1522";>#1522</a>,
add render-dependencies mojo (<a
href="https://redirect.github.com/apache/maven-dependency-plugin/issues/1523";>#1523</a>)</li>
<li><a
href="https://github.com/apache/maven-dependency-plugin/commit/bc1893f40ddad014bc33d77621068dfd3b145455";><code>bc1893f</code></a>
Use Resolver API in resolve-plugin</li>
<li>Additional commits viewable in <a
href="https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.8.1...maven-dependency-plugin-3.9.0";>compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that
have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI
passes on it
- `dependabot cancel merge` will cancel a previously requested merge and
block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it.
You can achieve the same result by closing it manually
- `dependabot show <dependency name> ignore conditions` will show all of
the ignore conditions of the specified dependency
- `dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen the PR
or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen the PR
or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the PR or
upgrade to it yourself)
</details>
Closes #2439 from
dependabot[bot]/dependabot/maven/java/org.apache.maven.plugins-maven-dependency-plugin-3.9.0.
Authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Dongjoon Hyun <[email protected]>
---
java/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/pom.xml b/java/pom.xml
index c5931c2ea..821cd54e4 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -71,7 +71,7 @@
<jts.version>1.20.0</jts.version>
<junit.version>6.0.0</junit.version>
<maven-assembly-plugin.version>3.7.1</maven-assembly-plugin.version>
- <maven-dependency-plugin.version>3.8.1</maven-dependency-plugin.version>
+ <maven-dependency-plugin.version>3.9.0</maven-dependency-plugin.version>
<maven-enforcer-plugin.version>3.6.1</maven-enforcer-plugin.version>
<maven-shade-plugin.version>3.6.1</maven-shade-plugin.version>
<maven.compiler.release>${java.version}</maven.compiler.release>
