dependabot[bot] opened a new pull request, #342: URL: https://github.com/apache/creadur-whisker/pull/342
Bumps [org.codehaus.mojo:animal-sniffer-maven-plugin](https://github.com/mojohaus/animal-sniffer) from 1.28 to 1.29. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mojohaus/animal-sniffer/releases";>org.codehaus.mojo:animal-sniffer-maven-plugin's releases</a>.</em></p> <blockquote> <h2>1.29</h2> <p>Animal Sniffer 1.29 improves signature checking accuracy, fixes <code>@IgnoreJRERequirement</code> suppression ordering in the Ant task, and modernizes signature artifact resolution in the Maven plugin and Enforcer rule. The Maven plugin and Enforcer rule require <strong>Maven 3.9.0 or later</strong> and <strong>Java 8 or later</strong>.</p> <h2>✨ Highlights</h2> <ul> <li><strong>Method parameter type checking</strong>: <code>SignatureChecker</code> now verifies the types of declared method parameters against the target signature so methods accepting types missing from the target API are caught even if those types are not referenced in the method body. Synthetic constructor parameters generated for inner classes continue to respect <code>@IgnoreJRERequirement</code> (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/349";>#349</a>).</li> <li><strong>Classified signature artifacts in <code>animal-sniffer-maven-plugin</code></strong>: The <code><signature></code> configuration in <code>animal-sniffer:check</code> now honours <code><classifier></code>, allowing builds to resolve signature artifacts published with a classifier (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/346";>#346</a>).</li> <li><strong>Maven Resolver support in <code>animal-sniffer-enforcer-rule</code></strong>: The <code>checkSignatureRule</code> Enforcer rule now resolves signature artifacts through Maven Resolver instead of the legacy <code>ArtifactResolver</code>, ensuring compatibility with Maven 3.9+ and Maven 4 (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/367";>#367</a>).</li> <li><strong>Reliable <code>@IgnoreJRERequirement</code> suppression in the Ant task</strong>: The Ant <code><check-signature></code> task now sorts classes within each container so enclosing classes are always processed before their nested/inner classes regardless of filesystem or JAR entry order, and ignores non-class resources without splitting class batches (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/350";>#350</a>).</li> <li><strong>ASM 9.11</strong>: Upgraded <code>org.ow2.asm:asm</code> to 9.11 for current Java bytecode support (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/354";>#354</a>).</li> </ul> <h2>🚨 Removed</h2> <ul> <li>Require Maven 3.9.0 (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/359";>#359</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> </ul> <h2>🚀 New features and improvements</h2> <ul> <li>Resolve the enforcer rule's signature through Maven Resolver (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/367";>#367</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>Resolve classified signature artifacts in Maven plugin (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/346";>#346</a>) <a href="https://github.com/jhy";><code>@jhy</code></a></li> <li>Detect unsupported declared method parameter types (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/349";>#349</a>) <a href="https://github.com/wilx";><code>@wilx</code></a></li> <li>Fix Ant signature suppression for unordered class files (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/350";>#350</a>) <a href="https://github.com/wilx";><code>@wilx</code></a></li> </ul> <h2>📝 Documentation updates</h2> <ul> <li>Add AGENTS.md (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/366";>#366</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> </ul> <h2>👻 Maintenance</h2> <ul> <li>Run CheckSignatureTaskTest on JUnit 5 (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/376";>#376</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Declare org.eclipse.sisu.inject at the version of org.eclipse.sisu.plexus (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/374";>#374</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Drop obsolete plugin pins and Java 1.5 settings from the IT projects (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/371";>#371</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Declare the Maven artifacts the code uses (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/368";>#368</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Remove redundant maven-shade-plugin version (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/370";>#370</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Replace deprecated <a href="https://github.com/Component";><code>@Component</code></a> with JSR 330 injection (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/369";>#369</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Apply the JUnit 5 best practices to the tests (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/364";>#364</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Keep Dependabot on Maven 3.9.x (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/362";>#362</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Port the BeanShell verify scripts to Groovy (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/361";>#361</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Migrate SignatureCheckerTest to JUnit 5 (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/360";>#360</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> </ul> <h2>🔧 Build</h2> <ul> <li>Keep Dependabot on Maven 3.9.x and Resolver 1.9.x (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/372";>#372</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Use the runners' cached Temurin JDKs in CI (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/365";>#365</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Run CI on Maven 4 (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/363";>#363</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Assign merged pull requests to the release milestone (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/358";>#358</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Run one integration test per CPU core (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/357";>#357</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Check dependencies monthly and group the updates (<a href="https://redirect.github.com/mojohaus/animal-sniffer/issues/356";>#356</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mojohaus/animal-sniffer/commit/376927b25bd32f005db065d290aee6f9e8bc5c0b";><code>376927b</code></a> [maven-release-plugin] prepare release 1.29</li> <li><a href="https://github.com/mojohaus/animal-sniffer/commit/4ff56c7ac3c6c305c7aea6fdd59ab70cb2522465";><code>4ff56c7</code></a> Run CheckSignatureMojoTest on JUnit 5 with the injected constructor</li> <li><a href="https://github.com/mojohaus/animal-sniffer/commit/43fa25c202b9d118e1b4195659745d606fb2513d";><code>43fa25c</code></a> Update the classifier example, and test version lookup</li> <li><a href="https://github.com/mojohaus/animal-sniffer/commit/52fb82c23d3148c9e41946f8a14c38678b8de08e";><code>52fb82c</code></a> Maven plugin resolves classified signature artifacts</li> <li><a href="https://github.com/mojohaus/animal-sniffer/commit/32ca482413b33c99790df5de0c5e4115aa675297";><code>32ca482</code></a> Preserve suppression for synthetic method parameters</li> <li><a href="https://github.com/mojohaus/animal-sniffer/commit/9007ee728ca3d5c8432003a9da667aa5d0124fbe";><code>9007ee7</code></a> Cover synthetic parameter suppression regressions</li> <li><a href="https://github.com/mojohaus/animal-sniffer/commit/4cadda98cd4cb71801e54955a49ce7be5f3eb2b3";><code>4cadda9</code></a> Check declared method parameter types against signatures</li> <li><a href="https://github.com/mojohaus/animal-sniffer/commit/28455f9ebb8b9e05be3e96db832b1216e7c080be";><code>28455f9</code></a> Add regression coverage for unsupported parameter types</li> <li><a href="https://github.com/mojohaus/animal-sniffer/commit/c957b5b4157af1bdf3d2bc5721c4ba5db7623d37";><code>c957b5b</code></a> Run CheckSignatureTaskTest on JUnit 5</li> <li><a href="https://github.com/mojohaus/animal-sniffer/commit/21f484a514b6922eb58e65da75b75d983da0a3b8";><code>21f484a</code></a> Ignore resources without splitting Ant class file batches</li> <li>Additional commits viewable in <a href="https://github.com/mojohaus/animal-sniffer/compare/1.28...1.29";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
