dependabot[bot] opened a new pull request, #7828: URL: https://github.com/apache/myfaces-tobago/pull/7828
Bumps [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) from 2.24.0 to 2.25.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mojohaus/versions/releases";>org.codehaus.mojo:versions-maven-plugin's releases</a>.</em></p> <blockquote> <h2>2.25.0</h2> <p>Versions Maven Plugin 2.25.0 stops suggesting pre-release versions by default, can hold back releases until they have been published for a set number of days, and can follow the ignore rules of a project's Dependabot configuration. It requires <strong>Maven 3.9.0 or later</strong> and <strong>Java 8 or later</strong>.</p> <h2>✨ Highlights</h2> <ul> <li><strong>Pre-releases are left out by default</strong>: every goal and report now skips alpha, beta, milestone, release-candidate, preview and early-access versions, so the newest stable version is reported instead of, say, <code>3.34.0.CR1</code>. Pass <code>-DallowPreReleases=true</code> to get the previous output. When the current version is itself a pre-release or snapshot, newer pre-releases of the same release line are still offered: from <code>4.0.0-beta-3</code>, both <code>4.0.0-beta-4</code> and <code>4.0.0</code> are offered (<a href="https://redirect.github.com/mojohaus/versions/issues/1482";>#1482</a>).</li> <li><strong><code>minimumReleaseAge</code></strong>: offer a release as an update only after it has been published for the given number of days (<code>-Dversions.minimumReleaseAge=7</code>). <code>minimumReleaseAgeExcludes</code> exempts trusted <code>groupId:artifactId</code> patterns. The publication date is read through Maven's own transport, so proxies, mirrors and server credentials apply (<a href="https://redirect.github.com/mojohaus/versions/issues/1484";>#1484</a>).</li> <li><strong>Dependabot ignore rules</strong>: with <code>-Dversions.dependabotConfig=.github/dependabot.yml</code>, the goals and reports skip the versions that the Dependabot configuration ignores for the branch being built (<a href="https://redirect.github.com/mojohaus/versions/issues/1480";>#1480</a>).</li> <li><strong><code>processPlugins</code> for the <code>use-latest-*</code> and <code>use-next-*</code> goals</strong>: these goals can now also update plugins with a literal version in <code>build/plugins</code>, <code>build/pluginManagement</code> and <code>reporting</code>. A plugin version that needs a newer Maven than the project's minimum is skipped (<a href="https://redirect.github.com/mojohaus/versions/issues/1477";>#1477</a>).</li> <li><strong><code>set-property -Dinsert</code></strong>: adds a property the POM doesn't declare yet, optionally inside a profile given with <code>profileId</code> (<a href="https://redirect.github.com/mojohaus/versions/issues/1340";>#1340</a>).</li> <li><strong><code>rulesUri</code> is loaded through the Maven Resolver</strong>: it works with whichever transports Maven is configured with, and the Wagon dependencies are gone. Code that constructs the mojos, reports or the <code>maxDependencyUpdates</code> enforcer rule directly now passes a <code>TransporterProvider</code> instead of a <code>Map<String, Wagon></code> (<a href="https://redirect.github.com/mojohaus/versions/issues/1475";>#1475</a>).</li> <li><strong>Fixes</strong>: BOMs imported as <code>${project.groupId}:bom:${project.version}</code> no longer fail with "Not fully interpolated artifact" on Maven 3.10 and 4 (<a href="https://redirect.github.com/mojohaus/versions/issues/1486";>#1486</a>). A property that only a child module uses is evaluated with that module's rules again, as in 2.22.0 (<a href="https://redirect.github.com/mojohaus/versions/issues/1481";>#1481</a>). <code>numThreads</code> is honored by the <code>use-latest-*</code> and <code>use-next-*</code> goals (<a href="https://redirect.github.com/mojohaus/versions/issues/1478";>#1478</a>).</li> </ul> <h2>🚨 Removed</h2> <ul> <li>Leave pre-release versions out by default in every goal and report (<a href="https://redirect.github.com/mojohaus/versions/issues/1482";>#1482</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> </ul> <h2>🚀 New features and improvements</h2> <ul> <li>Add minimumReleaseAge to hold back recent releases (<a href="https://redirect.github.com/mojohaus/versions/issues/1484";>#1484</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a>, carrying a commit by <a href="https://github.com/Master-Code-Programmer";><code>@Master-Code-Programmer</code></a></li> <li>Apply the ignore rules from the Dependabot configuration (<a href="https://redirect.github.com/mojohaus/versions/issues/1480";>#1480</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>set-property should add the property if it does not yet exist (<a href="https://redirect.github.com/mojohaus/versions/issues/1340";>#1340</a>) <a href="https://github.com/mandritschke";><code>@mandritschke</code></a></li> <li>Load rulesUri through the Resolver transporter instead of Wagon (<a href="https://redirect.github.com/mojohaus/versions/issues/1475";>#1475</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Update plugin versions with processPlugins in the use-latest and use-next goals (<a href="https://redirect.github.com/mojohaus/versions/issues/1477";>#1477</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>Interpolate raw dependencyManagement coordinates before resolving versions (<a href="https://redirect.github.com/mojohaus/versions/issues/1486";>#1486</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Allow downgrading x.0.0-SNAPSHOT to an x.0.0 pre-release with allowMajorUpdates=false (<a href="https://redirect.github.com/mojohaus/versions/issues/1374";>#1374</a>) <a href="https://github.com/dcolazin";><code>@dcolazin</code></a></li> <li>Evaluate a parent property used only by a module in that module (<a href="https://redirect.github.com/mojohaus/versions/issues/1481";>#1481</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Honor numThreads in the use-latest and use-next goals (<a href="https://redirect.github.com/mojohaus/versions/issues/1478";>#1478</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Remove the maven-shared-utils dependency (<a href="https://redirect.github.com/mojohaus/versions/issues/1483";>#1483</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> <li>Use doxiaVersion for doxia-module-xhtml5 (<a href="https://redirect.github.com/mojohaus/versions/issues/1476";>#1476</a>) <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li> </ul> <p>Thanks to <a href="https://github.com/dcolazin";><code>@dcolazin</code></a>, <a href="https://github.com/mandritschke";><code>@mandritschke</code></a>, <a href="https://github.com/Master-Code-Programmer";><code>@Master-Code-Programmer</code></a> and <a href="https://github.com/slachiewicz";><code>@slachiewicz</code></a>.</p> <p><a href="https://github.com/mojohaus/versions/compare/2.24.0...2.25.0";>Full changelog</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mojohaus/versions/commit/818c81d259ac59aeacb38b60ebd2156b6941e306";><code>818c81d</code></a> [maven-release-plugin] prepare release 2.25.0</li> <li><a href="https://github.com/mojohaus/versions/commit/ff38086af16ed9328f2eab5e417eb06ad46cd7a0";><code>ff38086</code></a> Set the next version to 2.25.0-SNAPSHOT</li> <li><a href="https://github.com/mojohaus/versions/commit/a69a6c4f8ee445d94300640c1c898d99b0953874";><code>a69a6c4</code></a> Interpolate raw dependencyManagement coordinates (<a href="https://redirect.github.com/mojohaus/versions/issues/1485";>#1485</a>)</li> <li><a href="https://github.com/mojohaus/versions/commit/354b1f12a3fcb9c4d079a2c111263a2860c60ea2";><code>354b1f1</code></a> Add an IT for minimumReleaseAge and its exemption</li> <li><a href="https://github.com/mojohaus/versions/commit/df0536bd6c292993331d6a21d2a7badd96152349";><code>df0536b</code></a> Read release dates through the Resolver and rename the filter minimumReleaseAge</li> <li><a href="https://github.com/mojohaus/versions/commit/e80cc41b0dbce8217265a238c03e176cf2f7d20d";><code>e80cc41</code></a> MinDaysOld: Made minimum age of artifacts configurable</li> <li><a href="https://github.com/mojohaus/versions/commit/a7f3cf12fb62a8867d6ce506cb669880c46a615a";><code>a7f3cf1</code></a> Parse each version once when applying the pre-release policy</li> <li><a href="https://github.com/mojohaus/versions/commit/af9205cb3dea628975c609717e456382dfafc25b";><code>af9205c</code></a> Classify pre-releases from the canonical form of Maven 4 as well</li> <li><a href="https://github.com/mojohaus/versions/commit/d2234dcca38cb84a2fb9a226d64a16dd5f2e78a6";><code>d2234dc</code></a> Leave pre-release versions out by default in every goal and report (<a href="https://redirect.github.com/mojohaus/versions/issues/1350";>#1350</a>)</li> <li><a href="https://github.com/mojohaus/versions/commit/7aa9bea68c91ac92c1e9b9f6cdbbdb2b6846dee2";><code>7aa9bea</code></a> Remove the maven-shared-utils dependency</li> <li>Additional commits viewable in <a href="https://github.com/mojohaus/versions/compare/2.24.0...2.25.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
