renovate-bot opened a new pull request, #667: URL: https://github.com/apache/sling-org-apache-sling-starter/pull/667
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [biz.aQute.bnd:bnd-indexer-maven-plugin](https://bnd.bndtools.org/) ([source](https://redirect.github.com/bndtools/bnd)) | `7.3.0` → `7.4.0` |  |  | --- ### Release Notes <details> <summary>bndtools/bnd (biz.aQute.bnd:bnd-indexer-maven-plugin)</summary> ### [`v7.4.0`](https://redirect.github.com/bndtools/bnd/releases/tag/7.4.0): Bnd/Bndtools 7.4.0 [Compare Source](https://redirect.github.com/bndtools/bnd/compare/7.3.0...7.4.0) See [Release Notes](https://redirect.github.com/bndtools/bnd/wiki/Changes-in-7.4.0) #### What's Changed - Remove long-running test from ci server build by [@​peterkir](https://redirect.github.com/peterkir) in [#​7222](https://redirect.github.com/bndtools/bnd/pull/7222) - CI build output improvement by [@​peterkir](https://redirect.github.com/peterkir) in [#​7223](https://redirect.github.com/bndtools/bnd/pull/7223) - build(deps): bump ruby/setup-ruby from 1.306.0 to 1.307.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7227](https://redirect.github.com/bndtools/bnd/pull/7227) - build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7230](https://redirect.github.com/bndtools/bnd/pull/7230) - build(deps): bump github/codeql-action from 4.35.2 to 4.36.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7246](https://redirect.github.com/bndtools/bnd/pull/7246) - build(deps): bump step-security/harden-runner from 2.19.2 to 2.19.4 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7245](https://redirect.github.com/bndtools/bnd/pull/7245) - Create SECURITY.md for bnd security documentation by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7243](https://redirect.github.com/bndtools/bnd/pull/7243) - build(deps): bump ruby/setup-ruby from 1.307.0 to 1.310.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7240](https://redirect.github.com/bndtools/bnd/pull/7240) - build(deps): bump jekyll-seo-tag from 2.8.0 to 2.9.0 in /docs by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7225](https://redirect.github.com/bndtools/bnd/pull/7225) - Allow overriding HTTPClient request headers by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7247](https://redirect.github.com/bndtools/bnd/pull/7247) - docs: update generated docs by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​7248](https://redirect.github.com/bndtools/bnd/pull/7248) - Set explicit headers before defaults and refine logging by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7249](https://redirect.github.com/bndtools/bnd/pull/7249) - Cooldowns for Dependabot updates by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7250](https://redirect.github.com/bndtools/bnd/pull/7250) - build(deps): bump org.apache.maven.plugins:maven-invoker-plugin from 3.10.0 to 3.10.1 in /maven-plugins by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7219](https://redirect.github.com/bndtools/bnd/pull/7219) - build(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 in /maven-plugins by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7251](https://redirect.github.com/bndtools/bnd/pull/7251) - Surface Sonatype deployment IDs in CI Job Summary and workflow outputs by [@​peterkir](https://redirect.github.com/peterkir) with [@​Copilot](https://redirect.github.com/Copilot) in [#​7252](https://redirect.github.com/bndtools/bnd/pull/7252) - Stabilize SonatypeDeploymentTest deployment ID discovery across CI by [@​peterkir](https://redirect.github.com/peterkir) with [@​Copilot](https://redirect.github.com/Copilot) in [#​7254](https://redirect.github.com/bndtools/bnd/pull/7254) - Use `PAT_WORKSPACE_REPO` for `create-workspace-template` git auth by [@​peterkir](https://redirect.github.com/peterkir) with [@​Copilot](https://redirect.github.com/Copilot) in [#​7253](https://redirect.github.com/bndtools/bnd/pull/7253) - Readme: Update Bnd Maven and Gradle plugin versions to 7.3.0 by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7258](https://redirect.github.com/bndtools/bnd/pull/7258) - build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7256](https://redirect.github.com/bndtools/bnd/pull/7256) - build(deps): bump actions/stale from 10.2.0 to 10.3.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7244](https://redirect.github.com/bndtools/bnd/pull/7244) - build(deps): bump github/codeql-action from 4.36.0 to 4.36.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7257](https://redirect.github.com/bndtools/bnd/pull/7257) - Bndtools Explorer Quick Links addition - Existing Bnd Workspace by [@​peterkir](https://redirect.github.com/peterkir) in [#​7259](https://redirect.github.com/bndtools/bnd/pull/7259) - Update baseline version to 7.3.0 by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7260](https://redirect.github.com/bndtools/bnd/pull/7260) - build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7261](https://redirect.github.com/bndtools/bnd/pull/7261) - Add sync baseline version step in postrelease workflow by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7263](https://redirect.github.com/bndtools/bnd/pull/7263) - Post release 7.3.0 by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​7266](https://redirect.github.com/bndtools/bnd/pull/7266) - \[maven]\[resolve] Provide a better logging experience for maven users when resolving by [@​timothyjward](https://redirect.github.com/timothyjward) in [#​7255](https://redirect.github.com/bndtools/bnd/pull/7255) - build(deps): bump gradle/actions from 6.1.0 to 6.2.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7272](https://redirect.github.com/bndtools/bnd/pull/7272) - build(deps): bump ruby/setup-ruby from 1.310.0 to 1.313.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7271](https://redirect.github.com/bndtools/bnd/pull/7271) - build(deps): bump actions/setup-java from 5.2.0 to 5.3.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7273](https://redirect.github.com/bndtools/bnd/pull/7273) - build(deps): bump concurrent-ruby from 1.3.6 to 1.3.7 in /docs by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7278](https://redirect.github.com/bndtools/bnd/pull/7278) - build(deps): bump ruby/setup-ruby from 1.313.0 to 1.314.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7282](https://redirect.github.com/bndtools/bnd/pull/7282) - Persist and manage workspace template fragment indexes by [@​maho7791](https://redirect.github.com/maho7791) in [#​7284](https://redirect.github.com/bndtools/bnd/pull/7284) - Fix IllegalArgumentException for Maven-style SNAPSHOT versions in PomResource by [@​peterkir](https://redirect.github.com/peterkir) with [@​Copilot](https://redirect.github.com/Copilot) in [#​7286](https://redirect.github.com/bndtools/bnd/pull/7286) - Add `repo deps` command to export Maven GAVs for dash-licenses by [@​juergen-albert](https://redirect.github.com/juergen-albert) in [#​7275](https://redirect.github.com/bndtools/bnd/pull/7275) - docs: update generated docs by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​7287](https://redirect.github.com/bndtools/bnd/pull/7287) - fix IndexOutOfBoundsException by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7291](https://redirect.github.com/bndtools/bnd/pull/7291) - fixing issue [#​7124](https://redirect.github.com/bndtools/bnd/issues/7124) by [@​peterkir](https://redirect.github.com/peterkir) in [#​7292](https://redirect.github.com/bndtools/bnd/pull/7292) - build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7277](https://redirect.github.com/bndtools/bnd/pull/7277) - build(deps): bump actions/setup-java from 5.3.0 to 5.4.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7295](https://redirect.github.com/bndtools/bnd/pull/7295) - Exclude Eclipse features from P2 Repo .versions() by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7296](https://redirect.github.com/bndtools/bnd/pull/7296) - build(deps): bump ruby/setup-ruby from 1.314.0 to 1.315.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7299](https://redirect.github.com/bndtools/bnd/pull/7299) - build(deps): bump ruby/setup-ruby from 1.315.0 to 1.316.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7301](https://redirect.github.com/bndtools/bnd/pull/7301) - \[Security] Maven Repositories: Add Trusted Checksum Verification by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7269](https://redirect.github.com/bndtools/bnd/pull/7269) - Fix NPE in RepoCollector initialization during Project construction by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7304](https://redirect.github.com/bndtools/bnd/pull/7304) - Updates to avoid memory visibility problem by [@​jhanders34](https://redirect.github.com/jhanders34) in [#​7307](https://redirect.github.com/bndtools/bnd/pull/7307) - gradle: Properly configure sourceSet compile and runtime classpaths by [@​bjhargrave](https://redirect.github.com/bjhargrave) in [#​7313](https://redirect.github.com/bndtools/bnd/pull/7313) - build(deps): bump actions/setup-java from 5.4.0 to 5.5.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7309](https://redirect.github.com/bndtools/bnd/pull/7309) - build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7308](https://redirect.github.com/bndtools/bnd/pull/7308) - build(deps): bump actions/stale from 10.3.0 to 10.4.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7314](https://redirect.github.com/bndtools/bnd/pull/7314) - bump actions/setup-java from 5.5.0 to 5.6.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7319](https://redirect.github.com/bndtools/bnd/pull/7319) - bump ruby/setup-ruby from 1.316.0 to 1.319.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7318](https://redirect.github.com/bndtools/bnd/pull/7318) - Fix task order between compileJava and processResources. by [@​ejjcase](https://redirect.github.com/ejjcase) in [#​7323](https://redirect.github.com/bndtools/bnd/pull/7323) - Suppress deprecation warnings and update deprecated API calls by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7321](https://redirect.github.com/bndtools/bnd/pull/7321) - Bump ruby/setup-ruby from 1.319.0 to 1.321.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7332](https://redirect.github.com/bndtools/bnd/pull/7332) - Hold read lock to avoid refresh closing repository by [@​jhanders34](https://redirect.github.com/jhanders34) in [#​7324](https://redirect.github.com/bndtools/bnd/pull/7324) - Skip cleanup job for fork PRs from non bnd repos by [@​peterkir](https://redirect.github.com/peterkir) with [@​Copilot](https://redirect.github.com/Copilot) in [#​7333](https://redirect.github.com/bndtools/bnd/pull/7333) - Bump json from 2.19.5 to 2.19.9 in /docs by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7335](https://redirect.github.com/bndtools/bnd/pull/7335) - Bump actions/checkout from 7.0.0 to 7.0.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​7325](https://redirect.github.com/bndtools/bnd/pull/7325) - Fix thread-safety in aQute.junit.Tee class by [@​chrisrueger](https://redirect.github.com/chrisrueger) in [#​7336](https://redirect.github.com/bndtools/bnd/pull/7336) #### New Contributors - [@​jhanders34](https://redirect.github.com/jhanders34) made their first contribution in [#​7307](https://redirect.github.com/bndtools/bnd/pull/7307) **Full Changelog**: <https://github.com/bndtools/bnd/compare/7.3.0...7.4.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/apache/sling-org-apache-sling-starter). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zMy4yIiwidXBkYXRlZEluVmVyIjoiNDQuMzMuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119--> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
