Branch: refs/heads/main
Home: https://github.com/pmd/pmd-eclipse-plugin
Commit: 0136b8e64b580b808e347ce135d90a280d101869
https://github.com/pmd/pmd-eclipse-plugin/commit/0136b8e64b580b808e347ce135d90a280d101869
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: 2026-05-21 (Thu, 21 May 2026)
Changed paths:
M pom.xml
Log Message:
-----------
Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#402)
Bumps
[org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer)
from 3.6.2 to 3.6.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/apache/maven-enforcer/releases";>org.apache.maven.plugins:maven-enforcer-plugin's
releases</a>.</em></p>
<blockquote>
<h2>3.6.3</h2>
<!-- raw HTML omitted -->
<h2>🚀 New features and improvements</h2>
<ul>
<li>Make bannedDependencies report root and transitive dependency in
case both are banned. (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/940";>#940</a>)
<a href="https://github.com/hvoynov";><code>@hvoynov</code></a></li>
<li>Add enforceBytecodeVersion rule based on mojohaus (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/968";>#968</a>)
<a href="https://github.com/cstamas";><code>@cstamas</code></a></li>
<li>Improve formatting of deprecated API warning (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/951";>#951</a>)
<a
href="https://github.com/mthmulders";><code>@mthmulders</code></a></li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Fix handling of Java versions like 21.0.10.0.1 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/967";>#967</a>)
<a
href="https://github.com/parttimenerd";><code>@parttimenerd</code></a></li>
<li>Add null checks for modelId in PluginWrapper (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/974";>#974</a>)
<a href="https://github.com/cpfeiffer";><code>@cpfeiffer</code></a></li>
</ul>
<h2>📝 Documentation updates</h2>
<ul>
<li>Document the banMavenDefaults option for the requirePluginVersions
rule. (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/936";>#936</a>)
<a
href="https://github.com/rpkrajewski";><code>@rpkrajewski</code></a></li>
</ul>
<h2>👻 Maintenance</h2>
<ul>
<li><code>PlexusStringUtils</code> Refaster recipes (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/943";>#943</a>)
<a
href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li>
<li>JUnit Jupiter migration from JUnit 4.x (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/941";>#941</a>)
<a
href="https://github.com/slachiewicz";><code>@slachiewicz</code></a></li>
</ul>
<h2>📦 Dependency updates</h2>
<ul>
<li>Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4 in
/maven-enforcer-plugin/src/it/projects/MENFORCER-434 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/970";>#970</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Deps: Parent POM 48 and align deps (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/979";>#979</a>)
<a href="https://github.com/cstamas";><code>@cstamas</code></a></li>
<li>Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/976";>#976</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump commons-io:commons-io from 2.21.0 to 2.22.0 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/975";>#975</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump mavenVersion from 3.9.14 to 3.9.15 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/973";>#973</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump mavenVersion from 3.9.13 to 3.9.14 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/965";>#965</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump mavenVersion from 3.9.12 to 3.9.13 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/964";>#964</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
from 3.5.0 to 3.5.1 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/963";>#963</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Update log4j in test to avoid CVE (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/961";>#961</a>)
<a href="https://github.com/Bukama";><code>@Bukama</code></a></li>
<li>Bump commons-codec:commons-codec from 1.20.0 to 1.21.0 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/962";>#962</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/960";>#960</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/959";>#959</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump org.apache.maven:maven-parent from 46 to 47 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/958";>#958</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/957";>#957</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Update to 46 including fixes (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/955";>#955</a>)
<a href="https://github.com/Bukama";><code>@Bukama</code></a></li>
<li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
from 3.3.0 to 3.5.0 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/956";>#956</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump mavenVersion from 3.9.11 to 3.9.12 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/948";>#948</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/947";>#947</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump commons-io:commons-io from 2.20.0 to 2.21.0 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/946";>#946</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
<li>Bump commons-codec:commons-codec from 1.19.0 to 1.20.0 (<a
href="https://redirect.github.com/apache/maven-enforcer/pull/945";>#945</a>)
@<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/apache/maven-enforcer/commit/c7daff33d46c9c3ee0666540c6857c66cf159e70";><code>c7daff3</code></a>
[maven-release-plugin] prepare release enforcer-3.6.3</li>
<li><a
href="https://github.com/apache/maven-enforcer/commit/ee46e78b046be9882a739c07556940329a7345d6";><code>ee46e78</code></a>
Make bannedDependencies report root and transitive dependency in case
both ar...</li>
<li><a
href="https://github.com/apache/maven-enforcer/commit/0806924d8f6c5ad6105ac387bf323846e769b18c";><code>0806924</code></a>
Document the banMavenDefaults option for the requirePluginVersions rule.
(<a
href="https://redirect.github.com/apache/maven-enforcer/issues/936";>#936</a>)</li>
<li><a
href="https://github.com/apache/maven-enforcer/commit/8e4f5b94453de97592cf3935b79319894f013329";><code>8e4f5b9</code></a>
Add better enforceBytecodeVersion rule based on mojohaus (<a
href="https://redirect.github.com/apache/maven-enforcer/issues/968";>#968</a>)</li>
<li><a
href="https://github.com/apache/maven-enforcer/commit/fd4b1486dcc93394d5f6a11687efd51d0d30b22d";><code>fd4b148</code></a>
Add fix for 21.0.10.0.1 issue (<a
href="https://redirect.github.com/apache/maven-enforcer/issues/967";>#967</a>)</li>
<li><a
href="https://github.com/apache/maven-enforcer/commit/f32d5979ef387668162c2beb905b368e25accd70";><code>f32d597</code></a>
Deps: Parent POM 48 and align deps (<a
href="https://redirect.github.com/apache/maven-enforcer/issues/979";>#979</a>)</li>
<li><a
href="https://github.com/apache/maven-enforcer/commit/df0f2a6d7fbbaf79914cdb56fa5899d99c8eaf19";><code>df0f2a6</code></a>
Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (<a
href="https://redirect.github.com/apache/maven-enforcer/issues/976";>#976</a>)</li>
<li><a
href="https://github.com/apache/maven-enforcer/commit/2da7a68b4d8d9d2da866ffaf1e07a206c9b7115d";><code>2da7a68</code></a>
Add null checks for modelId in PluginWrapper</li>
<li><a
href="https://github.com/apache/maven-enforcer/commit/91eb4d9fe1f6f65137991c1131131ceaca542245";><code>91eb4d9</code></a>
Bump commons-io:commons-io from 2.21.0 to 2.22.0 (<a
href="https://redirect.github.com/apache/maven-enforcer/issues/975";>#975</a>)</li>
<li><a
href="https://github.com/apache/maven-enforcer/commit/b6222459bf3256bfd747731a7f4ea81577777ffe";><code>b622245</code></a>
Bump mavenVersion from 3.9.14 to 3.9.15 (<a
href="https://redirect.github.com/apache/maven-enforcer/issues/973";>#973</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/apache/maven-enforcer/compare/enforcer-3.6.2...enforcer-3.6.3";>compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
To unsubscribe from these emails, change your notification settings at
https://github.com/pmd/pmd-eclipse-plugin/settings/notifications
_______________________________________________
Pmd-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/pmd-commits
