search

JodaOrg / joda-time

Joda-Time is the widely used replacement for the Java date and time classes prior to Java SE 8.
http://www.joda.org/joda-time/
Apache License 2.0
4.98k stars 986 forks source link

Bump maven-plugin-plugin from 3.7.1 to 3.8.1 #695

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps maven-plugin-plugin from 3.7.1 to 3.8.1.

Release notes

Sourced from maven-plugin-plugin's releases.

3.8.1

Release Notes - Maven Plugin Tools - Version 3.8.1

Bug

  • [MPLUGIN-443] - Javadoc reference containing a link label with spaces are not detected
  • [MPLUGIN-444] - JavadocLinkGenerator.createLink: Support nested binary class names
  • [MPLUGIN-446] - ERROR during build of m-plugin-report-p and m-plugin-p: Dependencies in wrong scope
  • [MPLUGIN-448] - "Executes as an aggregator plugin" documentation: s/plugin/goal/
  • [MPLUGIN-452] - Maven scope warning should be logged at WARN level
  • [MPLUGIN-453] - Fix Temporary File Information Disclosure Vulnerability

New Feature

  • [MPLUGIN-441] - Support mojos using the new maven v4 api

Improvement

  • [MPLUGIN-425] - Plugin descriptor should contain the requiredJavaVersion/requiredMavenVersion
  • [MPLUGIN-439] - Execute annotation only supports standard lifecycle phases due to use of enum
  • [MPLUGIN-440] - Clarify deprecation of all extractors but the maven-plugin-tools-annotations

Dependency upgrade

Commits
  • b242658 [maven-release-plugin] prepare release maven-plugin-tools-3.8.1
  • 2721944 Revert "Bump plexus-velocity from 1.2 to 2.0 and velocity from 1.7 to 2.3 (#1...
  • d99a455 [maven-release-plugin] prepare for next development iteration
  • 9ca8a18 [maven-release-plugin] prepare release maven-plugin-tools-3.8.0
  • 84f9a2e [MPLUGIN-455] Bump plexus-archiver from 4.5.0 to 4.6.1 (#189)
  • df4b8fd Bump plexus-velocity from 1.2 to 2.0 and velocity from 1.7 to 2.3 (#195)
  • 25837ee [MPLUGIN-441] Upgrade to maven alpha-4 (#191)
  • 4cd8c03 [MPLUGIN-454] Bump junit-bom from 5.9.1 to 5.9.2 (#193)
  • 52be8fa [MPLUGIN-453] Fix Temporary File Information Disclosure (#176)
  • ce49816 [MPLUGIN-447] Ignore reformat commit rev in blame
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)