revelc / formatter-maven-plugin

Formatter Maven Plugin
https://code.revelc.net/formatter-maven-plugin
Apache License 2.0
291 stars 91 forks source link

Bump the maven group across 1 directory with 4 updates #911

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 5 months ago

Bumps the maven group with 4 updates in the / directory: net.revelc.code:revelc, org.codehaus.plexus:plexus-xml, org.slf4j:slf4j-simple and org.apache.maven.plugins:maven-scm-publish-plugin.

Updates net.revelc.code:revelc from 5 to 6

Updates org.codehaus.plexus:plexus-xml from 3.0.0 to 4.0.4

Release notes

Sourced from org.codehaus.plexus:plexus-xml's releases.

4.0.4

🐛 Bug Fixes

📦 Dependency updates

4.0.3

What's Changed

New Contributors

Full Changelog: https://github.com/codehaus-plexus/plexus-xml/compare/plexus-xml-4.0.2...plexus-xml-4.0.3

4.0.2

What's Changed

New Contributors

Full Changelog: https://github.com/codehaus-plexus/plexus-xml/compare/plexus-xml-4.0.1...plexus-xml-4.0.2

4.0.0

3.0.1

... (truncated)

Commits
  • f25521b [maven-release-plugin] prepare release plexus-xml-4.0.4
  • 43dbdca Allow nulls for write elements in MXSerializer
  • 6bccd34 Bump org.codehaus.plexus:plexus from 17 to 18 (#39)
  • d84cafe Bump org.codehaus.plexus:plexus from 16 to 17 (#35)
  • e0a1841 Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1 (#37)
  • 4ee6e63 ---
  • d56dbc9 Config release-drafter on master
  • b97a574 Fix release-drafter config
  • 14d3067 Fix release-drafter config
  • 1977a0b Fix release-drafter config
  • Additional commits viewable in compare view


Updates org.slf4j:slf4j-simple from 1.7.36 to 2.0.13

Updates org.apache.maven.plugins:maven-scm-publish-plugin from 3.2.1 to 3.3.0

Commits
  • 53cb318 [maven-release-plugin] prepare release maven-scm-publish-plugin-3.3.0
  • 12afe10 [MSCMPUB-69] ITs do not properly check for existence of svn/svnadmin/CreateSy...
  • 1b4a3ed [MSCMPUB-68] Upgrade plugins and components (in ITs)
  • f0d13f8 [MSCMPUB-67] Upgrade to Maven 3.6.3
  • b7c8c15 Add more ignores
  • 80796c5 Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#36)
  • 5bcd155 [MSCMPUB-66] Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.0 (#26)
  • 0baf493 Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.14.0
  • 1eb0e43 Bump releasePluginVersion from 3.0.0 to 3.0.1
  • 6aec610 [MSCMPUB-65] Bump commons-io:commons-io from 2.11.0 to 2.16.0 (#32)
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
hazendaz commented 4 months ago

If slf4j simple is made a runtime, this would be fine to move slf4j to version 2. It is not, so it means it is relying on maven implementation which is version 1. Making it version 2 though could have consequences with maven. I think we should take this up with maven though to make sure they start using version 2.

dependabot[bot] commented 4 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.