Closed dependabot[bot] closed 4 months ago
If slf4j simple is made a runtime, this would be fine to move slf4j to version 2. It is not, so it means it is relying on maven implementation which is version 1. Making it version 2 though could have consequences with maven. I think we should take this up with maven though to make sure they start using version 2.
Looks like these dependencies are updatable in another way, so this is no longer needed.
Bumps the maven group with 4 updates in the / directory: net.revelc.code:revelc, org.codehaus.plexus:plexus-xml, org.slf4j:slf4j-simple and org.apache.maven.plugins:maven-scm-publish-plugin.
Updates
net.revelc.code:revelc
from 5 to 6Updates
org.codehaus.plexus:plexus-xml
from 3.0.0 to 4.0.4Release notes
Sourced from org.codehaus.plexus:plexus-xml's releases.
... (truncated)
Commits
f25521b
[maven-release-plugin] prepare release plexus-xml-4.0.443dbdca
Allow nulls for write elements in MXSerializer6bccd34
Bump org.codehaus.plexus:plexus from 17 to 18 (#39)d84cafe
Bump org.codehaus.plexus:plexus from 16 to 17 (#35)e0a1841
Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1 (#37)4ee6e63
---d56dbc9
Config release-drafter on masterb97a574
Fix release-drafter config14d3067
Fix release-drafter config1977a0b
Fix release-drafter configUpdates
org.slf4j:slf4j-simple
from 1.7.36 to 2.0.13Updates
org.apache.maven.plugins:maven-scm-publish-plugin
from 3.2.1 to 3.3.0Commits
53cb318
[maven-release-plugin] prepare release maven-scm-publish-plugin-3.3.012afe10
[MSCMPUB-69] ITs do not properly check for existence of svn/svnadmin/CreateSy...1b4a3ed
[MSCMPUB-68] Upgrade plugins and components (in ITs)f0d13f8
[MSCMPUB-67] Upgrade to Maven 3.6.3b7c8c15
Add more ignores80796c5
Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#36)5bcd155
[MSCMPUB-66] Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.0 (#26)0baf493
Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.14.01eb0e43
Bump releasePluginVersion from 3.0.0 to 3.0.16aec610
[MSCMPUB-65] Bump commons-io:commons-io from 2.11.0 to 2.16.0 (#32)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show