search

salesforce / grpc-java-contrib

Useful extensions for the grpc-java library
BSD 3-Clause "New" or "Revised" License
220 stars 34 forks source link

build(deps): bump maven-core from 3.8.6 to 3.9.2 #235

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps maven-core from 3.8.6 to 3.9.2.

Release notes

Sourced from maven-core's releases.

3.9.2

Release Notes - Maven - Version 3.9.2

Bug

  • [MNG-7750] - Interpolated properties in originalModel in an active profile.
  • [MNG-7759] - java.lang.NullPointerException at org.apache.maven.repository.internal.DefaultModelCache.newInstance (DefaultModelCache.java:37)

Improvement

  • [MNG-7712] - Core should issue a warning if plugin depends on maven-compat
  • [MNG-7741] - Add more information when using -Dmaven.repo.local.recordReverseTree=true
  • [MNG-7754] - Improvement and extension of plugin validation
  • [MNG-7767] - Tone down plugin validation report
  • [MNG-7778] - Maven should print suppressed exceptions when a mojo fails

Task

  • [MNG-7749] - Upgrade animal-sniffer from 1.21 to 1.23
  • [MNG-7774] - Maven config and command line interpolation

Dependency upgrade

  • [MNG-7670] - Upgrade misc dependencies
  • [MNG-7753] - Upgrade to Maven Resolver 1.9.8
  • [MNG-7769] - Upgrade to Maven Resolver 1.9.10

3.9.1

Release Notes - Maven - Version 3.9.1

Overview About the Changes

Regression fixes from Maven 3.9.0. General performance and other fixes.

Potentially Breaking Core Changes (if migrating from 3.8.x)

  • The Maven Resolver transport has changed from Wagon to “native HTTP”, see Resolver Transport guide.

  • Maven 2.x was auto-injecting an ancient version of plexus-utils dependency into the plugin classpath, and Maven 3.x continued doing this to preserve backward compatibility. Starting with Maven 3.9, it does not happen anymore. This change may lead to plugin breakage. The fix for affected plugin maintainers is to explicitly declare a dependency on plexus-utils. The workaround for affected plugin users is to add this dependency to plugin dependencies until issue is fixed by the affected plugin maintainer. See MNG-6965.

  • Mojos are prevented to boostrap new instance of RepositorySystem (for example by using deprecated ServiceLocator), they should reuse RepositorySystem instance provided by Maven instead. See MNG-7471.

  • Each line in .mvn/maven.config is now interpreted as a single argument. That is, if the file contains multiple arguments, these must now be placed on separate lines, see MNG-7684.

... (truncated)

Commits
  • c961601 [maven-release-plugin] prepare release maven-3.9.2
  • c2331d3 [MNG-7778] - Include suppressed exceptions when logging failures (#1103)
  • 79556dd [MNG-7774] Maven config and command line interpolation (#1098)
  • 7cb87a6 [MNG-7769] Update Resolver to 1.9.10 (#1101)
  • a2428a6 [MNG-7767] Tone down plugin validator (#1092)
  • 924dbfe [MNG-7670] Update misc dependencies (#1089)
  • a4b7532 [MNG-7753] Upgrade to Resolver 1.9.8 (#1077)
  • eb7cdef [MNG-7759] Maven2 plugins will not have even session setter (#1084)
  • bc138dc [MNG-7741] Track missing files, plugin and parent pom dependencies (#1058)
  • 0f18470 [MNG-7750] Fix unwanted interpolation in plugins from profiles. (#1075)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 year ago

Superseded by #241.