Bump maven-model from 3.8.6 to 3.9.0 #742

Open

dependabot[bot] wants to merge 1 commit from dependabot/maven/greg-dev/org.apache.maven-maven-model-3.9.0 into greg-dev

dependabot[bot] commented

2023-03-01 14:56:36 +01:00

(Migrated from github.com)

Bumps maven-model from 3.8.6 to 3.9.0.

Release notes

Sourced from maven-model's releases.

3.9.0

Release Notes - Maven - Version 3.9.0

Sub-task

[MNG-7019] - Notify also at start when profile is missing

[MNG-7447] - Several Improvements by using Stream API

Bug

[MNG-5222] - Maven 3 no longer logs warnings about deprecated plugin parameters.

[MNG-6965] - Extensions suddenly have org.codehaus.plexus:plexus-utils:jar:1.1 on their classpath

[MNG-7055] - Using MINSTALL/DEPLOY 3.0.0-M1+ does not write plugin information into maven-metadata.xml

[MNG-7106] - VersionRange.toString() produces a string that cannot be parsed with VersionRange.createFromVersionSpec() for same lower and upper bounds

[MNG-7131] - maven.config doesn't handle arguments with spaces in them

[MNG-7160] - Extension And Classloaders: difference of result given extension types

[MNG-7316] - REGRESSION: MavenProject.getAttachedArtifacts() is read-only

[MNG-7352] - org.apache.maven.toolchain.java.JavaToolchainImpl should be public

[MNG-7413] - Fix POM model documentation confusion on report plugins, distribution repository and profile build

[MNG-7425] - Maven artifact downloads sometimes result in empty zip files in local repository

[MNG-7432] - [REGRESSION] Resolver session contains non-MavenWorkspaceReader

[MNG-7433] - [REGRESSION] Multiple maven instances working on same source tree can lock each other

[MNG-7441] - Update Version of (optional) Logback to Address CVE-2021-42550

[MNG-7448] - Don't ignore bin/ otherwise bin/ in apache-maven module cannot be readded

[MNG-7459] - Revert MNG-7347 (SessionScoped beans should be singletons for a given session)

[MNG-7471] - Resolver 1.8.0 introduces binary breakage in plugin using Resolver

[MNG-7487] - Fix deadlock during forked lifecycle executions

[MNG-7493] - [REGRESSION] Resolving dependencies between submodules fails

[MNG-7504] - Warning about unknown reportPlugins parameters for m-site-p are always generated

[MNG-7511] - Ensure the degreeOfConcurrency is a positive number in MavenExecutionRequest

[MNG-7515] - Cannot see a dependency tree for apache-maven module

[MNG-7529] - Maven resolver makes bad repository choices when resolving version ranges

[MNG-7545] - Multi building can create bad files for downloaded artifacts in local repository

[MNG-7563] - REGRESSION: User properties now override model properties in dependencies

[MNG-7564] - Potential NPE in MavenMetadataSource

[MNG-7568] - [WARNING] The requested profile "ABCDEF" could not be activated because it does not exist.

[MNG-7578] - Building Linux image on Windows impossible (patch incuded)

[MNG-7600] - LocalRepositoryManager is created too early

[MNG-7606] - Maven 3.9.0-SNAPSHOT cannot build Maven 4.0.0-SNAPSHOT

[MNG-7621] - Parameter '-f' causes ignoring any 'maven.config' (only on Windows)

[MNG-7624] - Plugins without non-mandatory goalPrefix are now logging incomplete info

[MNG-7637] - Possible NPE in MavenProject#hashCode()

[MNG-7644] - Fix version comparison where .X1 < -X2 for any string qualifier X

[MNG-7648] - Generated model reader is not setting location information

[MNG-7672] - Aggregate goals executed in a submodule forks the whole reactor

New Feature

... (truncated)

Commits

9b58d2b [maven-release-plugin] prepare release maven-3.9.0
87f4044 Update git-blame-ignore-revs
e9d5708 Reformat
1a600c7 [MNG-7675] Update Parent to 39 and reformat
a5d0ca4 Fix site plugin warning (#973)
48cac1c [MNG-7672] Fork should only execute the project and its submodules (#969)
8fa5545 Get rid of surefire watning, take 2 (#967)
36f02c9 Get rid of surefire warning (#965)
f7ca0b6 [MNG-7608] Make native transport the default (#961)
51354e6 [maven-3.9.x] [MNG-7666] Update default binding and lifecycle plugin versions...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [maven-model](https://github.com/apache/maven) from 3.8.6 to 3.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/maven/releases">maven-model's releases</a>.</em></p> <blockquote> <h2>3.9.0</h2> <p><a href="https://maven.apache.org/docs/3.9.0/release-notes.html">Release Notes - Maven - Version 3.9.0</a></p> <h2>Sub-task</h2> <ul> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7019">MNG-7019</a>] - Notify also at start when profile is missing</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7447">MNG-7447</a>] - Several Improvements by using Stream API</li> </ul> <h2>Bug</h2> <ul> <li>[<a href="https://issues.apache.org/jira/browse/MNG-5222">MNG-5222</a>] - Maven 3 no longer logs warnings about deprecated plugin parameters.</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-6965">MNG-6965</a>] - Extensions suddenly have org.codehaus.plexus:plexus-utils:jar:1.1 on their classpath</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7055">MNG-7055</a>] - Using MINSTALL/DEPLOY 3.0.0-M1+ does not write plugin information into maven-metadata.xml</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7106">MNG-7106</a>] - VersionRange.toString() produces a string that cannot be parsed with VersionRange.createFromVersionSpec() for same lower and upper bounds</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7131">MNG-7131</a>] - maven.config doesn't handle arguments with spaces in them</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7160">MNG-7160</a>] - Extension And Classloaders: difference of result given extension types</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7316">MNG-7316</a>] - REGRESSION: MavenProject.getAttachedArtifacts() is read-only</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7352">MNG-7352</a>] - org.apache.maven.toolchain.java.JavaToolchainImpl should be public</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7413">MNG-7413</a>] - Fix POM model documentation confusion on report plugins, distribution repository and profile build</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7425">MNG-7425</a>] - Maven artifact downloads sometimes result in empty zip files in local repository</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7432">MNG-7432</a>] - [REGRESSION] Resolver session contains non-MavenWorkspaceReader</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7433">MNG-7433</a>] - [REGRESSION] Multiple maven instances working on same source tree can lock each other</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7441">MNG-7441</a>] - Update Version of (optional) Logback to Address CVE-2021-42550</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7448">MNG-7448</a>] - Don't ignore bin/ otherwise bin/ in apache-maven module cannot be readded</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7459">MNG-7459</a>] - Revert MNG-7347 (SessionScoped beans should be singletons for a given session)</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7471">MNG-7471</a>] - Resolver 1.8.0 introduces binary breakage in plugin using Resolver</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7487">MNG-7487</a>] - Fix deadlock during forked lifecycle executions</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7493">MNG-7493</a>] - [REGRESSION] Resolving dependencies between submodules fails</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7504">MNG-7504</a>] - Warning about unknown reportPlugins parameters for m-site-p are always generated</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7511">MNG-7511</a>] - Ensure the degreeOfConcurrency is a positive number in MavenExecutionRequest</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7515">MNG-7515</a>] - Cannot see a dependency tree for apache-maven module</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7529">MNG-7529</a>] - Maven resolver makes bad repository choices when resolving version ranges</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7545">MNG-7545</a>] - Multi building can create bad files for downloaded artifacts in local repository</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7563">MNG-7563</a>] - REGRESSION: User properties now override model properties in dependencies</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7564">MNG-7564</a>] - Potential NPE in MavenMetadataSource</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7568">MNG-7568</a>] - [WARNING] The requested profile "ABCDEF" could not be activated because it does not exist.</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7578">MNG-7578</a>] - Building Linux image on Windows impossible (patch incuded)</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7600">MNG-7600</a>] - LocalRepositoryManager is created too early</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7606">MNG-7606</a>] - Maven 3.9.0-SNAPSHOT cannot build Maven 4.0.0-SNAPSHOT</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7621">MNG-7621</a>] - Parameter '-f' causes ignoring any 'maven.config' (only on Windows)</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7624">MNG-7624</a>] - Plugins without non-mandatory goalPrefix are now logging incomplete info</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7637">MNG-7637</a>] - Possible NPE in MavenProject#hashCode()</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7644">MNG-7644</a>] - Fix version comparison where .X1 < -X2 for any string qualifier X</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7648">MNG-7648</a>] - Generated model reader is not setting location information</li> <li>[<a href="https://issues.apache.org/jira/browse/MNG-7672">MNG-7672</a>] - Aggregate goals executed in a submodule forks the whole reactor</li> </ul> <h2>New Feature</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/maven/commit/9b58d2bad23a66be161c4664ef21ce219c2c8584"><code>9b58d2b</code></a> [maven-release-plugin] prepare release maven-3.9.0</li> <li><a href="https://github.com/apache/maven/commit/87f4044eda6dccd4d0c167e05cb03837d35639ce"><code>87f4044</code></a> Update git-blame-ignore-revs</li> <li><a href="https://github.com/apache/maven/commit/e9d570889ffce29c3f92494510499ae0e32a02cf"><code>e9d5708</code></a> Reformat</li> <li><a href="https://github.com/apache/maven/commit/1a600c7fd1ef3427ff85aa087d34f7d87e6370e2"><code>1a600c7</code></a> [MNG-7675] Update Parent to 39 and reformat</li> <li><a href="https://github.com/apache/maven/commit/a5d0ca4f1d2856542db98c37b4acb99e992c0c86"><code>a5d0ca4</code></a> Fix site plugin warning (<a href="https://github-redirect.dependabot.com/apache/maven/issues/973">#973</a>)</li> <li><a href="https://github.com/apache/maven/commit/48cac1c003fdc409e8c455c21fcba07050393b0c"><code>48cac1c</code></a> [MNG-7672] Fork should only execute the project and its submodules (<a href="https://github-redirect.dependabot.com/apache/maven/issues/969">#969</a>)</li> <li><a href="https://github.com/apache/maven/commit/8fa5545b0de414bd7493a13ad9f54344e08a65db"><code>8fa5545</code></a> Get rid of surefire watning, take 2 (<a href="https://github-redirect.dependabot.com/apache/maven/issues/967">#967</a>)</li> <li><a href="https://github.com/apache/maven/commit/36f02c9de1792478538a171108048c8b86d5a5a1"><code>36f02c9</code></a> Get rid of surefire warning (<a href="https://github-redirect.dependabot.com/apache/maven/issues/965">#965</a>)</li> <li><a href="https://github.com/apache/maven/commit/f7ca0b697ac7223b42d982d92cad5af48c9d184d"><code>f7ca0b6</code></a> [MNG-7608] Make native transport the default (<a href="https://github-redirect.dependabot.com/apache/maven/issues/961">#961</a>)</li> <li><a href="https://github.com/apache/maven/commit/51354e6a7df5e2ae265f6fe8987344f53e6b77e7"><code>51354e6</code></a> [maven-3.9.x] [MNG-7666] Update default binding and lifecycle plugin versions...</li> <li>Additional commits viewable in <a href="https://github.com/apache/maven/compare/maven-3.8.6...maven-3.9.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven:maven-model&package-manager=maven&previous-version=3.8.6&new-version=3.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

greg6775 (Migrated from github.com) reviewed 2023-03-01 14:56:36 +01:00

Schlauer-Hax (Migrated from github.com) reviewed 2023-03-01 14:56:36 +01:00

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/maven/greg-dev/org.apache.maven-maven-model-3.9.0:dependabot/maven/greg-dev/org.apache.maven-maven-model-3.9.0

git checkout dependabot/maven/greg-dev/org.apache.maven-maven-model-3.9.0

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git checkout greg-dev

git merge --no-ff dependabot/maven/greg-dev/org.apache.maven-maven-model-3.9.0

git checkout dependabot/maven/greg-dev/org.apache.maven-maven-model-3.9.0

git rebase greg-dev

git checkout greg-dev

git merge --ff-only dependabot/maven/greg-dev/org.apache.maven-maven-model-3.9.0

git checkout dependabot/maven/greg-dev/org.apache.maven-maven-model-3.9.0

git rebase greg-dev

git checkout greg-dev

git merge --no-ff dependabot/maven/greg-dev/org.apache.maven-maven-model-3.9.0

git checkout greg-dev

git merge --squash dependabot/maven/greg-dev/org.apache.maven-maven-model-3.9.0