Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump org.apache.maven:maven-model from 3.8.6 to 3.9.0 in /buildSrc #104

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Feb 13, 2023

Bumps org.apache.maven:maven-model from 3.8.6 to 3.9.0.

Release notes

Sourced from org.apache.maven:maven-model's releases.

3.8.7

Sub-task

  • [MNG-7019] - Notify also at start when profile is missing

Bug

  • [MNG-7106] - VersionRange.toString() produces a string that cannot be parsed with VersionRange.createFromVersionSpec() for same lower and upper bounds
  • [MNG-7316] - REGRESSION: MavenProject.getAttachedArtifacts() is read-only
  • [MNG-7352] - org.apache.maven.toolchain.java.JavaToolchainImpl should be public
  • [MNG-7529] - Maven resolver makes bad repository choices when resolving version ranges
  • [MNG-7563] - REGRESSION: User properties now override model properties in dependencies
  • [MNG-7568] - [WARNING] The requested profile "ABCDEF" could not be activated because it does not exist.
  • [MNG-7578] - Building Linux image on Windows impossible (patch incuded)
  • [MNG-7600] - LocalRepositoryManager is created too early
  • [MNG-7621] - Parameter '-f' causes ignoring any 'maven.config' (only on Windows)
  • [MNG-7637] - Possible NPE in MavenProject#hashCode()
  • [MNG-7644] - Fix version comparison where .X1 < -X2 for any string qualifier X

Improvement

  • [MNG-7590] - Allow configure resolver by properties in settings.xml
  • [MNG-7645] - Implement some #toString() methods

Task

  • [MNG-7513] - Address commons-io_commons-io vulnerability found in maven latest version
  • [MNG-7634] - Revert MNG-5982 and MNG-7417
  • [MNG-7636] - Partially revert MNG-5868 to restore backward compatibility (see MNG-7316)

Dependency upgrade

  • [MNG-7506] - Upgrade Maven Wagon to 3.5.2
  • [MNG-7641] - Upgrade Maven Wagon to 3.5.3
Commits
  • 9b58d2b [maven-release-plugin] prepare release maven-3.9.0
  • 87f4044 Update git-blame-ignore-revs
  • e9d5708 Reformat
  • 1a600c7 [MNG-7675] Update Parent to 39 and reformat
  • a5d0ca4 Fix site plugin warning (#973)
  • 48cac1c [MNG-7672] Fork should only execute the project and its submodules (#969)
  • 8fa5545 Get rid of surefire watning, take 2 (#967)
  • 36f02c9 Get rid of surefire warning (#965)
  • f7ca0b6 [MNG-7608] Make native transport the default (#961)
  • 51354e6 [maven-3.9.x] [MNG-7666] Update default binding and lifecycle plugin versions...
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot requested a review from Bukhtawar as a code owner February 13, 2023 05:06
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 13, 2023
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 13, 2023

The following labels could not be found: dependabot.

@github-actions
Copy link

Gradle Check (Jenkins) Run Completed with:

  • RESULT: null ❌
  • URL:
  • CommitID: ff61122
    Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green.
    Is the failure a flaky test unrelated to your change?

@dependabot dependabot bot force-pushed the dependabot/gradle/buildSrc/org.apache.maven-maven-model-3.9.0 branch from ff61122 to c04b847 Compare February 25, 2023 13:09
@github-actions
Copy link

Gradle Check (Jenkins) Run Completed with:

  • RESULT: null ❌
  • URL:
  • CommitID: c04b847
    Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green.
    Is the failure a flaky test unrelated to your change?

Bumps [org.apache.maven:maven-model](https://github.com/apache/maven) from 3.8.6 to 3.9.0.
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.8.6...maven-3.9.0)

---
updated-dependencies:
- dependency-name: org.apache.maven:maven-model
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/gradle/buildSrc/org.apache.maven-maven-model-3.9.0 branch from c04b847 to 1ccdbfe Compare March 9, 2023 14:41
@github-actions
Copy link

github-actions bot commented Mar 9, 2023

Gradle Check (Jenkins) Run Completed with:

  • RESULT: null ❌
  • URL:
  • CommitID: 1ccdbfe
    Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green.
    Is the failure a flaky test unrelated to your change?

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jul 3, 2023

Superseded by #133.

@dependabot dependabot bot closed this Jul 3, 2023
@dependabot dependabot bot deleted the dependabot/gradle/buildSrc/org.apache.maven-maven-model-3.9.0 branch July 3, 2023 04:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants