Bump the maven-dependencies group across 6 directories with 17 updates

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the maven-dependencies group with 17 updates in the / directory:

Package	From	To
org.apache.maven.doxia:doxia-module-markdown	1.6	2.1.0
org.apache.maven.plugins:maven-gpg-plugin	1.6	3.2.8
org.apache.maven.plugins:maven-site-plugin	3.4	3.22.0
org.apache.maven.plugins:maven-project-info-reports-plugin	2.9	3.9.0
org.apache.maven.plugins:maven-pmd-plugin	3.6	3.28.0
org.apache.felix:maven-bundle-plugin	6.1.2	6.2.0
org.codehaus.mojo:versions-maven-plugin	2.3	2.22.0
org.apache.maven.plugins:maven-jxr-plugin	2.5	3.6.0
org.codehaus.mojo:findbugs-maven-plugin	3.0.4	3.0.5
org.sonatype.central:central-publishing-maven-plugin	0.9.0	0.11.0
javax.servlet.jsp:javax.servlet.jsp-api	2.2.1	2.3.3
javax.el:javax.el-api	2.2.5	3.0.0
javax.servlet:javax.servlet-api	3.0.1	4.0.1
jakarta.servlet.jsp:jakarta.servlet.jsp-api	3.0.0	4.0.0
jakarta.el:jakarta.el-api	4.0.0	6.0.1
jakarta.servlet:jakarta.servlet-api	6.0.0	6.1.0
org.springframework.boot:spring-boot-starter-parent	3.5.16	4.1.1

Bumps the maven-dependencies group with 10 updates in the /core directory:

Package	From	To
org.apache.maven.doxia:doxia-module-markdown	1.6	2.1.0
org.apache.maven.plugins:maven-gpg-plugin	1.6	3.2.8
org.apache.maven.plugins:maven-site-plugin	3.4	3.22.0
org.apache.maven.plugins:maven-project-info-reports-plugin	2.9	3.9.0
org.apache.maven.plugins:maven-pmd-plugin	3.6	3.28.0
org.apache.felix:maven-bundle-plugin	6.1.2	6.2.0
org.codehaus.mojo:versions-maven-plugin	2.3	2.22.0
org.apache.maven.plugins:maven-jxr-plugin	2.5	3.6.0
org.codehaus.mojo:findbugs-maven-plugin	3.0.4	3.0.5
org.sonatype.central:central-publishing-maven-plugin	0.9.0	0.11.0

Bumps the maven-dependencies group with 10 updates in the /esapi directory:

Package	From	To
org.apache.maven.doxia:doxia-module-markdown	1.6	2.1.0
org.apache.maven.plugins:maven-gpg-plugin	1.6	3.2.8
org.apache.maven.plugins:maven-site-plugin	3.4	3.22.0
org.apache.maven.plugins:maven-project-info-reports-plugin	2.9	3.9.0
org.apache.maven.plugins:maven-pmd-plugin	3.6	3.28.0
org.apache.felix:maven-bundle-plugin	6.1.2	6.2.0
org.codehaus.mojo:versions-maven-plugin	2.3	2.22.0
org.apache.maven.plugins:maven-jxr-plugin	2.5	3.6.0
org.codehaus.mojo:findbugs-maven-plugin	3.0.4	3.0.5
org.sonatype.central:central-publishing-maven-plugin	0.9.0	0.11.0

Bumps the maven-dependencies group with 13 updates in the /jakarta directory:

Package	From	To
org.apache.maven.doxia:doxia-module-markdown	1.6	2.1.0
org.apache.maven.plugins:maven-gpg-plugin	1.6	3.2.8
org.apache.maven.plugins:maven-site-plugin	3.4	3.22.0
org.apache.maven.plugins:maven-project-info-reports-plugin	2.9	3.9.0
org.apache.maven.plugins:maven-pmd-plugin	3.6	3.28.0
org.apache.felix:maven-bundle-plugin	6.1.2	6.2.0
org.codehaus.mojo:versions-maven-plugin	2.3	2.22.0
org.apache.maven.plugins:maven-jxr-plugin	2.5	3.6.0
org.codehaus.mojo:findbugs-maven-plugin	3.0.4	3.0.5
org.sonatype.central:central-publishing-maven-plugin	0.9.0	0.11.0
jakarta.servlet.jsp:jakarta.servlet.jsp-api	3.0.0	4.0.0
jakarta.el:jakarta.el-api	4.0.0	6.0.1
jakarta.servlet:jakarta.servlet-api	6.0.0	6.1.0

Bumps the maven-dependencies group with 3 updates in the /jakarta-test directory: jakarta.servlet.jsp:jakarta.servlet.jsp-api, jakarta.el:jakarta.el-api and org.springframework.boot:spring-boot-starter-parent.
Bumps the maven-dependencies group with 13 updates in the /jsp directory:

Package	From	To
org.apache.maven.doxia:doxia-module-markdown	1.6	2.1.0
org.apache.maven.plugins:maven-gpg-plugin	1.6	3.2.8
org.apache.maven.plugins:maven-site-plugin	3.4	3.22.0
org.apache.maven.plugins:maven-project-info-reports-plugin	2.9	3.9.0
org.apache.maven.plugins:maven-pmd-plugin	3.6	3.28.0
org.apache.felix:maven-bundle-plugin	6.1.2	6.2.0
org.codehaus.mojo:versions-maven-plugin	2.3	2.22.0
org.apache.maven.plugins:maven-jxr-plugin	2.5	3.6.0
org.codehaus.mojo:findbugs-maven-plugin	3.0.4	3.0.5
org.sonatype.central:central-publishing-maven-plugin	0.9.0	0.11.0
javax.servlet.jsp:javax.servlet.jsp-api	2.2.1	2.3.3
javax.el:javax.el-api	2.2.5	3.0.0
javax.servlet:javax.servlet-api	3.0.1	4.0.1

Updates org.apache.maven.doxia:doxia-module-markdown from 1.6 to 2.1.0

Updates org.apache.maven.plugins:maven-gpg-plugin from 1.6 to 3.2.8

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.8

🐛 Bug Fixes

• Make empty classifier null (not empty string) (#287) @​cstamas

📝 Documentation updates

• [MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#129) @​Bukama
• Describe how to prime a specific GPG key (#128) @​kwin

👻 Maintenance

• Enable GitHub issues (#134) @​Bukama
• Prefer Guice constructor injection (#126) @​elharo

📦 Dependency updates

• Update parent POM to 45 (#284) @​cstamas
• Bump bouncycastleVersion from 1.78.1 to 1.80 (#127) @dependabot[bot]
• Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125) @dependabot[bot]
• Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1 (#131) @dependabot[bot]
• Bump commons-io:commons-io from 2.17.0 to 2.18.0 (#124) @dependabot[bot]

3.2.7

Fixes a lingering issue affecting whole 3.2.x lineage, that resulted in "bad passphrase" on Windows OS with GPG signer (see MGPG-136 for details).

What's Changed

• [MGPG-136] Windows passphrase corruption by @​cstamas in apache/maven-gpg-plugin#120
• Bump com.kohlschutter.junixsocket:junixsocket-core from 2.10.0 to 2.10.1 by @​dependabot in apache/maven-gpg-plugin#121
• Bump commons-io:commons-io from 2.16.1 to 2.17.0 by @​dependabot in apache/maven-gpg-plugin#119

Full Changelog: apache/maven-gpg-plugin@maven-gpg-plugin-3.2.6...maven-gpg-plugin-3.2.7

3.2.6

Release Notes - Maven GPG Plugin - Version 3.2.6

... (truncated)

Commits

• 8a46455 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.8
• 7012821 Fix issueManagement, ciManagement system and url
• a9a8c84 Make empty classifier null (not empty string) (#287)
• a8368b0 Add .mvn
• f0e45e0 Update parent POM to 45 (#284)
• cb1236c Bump bouncycastleVersion from 1.78.1 to 1.80 (#127)
• 5377a10 Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133)
• 8b63932 Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125)
• 54ea518 Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1
• a6a412d Remove old JIRA issue link
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-site-plugin from 3.4 to 3.22.0

Release notes

Sourced from org.apache.maven.plugins:maven-site-plugin's releases.

3.22.0

🚀 New features and improvements

• Upgrade to Doxia 2.1.0 (#1269) @​kwin
• Upgrade to Doxia Site Tools 2.1.0 (1b3cff6) @​kwin
• Add blocking "auto-refresh" goal (#1267) @​kwin
• Allow to give alternative source directories (1b3cff6) @​kwin
• Throw UOE for unsupported MultiPageSinkFactory.createSink(...) overloads (a27b283) @​kwin

📝 Documentation updates

• Several site improvements (#1272) @​kwin
• Convert Site source from APT to Markdown (#1265) @​kwin

👻 Maintenance

• Fix GitHub CI configuration on new master (#1257) @​slawekjaranowski
• remove missing module (#1258) @​hboutemy
• [MSITE-977] - Remove broken links (#211) (#1256) @​hboutemy
• chore: Migrate Junit3/4 to Junit5 (#1243) @​slawekjaranowski
• Allow to manually execute release drafter (#236) @​slawekjaranowski
• Enable GitHub Issues (Maven 3) (#234) @​Bukama
• Drop additional configuration for requirementsHistories (#221) @​slawekjaranowski
• Convert to Guice injection (#218) @​elharo
• [MSITE-986] Refresh download page (12c8a9d0) @​yuhaowin
• Rename "Goals" to "Plugin Documentation" (f489a1e) @​Bukama

📦 Dependency updates

• Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1271) @dependabot[bot]
• Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4 in /src/it/projects/MSITE-497/apps/app (#1263) @dependabot[bot]
• Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#1268) @dependabot[bot]
• Backport Update to parent 47 to 3.x branch (#1235) (#1237) @​Bukama
• Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (#1225) @dependabot[bot]
• Bump org.apache.maven:maven-archiver from 3.6.5 to 3.6.6 (#1212) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 (#1207) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.4 (#1203) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-i18n from 1.0.0 to 1.1.0 (#1204) @dependabot[bot]
• Bump jettyVersion from 9.4.56.v20240826 to 9.4.58.v20250814 (#1194) @dependabot[bot]
• Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0 (#1193) @dependabot[bot]

What's Changed

• [MSITE-986] Refresh download page by @​slawekjaranowski in apache/maven-site-plugin#220
• Drop additional configuration for requirementsHistories by @​slawekjaranowski in apache/maven-site-plugin#221
• [MSITE-1031] 3.12+ = Doxia 1, 3.20+ = Doxia 2, 4.0-M* obsoleted by 3.20 by @​hboutemy in apache/maven-site-plugin#224
• [MNGSITE-529] Rename "Goals" to "Plugin Documentation" by @​Bukama in apache/maven-site-plugin#226
• Enable GitHub Issues (Maven 3) by @​Bukama in apache/maven-site-plugin#234
• Allow to manually execute release drafter by @​slawekjaranowski in apache/maven-site-plugin#236
• Bump m-invoker-plugin to 3.9.1 (jdk 25 support) by @​slachiewicz in apache/maven-site-plugin#1176

... (truncated)

Commits

• f9f7cc6 [maven-release-plugin] prepare release maven-site-plugin-3.22.0
• f7b57ea Bump org.codehaus.plexus:plexus-interactivity-api from 1.3 to 1.5.1
• 282aa04 Several site improvements (#1272)
• 55ebd9f Upgrade to Doxia 2.1.0
• 93ecbb6 Improve goal description
• 106d259 Improve error messages
• a7511e9 Fix additional PR comments
• c3c1c0f Rename from "hot-reload" to "auto-refresh"
• 5fb1504 Add blocking "hot-reload" goal
• 2d9a489 Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1271)
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-project-info-reports-plugin from 2.9 to 3.9.0

Release notes

Sourced from org.apache.maven.plugins:maven-project-info-reports-plugin's releases.

3.9.0

🚀 New features and improvements

• Enable GitHub Issues (#102) @​slawekjaranowski
• [MPIR-478] - Allow to save avatars images for team report during project build (#97) @​slawekjaranowski
• [MPIR-476] - Remove direct usage of localRepository as Mojo parameter (#95) @​slawekjaranowski
• [MPIR-475] - Drop usage of maven-artifact-transfer (#94) @​slawekjaranowski

📦 Dependency updates

• [MPIR-474] - Bump org.apache.maven.shared:maven-shared-jar from 3.1.1 to 3.2.0 (#93) @dependabot[bot]

👻 Maintenance

• Upgrade dependencies for ITs (#101) @​slawekjaranowski
• Add Release Drafter (#99) @​slawekjaranowski
• Remove empty javadoc tags on private methods (#100) @​elharo
• Add PR Automation and Stale actions (#98) @​slawekjaranowski
• [MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#96) @​Bukama
• Switch to modern I/O (#91) @​elharo
• Convert to Guice constructor injection (#90) @​elharo

3.8.0

3.7.0

... (truncated)

Commits

• f89321c [maven-release-plugin] prepare release maven-project-info-reports-plugin-3.9.0
• 3f47dd0 Enable GitHub Issues
• e51cef8 [MPIR-478] Allow to save avatars images for team report during project build
• 3a991e2 Upgrade dependencies for ITs
• df61a5a Add Release Drafter
• d4ae6c6 Remove empty javadoc tags on private methods (#100)
• cbe9f0c Add PR Automation and Stale actions
• c80a10d [MNGSITE-529] Rename "Goals" to "Plugin Documentation"
• b1b55bb [MPIR-476] Remove direct usage of localRepository as Mojo parameter
• 03b9832 [MPIR-475] Drop usage of maven-artifact-transfer
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-pmd-plugin from 3.6 to 3.28.0

Release notes

Sourced from org.apache.maven.plugins:maven-pmd-plugin's releases.

3.28.0

🚀 New features and improvements

• Bump pmdVersion from 7.16.0 to 7.17.0 (#661) @​timpeeters
• Bump pmdVersion from 7.15.0 to 7.16.0 (#652) @dependabot[bot]
• Bump pmdVersion from 7.14.0 to 7.15.0 (#643) @dependabot[bot]

📝 Documentation updates

• Update historical PMD version in docs (#662) @​slawekjaranowski
• Document that excludes takes priority over includes (#645) @​elharo

👻 Maintenance

• feat: enable prevent branch protection rules (#653) @​sparsick
• Add Apache 2.0 LICENSE file (#650) @​Ndacyayisenga-droid
• Prefer JDK built-in methods for string joining (#646) @​elharo
• [MPMD-412] - More specific catch blocks (#642) @​elharo

📦 Dependency updates

• Bump org.apache.commons:commons-lang3 from 3.8.1 to 3.18.0 in ITs (#648) @dependabot[bot]
• Bump pmdVersion from 7.16.0 to 7.17.0 (#661) @​timpeeters
• Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 (#658) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-resources from 1.3.0 to 1.3.1 (#654) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#655) @dependabot[bot]
• Bump pmdVersion from 7.15.0 to 7.16.0 (#652) @dependabot[bot]
• Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#651) @dependabot[bot]
• Bump mavenVersion from 3.9.10 to 3.9.11 (#649) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#647) @dependabot[bot]
• Bump resolverVersion from 1.9.23 to 1.9.24 (#644) @dependabot[bot]
• Bump pmdVersion from 7.14.0 to 7.15.0 (#643) @dependabot[bot]

3.27.0

🚀 New features and improvements

• Use constant 3.6.3 in prerequisites/maven as minimal Maven version (#640) @​slawekjaranowski
• Bump pmdVersion from 7.12.0 to 7.14.0 (#213) @dependabot[bot]
• Allow plugin execute with Maven 4 (#209) @​slawekjaranowski
• Upgrade to PMD 7.12 (#196) @​elharo
• [MPMD-411] - Implement getOutputPath and identify getOutputName as deprecated, (#179) @​elharo

🐛 Bug Fixes

• [MPMD-410] - Number agreement (#181) @​elharo

📝 Documentation updates

... (truncated)

Commits

• f152a3a [maven-release-plugin] prepare release maven-pmd-plugin-3.28.0
• 0678fd1 Update historical PMD version in docs
• 41d5069 Bump org.apache.commons:commons-lang3 from 3.8.1 to 3.18.0 in ITs (#648)
• 3ef805b Bump pmdVersion from 7.16.0 to 7.17.0
• 592d703 Add hacktoberfest label to project
• ced9373 Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 (#658)
• 3cf5bc1 Bump org.codehaus.plexus:plexus-resources from 1.3.0 to 1.3.1 (#654)
• 9077c3b Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#655)
• 12ed57a feat: enable prevent branch protection rules (#653)
• fff2b95 Bump pmdVersion from 7.15.0 to 7.16.0 (#652)
• Additional commits viewable in compare view

Updates org.apache.felix:maven-bundle-plugin from 6.1.2 to 6.2.0

Updates org.codehaus.mojo:versions-maven-plugin from 2.3 to 2.22.0

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.22.0

🚀 New features and improvements

• Add artifact classifier to ChangeRocorderXML (#1327) @​ggkochanski

🐛 Bug Fixes

• Fix #1342: avoid shared include/exclude filters in parallel dependency updates (#1351) @​slachiewicz

📝 Documentation updates

• docs(markdown): fix grammar, typos, and markup in .md.vm files (#1364) @​kranthipoturaju
• docs: fix spelling in markdown docs (#1345) @​kranthipoturaju

👻 Maintenance

• Stop dependabot from updating test fixtures (#1387) @​slachiewicz

📦 Dependency updates

• Bump byteBuddyVersion from 1.18.12 to 1.18.13 (#1395) @dependabot[bot]
• Bump org.mariadb.jdbc:mariadb-java-client from 2.4.3 to 2.7.14 in /versions-maven-plugin/src/it/it-property-updates-report-002-slow (#1393) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 (#1391) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.13.0 to 4.14.0 (#1392) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.12.0 to 4.13.0 (#1388) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-interactivity-api from 1.5.1 to 1.6.0 (#1389) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-i18n from 1.1.0 to 1.2.0 (#1390) @dependabot[bot]
• Bump byteBuddyVersion from 1.18.11 to 1.18.12 (#1386) @dependabot[bot]
• Bump com.fasterxml.woodstox:woodstox-core from 7.2.1 to 7.2.2 (#1384) @dependabot[bot]
• Bump org.apache.commons:commons-collections4 from 4.5.0 to 4.6.0 (#1385) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 96 to 97 (#1379) @dependabot[bot]
• Bump actions/stale from 10 to 11 (#1381) @dependabot[bot]
• Bump sisuVersion from 1.0.1 to 1.1.0 (#1382) @dependabot[bot]
• Bump commons-codec:commons-codec from 1.22.0 to 1.22.1 (#1383) @dependabot[bot]
• Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 in /versions-maven-plugin/src/it/it-property-updates-report-002-slow (#1380) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#1376) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#1377) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#1375) @dependabot[bot]
• Bump sisuVersion from 1.0.0 to 1.0.1 (#1371) @dependabot[bot]
• Bump byteBuddyVersion from 1.18.10 to 1.18.11 (#1372) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (#1370) @dependabot[bot]
• Bump byteBuddyVersion from 1.18.9 to 1.18.10 (#1368) @dependabot[bot]
• Bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.1 (#1369) @dependabot[bot]
• Bump byteBuddyVersion from 1.18.8 to 1.18.9 (#1367) @dependabot[bot]
• Bump org.postgresql:postgresql from 42.7.2 to 42.7.11 in /versions-maven-plugin/src/it/it-property-updates-report-002-slow (#1365) @dependabot[bot]
• Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#1361) @dependabot[bot]

... (truncated)

Changelog

Sourced from org.codehaus.mojo:versions-maven-plugin's changelog.

Release Notes

2.6

• [Pull Request #252][pull-252]

  Thanks to Edward Maxwell-Lyte 2248005+edwardmlyte@users.noreply.github.com

  Minor spelling corrections

• [Fixed Issue 157][issue-157]

  Document the end of versioning limitations in Maven 3.x There may remain good reasons for defining custom versioning rules to let versions-maven-plugin apply, but at least not the old Maven 2.x limitation

• [Fixed Issue 256][issue-256]

  if initial and new version are equals, just display initial this means this is a plugin version that requires a Maven version that is not compatible with project minimum version, not really a proposed upgrade

• [Fixed Issue 237][issue-237]

  Thanks to Julian Di Leonardo DiJu519@users.noreply.github.com

  Adding parent processing to UseLatestVersion/UseLatestSnapshot/UseLatestRelease

• [Fixed Issue 190][issue-190]

  Thanks to Julian Di Leonardo DiJu519@users.noreply.github.com

  Fixing issue in update-child-modules, where root module's version was being used in all downstream children even when a child's parent was different.

• [Fixed Issue 219][issue-219]

  Added threadSafe=true to goals to prevent warning in Maven builds if you start Maven via: mvn -T ..

• [Fixed Issue 215][issue-215]

2.5

• [Fixed Issue 202][issue-202]

... (truncated)

Commits

• 7329d7e [maven-release-plugin] prepare release 2.22.0
• 99bbbb9 Bump byteBuddyVersion from 1.18.12 to 1.18.13
• b943679 Add artifact classifier to ChangeRocorderXML
• 0cbb8fd Bump org.mariadb.jdbc:mariadb-java-client
• 03390a5 Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0
• b7fe8c6 Bump org.codehaus.plexus:plexus-archiver from 4.13.0 to 4.14.0
• db72fa6 Bump org.codehaus.plexus:plexus-archiver from 4.12.0 to 4.13.0
• e7c0958 Bump org.codehaus.plexus:plexus-interactivity-api from 1.5.1 to 1.6.0
• 4c0693b Bump org.codehaus.plexus:plexus-i18n from 1.1.0 to 1.2.0
• 80329a0 Bump byteBuddyVersion from 1.18.11 to 1.18.12
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jxr-plugin from 2.5 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-jxr-plugin's releases.

jxr-3.6.0

What's Changed

• Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0 by @​dependabot in apache/maven-jxr#119
• Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.3.0 by @​dependabot in apache/maven-jxr#121
• Doxia 2.0.0 ga by @​michael-o in apache/maven-jxr#124

Full Changelog: apache/maven-jxr@jxr-3.5.0...jxr-3.6.0

jxr-3.3.2

What's Changed

• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.6.3 by @​dependabot in apache/maven-jxr#104

Full Changelog: apache/maven-jxr@jxr-3.3.1...jxr-3.3.2

jxr-3.3.1

What's Changed

• [JXR-175] Support Java 14 record as class type in cross reference by @​spannm in apache/maven-jxr#74
• Fix/update/add Javadoc documentation by @​spannm in apache/maven-jxr#75
• [JXR-176] Remove dependency org.apache.commons:commons-lang3 by @​spannm in apache/maven-jxr#76
• Bump maven-javadoc-plugin from 3.4.1 to 3.5.0 by @​dependabot in apache/maven-jxr#94
• Bump plexus-utils from 3.5.0 to 3.5.1 by @​dependabot in apache/maven-jxr#96
• Bump plexus-java from 1.1.1 to 1.1.2 by @​dependabot in apache/maven-jxr#93
• [MNG-6829] Replace StringUtils#isEmpty(String) and #isNotEmpty(String) by @​timtebeek in apache/maven-jxr#97
• [JXR-178] Update parent pom to 39 by @​elharo in apache/maven-jxr#98
• [JXR-180] commons-io 2.14.0 by @​elharo in apache/maven-jxr#100
• Bump org.codehaus.plexus:plexus-java from 1.1.2 to 1.2.0 by @​dependabot in apache/maven-jxr#102

New Contributors

• @​timtebeek made their first contribution in apache/maven-jxr#97

Full Changelog: apache/maven-jxr@jxr-3.3.0...jxr-3.3.1

jxr-3.3.0

What's Changed

• [JXR-170] NullPointerException while parsing Java 15 multi-line String source by @​spannm in apache/maven-jxr#60
• Bump plexus-utils from 3.4.1 to 3.4.2 by @​dependabot in apache/maven-jxr#57
• [JXR-172] Upgrade Parent to 37, project cleanup by @​slawekjaranowski in apache/maven-jxr#62
• Bump maven-site-plugin from 3.11.0 to 3.12.0 by @​dependabot in apache/maven-jxr#63
• [JXR-173] Upgrade Maven Reporting API to 3.1.1/Maven Reporting Impl to 3.2.0 by @​michael-o in apache/maven-jxr#66
• [JXR-174] Revert JXR-157 until next major version by @​michael-o in apache/maven-jxr#69

New Contributors

• @​michael-o made their first contribution in apache/maven-jxr#66

Full Changelog: apache/maven-jxr@jxr-3.2.0...jxr-3.3.0

jxr-3.2.0

No release notes provided.

Commits

• 9e1d08a [maven-release-plugin] prepare release jxr-3.6.0
• 5112bd6 [JXR-194] Upgrade to Velocity 2.4
• c211919 [JXR-193] Upgrade to Doxia 2.0.0 GA Stack
• dca5242 Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.3.0
• eef5923 Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0
• 7c79061 [maven-release-plugin] prepare for next development iteration
• 35f311f [maven-release-plugin] prepare release jxr-3.5.0
• c4b6a27 [JXR-189] Dynamically calculate javadocLocation/testJavadocLocation
• 4744d81 [JXR-188] Upgrade to Doxia 2.0.0 Milestone Stack
• 2cd6a44 Bump org.apache.maven:maven-parent from 42 to 43
• Additional commits viewable in compare view

Updates org.codehaus.mojo:findbugs-maven-plugin from 3.0.4 to 3.0.5

Commits

• 4ad8caa [maven-release-plugin] prepare release findbugs-maven-plugin-3.0.5
• e421d6f Merge branch 'spotbugs-master'
• f311505 Fix for broken tests
• f9515c7 Fix for broken tests
• 0aa21fe [pom] Rework versions to all be properties, remove unnecessary overrides, upd...
• e6c7772 fix tests filter for annotations
• 69b0aeb revert only require localTestSrc property to activate local test source usage...
• b33b992 only require localTestSrc property to activate local test source usage
• 81ea9ab Merge branch 'spotbugs-master'
• a8fc375 [pom] Upgrade remote source to use github instead of legacy svn repo
• Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.9.0 to 0.11.0

Commits

• See full diff in compare view

Updates javax.servlet.jsp:javax.servlet.jsp-api from 2.2.1 to 2.3.3

Commits

• 80b323b [maven-release-plugin] prepare for next development iteration
• 2cb1653 [maven-release-plugin] prepare release 2.3.3
• e41363f Update scm/plugin version
• 13d7122 javaee-api-api/issue55 NullPointerException is thrown if application doesn't ...
• 3c6b171 javaee-jsp-api/issues53 NullPointerException is thrown if tld file doesn't in...
• 0c4d240 javaee-jsp-api/issues54 Failed to compile jsp files in which custom tags are ...
• 4134c36 Update CONTRIBUTING.md
• 2614390 Create LICENSE
• fbc02a2 revert test versions
• 4b09002 [maven-release-plugin] prepare for next development iteration
• Additional commits viewable in compare view

Updates javax.el:javax.el-api from 2.2.5 to 3.0.0

Updates javax.servlet:javax.servlet-api from 3.0.1 to 4.0.1

Commits

• 5574e9b [maven-release-plugin] prepare release 4.0.1
• 6430ada Update pom with latest copyright plugin version
• 7265df0 Copyright changes. (#192)
• 9a27193 [maven-release-plugin] prepare for next development iteration
• ef2740a [maven-release-plugin] prepare release 4.0.0

[jmanico]

Superseded by the completed maintenance PRs and the focused replacement #191. Every proposal is accounted for in the dated dependency decision record.

• Retain and modernize required browser and packaged WAR coverage #180/Modernize build policy and verify release artifacts #185 already delivered Boot 4.1.1/app API modernization, GPG 3.2.8, Central 0.11.0 and versions-maven-plugin 2.22.0; Patch release-plugin crypto and utility dependencies #187 supplied the publisher dependency mitigations.
• The old Doxia/Reflow/project-info/FindBugs/PMD/JXR reporting proposals became obsolete when those report paths were retired. The versions plugin pin remains, with its former reporting execution retired.
• Update bundle plugin and isolate compatibility-sensitive dependency proposals #191 takes Bundle Plugin 6.2.0 with clean build, consumer and reproducibility evidence. It retains explicit review/CI gates before merge.
• Library provided API and test-baseline changes are deferred with rationale and reconsideration conditions; closing this group does not claim those upgrades were applied.

This stale mixed PR has failing CI and will not be merged. Closing as superseded; no security finding is dismissed. Progress is tracked in #169.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml