chore(deps): bump the all-maven-dependencies group across 4 directories with 19 updates

[dependabot]

Bumps the all-maven-dependencies group with 18 updates in the / directory:

Package	From	To
org.junit:junit-bom	6.1.1	6.1.3
com.puppycrawl.tools:checkstyle	13.7.0	14.3.0
com.github.spotbugs:spotbugs	4.10.2	4.10.4
net.sourceforge.pmd:pmd-core	7.26.0	7.28.0
net.sourceforge.pmd:pmd-java	7.26.0	7.28.0
net.sourceforge.pmd:pmd-java	7.26.0	7.28.0
org.apache.maven.plugins:maven-compiler-plugin	3.15.0	3.16.0
org.apache.maven.plugins:maven-jar-plugin	3.5.0	3.5.1
org.apache.maven.plugins:maven-surefire-plugin	3.5.6	3.6.0
org.apache.maven.plugins:maven-failsafe-plugin	3.5.6	3.6.0
org.apache.maven.plugins:maven-install-plugin	3.1.4	3.2.0
org.apache.maven.plugins:maven-deploy-plugin	3.1.4	3.2.0
org.codehaus.mojo:flatten-maven-plugin	1.7.3	1.8.0
org.apache.maven.plugins:maven-artifact-plugin	3.6.1	3.7.0
de.thetaphi:forbiddenapis	3.10	3.11
com.github.spotbugs:spotbugs-maven-plugin	4.10.2.0	4.10.4.1
org.slf4j:slf4j-simple	2.0.18	2.0.20
org.codehaus.mojo:exec-maven-plugin	3.6.3	3.6.4
org.apache.maven:apache-maven	3.9.15	3.10.0
org.apache.maven.plugins:maven-compiler-plugin	3.15.0	3.16.0
org.apache.maven.plugins:maven-jar-plugin	3.5.0	3.5.1
org.apache.maven.plugins:maven-compiler-plugin	3.15.0	3.16.0
org.apache.maven.plugins:maven-jar-plugin	3.5.0	3.5.1
org.apache.maven.plugins:maven-compiler-plugin	3.15.0	3.16.0
org.apache.maven.plugins:maven-jar-plugin	3.5.0	3.5.1

Bumps the all-maven-dependencies group with 3 updates in the /nameprep/src/it/jpms-nameprep directory: org.junit.jupiter:junit-jupiter, org.apache.maven.plugins:maven-compiler-plugin and org.apache.maven.plugins:maven-jar-plugin.
Bumps the all-maven-dependencies group with 3 updates in the /saslprep/src/it/jpms-saslprep directory: org.junit.jupiter:junit-jupiter, org.apache.maven.plugins:maven-compiler-plugin and org.apache.maven.plugins:maven-jar-plugin.
Bumps the all-maven-dependencies group with 3 updates in the /stringprep/src/it/jpms-stringprep directory: org.junit.jupiter:junit-jupiter, org.apache.maven.plugins:maven-compiler-plugin and org.apache.maven.plugins:maven-jar-plugin.

Updates org.junit:junit-bom from 6.1.1 to 6.1.3

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

JUnit 6.1.2 = Platform 6.1.2 + Jupiter 6.1.2 + Vintage 6.1.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.1...r6.1.2

Commits

• f59f60d Release 6.1.3
• cd8ec92 Finalize 6.1.3 release notes
• c8729f2 Restore compatibility with GraalVM 25 (#5901)
• ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
• fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
• 62afc02 Delay GraalVM plugin updates for 3 days
• 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
• f6bbfc5 Move GraalVM tests to separate test task (#5903)
• e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
• 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
• Additional commits viewable in compare view

Updates com.puppycrawl.tools:checkstyle from 13.7.0 to 14.3.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-14.3.0

Checkstyle 14.3.0 - https://checkstyle.org/releasenotes.html#Release_14.3.0

New:

#14120 - Make Checkstyle an java module with module-info.java.

checkstyle-14.2.0

Checkstyle 14.2.0 - https://checkstyle.org/releasenotes.html#Release_14.2.0

New:

#19513 - ModifiedOrder: New property modifierOrder. #17723 - WhitespaceAfter: new token SINGLE_LINE_COMMENT to catch missing whitespace checks around // comments. #8312 - NoWhitespaceAfter: Allow for use of DO_WHILE, LITERAL_CATCH, LITERAL_FOR, LITERAL_IF, and LITERAL_WHILE. #17172 - AnnotationLocation new token MODULE_DEF. Google-style: incomplete coverage on annotation rules for modules. #14986 - New Check UnnecessaryPermitsClause. #7541 - new Check: GoolgeRightCurly. #19949 - New check: JavadocSeeTagOrder. #20639 - new Check: OpenjdkMethodThrowsAlignment.

Bug fixes:

#17663 - Indentation: missing violations for '->' and ',' in return statement continuation. #20541 - False Positive: Lambda is incorrectly flaged by OperatorWrap. #21739 - UnusedLocalVariable: false positive on unnamed variable _ inside anonymous class. #21613 - False negative: UnusedTryResourceShouldBeUnnamed treats same-named identifiers in catch/finally blocks as resource usage. #21695 - openjdk style: use custon modifierOrder at RedundantModifier. #21689 - Add GoogleRightCurly to google_checks.xml instead of RightCurly. #10924 - All checks that use AbstractCheck#getLine() should check code points instead of characters for spacing. #21139 - Performance: Avoid duplicate regex match in SuppressFilterElement.isFileMatch. #21528 - Add checks for Sun Style [4.2 - Wrapping Lines]. #21578 - False Negative: LambdaParameterName silently passes lambdas in switch rule. #21579 - False Negative: NeedBraces silently passes lambdas in switch rule. #5895 - CLI XML output file: file stops dead when an execption occurs. #11410 - False Negative: LeftCurlyCheck. #21583 - Update Documentation Comments Style Guide: add JavadocSeeTagOrder. #21609 - NPE in RightCurlyCheck. #19724 - google_checks.xml: JavadocMethod accessModifiers should include protected to match MissingJavadocMethod scope. #20963 - False negative in LeftCurly for types with option=eol. #21547 - add OpenjdkMethodThrowsAlignment check in openjdk_checks.xml. #20636 - False negatives regarding LeftCurly in openjdk_checks.xml. #17170 - Google-style: unfollowed rule on ordering and spacing of module directives. #21454 - google_checks.xml: false negative 4.3 One statement per line. #21501 - CommonUtil.getFileExtension includes parent-directory dots in the extension. #21445 - google_checks.xml: false negative 3.3.1.1 No module imports. #21477 - Add checks for Sun Style [4.1 - Line Length]. #21444 - google_checks.xml: false negative 3.2 Package declaration.

... (truncated)

Commits

• bc58fc6 [maven-release-plugin] prepare release checkstyle-14.3.0
• 5711c72 doc: release notes for 14.3.0
• 4b8a5b3 minor: Bump version to 14.3.0-SNAPSHOT
• a93f8f2 Issue #14120: add module-info.java to make Checkstyle an explicit Java module
• 9e3482f [maven-release-plugin] prepare for next development iteration
• 6a200bc [maven-release-plugin] prepare release checkstyle-14.2.0
• 2d2b135 doc: release notes for 14.2.0
• 194e7a2 Issue #20590: Improve Input coverage for compact sources for SuperCloneCheck
• 123f477 Issue #17663: Indentation: missing violations for '->' and ',' in return stat...
• 4b2f353 Issue #20541: fix OperatorWrap false positive for lambda with block body
• Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs from 4.10.2 to 4.10.4

Release notes

Sourced from com.github.spotbugs:spotbugs's releases.

4.10.4

SpotBugs 4.10.4

CHANGELOG

Fixed

• Fix NN_NAKED_NOTIFY false negatives when a field read is stored in a local variable before notify() or notifyAll() (#3884)
• Fix ASE_ASSERTION_WITH_SIDE_EFFECT and ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in every method analysed after a method that reads $assertionsDisabled without throwing an AssertionError (#3483)
• Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for meaningful comparisons of a signed byte with 127 (b < 127, b >= 127) (#4201)
• Fix EI_EXPOSE_REP false negative for public getters in anonymous classes (#4237)
• Fix missing class report for java.util.Collections$EmptyNavigableSet and java.util.Collections$EmptyNavigableMap when the result of Collections.emptySortedSet(), emptyNavigableSet(), emptySortedMap() or emptyNavigableMap() is stored (#4244)
• Fix URF_UNREAD_FIELD false negative for unread instance fields declared in enums (#4246)
• Stop publishing global dependency-management constraints to consumer POMs. (#4223)

CHECKSUM

file	checksum (sha256)
spotbugs-4.10.4-javadoc.jar	06bfc9ccdcfb9b594b5053817199b9489dff6312dc35c8864faa9b9357cf5be4
spotbugs-4.10.4-sources.jar	d087c11e3b0714e8445b29f2bef9bb4c62b4ee13ad67caf7a4b64d61e82ea400
spotbugs-4.10.4.tgz	72bc0d4edd686e462c0f71f42a049b27bf4da6708797ff7b2b56dd202714b4e5
spotbugs-4.10.4.zip	771c8702beb2b4b6aa20df87ea85f22fda7280c7ce36fce4077b7b3c076d1e14
spotbugs-annotations-4.10.4-javadoc.jar	0fc9d3c529c6ee93aeddf9cfbd4b1438708e37fd53b5157aa47070446fbc7303
spotbugs-annotations-4.10.4-sources.jar	87974d23caffbc8c6e66c567747627267b5ed06573cee966d7af6d236b8d65bd
spotbugs-annotations.jar	28fa4befaddce5d7b79b07c68e7c12fa27c5d9282c4229528717971606661ea3
spotbugs-ant-4.10.4-javadoc.jar	eaa1ee0a4e004b7b12e2dfc65290c6324effff6ffc0e7b7ee94c98875997e51c
spotbugs-ant-4.10.4-sources.jar	af1c78c8e194c2f82ea3e0517ab38a5eb6ba608c8d0e776c9097605d6b7efca6
spotbugs-ant.jar	9ec240477b7c87270be7dfe3196180cd3763f04c369e5691feeb12e66110a065
spotbugs.jar	a88cad2e0ea9bb74b908ce82ae89416c61fa8f8ea5cfcc9368b1baac2da878d2
test-harness-4.10.4-javadoc.jar	c1ff7bcd0c4f61f4356ae9734be34567df680175651a3104fdee241e324d6df7
test-harness-4.10.4-sources.jar	805d2d124b0d4ea513ee9262d4ad6027c3471d45defd80fd7d20e23425d17df7
test-harness-4.10.4.jar	bd10d1f11a1b93e4ca4db4d27772f611bd3407f9452dbbd2d1ba62584ddc171f
test-harness-core-4.10.4-javadoc.jar	ac735a1508609001d122a91e43f6dfb10c4c691cf555d5ba386f216df904ac9b
test-harness-core-4.10.4-sources.jar	043a55d99a517c0d9cf702b0c183b4afd3f03af9eff4a86d59bb37df1b35b532
test-harness-core-4.10.4.jar	1f9a0ee8f150dd71f960ca4f59dcf7912a45d0e9e6aefc4585fd44b975454bc0
test-harness-jupiter-4.10.4-javadoc.jar	c9554b4a6509d0d24c6436b6e01171eb8e71fca96df6edf8f80c7b51ab5bda16
test-harness-jupiter-4.10.4-sources.jar	17144f315686bfd01c02fa4ae7c916060c41de8eed58d5b8470416fa08f46ced
test-harness-jupiter-4.10.4.jar	a91146da3e993479cfefd2690781cbd102c6360ecc63a96d88995be3bd60fcbb

4.10.3

SpotBugs 4.10.3

CHANGELOG

Fixed

• Fix LI_LAZY_INIT_STATIC false negative when the null guard is written in yoda-style (null == field) (#4144)
• Fix DC_DOUBLECHECK, NP_SYNC_AND_NULL_CHECK_FIELD and SP_SPIN_ON_FIELD false negatives when the null guard is written in yoda-style (null == field) (#4144)
• Fix message for UNS_UNSAFE_CALL bug pattern
• Restore CLI plugin loading by fixing DetectorFactoryCollection bootstrap ordering (#4191)
• Fix UWF_NULL_FIELD false negative for fields initialized with cast null values (#4034)
• Fix UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS false positive for methods reached only through method references (#4059)

... (truncated)

Changelog

Sourced from com.github.spotbugs:spotbugs's changelog.

4.10.4 - 2026-08-19

Fixed

• Fix NN_NAKED_NOTIFY false negatives when a field read is stored in a local variable before notify() or notifyAll() (#3884)
• Fix ASE_ASSERTION_WITH_SIDE_EFFECT and ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in every method analysed after a method that reads $assertionsDisabled without throwing an AssertionError (#3483)
• Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for meaningful comparisons of a signed byte with 127 (b < 127, b >= 127) (#4201)
• Fix EI_EXPOSE_REP false negative for public getters in anonymous classes (#4237)
• Fix missing class report for java.util.Collections$EmptyNavigableSet and java.util.Collections$EmptyNavigableMap when the result of Collections.emptySortedSet(), emptyNavigableSet(), emptySortedMap() or emptyNavigableMap() is stored (#4244)
• Fix URF_UNREAD_FIELD false negative for unread instance fields declared in enums (#4246)
• Stop publishing global dependency-management constraints to consumer POMs. (#4223)

4.10.3 - 2026-07-12

Fixed

• Fix LI_LAZY_INIT_STATIC false negative when the null guard is written in yoda-style (null == field) (#4144)
• Fix DC_DOUBLECHECK, NP_SYNC_AND_NULL_CHECK_FIELD and SP_SPIN_ON_FIELD false negatives when the null guard is written in yoda-style (null == field) (#4144)
• Fix message for UNS_UNSAFE_CALL bug pattern
• Restore CLI plugin loading by fixing DetectorFactoryCollection bootstrap ordering (#4191)
• Fix UWF_NULL_FIELD false negative for fields initialized with cast null values (#4034)
• Fix UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS false positive for methods reached only through method references (#4059)

Changed

• Ant FindBugsViewerTask: use default look and feel by default. (#4165)

Refactor

• Ant FindBugsViewerTask: extend AbstractFindBugsTask to reduce duplicate code. (#4165)

Commits

• 1a58a48 release v4.10.4
• 160d4a6 Gradle build cleanup (#4255)
• 2354168 Fix EI_EXPOSE_REP not reported for anonymous-class getters (#4237)
• 4895bce Fix naked notify detection after local stores (#4245)
• 28348e5 Fixes #3955 : Fix URF_UNREAD_FIELD false negative for unread fields i… (#4246)
• 3ec259e chore(build): Add changelog regarding dependency management constraints remov...
• 33075ce Remove eclipse table latest as noted version 3.1 that is long retired and dis...
• 1bf27d8 Update Gradle to v9.7.1 (#4252)
• ee61d5b Update dependency com.google.guava:guava to v33.7.1-jre (#4250)
• f352226 Update plugin com.diffplug.spotless to v8.10.0 (#4249)
• Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-core from 7.26.0 to 7.28.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.28.0 (25-September-2026)

25-September-2026 - 7.28.0

The PMD team is pleased to announce PMD 7.28.0.

This is a minor release.

Table Of Contents

• 🚀️ New and noteworthy
  • Kotlin XPath functions and type attributes
• 🌟️ New and Changed Rules
  • New Rules
  • Changed Rules
• 🐛️ Fixed Issues
• 🚨️ API Changes
  • Experimental API
• ✨️ Merged pull requests
• 📦️ Dependency updates
• 📈️ Stats

🚀️ New and noteworthy

Kotlin XPath functions and type attributes

Type data is now accessible in XPath rules via new attributes and helper functions (see Kotlin XPath rule support):

• Type-info Attributes: @TypeName, @ReturnTypeName, @AnnotationFqNames are exposed on declaration nodes (property, function, class, parameter, catch, for-loop, delegation specifier, annotation nodes). These attributes depend on type resolution: they are only available when auxClasspath is configured and the kotlin-type-mapper analysis has resolved the types.
• General Attributes: @Mutable, @Identifier, @Name are exposed on declaration and import related nodes. These attributes don't depend on type resolution, so they're always present regardless of auxClasspath.
• XPath functions:
  • pmd-kotlin:typeIs(typeName): matches if the node's type is typeName or a subtype.
  • pmd-kotlin:typeIsExactly(typeName): matches the exact declared type only (no subtypes).
  • pmd-kotlin:hasAnnotation(name): matches if the node has an annotation with the given simple or FQN.
  • pmd-kotlin:modifiers(): returns the modifier keywords of a declaration as a sequence.
  • pmd-kotlin:isNullable(): returns true if the node's declared type is nullable (has ?).
  • pmd-kotlin:hasUnresolvedReference(): returns true if the node contains an unresolved reference.
  • pmd-kotlin:matchesSig(signature): matches call sites by method signature pattern (supports wildcards).

🌟️ New and Changed Rules

New Rules

• The new Java rule OnDemandImport reports on-demand imports, also known as wildcard imports. By default, static imports from JUnit and TestNG are allowed. The allowed static and type import packages can be configured with allowStaticImportsFrom and allowTypeImportsFrom.
• The new Java rule LongLiteralEndingWithLowercaseL finds long literals ending with a lowercase l.

... (truncated)

Commits

• 79726f0 [release] prepare release pmd_releases/7.28.0
• ba7d31e Prepare pmd release 7.28.0
• fb85046 Update contributors for 7.28.0
• 5569f8c [doc] Update release notes for 7.28.0 (#7106)
• ca7381c [doc] Add gradle environment vars example (#7111)
• 388f07a [java] Fix #7101: Skip non-archive files on the auxclasspath (#7102)
• 251ef73 [cli] Add the missing exit code 5 to the CLI help (#7090)
• 1831734 [doc] TOC highlighting improvements (#7089)
• 383ff52 [java] Fix #7056: Add JavaLanguageProperty to disable auxClasspath warnings (...
• 0a14568 [java] New rule: InternalApiUsage (#6994)
• Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-java from 7.26.0 to 7.28.0

Release notes

Sourced from net.sourceforge.pmd:pmd-java's releases.

PMD 7.28.0 (25-September-2026)

25-September-2026 - 7.28.0

The PMD team is pleased to announce PMD 7.28.0.

This is a minor release.

Table Of Contents

• 🚀️ New and noteworthy
  • Kotlin XPath functions and type attributes
• 🌟️ New and Changed Rules
  • New Rules
  • Changed Rules
• 🐛️ Fixed Issues
• 🚨️ API Changes
  • Experimental API
• ✨️ Merged pull requests
• 📦️ Dependency updates
• 📈️ Stats

🚀️ New and noteworthy

Kotlin XPath functions and type attributes

Type data is now accessible in XPath rules via new attributes and helper functions (see Kotlin XPath rule support):

• Type-info Attributes: @TypeName, @ReturnTypeName, @AnnotationFqNames are exposed on declaration nodes (property, function, class, parameter, catch, for-loop, delegation specifier, annotation nodes). These attributes depend on type resolution: they are only available when auxClasspath is configured and the kotlin-type-mapper analysis has resolved the types.
• General Attributes: @Mutable, @Identifier, @Name are exposed on declaration and import related nodes. These attributes don't depend on type resolution, so they're always present regardless of auxClasspath.
• XPath functions:
  • pmd-kotlin:typeIs(typeName): matches if the node's type is typeName or a subtype.
  • pmd-kotlin:typeIsExactly(typeName): matches the exact declared type only (no subtypes).
  • pmd-kotlin:hasAnnotation(name): matches if the node has an annotation with the given simple or FQN.
  • pmd-kotlin:modifiers(): returns the modifier keywords of a declaration as a sequence.
  • pmd-kotlin:isNullable(): returns true if the node's declared type is nullable (has ?).
  • pmd-kotlin:hasUnresolvedReference(): returns true if the node contains an unresolved reference.
  • pmd-kotlin:matchesSig(signature): matches call sites by method signature pattern (supports wildcards).

🌟️ New and Changed Rules

New Rules

• The new Java rule OnDemandImport reports on-demand imports, also known as wildcard imports. By default, static imports from JUnit and TestNG are allowed. The allowed static and type import packages can be configured with allowStaticImportsFrom and allowTypeImportsFrom.
• The new Java rule LongLiteralEndingWithLowercaseL finds long literals ending with a lowercase l.

... (truncated)

Commits

• 79726f0 [release] prepare release pmd_releases/7.28.0
• ba7d31e Prepare pmd release 7.28.0
• fb85046 Update contributors for 7.28.0
• 5569f8c [doc] Update release notes for 7.28.0 (#7106)
• ca7381c [doc] Add gradle environment vars example (#7111)
• 388f07a [java] Fix #7101: Skip non-archive files on the auxclasspath (#7102)
• 251ef73 [cli] Add the missing exit code 5 to the CLI help (#7090)
• 1831734 [doc] TOC highlighting improvements (#7089)
• 383ff52 [java] Fix #7056: Add JavaLanguageProperty to disable auxClasspath warnings (...
• 0a14568 [java] New rule: InternalApiUsage (#6994)
• Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-java from 7.26.0 to 7.28.0

Release notes

Sourced from net.sourceforge.pmd:pmd-java's releases.

PMD 7.28.0 (25-September-2026)

25-September-2026 - 7.28.0

The PMD team is pleased to announce PMD 7.28.0.

This is a minor release.

Table Of Contents

• 🚀️ New and noteworthy
  • Kotlin XPath functions and type attributes
• 🌟️ New and Changed Rules
  • New Rules
  • Changed Rules
• 🐛️ Fixed Issues
• 🚨️ API Changes
  • Experimental API
• ✨️ Merged pull requests
• 📦️ Dependency updates
• 📈️ Stats

🚀️ New and noteworthy

Kotlin XPath functions and type attributes

Type data is now accessible in XPath rules via new attributes and helper functions (see Kotlin XPath rule support):

• Type-info Attributes: @TypeName, @ReturnTypeName, @AnnotationFqNames are exposed on declaration nodes (property, function, class, parameter, catch, for-loop, delegation specifier, annotation nodes). These attributes depend on type resolution: they are only available when auxClasspath is configured and the kotlin-type-mapper analysis has resolved the types.
• General Attributes: @Mutable, @Identifier, @Name are exposed on declaration and import related nodes. These attributes don't depend on type resolution, so they're always present regardless of auxClasspath.
• XPath functions:
  • pmd-kotlin:typeIs(typeName): matches if the node's type is typeName or a subtype.
  • pmd-kotlin:typeIsExactly(typeName): matches the exact declared type only (no subtypes).
  • pmd-kotlin:hasAnnotation(name): matches if the node has an annotation with the given simple or FQN.
  • pmd-kotlin:modifiers(): returns the modifier keywords of a declaration as a sequence.
  • pmd-kotlin:isNullable(): returns true if the node's declared type is nullable (has ?).
  • pmd-kotlin:hasUnresolvedReference(): returns true if the node contains an unresolved reference.
  • pmd-kotlin:matchesSig(signature): matches call sites by method signature pattern (supports wildcards).

🌟️ New and Changed Rules

New Rules

• The new Java rule OnDemandImport reports on-demand imports, also known as wildcard imports. By default, static imports from JUnit and TestNG are allowed. The allowed static and type import packages can be configured with allowStaticImportsFrom and allowTypeImportsFrom.
• The new Java rule LongLiteralEndingWithLowercaseL finds long literals ending with a lowercase l.

... (truncated)

Commits

• 79726f0 [release] prepare release pmd_releases/7.28.0
• ba7d31e Prepare pmd release 7.28.0
• fb85046 Update contributors for 7.28.0
• 5569f8c [doc] Update release notes for 7.28.0 (#7106)
• ca7381c [doc] Add gradle environment vars example (#7111)
• 388f07a [java] Fix #7101: Skip non-archive files on the auxclasspath (#7102)
• 251ef73 [cli] Add the missing exit code 5 to the CLI help (#7090)
• 1831734 [doc] TOC highlighting improvements (#7089)
• 383ff52 [java] Fix #7056: Add JavaLanguageProperty to disable auxClasspath warnings (...
• 0a14568 [java] New rule: InternalApiUsage (#6994)
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

• Recompile when dependencies change (#1102) @​wilx
• Fix incremental detection of empty sources, 3.x (#1075) @​wilx

🐛 Bug Fixes

• [MCOMPILER-578] - Track outputs across compiler executions (#1091) @​wilx
• Build fails when annotation processor list is empty (but present) (#1077) @​wilx
• [MCOMPILER-374] - Unable to compile MR-JAR code against older directories when module-info.java is present (#1093) @​wilx
• Make mcompiler-120 IT locale independent (#1063) @​anilvdl

📝 Documentation updates

• [MCOMPILER-569] - Document implicitly compiled excluded sources (#1092) @​wilx
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @​potiuk

👻 Maintenance

• Avoid using deprecated method CompilerConfiguration.setCompilerVersion (#1121) @​slawekjaranowski
• Replace adopt-openj9 by semeru JDK distribution on GH (#1122) @​slawekjaranowski
• Port the site documentation from APT to Markdown (#1110) @​slachiewicz
• Verify against Maven 4.0.0-rc-6 (#1105) @​slachiewicz
• Fix tests on Jenkins (#1100) @​slawekjaranowski
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @​potiuk
• Refactor compiler mojo to use dependency injection and improve string… (#1066) @​slachiewicz
• Fix ITs for Maven 3.10.x (#1061) @​slawekjaranowski
• Update maven-surefire-plugin version to 3.x in the MCOMPILER-481 IT (#1035) @​cdouillard

📦 Dependency updates

• Bump plexusCompilerVersion from 2.16.2 to 2.17.0 (#1112) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#1113) @dependabot[bot]
• use latest Maven 4 (#1045) @​hboutemy
• Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#1083) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#1082) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#1084) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#1068) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1 (#1047) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1050) @dependabot[bot]
• Bump mavenVersion from 3.9.14 to 3.9.16 (#1054) @dependabot[bot]
• Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1059) @dependabot[bot]
• Bump org.ow2.asm:asm from 9.9.1 to 9.10 (#1053) @dependabot[bot]
• Bump mavenVersion from 3.9.13 to 3.9.14 (#1041) @dependabot[bot]
• Bump mavenVersion from 3.9.12 to 3.9.13 (#1038) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#1032) @dependabot[bot]

Commits

• e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
• c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
• ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
• beb0eda Recompile when dependencies change (#1102)
• a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
• 2e81228 Fix incremental detection of empty sources, 3.x (#1075)
• 2132f5b configure ATR project
• 5992b77 Build fails when annotation processor list is empty (but present) (#1077)
• acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
• 72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.1

📝 Documentation updates

• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk

👻 Maintenance

• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk
• Use plugin version properties (3.x) (#535) @​Bukama

📦 Dependency updates

• Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (#538) @dependabot[bot]
• Bump mavenVersion from 3.9.15 to 3.9.16 (#536) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534) @dependabot[bot]
• Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529) @dependabot[bot]
• Bump mavenVersion from 3.9.14 to 3.9.15 (#528) @dependabot[bot]
• Bump mavenVersion from 3.9.12 to 3.9.14 (#526) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#523) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 46 to 47 (#519) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0 (#516) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.0 (#517) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 45 to 46 (#514) @dependabot[bot]
• Bump org.apache.maven:maven-archiver from 3.6.5 to 3.6.6 (#511) @dependabot[bot]
• Bump mavenVersion from 3.9.11 to 3.9.12 (#509) @dependabot[bot]

Commits

• b0cd63d [maven-release-plugin] prepare release maven-jar-plugin-3.5.1
• 5318a4f Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability
• 8e0b9bb Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547)
• d5a438b Fix javadoc
• 774fac9 Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0
• b71f403 Bump mavenVersion from 3.9.15 to 3.9.16 (#536)
• 9f2a001 Use plugin version properties (3.x) (#535)
• 68a978f Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534)
• e105821 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529)
• 953dc1a Bump mavenVersion from 3.9.14 to 3.9.15 (#528)
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from