[dependabot]

Bumps org.jacoco:jacoco-maven-plugin from 0.8.15 to 0.8.16.

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.16

New Features

• JaCoCo now officially supports Java 27 (GitHub #2287).
• Experimental support for Java 28 class files (GitHub #2170, #2189).
• To instrument classes loaded by the platform class loader, introduced in JDK 9 by JEP 261, the agent option inclbootstrapclasses=true is required (GitHub #2155).

Non-functional Changes

• JaCoCo now depends on ASM 9.11.1 (GitHub #2299, #2304).

Commits

• 466838a Prepare release 0.8.16
• 64d0ef7 Upgrade ASM to 9.11.1 (#2304)
• fdaaab7 Upgrade ASM to 9.11 (#2299)
• d2571ae Upgrade Kotlin to 2.4.21 (#2302)
• 2f76394 Improve Renovate commit messages and PR titles (#2301)
• e9f2936 Use Ubuntu 26.04 (#2291)
• 4ffe9f0 Upgrade actions/upload-artifact to 7.0.2 (#2295)
• aaede90 Upgrade Maven to 3.10.0 (#2292)
• f638499 Enable comment-based updates in pom.xml and html files (#2294)
• 2e115bb Happy birthday Java 27! (#2287)
• Additional commits viewable in compare view

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 1 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 418eea7.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

pom.xml

Package	Version	License	Issue Type
org.jacoco:jacoco-maven-plugin	0.8.16	EPL-2.0 OR (Apache-2.0 AND EPL-2.0)	Incompatible License

Allowed Licenses:

0BSD, Apache-2.0, BSD-2-Clause, BSD-3-Clause, CC0-1.0, MIT, MIT-0

OpenSSF Scorecard

Package	Version	Score	Details
maven/org.jacoco:jacoco-maven-plugin	0.8.16	🟢 4.5	Details Check Score Reason Code-Review ⚠️ 0 Found 0/12 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 10 all dependencies are pinned Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• pom.xml