Skip to content

Update plugin io.github.ben-manes.versions to v0.67.0 - #619

Merged
sir-gon merged 1 commit into
mainfrom
renovate/io.github.ben-manes.versions-0.x
Nov 1, 2026
Merged

sir-gon merged 1 commit into
mainfrom
renovate/io.github.ben-manes.versions-0.x

Conversation

@renovate

@renovate renovate Bot commented Oct 31, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
io.github.ben-manes.versions 0.66.0 → 0.67.0 age confidence

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@fossabot

fossabot Bot commented Oct 31, 2026 •

Copy link
Copy Markdown

✓ Safe to upgrade

I recommend merging this upgrade because it is a minor patch release of the io.github.ben-manes.versions Gradle plugin with exclusively internal bug fixes and no breaking changes. The changes include a fix for incorrect project URL display in dependency reports (where rows could show another dependency's URL), a correction for Windows line ending compatibility in Problems API output, and an internal refactor of update-reporting helpers that is explicitly marked as source-compatible with existing call sites via @​JvmOverloads. The new dependency is directly declared and actively used as a build plugin. No public API changes, no security concerns, and no deprecations requiring code changes were detected.

What we checked

  • The plugin io.github.ben-manes.versions is directly declared at the new version 0.67.0 in the plugins block, confirming this is an active, intentional build dependency. [1]
  • The plugin is applied at the project level as a standard Gradle build plugin (not a runtime/compile dependency), so the noted Java version range for the plugin (8–21) describes Gradle's JVM compatibility, not the project's compile target; Java 26/27 are backward-compatible with those requirements. [2]
  • Package source diff confirms all changes are internal: a bug fix for project URL assignment in dependency report rows (issue #844), Windows CRLF line-ending fix in Problems API output, and a source-compatible internal refactor using @​JvmOverloads. Build toolchain was also updated (JDK 25.0.5, Gradle 9.8.2). None of these changes affect consumer-facing plugin behavior or API. [3]

Dependency Usage

No usage of the analyzed dependencies was found in this repository.

  • The plugin io.github.ben-manes.versions is directly declared at the new version 0.67.0 in the plugins block, confirming this is an active, intentional build dependency.
    id "io.github.ben-manes.versions" version "0.67.0"
  • The plugin is applied at the project level as a standard Gradle build plugin (not a runtime/compile dependency), so the noted Java version range for the plugin (8–21) describes Gradle's JVM compatibility, not the project's compile target; Java 26/27 are backward-compatible with those requirements.

Changes

The io.github.ben-manes.versions Gradle plugin was updated with three bug fixes: dependency report rows now correctly display their own project URLs (rather than mismatched or stale URLs from other rows), and Windows line endings are properly applied in Problems API report output.

  • Dependency report rows now show the project URL of their own latest version, instead of another row's, a failed resolution's, or an older version's. Unresolved rows take the URL from the newest version of their module, so the result no longer depends on the order statuses arrive in (issue #844). (v0.67.0, package source)
  • When report rules move a row to an earlier candidate version, the row's project URL is now updated to match that version, or the version in the URL is rewritten where a version-specific URL is available. (v0.67.0, package source)
  • Problems API report text now joins multi-line entries with the platform line separator (System.lineSeparator()) instead of a hardcoded "\n", so output on Windows uses CRLF line endings. (v0.67.0, package source)
View 2 more changes
  • Internal refactor of the update reporting: added internal helpers (urlByVersion, projectUrlsOf, projectUrlByCurrent, and rewriteVersion). ReportRules.applyTo gained an optional urlsRead parameter with @​JvmOverloads, which keeps existing call sites source-compatible. These are not part of the public API. (v0.67.0, package source)
  • Build metadata updated: built with JDK 25.0.5 (previously 25.0.4.1) and Gradle 9.8.2 (previously 9.8.1). (v0.67.0, package source)
References (3)

[1]: The plugin io.github.ben-manes.versions is directly declared at the new version 0.67.0 in the plugins block, confirming this is an active, intentional build dependency.

id "io.github.ben-manes.versions" version "0.67.0"

[2]: The plugin is applied at the project level as a standard Gradle build plugin (not a runtime/compile dependency), so the noted Java version range for the plugin (8–21) describes Gradle's JVM compatibility, not the project's compile target; Java 26/27 are backward-compatible with those requirements.

[3]: Package source diff confirms all changes are internal: a bug fix for project URL assignment in dependency report rows (issue #844), Windows CRLF line-ending fix in Problems API output, and a source-compatible internal refactor using @​JvmOverloads. Build toolchain was also updated (JDK 25.0.5, Gradle 9.8.2). None of these changes affect consumer-facing plugin behavior or API. (source link)


fossabot analyzed this PR using dependency research and AI. View this analysis on the web

@fossabot

fossabot Bot commented Oct 31, 2026 •

Copy link
Copy Markdown

fossabot is Thinking

@fossabot

fossabot Bot commented Oct 31, 2026 •

Copy link
Copy Markdown

fossabot is Thinking

@fossabot

fossabot Bot commented Oct 31, 2026 •

Copy link
Copy Markdown

No Issues

No security issues were detected in the SAST scan. The code changes appear to follow secure coding practices.


fossabot analyzed this PR using SAST security analysis and AI (changed files only).

@codecov

codecov Bot commented Oct 31, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (f781ac3) to head (c03fe34).

Additional details and impacted files
@@             Coverage Diff             @@
##                main      #619   +/-   ##
===========================================
  Coverage     100.00%   100.00%           
  Complexity       434       434           
===========================================
  Files             76        76           
  Lines           1383      1383           
  Branches         210       210           
===========================================
  Hits            1383      1383           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@sonarqubecloud

Copy link
Copy Markdown

@sir-gon
sir-gon merged commit 3f947a6 into main Nov 1, 2026
50 checks passed
@renovate
renovate Bot deleted the renovate/io.github.ben-manes.versions-0.x branch November 1, 2026 03:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant