Skip to content

build: bump the maven-minor-and-patch group with 2 updates - #143

Merged
paul58914080 merged 1 commit into
mainfrom
dependabot/maven/maven-minor-and-patch-6f22278eb4
Nov 13, 2026
Merged

paul58914080 merged 1 commit into
mainfrom
dependabot/maven/maven-minor-and-patch-6f22278eb4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the maven-minor-and-patch group with 2 updates: org.codehaus.mojo:flatten-maven-plugin and org.codehaus.mojo:build-helper-maven-plugin.

Updates org.codehaus.mojo:flatten-maven-plugin from 1.8.0 to 1.9.0

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.9.0

Flatten Maven Plugin 1.9.0 fixes CI-friendly property interpolation when custom pomElements are configured, updates its Plexus XML/interpolation dependencies, and cleans up declared Maven dependencies. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

  • CI-friendly property interpolation with custom <pomElements>: Fixed a bug where configuring custom <pomElements> alongside <flattenMode>resolveCiFriendliesOnly</flattenMode> failed to initialize the CI-friendly property interpolator, leaving ${revision}, ${sha1}, and ${changelist} placeholders unresolved in the flattened POM (#528).
  • Updated Plexus stack: Upgraded plexus-xml to 3.1.0, plexus-utils to 4.1.0, and plexus-interpolation to 1.30.0 (#526, #527, #533).

🚨 Removed

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

  • Bump com.google.guava:guava from 32.0.0-jre to 33.7.2-jre in /src/it/projects/bom-pomElements/bom (#554, #559) @dependabot[bot]
  • Bump the maven group with 2 updates (#558) @dependabot[bot]
  • Bump com.fasterxml.jackson.core:jackson-core from 2.15.0 to 2.18.11 in /src/it/projects/bom-flattenMode/bom (#539) @dependabot[bot]
  • Bump com.fasterxml.jackson.core:jackson-core from 2.18.6 to 2.18.11 in /src/it/projects/bom-pomElements/bom (#521, #537) @dependabot[bot]

... (truncated)

Commits
  • 329d107 [maven-release-plugin] prepare release 1.9.0
  • 75177b1 Keep Dependabot on Mockito 4
  • b593ea4 Bump com.google.guava:guava in /src/it/projects/bom-pomElements/bom
  • 8a5c2ef fix: initialize CI interpolation for custom POM elements
  • ff5172e Bump the maven group with 2 updates
  • 9e762cd Keep Dependabot on Maven 3.9.x and Resolver 1.9.x
  • 03788e7 Raise IT project prerequisites to Maven 3.9.0
  • 5a6bf5c Declare the Maven artifacts the code uses
  • 79f5df5 Clean up declared dependencies
  • 869985a Use push for PR Automation
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.6.2 to 3.7.0

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.7.0

Build Helper Maven Plugin 3.7.0 adds system time zone support to timestamp-property, literal replacement support to regex-property and regex-properties, and updates the remove-project-artifact deprecation guidance. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

  • System time zone in timestamp-property: Setting <timeZone>system</timeZone> (case-insensitive) formats the timestamp using the JVM's default time zone instead of GMT, working with both current and build time sources (#250).
  • Literal replacement mode in regex-property and regex-properties: Setting <replacementLiteral>true</replacementLiteral> treats backslashes (\) and dollar signs ($) in <replacement> as literal characters rather than regex group references or escapes — particularly useful when substituting Windows file paths such as ${project.build.directory} (#249).
  • Updated remove-project-artifact deprecation guidance: The documentation for the deprecated remove-project-artifact goal now points users to Maven Resolver's split local repository feature (-Daether.enhancedLocalRepository.split) as the modern alternative (#268, #270).

🚨 Removed

🚀 New features and improvements

  • Support the system time zone in timestamp-property (#250) @​wilx
  • Add literal replacement support to regex property goals (#249) @​wilx

📝 Documentation updates

👻 Maintenance

🔧 Build

Thanks to @​slachiewicz and @​wilx.

Full changelog

Commits
  • 5eee186 [maven-release-plugin] prepare release 3.7.0
  • b506bd9 Point the remove-project-artifact deprecation at split local repositories (#268)
  • acf3610 Support the system time zone in timestamp-property
  • 7690ae3 Add literal replacement support to regex property goals
  • 8dc41fd Run the IT fixtures on JUnit 5
  • f881bba Replace deprecated @​Component with JSR 330 injection
  • bb5f11c Declare the Maven artifacts the code uses
  • 74eb3f5 Use push for PR Automation
  • 28d7ed1 Check the reserved ports' guarantees, not exact numbers
  • 7459cd8 Build through the MojoHaus workflow
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-minor-and-patch group with 2 updates: [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) and [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin).


Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.8.0...1.9.0)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.2 to 3.7.0
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@3.6.2...3.7.0)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 10, 2026 09:53
@dependabot dependabot Bot added automated This change was automated dependencies This change is for dependency labels Nov 10, 2026
@paul58914080
paul58914080 merged commit e16efc8 into main Nov 13, 2026
2 of 3 checks passed
@paul58914080
paul58914080 deleted the dependabot/maven/maven-minor-and-patch-6f22278eb4 branch November 13, 2026 03:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated This change was automated dependencies This change is for dependency

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant