Skip to content

chore(deps-dev): bump the maven-major group across 1 directory with 5 updates - #127

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/bindings/java/release/maven-major-fc2cedf403
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/bindings/java/release/maven-major-fc2cedf403

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the maven-major group with 5 updates in the /bindings/java/release directory:

Package From To
org.apache.maven.plugins:maven-surefire-plugin 2.12 3.6.1
org.apache.maven.plugins:maven-jar-plugin 2.2 3.5.1
org.codehaus.mojo:build-helper-maven-plugin 1.10 3.7.0
org.apache.maven.plugins:maven-source-plugin 2.2.1 3.4.0
org.apache.maven.plugins:maven-gpg-plugin 1.5 3.2.8

Updates org.apache.maven.plugins:maven-surefire-plugin from 2.12 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
  • 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
  • ab7ce2f Bump org.testng:testng (#3539)
  • ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
  • a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
  • 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
  • cc69b3c Use push for PR Automation
  • b119019 Install the JUnit Platform provider for the ITs (#3535)
  • 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
  • 1e4f6b9 Use workflow_run for PR check (#3531)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 2.2 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.1

📝 Documentation updates

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk

👻 Maintenance

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk
  • Use plugin version properties (3.x) (#535) @​Bukama

📦 Dependency updates

3.5.0

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

... (truncated)

Commits
  • b0cd63d [maven-release-plugin] prepare release maven-jar-plugin-3.5.1
  • 5318a4f Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability
  • 8e0b9bb Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547)
  • d5a438b Fix javadoc
  • 774fac9 Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0
  • b71f403 Bump mavenVersion from 3.9.15 to 3.9.16 (#536)
  • 9f2a001 Use plugin version properties (3.x) (#535)
  • 68a978f Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534)
  • e105821 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529)
  • 953dc1a Bump mavenVersion from 3.9.14 to 3.9.15 (#528)
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 1.10 to 3.7.0

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.7.0

Build Helper Maven Plugin 3.7.0 adds system time zone support to timestamp-property, literal replacement support to regex-property and regex-properties, and updates the remove-project-artifact deprecation guidance. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

  • System time zone in timestamp-property: Setting <timeZone>system</timeZone> (case-insensitive) formats the timestamp using the JVM's default time zone instead of GMT, working with both current and build time sources (#250).
  • Literal replacement mode in regex-property and regex-properties: Setting <replacementLiteral>true</replacementLiteral> treats backslashes (\) and dollar signs ($) in <replacement> as literal characters rather than regex group references or escapes — particularly useful when substituting Windows file paths such as ${project.build.directory} (#249).
  • Updated remove-project-artifact deprecation guidance: The documentation for the deprecated remove-project-artifact goal now points users to Maven Resolver's split local repository feature (-Daether.enhancedLocalRepository.split) as the modern alternative (#268, #270).

🚨 Removed

🚀 New features and improvements

  • Support the system time zone in timestamp-property (#250) @​wilx
  • Add literal replacement support to regex property goals (#249) @​wilx

📝 Documentation updates

👻 Maintenance

🔧 Build

Thanks to @​slachiewicz and @​wilx.

Full changelog

3.6.2

... (truncated)

Commits
  • 5eee186 [maven-release-plugin] prepare release 3.7.0
  • b506bd9 Point the remove-project-artifact deprecation at split local repositories (#268)
  • acf3610 Support the system time zone in timestamp-property
  • 7690ae3 Add literal replacement support to regex property goals
  • 8dc41fd Run the IT fixtures on JUnit 5
  • f881bba Replace deprecated @​Component with JSR 330 injection
  • bb5f11c Declare the Maven artifacts the code uses
  • 74eb3f5 Use push for PR Automation
  • 28d7ed1 Check the reserved ports' guarantees, not exact numbers
  • 7459cd8 Build through the MojoHaus workflow
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 2.2.1 to 3.4.0

Release notes

Sourced from org.apache.maven.plugins:maven-source-plugin's releases.

3.4.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.3.1

What's Changed

New Contributors

Full Changelog: apache/maven-source-plugin@maven-source-plugin-3.3.0...maven-source-plugin-3.3.1

Commits
  • ecf937a [maven-release-plugin] prepare release maven-source-plugin-3.4.0
  • 95b3bf4 Revert "[maven-release-plugin] prepare for next development iteration"
  • 7a9a770 [maven-release-plugin] prepare for next development iteration
  • 292c1ce Use plexus-utils version from parent
  • bf79b71 Bump m-invoker-p to 3.9.1
  • 4f3fcb9 Bump commons-io:commons-io from 2.20.0 to 2.21.0
  • a867442 Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4
  • 51c66ac Bump org.apache.maven:maven-archiver from 3.6.4 to 3.6.5
  • 267df46 Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.10.3
  • ef85324 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-gpg-plugin from 1.5 to 3.2.8

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.8

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.2.7

Fixes a lingering issue affecting whole 3.2.x lineage, that resulted in "bad passphrase" on Windows OS with GPG signer (see MGPG-136 for details).

What's Changed

Full Changelog: apache/maven-gpg-plugin@maven-gpg-plugin-3.2.6...maven-gpg-plugin-3.2.7

3.2.6

Release Notes - Maven GPG Plugin - Version 3.2.6

... (truncated)

Commits
  • 8a46455 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.8
  • 7012821 Fix issueManagement, ciManagement system and url
  • a9a8c84 Make empty classifier null (not empty string) (#287)
  • a8368b0 Add .mvn
  • f0e45e0 Update parent POM to 45 (#284)
  • cb1236c Bump bouncycastleVersion from 1.78.1 to 1.80 (#127)
  • 5377a10 Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133)
  • 8b63932 Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125)
  • 54ea518 Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1
  • a6a412d Remove old JIRA issue link
  • Additional commits viewable in compare view

Copilot AI balanced review requested due to automatic review settings October 12, 2026 19:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 12, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The upgraded JAR plugin will fail during packaging, Maven requirements are outdated, and CI does not exercise the changed POM.

2 open findings
What changed in this PR

Updates Maven build tooling for the generated Java bindings.

Changes:

  • Upgrades five Maven plugins to current major versions.
  • Updates test, packaging, source, helper, and signing tooling.
File Description
bindings/​java/​release/​pom.xml Updates five Maven plugin versions.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread bindings/java/release/pom.xml Outdated
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId>
<version>2.12</version>
<version>3.6.0</version>
Comment thread bindings/java/release/pom.xml Outdated
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId>
<version>2.12</version>
<version>3.6.0</version>
@dependabot dependabot Bot changed the title chore(deps-dev): bump the maven-major group in /bindings/java/release with 5 updates chore(deps-dev): bump the maven-major group across 1 directory with 5 updates Oct 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/bindings/java/release/maven-major-fc2cedf403 branch from dde8abb to 27bca34 Compare October 12, 2026 19:37
@cloudsmith-iduffy

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/maven/bindings/java/release/maven-major-fc2cedf403 branch from 27bca34 to a48d06d Compare October 12, 2026 20:00
@dependabot
dependabot Bot force-pushed the dependabot/maven/bindings/java/release/maven-major-fc2cedf403 branch 2 times, most recently from 0f734c2 to d7be01b Compare October 24, 2026 10:03
@dependabot
dependabot Bot force-pushed the dependabot/maven/bindings/java/release/maven-major-fc2cedf403 branch 2 times, most recently from 136f2f8 to 43c4f6f Compare November 7, 2026 10:03
… updates

Bumps the maven-major group with 5 updates in the /bindings/java/release directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `2.12` | `3.6.1` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `2.2` | `3.5.1` |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `1.10` | `3.7.0` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `2.2.1` | `3.4.0` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `1.5` | `3.2.8` |



Updates `org.apache.maven.plugins:maven-surefire-plugin` from 2.12 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-2.12...surefire-3.6.1)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 2.2 to 3.5.1
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-2.2...maven-jar-plugin-3.5.1)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 1.10 to 3.7.0
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@build-helper-maven-plugin-1.10...3.7.0)

Updates `org.apache.maven.plugins:maven-source-plugin` from 2.2.1 to 3.4.0
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-2.2.1...maven-source-plugin-3.4.0)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 1.5 to 3.2.8
- [Release notes](https://github.com/apache/maven-gpg-plugin/releases)
- [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-1.5...maven-gpg-plugin-3.2.8)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-version: 3.2.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-major
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-major
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-version: 3.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-major
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-major
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.6.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/bindings/java/release/maven-major-fc2cedf403 branch from 43c4f6f to 21271e5 Compare November 14, 2026 10:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Development

Successfully merging this pull request may close these issues.

2 participants