build(deps): update target-maven.version [security]#4468
Open
renovate-bot wants to merge 1 commit intogoogleapis:mainfrom
Open
build(deps): update target-maven.version [security]#4468renovate-bot wants to merge 1 commit intogoogleapis:mainfrom
renovate-bot wants to merge 1 commit intogoogleapis:mainfrom
Conversation
2a3836d to
8e330a0
Compare
8e330a0 to
06002d9
Compare
06002d9 to
86fa0a3
Compare
86fa0a3 to
2b5c703
Compare
2b5c703 to
b6d2f1f
Compare
b6d2f1f to
36b405a
Compare
36b405a to
56e99e7
Compare
56e99e7 to
3edc0e3
Compare
3edc0e3 to
390ddd2
Compare
694b1a1 to
171bbe8
Compare
171bbe8 to
5f8e636
Compare
5f8e636 to
3ee8e04
Compare
3ee8e04 to
df0b0b1
Compare
df0b0b1 to
7a02c99
Compare
7a02c99 to
a595ab2
Compare
a595ab2 to
dd0de53
Compare
dd0de53 to
fe977e8
Compare
fe977e8 to
877c813
Compare
877c813 to
33548d6
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.0→3.8.13.0→3.9.12Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
GitHub Vulnerability Alerts
CVE-2021-26291
Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository. Maven is changing the default behavior in 3.8.1+ to no longer follow http (non-SSL) repository references by default. More details available in the referenced urls. If you are currently using a repository manager to govern the repositories used by your builds, you are unaffected by the risks present in the legacy behavior, and are unaffected by this vulnerability and change to default behavior. See this link for more information about repository management: https://maven.apache.org/repository-management.html
Release Notes
apache/maven (org.apache.maven:maven-plugin-api)
v3.9.12: 3.9.12🚀 New features and improvements
🐛 Bug Fixes
📝 Documentation updates
👻 Maintenance
🔧 Build
📦 Dependency updates
v3.9.11: 3.9.11🚀 New features and improvements
🐛 Bug Fixes
👻 Maintenance
🔧 Build
📦 Dependency updates
v3.9.10: 3.9.10Release Notes - Maven - Version 3.9.10
Bug
Improvement
Task
Dependency upgrade
What's Changed
New Contributors
Full Changelog: apache/maven@maven-3.9.9...maven-3.9.10
v3.9.9: 3.9.9Release Notes - Maven - Version 3.9.9
Bug
Task
Dependency upgrade
What's Changed
New Contributors
Full Changelog: apache/maven@maven-3.9.8...maven-3.9.9
v3.9.8: 3.9.8Release Notes - Maven - Version 3.9.8
Bug
Improvement
Task
Dependency upgrade
What's Changed
Full Changelog: apache/maven@maven-3.9.7...maven-3.9.8
v3.9.7: 3.9.7Release Notes - Maven - Version 3.9.7
Bug
New Feature
Improvement
Task
Dependency upgrade
What's Changed
New Contributors
Full Changelog: apache/maven@maven-3.9.6...maven-3.9.7
v3.9.6: 3.9.6Release Notes - Maven - Version 3.9.6
Improvement
Dependency upgrade
v3.9.5: 3.9.5Release Notes - Maven - Version 3.9.5
Bug
Improvement
Task
Dependency upgrade
v3.9.4: 3.9.4Release Notes - Maven - Version 3.9.4
Bug
Dependency upgrade
Full Changelog: apache/maven@maven-3.9.3...maven-3.9.4
v3.9.3: 3.9.3Release Notes - Maven - Version 3.9.3
Bug
Improvement
Task
Dependency upgrade
v3.9.2: 3.9.2Release Notes - Maven - Version 3.9.2
Bug
Improvement
Task
Dependency upgrade
v3.9.1: 3.9.1Release Notes - Maven - Version 3.9.1
Overview About the Changes
Regression fixes from Maven 3.9.0. General performance and other fixes.
Potentially Breaking Core Changes (if migrating from 3.8.x)
The Maven Resolver transport has changed from Wagon to “native HTTP”, see Resolver Transport guide.
Maven 2.x was auto-injecting an ancient version of plexus-utils dependency into the plugin classpath, and Maven 3.x continued doing this to preserve backward compatibility. Starting with Maven 3.9, it does not happen anymore. This change may lead to plugin breakage. The fix for affected plugin maintainers is to explicitly declare a dependency on plexus-utils. The workaround for affected plugin users is to add this dependency to plugin dependencies until issue is fixed by the affected plugin maintainer. See MNG-6965.
Mojos are prevented to boostrap new instance of RepositorySystem (for example by using deprecated ServiceLocator), they should reuse RepositorySystem instance provided by Maven instead. See MNG-7471.
Each line in .mvn/maven.config is now interpreted as a single argument. That is, if the file contains multiple arguments, these must now be placed on separate lines, see MNG-7684.
Bug
Improvement
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.