Re: [PR] Bump cxf.micrometer.version from 1.13.0 to 1.13.1 [cxf]

2024-06-11 Thread via GitHub


reta closed pull request #1918: Bump cxf.micrometer.version from 1.13.0 to 
1.13.1
URL: https://github.com/apache/cxf/pull/1918


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump cxf.micrometer.version from 1.13.0 to 1.13.1 [cxf]

2024-06-11 Thread via GitHub


reta commented on PR #1918:
URL: https://github.com/apache/cxf/pull/1918#issuecomment-2160730126

   Covered by https://github.com/apache/cxf/pull/1894


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump cxf.micrometer.version from 1.13.0 to 1.13.1 [cxf]

2024-06-11 Thread via GitHub


dependabot[bot] commented on PR #1918:
URL: https://github.com/apache/cxf/pull/1918#issuecomment-2160730202

   OK, I won't notify you again about this release, but will get in touch when 
a new version is available. You can also ignore all major, minor, or patch 
releases for a dependency by adding an [`ignore` 
condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore)
 with the desired `update_types` to your config file.
   
   If you change your mind, just re-open this PR and I'll resolve any conflicts 
on it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump cxf.micrometer-tracing.version from 1.2.6 to 1.3.1 [cxf]

2024-06-11 Thread via GitHub


reta commented on PR #1919:
URL: https://github.com/apache/cxf/pull/1919#issuecomment-2160730634

   Covered by https://github.com/apache/cxf/pull/1894


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump cxf.micrometer-tracing.version from 1.2.6 to 1.3.1 [cxf]

2024-06-11 Thread via GitHub


dependabot[bot] commented on PR #1919:
URL: https://github.com/apache/cxf/pull/1919#issuecomment-2160730725

   OK, I won't notify you again about this release, but will get in touch when 
a new version is available. You can also ignore all major, minor, or patch 
releases for a dependency by adding an [`ignore` 
condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore)
 with the desired `update_types` to your config file.
   
   If you change your mind, just re-open this PR and I'll resolve any conflicts 
on it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump cxf.micrometer-tracing.version from 1.2.6 to 1.3.1 [cxf]

2024-06-11 Thread via GitHub


reta closed pull request #1919: Bump cxf.micrometer-tracing.version from 1.2.6 
to 1.3.1
URL: https://github.com/apache/cxf/pull/1919


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: CXF 4.1.0 ?

2024-06-11 Thread Jamie G.
The in-progress cards for 4.1.0 include:

CXF-9008 FIPS Support
CXF-9005 EE10 JAX-RS TCK Test Failures
CXF-9007 NPE in XMLStreamDataWriter
CXF-8976 Update to OpenTelemetry v1.39.0
CXF-8969 Update to Brave 6

Not sure what the Committers/PMCs have planned for 4.1, my assumption
is that FIPS support is the largest new feature inflight.

On Mon, Jun 10, 2024 at 5:25 AM Richard Zowalla  wrote:
>
> Hi all,
>
> What needs to be done for 4.1.0 to be ready for release?
>
> I am asking, because CXF 4.1.x (EE10) is a blocker for the next TomEE 
> milestone and we might be able to help with it :)
>
> Gruß & tx
> Richard


Re: CXF 4.1.0 ?

2024-06-11 Thread Andriy Redko
Hi,

Besides the ones Jamie already mentioned:
 - we need to release cxf-xjc-utils 
(https://issues.apache.org/jira/browse/CXFXJC-48)
 - https://issues.apache.org/jira/browse/CXF-8671 (some dependency updates 
which are planned)
 - https://issues.apache.org/jira/browse/CXF-9029

The significant (I would not be afraid to say insane) amount of work has gone / 
is going 
into fixing to JDK-11 HttpClient based conduit - this is not related to 4.1.0 
in particular 
but the meta problem for current and upcoming release branches. 

Thank you.

Best Regards,
Andriy Redko

JG> The in-progress cards for 4.1.0 include:

JG> CXF-9008 FIPS Support
JG> CXF-9005 EE10 JAX-RS TCK Test Failures
JG> CXF-9007 NPE in XMLStreamDataWriter
JG> CXF-8976 Update to OpenTelemetry v1.39.0
JG> CXF-8969 Update to Brave 6

JG> Not sure what the Committers/PMCs have planned for 4.1, my assumption
JG> is that FIPS support is the largest new feature inflight.

JG> On Mon, Jun 10, 2024 at 5:25 AM Richard Zowalla  wrote:
>>
>> Hi all,
>>
>> What needs to be done for 4.1.0 to be ready for release?
>>
>> I am asking, because CXF 4.1.x (EE10) is a blocker for the next TomEE 
>> milestone and we might be able to help with it :)
>>
>> Gruß & tx
>> Richard



[PR] Bump org.apache.maven.plugins:maven-dependency-plugin from 3.6.1 to 3.7.0 [cxf-build-utils]

2024-06-11 Thread via GitHub


dependabot[bot] opened a new pull request, #92:
URL: https://github.com/apache/cxf-build-utils/pull/92

   Bumps 
[org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin)
 from 3.6.1 to 3.7.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-dependency-plugin/releases";>org.apache.maven.plugins:maven-dependency-plugin's
 releases.
   
   3.7.0
   
   
   https://issues.apache.org/jira/browse/MDEP-941";>[MDEP-941] 
- Deprecate dependency:sources in favor of dependency:resolv… (https://redirect.github.com/apache/maven-dependency-plugin/pull/411";>#411)
 https://github.com/michael-o";>@​michael-o
   https://issues.apache.org/jira/browse/MDEP-838";>[MDEP-838] 
- "Artifact has not been packaged yet" error message is not … (https://redirect.github.com/apache/maven-dependency-plugin/pull/412";>#412)
 https://github.com/michael-o";>@​michael-o
   https://issues.apache.org/jira/browse/MDEP-939";>[MDEP-939] 
- Lock down classifier in dependency:sources goal (https://redirect.github.com/apache/maven-dependency-plugin/pull/409";>#409)
 https://github.com/michael-o";>@​michael-o
   Revert "Fix sources goal for multimodule projects" (https://redirect.github.com/apache/maven-dependency-plugin/pull/408";>#408)
 https://github.com/michael-o";>@​michael-o
   https://issues.apache.org/jira/browse/MDEP-923";>[MDEP-923] 
- Move methods in place where are used (https://redirect.github.com/apache/maven-dependency-plugin/pull/407";>#407)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   MDEP-938] Correct invalid property name and add deprecated old one (https://redirect.github.com/apache/maven-dependency-plugin/pull/404";>#404)
 https://github.com/hazendaz";>@​hazendaz
   https://issues.apache.org/jira/browse/MDEP-835";>[MDEP-835] 
- Add optional dependency for tree IT (https://redirect.github.com/apache/maven-dependency-plugin/pull/403";>#403)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add missing dependency (https://redirect.github.com/apache/maven-dependency-plugin/pull/401";>#401)
 https://github.com/michael-o";>@​michael-o
   
   🚀 New features and improvements
   
   https://issues.apache.org/jira/browse/MDEP-799";>[MDEP-799] 
- tree: add optional output type json (https://redirect.github.com/apache/maven-dependency-plugin/pull/391";>#391)
 https://github.com/LogFlames";>@​LogFlames
   https://issues.apache.org/jira/browse/MDEP-928";>[MDEP-928] 
- Allow excluding classes from dependency:analyze (https://redirect.github.com/apache/maven-dependency-plugin/pull/393";>#393)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-924";>[MDEP-924] 
- Get rid of maven-artifact-transfer from list-classes goal (https://redirect.github.com/apache/maven-dependency-plugin/pull/382";>#382)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-925";>[MDEP-925] 
- Require Maven 3.6.3 (https://redirect.github.com/apache/maven-dependency-plugin/pull/381";>#381)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-922";>[MDEP-922] 
- dependency:analyze-exclusions - should report issue only in current project 
(https://redirect.github.com/apache/maven-dependency-plugin/pull/378";>#378)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-917";>[MDEP-917] 
- dependency:analyze-exclusions - use Resolver API instead of ProjectBuilder 
(https://redirect.github.com/apache/maven-dependency-plugin/pull/374";>#374)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-317";>[MDEP-317] 
- add mojo to analyze invalid exclusions (https://redirect.github.com/apache/maven-dependency-plugin/pull/362";>#362)
 https://github.com/vbreivik";>@​vbreivik
   https://issues.apache.org/jira/browse/MDEP-894";>[MDEP-894] 
- Use @Component only - fix tests (https://redirect.github.com/apache/maven-dependency-plugin/pull/360";>#360)
 https://github.com/michael-o";>@​michael-o
   
   🐛 Bug Fixes
   
   https://issues.apache.org/jira/browse/MDEP-914";>[MDEP-914] 
- Fix link in collect goal description (https://redirect.github.com/apache/maven-dependency-plugin/pull/380";>#380)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-895";>[MDEP-895] 
- dependency:sources fails for multi-module project (https://redirect.github.com/apache/maven-dependency-plugin/pull/349";>#349)
 https://github.com/jmle";>@​jmle
   https://issues.apache.org/jira/browse/MDEP-771";>[MDEP-771] 
- Remove broken 404 link (https://redirect.github.com/apache/maven-dependency-plugin/pull/344";>#344)
 https://github.com/elharo";>@​elharo
   
   📦 Dependency updates
   
   https://issues.apache.org/jira/browse/MDEP-936";>[MDEP-936] 
- Bump org.apache.maven.shared:maven-dependency-tree from 3.2.1 to 3.3.0 (https://

Re: [PR] Bump org.apache.maven.plugins:maven-dependency-plugin from 3.6.1 to 3.7.0 [cxf-build-utils]

2024-06-11 Thread via GitHub


reta merged PR #92:
URL: https://github.com/apache/cxf-build-utils/pull/92


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-dependency-plugin from 3.6.1 to 3.7.0 [cxf-xjc-utils]

2024-06-11 Thread via GitHub


dependabot[bot] opened a new pull request, #151:
URL: https://github.com/apache/cxf-xjc-utils/pull/151

   Bumps 
[org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin)
 from 3.6.1 to 3.7.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-dependency-plugin/releases";>org.apache.maven.plugins:maven-dependency-plugin's
 releases.
   
   3.7.0
   
   
   https://issues.apache.org/jira/browse/MDEP-941";>[MDEP-941] 
- Deprecate dependency:sources in favor of dependency:resolv… (https://redirect.github.com/apache/maven-dependency-plugin/pull/411";>#411)
 https://github.com/michael-o";>@​michael-o
   https://issues.apache.org/jira/browse/MDEP-838";>[MDEP-838] 
- "Artifact has not been packaged yet" error message is not … (https://redirect.github.com/apache/maven-dependency-plugin/pull/412";>#412)
 https://github.com/michael-o";>@​michael-o
   https://issues.apache.org/jira/browse/MDEP-939";>[MDEP-939] 
- Lock down classifier in dependency:sources goal (https://redirect.github.com/apache/maven-dependency-plugin/pull/409";>#409)
 https://github.com/michael-o";>@​michael-o
   Revert "Fix sources goal for multimodule projects" (https://redirect.github.com/apache/maven-dependency-plugin/pull/408";>#408)
 https://github.com/michael-o";>@​michael-o
   https://issues.apache.org/jira/browse/MDEP-923";>[MDEP-923] 
- Move methods in place where are used (https://redirect.github.com/apache/maven-dependency-plugin/pull/407";>#407)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   MDEP-938] Correct invalid property name and add deprecated old one (https://redirect.github.com/apache/maven-dependency-plugin/pull/404";>#404)
 https://github.com/hazendaz";>@​hazendaz
   https://issues.apache.org/jira/browse/MDEP-835";>[MDEP-835] 
- Add optional dependency for tree IT (https://redirect.github.com/apache/maven-dependency-plugin/pull/403";>#403)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add missing dependency (https://redirect.github.com/apache/maven-dependency-plugin/pull/401";>#401)
 https://github.com/michael-o";>@​michael-o
   
   🚀 New features and improvements
   
   https://issues.apache.org/jira/browse/MDEP-799";>[MDEP-799] 
- tree: add optional output type json (https://redirect.github.com/apache/maven-dependency-plugin/pull/391";>#391)
 https://github.com/LogFlames";>@​LogFlames
   https://issues.apache.org/jira/browse/MDEP-928";>[MDEP-928] 
- Allow excluding classes from dependency:analyze (https://redirect.github.com/apache/maven-dependency-plugin/pull/393";>#393)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-924";>[MDEP-924] 
- Get rid of maven-artifact-transfer from list-classes goal (https://redirect.github.com/apache/maven-dependency-plugin/pull/382";>#382)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-925";>[MDEP-925] 
- Require Maven 3.6.3 (https://redirect.github.com/apache/maven-dependency-plugin/pull/381";>#381)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-922";>[MDEP-922] 
- dependency:analyze-exclusions - should report issue only in current project 
(https://redirect.github.com/apache/maven-dependency-plugin/pull/378";>#378)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-917";>[MDEP-917] 
- dependency:analyze-exclusions - use Resolver API instead of ProjectBuilder 
(https://redirect.github.com/apache/maven-dependency-plugin/pull/374";>#374)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-317";>[MDEP-317] 
- add mojo to analyze invalid exclusions (https://redirect.github.com/apache/maven-dependency-plugin/pull/362";>#362)
 https://github.com/vbreivik";>@​vbreivik
   https://issues.apache.org/jira/browse/MDEP-894";>[MDEP-894] 
- Use @Component only - fix tests (https://redirect.github.com/apache/maven-dependency-plugin/pull/360";>#360)
 https://github.com/michael-o";>@​michael-o
   
   🐛 Bug Fixes
   
   https://issues.apache.org/jira/browse/MDEP-914";>[MDEP-914] 
- Fix link in collect goal description (https://redirect.github.com/apache/maven-dependency-plugin/pull/380";>#380)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-895";>[MDEP-895] 
- dependency:sources fails for multi-module project (https://redirect.github.com/apache/maven-dependency-plugin/pull/349";>#349)
 https://github.com/jmle";>@​jmle
   https://issues.apache.org/jira/browse/MDEP-771";>[MDEP-771] 
- Remove broken 404 link (https://redirect.github.com/apache/maven-dependency-plugin/pull/344";>#344)
 https://github.com/elharo";>@​elharo
   
   📦 Dependency updates
   
   https://issues.apache.org/jira/browse/MDEP-936";>[MDEP-936] 
- Bump org.apache.maven.shared:maven-dependency-tree from 3.2.1 to 3.3.0 (https://

[PR] Bump org.eclipse.platform:org.eclipse.equinox.app from 1.7.0 to 1.7.100 [cxf-xjc-utils]

2024-06-11 Thread via GitHub


dependabot[bot] opened a new pull request, #152:
URL: https://github.com/apache/cxf-xjc-utils/pull/152

   Bumps 
[org.eclipse.platform:org.eclipse.equinox.app](https://github.com/eclipse-equinox/equinox)
 from 1.7.0 to 1.7.100.
   
   Commits
   
   See full diff in https://github.com/eclipse-equinox/equinox/commits";>compare view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.eclipse.platform:org.eclipse.equinox.app&package-manager=maven&previous-version=1.7.0&new-version=1.7.100)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-pmd-plugin from 3.21.2 to 3.23.0 [cxf-xjc-utils]

2024-06-11 Thread via GitHub


dependabot[bot] opened a new pull request, #153:
URL: https://github.com/apache/cxf-xjc-utils/pull/153

   Bumps 
[org.apache.maven.plugins:maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin)
 from 3.21.2 to 3.23.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-pmd-plugin/releases";>org.apache.maven.plugins:maven-pmd-plugin's
 releases.
   
   3.22.0
   
   🚀 New features and improvements
   
   https://issues.apache.org/jira/browse/MPMD-379";>[MPMD-379] 
- Upgrade to use PMD 7.0.0 by default (https://redirect.github.com/apache/maven-pmd-plugin/pull/144";>#144) 
https://github.com/mkolesnikov";>@​mkolesnikov
   
   📦 Dependency updates
   
   https://issues.apache.org/jira/browse/MPMD-394";>[MPMD-394] 
- Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (https://redirect.github.com/apache/maven-pmd-plugin/pull/148";>#148) 
https://github.com/dependabot";>@​dependabot
   https://issues.apache.org/jira/browse/MPMD-393";>[MPMD-393] 
- Bump commons-io:commons-io from 2.16.0 to 2.16.1 (https://redirect.github.com/apache/maven-pmd-plugin/pull/147";>#147) 
https://github.com/dependabot";>@​dependabot
   https://issues.apache.org/jira/browse/MPMD-393";>[MPMD-393] 
- Bump commons-io:commons-io from 2.15.1 to 2.16.0 (https://redirect.github.com/apache/maven-pmd-plugin/pull/146";>#146) 
https://github.com/dependabot";>@​dependabot
   Bump apache/maven-gh-actions-shared from 3 to 4 (https://redirect.github.com/apache/maven-pmd-plugin/pull/143";>#143) 
https://github.com/dependabot";>@​dependabot
   Bump org.codehaus.plexus:plexus-resources from 1.2.0 to 1.3.0 (https://redirect.github.com/apache/maven-pmd-plugin/pull/140";>#140) 
https://github.com/dependabot";>@​dependabot
   Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.14.0 (https://redirect.github.com/apache/maven-pmd-plugin/pull/137";>#137) 
https://github.com/dependabot";>@​dependabot
   Bump commons-io:commons-io from 2.11.0 to 2.15.1 (https://redirect.github.com/apache/maven-pmd-plugin/pull/138";>#138) 
https://github.com/dependabot";>@​dependabot
   
   👻 Maintenance
   
   Bump release-drafter/release-drafter from 5 to 6 (https://redirect.github.com/apache/maven-pmd-plugin/pull/142";>#142) 
https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/apache/maven-pmd-plugin/commit/570fe170f5164b501add74e9f556250a5f2ea435";>570fe17
 [maven-release-plugin] prepare release maven-pmd-plugin-3.23.0
   https://github.com/apache/maven-pmd-plugin/commit/872fcd87d292abe9a28774201840651f98233142";>872fcd8
 [MPMD-397] Upgrade to Maven 3.6.3
   https://github.com/apache/maven-pmd-plugin/commit/76f7e114a8ac92898c0307daac8dea6a44a149bb";>76f7e11
 [MPMD-395] Build doesn't fail for invalid CPD format (https://redirect.github.com/apache/maven-pmd-plugin/issues/150";>#150)
   https://github.com/apache/maven-pmd-plugin/commit/c54170707cfd0aec4b5d9ee6083230f2551cdaa4";>c541707
 Add test parameter which caused exception to be swallowed
   https://github.com/apache/maven-pmd-plugin/commit/4afad98d229a6764d2ebdd246c037d1645c7cbb9";>4afad98
 [maven-release-plugin] prepare for next development iteration
   https://github.com/apache/maven-pmd-plugin/commit/a9dfc308edf4affa364762c41eead60187f523c5";>a9dfc30
 [maven-release-plugin] prepare release maven-pmd-plugin-3.22.0
   https://github.com/apache/maven-pmd-plugin/commit/4bc08a93b4632c6bb7482d0e79d3493d425f1e60";>4bc08a9
 (doc) Update release notes for upcoming 3.22.0
   https://github.com/apache/maven-pmd-plugin/commit/2823fa09871a0d6a4296d3c59f52f0034eb220db";>2823fa0
 Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (https://redirect.github.com/apache/maven-pmd-plugin/issues/148";>#148)
   https://github.com/apache/maven-pmd-plugin/commit/89a7cdb594c3b28beafb44d6c0251bc7a4bbd71e";>89a7cdb
 [MPMD-379] Upgrade to use PMD 7.0.0 by default (https://redirect.github.com/apache/maven-pmd-plugin/issues/144";>#144)
   https://github.com/apache/maven-pmd-plugin/commit/f884af3f354aae619a6a97a83be6bf46067a53cf";>f884af3
 Fixups from review (https://redirect.github.com/apache/maven-pmd-plugin/issues/144";>#144)
   Additional commits viewable in https://github.com/apache/maven-pmd-plugin/compare/maven-pmd-plugin-3.21.2...maven-pmd-plugin-3.23.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-pmd-plugin&package-manager=maven&previous-version=3.21.2&new-version=3.23.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
  

Re: [PR] Bump org.apache.maven.plugins:maven-pmd-plugin from 3.21.2 to 3.22.0 [cxf-xjc-utils]

2024-06-11 Thread via GitHub


dependabot[bot] closed pull request #133: Bump 
org.apache.maven.plugins:maven-pmd-plugin from 3.21.2 to 3.22.0
URL: https://github.com/apache/cxf-xjc-utils/pull/133


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven.plugins:maven-pmd-plugin from 3.21.2 to 3.22.0 [cxf-xjc-utils]

2024-06-11 Thread via GitHub


dependabot[bot] commented on PR #133:
URL: https://github.com/apache/cxf-xjc-utils/pull/133#issuecomment-2161889449

   Superseded by #153.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven.plugins:maven-dependency-plugin from 3.6.1 to 3.7.0 [cxf-xjc-utils]

2024-06-11 Thread via GitHub


reta merged PR #151:
URL: https://github.com/apache/cxf-xjc-utils/pull/151


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump jakarta.servlet:jakarta.servlet-api from 6.0.0 to 6.1.0 [cxf]

2024-06-11 Thread via GitHub


dependabot[bot] opened a new pull request, #1920:
URL: https://github.com/apache/cxf/pull/1920

   Bumps 
[jakarta.servlet:jakarta.servlet-api](https://github.com/eclipse-ee4j/servlet-api)
 from 6.0.0 to 6.1.0.
   
   Commits
   
   See full diff in https://github.com/eclipse-ee4j/servlet-api/commits";>compare view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jakarta.servlet:jakarta.servlet-api&package-manager=maven&previous-version=6.0.0&new-version=6.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-dependency-plugin from 3.6.1 to 3.7.0 [cxf]

2024-06-11 Thread via GitHub


dependabot[bot] opened a new pull request, #1921:
URL: https://github.com/apache/cxf/pull/1921

   Bumps 
[org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin)
 from 3.6.1 to 3.7.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-dependency-plugin/releases";>org.apache.maven.plugins:maven-dependency-plugin's
 releases.
   
   3.7.0
   
   
   https://issues.apache.org/jira/browse/MDEP-941";>[MDEP-941] 
- Deprecate dependency:sources in favor of dependency:resolv… (https://redirect.github.com/apache/maven-dependency-plugin/pull/411";>#411)
 https://github.com/michael-o";>@​michael-o
   https://issues.apache.org/jira/browse/MDEP-838";>[MDEP-838] 
- "Artifact has not been packaged yet" error message is not … (https://redirect.github.com/apache/maven-dependency-plugin/pull/412";>#412)
 https://github.com/michael-o";>@​michael-o
   https://issues.apache.org/jira/browse/MDEP-939";>[MDEP-939] 
- Lock down classifier in dependency:sources goal (https://redirect.github.com/apache/maven-dependency-plugin/pull/409";>#409)
 https://github.com/michael-o";>@​michael-o
   Revert "Fix sources goal for multimodule projects" (https://redirect.github.com/apache/maven-dependency-plugin/pull/408";>#408)
 https://github.com/michael-o";>@​michael-o
   https://issues.apache.org/jira/browse/MDEP-923";>[MDEP-923] 
- Move methods in place where are used (https://redirect.github.com/apache/maven-dependency-plugin/pull/407";>#407)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   MDEP-938] Correct invalid property name and add deprecated old one (https://redirect.github.com/apache/maven-dependency-plugin/pull/404";>#404)
 https://github.com/hazendaz";>@​hazendaz
   https://issues.apache.org/jira/browse/MDEP-835";>[MDEP-835] 
- Add optional dependency for tree IT (https://redirect.github.com/apache/maven-dependency-plugin/pull/403";>#403)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   Add missing dependency (https://redirect.github.com/apache/maven-dependency-plugin/pull/401";>#401)
 https://github.com/michael-o";>@​michael-o
   
   🚀 New features and improvements
   
   https://issues.apache.org/jira/browse/MDEP-799";>[MDEP-799] 
- tree: add optional output type json (https://redirect.github.com/apache/maven-dependency-plugin/pull/391";>#391)
 https://github.com/LogFlames";>@​LogFlames
   https://issues.apache.org/jira/browse/MDEP-928";>[MDEP-928] 
- Allow excluding classes from dependency:analyze (https://redirect.github.com/apache/maven-dependency-plugin/pull/393";>#393)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-924";>[MDEP-924] 
- Get rid of maven-artifact-transfer from list-classes goal (https://redirect.github.com/apache/maven-dependency-plugin/pull/382";>#382)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-925";>[MDEP-925] 
- Require Maven 3.6.3 (https://redirect.github.com/apache/maven-dependency-plugin/pull/381";>#381)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-922";>[MDEP-922] 
- dependency:analyze-exclusions - should report issue only in current project 
(https://redirect.github.com/apache/maven-dependency-plugin/pull/378";>#378)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-917";>[MDEP-917] 
- dependency:analyze-exclusions - use Resolver API instead of ProjectBuilder 
(https://redirect.github.com/apache/maven-dependency-plugin/pull/374";>#374)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-317";>[MDEP-317] 
- add mojo to analyze invalid exclusions (https://redirect.github.com/apache/maven-dependency-plugin/pull/362";>#362)
 https://github.com/vbreivik";>@​vbreivik
   https://issues.apache.org/jira/browse/MDEP-894";>[MDEP-894] 
- Use @Component only - fix tests (https://redirect.github.com/apache/maven-dependency-plugin/pull/360";>#360)
 https://github.com/michael-o";>@​michael-o
   
   🐛 Bug Fixes
   
   https://issues.apache.org/jira/browse/MDEP-914";>[MDEP-914] 
- Fix link in collect goal description (https://redirect.github.com/apache/maven-dependency-plugin/pull/380";>#380)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MDEP-895";>[MDEP-895] 
- dependency:sources fails for multi-module project (https://redirect.github.com/apache/maven-dependency-plugin/pull/349";>#349)
 https://github.com/jmle";>@​jmle
   https://issues.apache.org/jira/browse/MDEP-771";>[MDEP-771] 
- Remove broken 404 link (https://redirect.github.com/apache/maven-dependency-plugin/pull/344";>#344)
 https://github.com/elharo";>@​elharo
   
   📦 Dependency updates
   
   https://issues.apache.org/jira/browse/MDEP-936";>[MDEP-936] 
- Bump org.apache.maven.shared:maven-dependency-tree from 3.2.1 to 3.3.0 (https://redirect