Skip to content

chore: [DevOps] bump the plugins group with 2 updates - #1277

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/plugins-e32cbe2881
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/plugins-e32cbe2881

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the plugins group with 2 updates: org.apache.maven.plugins:maven-plugin-plugin and com.github.spotbugs:spotbugs-maven-plugin.

Updates org.apache.maven.plugins:maven-plugin-plugin from 3.15.2 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-plugin-plugin's releases.

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

... (truncated)

Commits
  • 1d3f05b [maven-release-plugin] prepare release maven-plugin-tools-3.16.0
  • 2f22792 Update issue management system to GitHubx
  • 919e0a1 Update SCM tag and resolver version
  • c69e644 Bump org.jsoup:jsoup from 1.23.1 to 1.23.2
  • 6a201eb Bump org.codehaus.plexus:plexus-xml from 3.0.2 to 3.1.0
  • 7f16754 Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0
  • a0caf79 Bump org.codehaus.plexus:plexus-archiver from 4.12.0 to 4.14.0
  • 4e05797 Bump org.codehaus.plexus:plexus-classworlds from 2.12.0 to 2.12.1
  • c3ff08f Bump org.codehaus.plexus:plexus-velocity from 2.3.0 to 2.4.0
  • 649559a Bump org.codehaus.plexus:plexus-i18n from 1.1.0 to 1.2.0
  • Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs-maven-plugin from 4.10.4.0 to 4.10.4.1

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

spotbugs-maven-plugin-4.10.4.1

BREAKING

In 2014, maven reporting added various settings that should have resulted in removal here but had gone unseen. These are now applied and therefore the state changed to immutable which will cause plugin to fail if users do not adjust configuration as noted here.

Users who previously configured outputEncoding directly on the SpotBugs Maven Plugin must configure project.reporting.outputEncoding instead and remove it to avoid errors. Users passing fork option should remove it to avoid warnings as support was gone in last release and it does nothing. Users who previously configured outputDirectory directly on the SpotBugs Maven Plugin must configure project.reporting.outputDirectory instead and remove it to avoid errors.

What's Changed

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.4.0...spotbugs-maven-plugin-4.10.4.1

Commits
  • 59f4efc [maven-release-plugin] prepare release spotbugs-maven-plugin-4.10.4.1
  • 1081359 Merge pull request #1519 from spotbugs/renovate/byte-buddy.version
  • 23caeff Merge pull request #1520 from spotbugs/renovate/slf4j-monorepo
  • 8a5d7f0 Update dependency org.slf4j:slf4j-bom to v2.0.19
  • 8be188f Update byte-buddy.version to v1.18.13
  • 742e10c Merge pull request #1518 from hazendaz/master
  • d7f6a56 Cleanup groovy in the trait
  • eda58b6 Cleanup groovy within report generator
  • a518d7b Cleanup xdocs reporter groovy each usage
  • 4c94029 Merge pull request #1517 from hazendaz/master
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the plugins group with 2 updates: [org.apache.maven.plugins:maven-plugin-plugin](https://github.com/apache/maven-plugin-tools) and [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin).


Updates `org.apache.maven.plugins:maven-plugin-plugin` from 3.15.2 to 3.16.0
- [Release notes](https://github.com/apache/maven-plugin-tools/releases)
- [Commits](apache/maven-plugin-tools@maven-plugin-tools-3.15.2...maven-plugin-tools-3.16.0)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.10.4.0 to 4.10.4.1
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.4.0...spotbugs-maven-plugin-4.10.4.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-plugin-plugin
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: plugins
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: plugins
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants