Pull Request Overview
- Opened on October 5, 2026
- Status Open
- Commit count 1 with first commit October 5, 2026
Total Delta
Open Days
Test Delta
How long has this pull request spent in each phase of its lifecycle?
Data pending calculation for pull request
Bump the dependencies group across 1 directory with 24 updates
Bumps the dependencies group with 24 updates in the / directory:
Package
From
To
ch.qos.logback:logback-classic
1.6.3
1.6.5
com.fasterxml.jackson.core:jackson-core
2.22.2
2.22.3
com.fasterxml.jackson.dataformat:jackson-dataformat-xml
2.22.2
2.22.3
com.fasterxml.jackson.core:jackson-databind
2.22.2
2.22.3
com.fasterxml.jackson.dataformat:jackson-dataformat-xml
2.22.2
2.22.3
com.github.dasniko:testcontainers-keycloak
4.3.1
4.4.0
com.google.guava:guava
33.7.1-jre
33.7.2-jre
io.prometheus:prometheus-metrics-bom
1.8.0
1.9.0
org.apache.commons:commons-lang3
3.20.0
3.21.0
org.eclipse.jetty.ee10:jetty-ee10-servlet
12.1.12
12.1.13
org.jooq:jooq
3.21.7
3.21.9
org.jooq:jooq-codegen
3.21.7
3.21.9
org.jooq:jooq-meta
3.21.7
3.21.9
org.jooq:jooq-codegen
3.21.7
3.21.9
org.jooq:jooq-meta
3.21.7
3.21.9
org.slf4j:jul-to-slf4j
2.0.18
2.0.20
org.slf4j:slf4j-api
2.0.18
2.0.20
org.slf4j:slf4j-api
2.0.18
2.0.20
io.github.git-commit-id:git-commit-id-maven-plugin
10.0.0
10.0.1
org.apache.maven.plugins:maven-compiler-plugin
3.15.0
3.16.0
org.codehaus.mojo:build-helper-maven-plugin
3.6.1
3.6.2
org.codehaus.mojo:exec-maven-plugin
3.6.3
3.6.4
com.diffplug.spotless:spotless-maven-plugin
3.10.1
3.10.3
org.apache.maven.plugins:maven-surefire-plugin
3.5.6
3.6.0
org.bouncycastle:bcpkix-jdk18on
1.85
1.86
org.bouncycastle:bcprov-jdk18on
1.85
1.86
org.bouncycastle:bcutil-jdk18on
1.85
1.86
org.bouncycastle:bcprov-jdk18on
1.85
1.86
org.bouncycastle:bcutil-jdk18on
1.85
1.86
org.apache.maven:apache-maven
3.9.16
3.10.0
Updates ch.qos.logback:logback-classic from 1.6.3 to 1.6.5
Release notes
Sourced from ch.qos.logback:logback-classic's releases.
Logback 1.6.5
2026-09-30 Release of logback version 1.6.5
• Fixed a vulnerability CVE-2026-104721 closely related to CVE-2026-19880. The fix in version 1.6.3, which strips forward and backward slashes from
MDCvalues, was insufficient. AnMDCvalue could still contain relative path components such as .., variable references such as /, or characters that are special in file name patterns and email addresses. This latest vulnerability was found and reported by François Martin (GitHub:@martinfrancois, https://github.com/martinfrancois).
MDCBasedDiscriminator, used bySiftingAppender, now rejectsMDCvalues instead of stripping characters from them. An MDC value is rejected if it is empty, if it is longer than 64 characters, if it contains the sequence .., or if it contains any of the following characters:/ \ $ { } | ? * + % , @. When anMDCvalue is rejected, the discriminator returns the value of itsDefaultValueproperty. A warning is emitted for each rejected value. These warnings are rate-limited.• When compression is enabled,
TimeBasedRollingPolicyandSizeAndTimeBasedRollingPolicynow also remove old log files that were never compressed, for example because the application was not running at rollover time. Previously, such files were ignored bymaxHistoryand accumulated indefinitely. This issue was discussed in discussions/1032. SeeTimeBasedRollingPolicy.•
SimpleInvocationGate, deprecated in version 1.6.3, is now marked for removal. UseFixedIntervalInvocationGateinstead.• A bit-wise identical binary of this version can be reproduced by building from source code at commit d1b829dcdb9fd98511c64401beb1419a9c9384aa associated with the tag v_1.6.5. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.
Logback 1.6.4
2026-09-24 Release of logback version 1.6.4
• Variable substitution is again applied to the
scanattribute of the<configuration>element. The scanning refactoring in version 1.5.27 had dropped substitution, so values such as${logback.scan.enabled:-true}were no longer resolved. As before version 1.5.27, an unrecognized non-empty value turns scanning on. The same substitution now applies to the scan attribute of<propertiesConfigurator>. This regression was reported in issues/1065 by vaibhavjain2.•
OutputStreamAppenderandFileAppendernow handle stateful encoders. TheEncoderinterface has a new default method calledisStateful(), which returnsfalse. An encoder that keeps state between calls toencode()can return true. For such encoders, the appender holds its write lock while encoding and while writing, so the output of concurrent appends cannot interleave. Stateless encoders still encode outside the lock, so their performance does not change. Existing encoders need no changes.• Several race conditions in
OutputStreamAppenderandFileAppenderwere fixed. The appender is now marked started and the encoder header is written while the same lock is held, so a concurrent append can no longer write an event before the header. After acquiring the lock, the appender checks again whether it has been stopped, so no event is written after the footer. In prudent mode, FileAppender now encodes and writes each event while holding the lock.• Fixed a data race on the logger count in LoggerContext. Loggers are created under the lock of their parent logger, so loggers with different parents could be created at the same time and increments of the shared counter could be lost. As a result,
LoggerContext.size()could return a value lower than the actual number of loggers. The counter is now anAtomicInteger. This issue was reported in issues/1038 by hcantunc. The fix was contributed in PR #1055 by seonwoo_jung.•
TimeBasedRollingPolicynow supports half-day periods. Date patterns with the AM/PM marker, for example %d{yyyy-MM-dd-a}, used to be detected as daily and rolled over only at midnight. They now roll over at both 00:00 and 12:00. This issue was reported in issues/976 by shakthifuture. The fix was contributed in PR #1051 by seonwoo_jung. SeeTimeBasedRollingPolicy.• If
org.jline.jansi.AnsiConsolecannot be found on the class path,JansiConsoleAppendernow emits warnings that explain how to add org.jline:jansi-core and then writes to the plain console stream. See codes.html#missingJlineJansi.• The unused
ch.qos.logback.classic.util.LogbackMDCAdapterSimpleclass was removed.LogbackMDCAdapterremains the default MDC adapter.• A bit-wise identical binary of this version can be reproduced by building from source code at commit 07d291ca0d280bc5da934ec9ff5f1da634fd7937 associated with the tag v_1.6.4. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.
Full Changelog: https://github.com/qos-ch/logback/compare/v_1.6.3...v_1.6.4
Commits
-
d1b829dprepare release 1.6.5 -
065b9b2enhance protectin against mischievious MDC values in MDCBasedDiscriminator -
b69beabcomplete commit in relation to discussion_1032 -
7266c0bfix intermittently failing SocketAppenderMessageLossTest rest condition -
a633bb0fix intermittently failing SocketAppenderMessageLossTest rest condition -
2bc5bccrenamed tbrp and eclosingTBRP, other minor changes -
2cd8762fix typo in AGENTS.md -
647846cfix errors when running tests under intellij IDEA -
1048917removed ConsoleCharsetPropertyDefiner.java -
39b5002added 'since' and 'forRemoval' attributes to SimpleInvocationGate@Deprecatio... - Additional commits viewable in compare view
Updates com.fasterxml.jackson.core:jackson-core from 2.22.2 to 2.22.3
Commits
-
eee4b9e[maven-release-plugin] prepare release jackson-core-2.22.3 -
31ee7ebPrep for 2.22.3 release -
9fef13fMerge branch '2.21' into 2.22 -
9160f40Post-release dep version bump -
1169cb6[maven-release-plugin] prepare for next development iteration -
b33f455[maven-release-plugin] prepare release jackson-core-2.21.7 -
ce8b7dcPrep for 2.21.7 release -
b69555eMerge branch '2.21' into 2.22 -
53df608Merge branch '2.20' into 2.21 -
892f757Merge branch '2.19' into 2.20 - Additional commits viewable in compare view
Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.22.2 to 2.22.3
Commits
-
6a183d0[maven-release-plugin] prepare release jackson-dataformat-xml-2.22.3 -
45290b7Prep for 2.22.3 release -
0e9bd25Merge branch '2.21' into 2.22 -
4dc38dfPost-release dep version bump -
bac5610[maven-release-plugin] prepare for next development iteration -
a7cfc97[maven-release-plugin] prepare release jackson-dataformat-xml-2.21.7 -
bf55a64Prep for 2.21.7 release -
d515706Merge branch '2.21' into 2.22 -
7a536e5Merge branch '2.20' into 2.21 -
79037ddMerge branch '2.19' into 2.20 - Additional commits viewable in compare view
Updates com.fasterxml.jackson.core:jackson-databind from 2.22.2 to 2.22.3
Commits
-
4385c5f[maven-release-plugin] prepare release jackson-databind-2.22.3 -
ccb4fd0Prep for 2.22.3 release -
2958412Merge branch '2.21' into 2.22 -
1215b94Post-release dep version bump -
1f0df62[maven-release-plugin] prepare for next development iteration -
13a9ff4[maven-release-plugin] prepare release jackson-databind-2.21.7 -
d168f96Prep for 2.21.7 release -
eaf5c76Merge branch '2.21' into 2.22 -
e05ef4cMerge branch '2.20' into 2.21 -
f6d4000Merge branch '2.19' into 2.20 - Additional commits viewable in compare view
Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.22.2 to 2.22.3
Commits
-
6a183d0[maven-release-plugin] prepare release jackson-dataformat-xml-2.22.3 -
45290b7Prep for 2.22.3 release -
0e9bd25Merge branch '2.21' into 2.22 -
4dc38dfPost-release dep version bump -
bac5610[maven-release-plugin] prepare for next development iteration -
a7cfc97[maven-release-plugin] prepare release jackson-dataformat-xml-2.21.7 -
bf55a64Prep for 2.21.7 release -
d515706Merge branch '2.21' into 2.22 -
7a536e5Merge branch '2.20' into 2.21 -
79037ddMerge branch '2.19' into 2.20 - Additional commits viewable in compare view
Updates com.github.dasniko:testcontainers-keycloak from 4.3.1 to 4.4.0
Release notes
Sourced from com.github.dasniko:testcontainers-keycloak's releases.
v4.4.0
What's Changed
- Default Keycloak server version 26.8
- chore(deps-dev): bump junit-jupiter.version from 6.1.1 to 6.1.2 by
@dependabot[bot] in dasniko/testcontainers-keycloak#314- chore(deps-dev): bump io.rest-assured:rest-assured from 6.0.0 to 6.0.1 by
@dependabot[bot] in dasniko/testcontainers-keycloak#315- chore(deps-dev): bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 by
@dependabot[bot] in dasniko/testcontainers-keycloak#316- more endpoint methods by
@dasnikoin dasniko/testcontainers-keycloak#318- chore: bump actions/setup-java from 5 to 6 by
@dependabot[bot] in dasniko/testcontainers-keycloak#324- chore(deps): bump org.apache.maven:apache-maven from 3.9.12 to 3.9.16 by
@dependabot[bot] in dasniko/testcontainers-keycloak#322- chore(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 by
@dependabot[bot] in dasniko/testcontainers-keycloak#326- chore(deps-dev): bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 by
@dependabot[bot] in dasniko/testcontainers-keycloak#325- chore(deps-dev): bump junit-jupiter.version from 6.1.2 to 6.1.3 by
@dependabot[bot] in dasniko/testcontainers-keycloak#320- chore(deps-dev): bump jackson.version from 2.22.1 to 2.22.2 by
@dependabot[bot] in dasniko/testcontainers-keycloak#321- chore(deps-dev): bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.3 by
@dependabot[bot] in dasniko/testcontainers-keycloak#323- chore(deps): bump org.projectlombok:lombok from 1.18.46 to 1.18.48 by
@dependabot[bot] in dasniko/testcontainers-keycloak#327- chore(deps): bump org.slf4j:slf4j-api from 2.0.18 to 2.0.19 by
@dependabot[bot] in dasniko/testcontainers-keycloak#328- chore(deps-dev): bump com.fasterxml.jackson.core:jackson-databind from 2.22.2 to 2.22.3 by
@dependabot[bot] in dasniko/testcontainers-keycloak#329- chore(deps-dev): bump ch.qos.logback:logback-classic from 1.6.3 to 1.6.4 by
@dependabot[bot] in dasniko/testcontainers-keycloak#331- chore(deps): bump org.slf4j:slf4j-api from 2.0.19 to 2.0.20 by
@dependabot[bot] in dasniko/testcontainers-keycloak#330Full Changelog: https://github.com/dasniko/testcontainers-keycloak/compare/v4.3.1...v4.4.0
Commits
-
ca9ed73Update Keycloak version to 26.8 in README and versions documentation -
68405b9prepare for 4.4 release by updating keycloak dependencies and version -
006b005chore(deps): bump org.slf4j:slf4j-api from 2.0.19 to 2.0.20 (#330) -
26474e0chore(deps-dev): bump ch.qos.logback:logback-classic from 1.6.3 to 1.6.4 (#331) -
83fedcbchore(deps-dev): bump com.fasterxml.jackson.core:jackson-databind (#329) -
e5e4f27chore(deps): bump org.slf4j:slf4j-api from 2.0.18 to 2.0.19 (#328) -
c97838dchore(deps): bump org.projectlombok:lombok from 1.18.46 to 1.18.48 (#327) -
6cfdd65chore(deps-dev): bump ch.qos.logback:logback-classic (#323) -
f2b4568chore(deps-dev): bump jackson.version from 2.22.1 to 2.22.2 (#321) -
e61e60dchore(deps-dev): bump junit-jupiter.version from 6.1.2 to 6.1.3 (#320) - Additional commits viewable in compare view
Updates com.google.guava:guava from 33.7.1-jre to 33.7.2-jre
Release notes
Sourced from com.google.guava:guava's releases.
33.7.2
Maven
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>33.7.2-jre</version>
<!-- or, for Android: -->
<version>33.7.2-android</version>
</dependency>Jar files
Guava requires
one runtime dependency,
which you can download here:
Javadoc
JDiff
Changelog
collect: ChangedMapMaker,CompactHashMap, andCompactHashSetdeserialization to avoid eagerly allocating as much memory as a serialization payload requests. (a0d0c36432)
Commits
- See full diff in compare view
Updates io.prometheus:prometheus-metrics-bom from 1.8.0 to 1.9.0
Release notes
Sourced from io.prometheus:prometheus-metrics-bom's releases.
v1.9.0
1.9.0 (2026-09-16)Features
Bug Fixes
- avoid protobuf debug reflection in native images (#2251) (7f899e7)
- bound HTTPServer request resources (#2333) (33ec556)
- bound observation buffering during collection (#2336) (43788f5)
- bound scrape query parameters (#2334) (27e1912)
ci: skip benchmark report for skipped runs (#2422) (40eddb0)- clarify benchmark regression report verdicts (#2394) (e5fa067)
deps: update dependency com.google.guava:guava to v33.7.0-jre (#2387) (bf0db49)
deps: update dependency io.dropwizard.metrics:metrics-core to v4.2.40 (#2432) (dd88326)
deps: update dependency io.dropwizard.metrics5:metrics-core to v5.0.8 (#2433) (42f3c8a)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.29.0-alpha (#2235) (cf9f702)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2328) (1ca2716)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2330) (07623c1)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2401) (6c26619)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2402) (ac0d68a)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2409) (5eea652)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2410) (0bcef89)
deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.23 (#2241) (a017f80)
deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.24 (#2294) (63967bd)
deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.25 (#2389) (92f8344)
deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.26 (#2477) (05146c0)
deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.1 (#2399) (a0b0880)
deps: update jetty monorepo to v12.1.11 (#2279) (4dc54da)
deps: update jetty monorepo to v12.1.12 (#2371) (08967e0)
deps: update jetty monorepo to v12.1.13 (#2459) (b217f05)
deps: update junit-framework monorepo to v6.1.2 (#2300) (5966d1d)
deps: update junit-framework monorepo to v6.1.3 (#2374) (d1ade52)
deps: update otel.instrumentation.version (#2236) (158230d)
deps: update protobuf (#2400) (e2db1ed)
deps: update protobuf (#2438) (8ad6fa8)
deps: update protobuf to v4.35.1 (#2221) (cf17073)- disable micrometer compat build cache (#2457) (6a40eda)
- drop +Inf bound from OpenTelemetry classic histogram boundaries (#2458) (a3bce9a)
exposition: export internal package for OSGi resolution (#2415) (28b503d)
httpserver: make scrape error responses secure and configurable (f6d9df5)- include counter names in negative value errors (#2315) (ea8f935)
- include license files in release source jars (#2250) (08cf925), closes #2216
- keep late observations out of subsequent collection buffers (#2471) (d78b149)
- keep PR title check required after rebases (#2414) (e3d4c3b)
- prevent buffer stripe index overflow (#2331) (b6cd000)
<!-- raw HTML omitted -->
... (truncated)
Changelog
Sourced from io.prometheus:prometheus-metrics-bom's changelog.
1.9.0 (2026-09-16)Features
Bug Fixes
- avoid protobuf debug reflection in native images (#2251) (7f899e7)
- bound HTTPServer request resources (#2333) (33ec556)
- bound observation buffering during collection (#2336) (43788f5)
- bound scrape query parameters (#2334) (27e1912)
ci: skip benchmark report for skipped runs (#2422) (40eddb0)- clarify benchmark regression report verdicts (#2394) (e5fa067)
deps: update dependency com.google.guava:guava to v33.7.0-jre (#2387) (bf0db49)
deps: update dependency io.dropwizard.metrics:metrics-core to v4.2.40 (#2432) (dd88326)
deps: update dependency io.dropwizard.metrics5:metrics-core to v5.0.8 (#2433) (42f3c8a)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.29.0-alpha (#2235) (cf9f702)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2328) (1ca2716)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2330) (07623c1)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2401) (6c26619)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2402) (ac0d68a)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2409) (5eea652)
deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2410) (0bcef89)
deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.23 (#2241) (a017f80)
deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.24 (#2294) (63967bd)
deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.25 (#2389) (92f8344)
deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.26 (#2477) (05146c0)
deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.1 (#2399) (a0b0880)
deps: update jetty monorepo to v12.1.11 (#2279) (4dc54da)
deps: update jetty monorepo to v12.1.12 (#2371) (08967e0)
deps: update jetty monorepo to v12.1.13 (#2459) (b217f05)
deps: update junit-framework monorepo to v6.1.2 (#2300) (5966d1d)
deps: update junit-framework monorepo to v6.1.3 (#2374) (d1ade52)
deps: update otel.instrumentation.version (#2236) (158230d)
deps: update protobuf (#2400) (e2db1ed)
deps: update protobuf (#2438) (8ad6fa8)
deps: update protobuf to v4.35.1 (#2221) (cf17073)- disable micrometer compat build cache (#2457) (6a40eda)
- drop +Inf bound from OpenTelemetry classic histogram boundaries (#2458) (a3bce9a)
exposition: export internal package for OSGi resolution (#2415) (28b503d)
httpserver: make scrape error responses secure and configurable (f6d9df5)- include counter names in negative value errors (#2315) (ea8f935)
- include license files in release source jars (#2250) (08cf925), closes #2216
- keep late observations out of subsequent collection buffers (#2471) (d78b149)
- keep PR title check required after rebases (#2414) (e3d4c3b)
- prevent buffer stripe index overflow (#2331) (b6cd000)
- redact invalid configuration values (#2335) (7e7e533)
<!-- raw HTML omitted -->
... (truncated)
Commits
-
71e821cchore(main): release 1.9.0 (#2237) -
d78b149fix: keep late observations out of subsequent collection buffers (#2471) -
085263bperf: avoid allocating a mapping lambda on every labelValues() call (#2442) -
9ec38b7chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.161... -
05146c0fix(deps): update dependency org.apache.tomcat.embed:tomcat-embed-core to v11... -
59ca1f0test: focus PR benchmarks on client_java and measure label lookups (#2468) -
398d087fix: show uncertainty in benchmark comparisons (#2476) -
8722230perf: skip snapshot rebuild in mergeDuplicates when names are unique (#2441) -
ea8f935fix: include counter names in negative value errors (#2315) -
fba2007test: verify buffer recovery after snapshot failures (#2446) - Additional commits viewable in compare view
Updates org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0
Updates org.eclipse.jetty.ee10:jetty-ee10-servlet from 12.1.12 to 12.1.13
Updates org.jooq:jooq from 3.21.7 to 3.21.9
Updates org.jooq:jooq-codegen from 3.21.7 to 3.21.9
Updates org.jooq:jooq-meta from 3.21.7 to 3.21.9
Updates org.jooq:jooq-codegen from 3.21.7 to 3.21.9
Updates org.jooq:jooq-meta from 3.21.7 to 3.21.9
Updates org.slf4j:jul-to-slf4j from 2.0.18 to 2.0.20
Updates org.slf4j:slf4j-api from 2.0.18 to 2.0.20
Updates org.slf4j:slf4j-api from 2.0.18 to 2.0.20
Updates io.github.git-commit-id:git-commit-id-maven-plugin from 10.0.0 to 10.0.1
Release notes
Sourced from io.github.git-commit-id:git-commit-id-maven-plugin's releases.
Version 10.0.1 is finally there and includes various bug-fixes and improvements :-)
What's Changed
Dependencies used by the plugin
git-commit-id/git-commit-id-maven-plugin#915: bump commons-io:commons-io from 2.21.0 to 2.22.0
git-commit-id/git-commit-id-maven-plugin#933: bump org.jspecify:jspecify from 1.0.0 to 1.0.1
git-commit-id/git-commit-id-maven-plugin#919: bump org.slf4j:slf4j-simple from 2.0.17 to 2.0.18 (test)- bump git-commit-id-plugin-core from 6.2.0 to 6.2.1 (refs https://github.com/git-commit-id/git-commit-id-plugin-core/releases/tag/v6.2.1, fix CVE-2026-59638 by making use of org.bouncycastle:bcpkix-jdk18on 1.85)
Github Action
git-commit-id/git-commit-id-maven-plugin#924: bump actions/cache from 5 to 6
git-commit-id/git-commit-id-maven-plugin#923: bump actions/checkout from 6 to 7
git-commit-id/git-commit-id-maven-plugin#935: bump actions/setup-java from 5 to 6Maven Plugins used by the plugin
git-commit-id/git-commit-id-maven-plugin#921: bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0
git-commit-id/git-commit-id-maven-plugin#918: bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3
git-commit-id/git-commit-id-maven-plugin#925: bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6
git-commit-id/git-commit-id-maven-plugin#927: bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15
git-commit-id/git-commit-id-maven-plugin#928: bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0
git-commit-id/git-commit-id-maven-plugin#930: bump org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0
git-commit-id/git-commit-id-maven-plugin#934: bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1Getting the latest release
The plugin is available from Maven Central (see here), so you don't have to configure any additional repositories to use this plugin. All you need to do is to configure it inside your project as dependency:
<dependency>
<groupId>io.github.git-commit-id</groupId>
<artifactId>git-commit-id-maven-plugin</artifactId>
<version>10.0.1</version>
</dependency>Getting the latest snapshot (build automatically)
If you can't wait for the next release, you can also get the latest snapshot version from sonatype, that is being deployed automatically by github actions:
<pluginRepositories>
<pluginRepository>
<id>sonatype-snapshots</id>
<name>Sonatype Snapshots</name>
<url>https://s01.oss.sonatype.org/content/repositories/snapshots/</url>
</pluginRepository>
</pluginRepositories>Even though the github actions will only deploy a new snapshot once all tests have finished, it is recommended to rely on the released and more stable version.
Known Issues / Limitations:
- This plugin is unfortunately not working with Heroku which is due to the fact how Heroku works. In summary Heroku does not copy over the .git-repository but in order to determine the git properties this plugin relies on the fact that it has access to the git-repository. A somewhat workaround to get some information is outlined in ktoso/maven-git-commit-id-plugin#279
- Using maven's plugin prefix resolution (e.g.
mvn com.test.plugins:myPlugin:myMojo) might result in unresolved properties even with<injectAllReactorProjects>true</injectAllReactorProjects>. Please refer to git-commit-id/maven-git-commit-id-plugin#287 or git-commit-id/maven-git-commit-id-plugin#413 for details and potential workarounds
<!-- raw HTML omitted -->
... (truncated)
Commits
-
73542f2Bump version: 10.0.0 → 10.0.1 -
7e95a7eRevert "add tests for java 27" -
dae217cadd tests for java 27 -
dc5b90brun tests with the latest maven versions 3.9.9 -> 3.9.16; 4.0.0-rc-5 -> 4.0.0... -
28f14aabump git-commit-id-plugin-core from 6.2.0 to 6.2.1 (refs https://github.com/g... -
dcf31abMerge pull request #934 from git-commit-id/dependabot/maven/org.apache.maven.... -
e4e48baMerge pull request #933 from git-commit-id/dependabot/maven/org.jspecify-jspe... - <a href="https://github.com/git-commit-id/git-commit-id-maven-plugin/commit/ef3c33685a3e16...
Description has been truncated
No comments have been left on this PR.