Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 15, 2023

Bumps org.apache.maven:maven-core from 3.3.9 to 3.8.1.

Commits
  • 05c21c6 [maven-release-plugin] prepare release maven-3.8.1
  • d295dc3 [MNG-7128] keep blocked attribute from mirrors in artifact repositories
  • a469068 next version in branch 3.8.x is 3.8.1-SNAPSHOT
  • dad8a3e [maven-release-plugin] prepare for next development iteration
  • 6aa1f4a [maven-release-plugin] prepare release maven-3.8.0
  • 907d53a [MNG-7118] block HTTP repositories by default
  • 899465a [MNG-7117] add support for blocked mirror
  • fa79cb2 [MNG-7116] add support for mirrorOf external:http:*
  • e5f6634 use Maven Resolver 1.6.2
  • 09f77da [MNG-7119] Upgrade Maven Wagon to 3.4.3
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 15, 2023
@rohanKanojia
Copy link
Member

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/maven/org.apache.maven-maven-core-3.8.1 branch from fba7fb2 to a4b226a Compare September 28, 2023 07:14
@rohanKanojia
Copy link
Member

@dependabot rebase

Bumps [org.apache.maven:maven-core](https://github.com/apache/maven) from 3.3.9 to 3.8.1.
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.3.9...maven-3.8.1)

---
updated-dependencies:
- dependency-name: org.apache.maven:maven-core
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/maven/org.apache.maven-maven-core-3.8.1 branch from a4b226a to 10eeba0 Compare October 23, 2023 07:58
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

warning The version of Java (11.0.20.1) you have used to run this analysis is deprecated and we will stop accepting it soon. Please update to at least Java 17.
Read more here

@rohanKanojia rohanKanojia merged commit 267e467 into master Jan 7, 2024
@rohanKanojia rohanKanojia deleted the dependabot/maven/org.apache.maven-maven-core-3.8.1 branch January 7, 2024 05:07
@rohanKanojia
Copy link
Member

This change seems to be breaking compatibility for maven versions before 3.8.1 .

[ERROR] Failed to execute goal io.fabric8:docker-maven-plugin:0.44-SNAPSHOT:build (default-cli) on project dmp-buildx-build-push-testing: The plugin io.fabric8:docker-maven-plugin:0.44-SNAPSHOT requires Maven version 3.8.1 -> [Help 1]
[ERROR] 

We need to revert this change.

@rohanKanojia
Copy link
Member

It's breaking for older maven versions because maven.version is being used in preqreuisites as well:

<prerequisites>
<maven>${maven.version}</maven>
</prerequisites>

We need to add a separate minimum-maven.version property to handle this.

rohanKanojia added a commit to rohanKanojia/docker-maven-plugin that referenced this pull request Feb 10, 2024
…sion

We bumped `maven.version` in fabric8io#1702 to `3.8.1` that broke compatibility
with maven < 3.8.1 . Add a property `minimum.maven.version` to keep
minimum supported maven version.

Signed-off-by: Rohan Kumar <[email protected]>
rohanKanojia added a commit that referenced this pull request Feb 11, 2024
…sion

We bumped `maven.version` in #1702 to `3.8.1` that broke compatibility
with maven < 3.8.1 . Add a property `minimum.maven.version` to keep
minimum supported maven version.

Signed-off-by: Rohan Kumar <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant