Skip to content

Comments

Bump commons-parent from 53 to 54#219

Merged
garydgregory merged 1 commit intomasterfrom
dependabot/maven/org.apache.commons-commons-parent-54
Sep 22, 2022
Merged

Bump commons-parent from 53 to 54#219
garydgregory merged 1 commit intomasterfrom
dependabot/maven/org.apache.commons-commons-parent-54

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 22, 2022

Bumps commons-parent from 53 to 54.

Changelog

Sourced from commons-parent's changelog.

          Apache Commons Parent 54
              RELEASE NOTES

The Apache Commons Parent team is pleased to announce the release of Apache Commons Parent 54.

The Apache Commons Parent POM provides common settings for all Apache Commons components.

Version 54: SBOMs, drop JDepend, replace FindBugs with SpotBugs, dependency bumps.

Changes in this version include:

New features: o Add .vscode/* to RAT excludes. o Add property commons.javadoc18.java.link. Thanks to Dependabot. o Add JUnit BOM to dependency management. o Add CycloneDX SBOM generation #122. Thanks to Steve Springett. o Add SPDX SBOM generation. Thanks to Gary Gregory.

Changes: o Bump actions/cache from 3 to 3.0.8, #118. Thanks to Gary Gregory, Dependabot. o Bump actions/checkout from 3 to 3.0.2. Thanks to Gary Gregory. o Bump actions/setup-java from 2 to 3. Thanks to Gary Gregory. o Bump apache from 24 to 27 #112, #127. Thanks to Dependabot. o Bump build-helper-maven-plugin from 3.2.0 to 3.3.0 #105. Thanks to Dependabot. o Bump jacoco-maven-plugin from 0.8.7 to 0.8.8. Thanks to Gary Gregory. o Bump spotbugs from 4.5.3 to 4.7.2 #120, #143. Thanks to Gary Gregory, Dependabot. o Bump spotbugs-maven-plugin from 4.5.3.0 to 4.7.2.0, #129, #142. Thanks to Gary Gregory, Dependabot. o Bump maven-project-info-reports-plugin from 3.2.2 to 3.4.1 #107, #128. Thanks to Dependabot. o Bump maven-site-plugin from 3.11.0 to 3.12.1 #108, #132. Fix [WARNING] An issue has occurred with apache-rat-plugin:0.14:rat report, skipping LinkageError org.apache.rat.mp.RatReportMojo.generate(Lorg/codehaus/doxia/sink/Sink;Ljava/util/Locale;)V, Thanks to Dependabot. o Bump maven-bundle-plugin from 5.1.4 to 5.1.8, #111, #126, #133. Thanks to Gary Gregory, Dependabot. o Bump net.sourceforge.pmd:pmd-* from 6.44.0 to 6.49.0, #138. Thanks to Gary Gregory, Dependabot. o Bump maven-jxr-plugin from 3.1.1 to 3.3.0 #110, #136. Thanks to Dependabot. o Bump maven-javadoc-plugin from 3.3.2 to 3.4.1 #114. Thanks to Dependabot, Gary Gregory. o Bump apache-rat from 0.13 to 0.15. Thanks to Gary Gregory. o Bump biz.aQute.bndlib from 6.2.0 to 6.3.1. Thanks to Gary Gregory. o Bump maven-pmd-plugin from 3.16.0 to 3.19.0 #141. Thanks to Gary Gregory, Dependabot. o Bump maven-enforcer-plugin from 3.0.0 to 3.1.0. Thanks to Gary Gregory. o Bump org.apache.maven.wagon:wagon-ssh 3.5.1 to 3.5.2. Thanks to Gary Gregory. o Bump maven-assembly-plugin from 3.3.0 to 3.4.2 #123. Thanks to Dependabot, Gary Gregory. o Bump Surefire 2.22.2 to 3.0.0-M7. Thanks to Gary Gregory. o Bump Failsafe 2.22.2 to 3.0.0-M7. Thanks to Gary Gregory. o Bump animal-sniffer-maven-plugin from 1.21 to 1.22. Thanks to Gary Gregory. o Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0. Thanks to Gary Gregory. o Bump japicmp-maven-plugin from 0.15.7 to 0.16.0 #140. Thanks to Gary Gregory. o Bump versions-maven-plugin from 2.11.0 to 2.12.0 #144. Thanks to Dependabot. o Bump maven-jar-plugin from 3.2.2 to 3.3.0 #147. Thanks to Dependabot.

Removed: o Remove org.codehaus.mojo:jdepend-maven-plugin 2.0; it does not work with current versions of RAT and site plugins. Thanks to Gary Gregory. o Remove FindBugs properties, use SpotBugs instead. Thanks to Gary Gregory.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [commons-parent](https://github.com/apache/commons-parent) from 53 to 54.
- [Release notes](https://github.com/apache/commons-parent/releases)
- [Changelog](https://github.com/apache/commons-parent/blob/master/RELEASE-NOTES.txt)
- [Commits](https://github.com/apache/commons-parent/commits)

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-parent
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 22, 2022
@codecov-commenter
Copy link

codecov-commenter commented Sep 22, 2022

Codecov Report

Merging #219 (9496c53) into master (52201fa) will decrease coverage by 0.02%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##             master     #219      +/-   ##
============================================
- Coverage     59.73%   59.70%   -0.03%     
  Complexity     1783     1783              
============================================
  Files            57       57              
  Lines          7415     7415              
  Branches        421      421              
============================================
- Hits           4429     4427       -2     
- Misses         2769     2771       +2     
  Partials        217      217              
Impacted Files Coverage Δ
...ache/commons/dbcp2/managed/TransactionContext.java 72.22% <0.00%> (-3.71%) ⬇️

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@garydgregory garydgregory merged commit db0fcfc into master Sep 22, 2022
@garydgregory garydgregory deleted the dependabot/maven/org.apache.commons-commons-parent-54 branch September 22, 2022 17:34
garydgregory added a commit that referenced this pull request Sep 22, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants