Release 3.7.0 · apache/maven-enforcer

⚠️ Deprecated

Name enforcer 4.0.0 as the release that removes the legacy rule API (#1047) @slachiewicz
Deprecate the evaluateBeanshell rule (#1034) @slachiewicz

Improve RequireUpperBoundDeps error message (#1059) @Sambuddha-Jana
[MENFORCER-433] - Add banPropertyPrefix rule to ban Maven properties by configured prefixes (#1039) @juliojgd
Improve RequireUpperBoundDeps error message (#1022) @dhruv9b
[ENFORCER-939] - Support enforcer.skip without a POM (#1021) @dhruv9b

Fix RequireUpperBoundDeps with test-scope mediation (#1064) @efegokdemir
Fix EnforcerRuleCache concurrency across plugin realms (#1057) @efegokdemir
Resolve plugins on copies of the model plugins (#1046) @slachiewicz
[MENFORCER-517] - requireReleaseDeps and bannedDependencies checks now also for optional dependencies (#1025) @schwarfl
fix: avoid misleading legacy warning for unknown rules (#1037) @efegokdemir
requireFilesExist should accept a symbolic link (#1031) @slawekjaranowski
Fix/916 require same versions for managed report plugins (#1024) @dhruv9b
fix: correct enforceBytecodeVersion excludes filtering (#990) @w3lld1
Fix: support custom output for 9 enforcer rules that ignored getMessage() (#1004) @btpka3
RequireFilesExist should accept a file reached through .. (#977) (#1011) @AzazelSensei

Deprecate the evaluateBeanshell rule (#1034) @slachiewicz
javadoc grammar (#1013) @elharo
Restore the common wording on the download page (#1008) @slachiewicz
Use <a id> rather than <a name> for the FAQ anchors (#1010) @slachiewicz
Convert the FAQ from FML to Markdown (#1009) @slachiewicz
Remove obsolete note, clean up typos (#1001) @scordio
Add enforceBytecodeVersion to rules index (#983) @omribz156
Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#989) @potiuk

Ignore SLF4J 2.x in Dependabot (#1062) @slachiewicz
Remove redundant rat configuration (#1061) @slawekjaranowski
Fix ATR project name (#1060) @slawekjaranowski
Use push for PR Automation (#1058) @slawekjaranowski
Use workflow_run for PR check (#1056) @slawekjaranowski
Add project metadata for ATR (#1044) @slawekjaranowski
Use ReaderInputStream builder in RequireTextFileChecksum (#1052) @slawekjaranowski
Use Resolver RemoteRepository in BannedRepositories (#1051) @slawekjaranowski
Add PR check workflow (#1053) @slawekjaranowski
Replace plexus-utils StringUtils with commons-lang3 in enforcer-rules (#1048) @slachiewicz
Skip banDuplicatePomDependencyVersions ITs on Maven 3.10+ (#1043) @slawekjaranowski
Match both log levels in the BUILD FAILURE IT assertions (#1040) @slawekjaranowski
Use junit instead of hibernate-annotations as corrupted-jar IT fixture (#1029) @slawekjaranowski
Use JSR-330 for components injection (#1020) @slawekjaranowski
Add tests for requireJavaVersion five-part JDK strings #980 (#1019) @AzazelSensei
Build artifact stubs locally instead of via the testing harness (#1016) @slachiewicz
Stop dependabot from updating test fixtures (#1014) @slachiewicz
Drop backslash escapes that Markdown does not need (#1007) @slachiewicz
Restore the document metadata dropped when the pages were ported (#1006) @slachiewicz
Port the site documentation from APT to Markdown (#1005) @slachiewicz
Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#989) @potiuk

Bump commons-codec:commons-codec from 1.22.0 to 1.23.0 (#1003, #1054) @dependabot[bot]
Bump mavenVersion from 3.9.15 to 3.10.0 (#984, #1050) @dependabot[bot]
Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 (#1045) @dependabot[bot]
Bump org.apache.maven:maven-parent from 48 to 50 (#988, #1036) @dependabot[bot]
Drop Hamcrest from tests (#1033) @slachiewicz
Ignore mrm-maven-plugin 2.x in Dependabot (#1032) @slachiewicz
Decouple enforceBytecodeVersion ITs from the log4j-api fixture version (#1018) @slachiewicz
Build artifact stubs locally instead of via the testing harness (#1016) @slachiewicz
Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#992) @dependabot[bot]
Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#991) @dependabot[bot]
Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#993) @dependabot[bot]
Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml from 4 to 5 (#994) @dependabot[bot]
Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (#986) @dependabot[bot]