Bump default maven-dependency-plugin to 3.11.0

[brunoborges]

Summary

Bumps the Maven 3.9.x Super POM default for maven-dependency-plugin from 3.7.0 to 3.11.0.

Rationale

The current default resolves short-prefix invocations such as mvn dependency:add to maven-dependency-plugin:3.7.0. Newer dependency plugin goals, including dependency:add, require a newer plugin version, so updating the Super POM default allows the short-form invocation to work without requiring users to spell out the fully qualified plugin coordinate.

Testing

• git diff --check
• mvn -q -pl maven-model-builder -am -DskipTests package

Checklist

• My pull request addresses just one issue, without pulling in other changes.
• I wrote a pull request description that is detailed enough to understand what the pull request does, how, and why.
• Each commit in the pull request has a meaningful subject line and body.
• I ran mvn verify or an appropriate targeted build.
• I hereby declare this contribution to be licenced under the Apache License Version 2.0, January 2004.

[cstamas]

But please do this for maven-3.10.x as well

[slawekjaranowski]

@cstamas , @brunoborges

But please do this for maven-3.10.x as well

We have drop it from super pom 😄 in 3.10.x

• Remove deprecated plugin management from super POM #11986

By the way each project should manage version of used plugins

[brunoborges]

Clarification after checking the newer maintenance branches: this change is specific to Maven 3.9.x. The maven-3.10.x branch no longer carries these default plugin versions in the Super POM, so there is no corresponding Super POM entry for maven-dependency-plugin to update there.

With Maven 3.10.x, the short form mvn dependency:add resolves the dependency prefix from plugin metadata to org.apache.maven.plugins:maven-dependency-plugin, then resolves the plugin version from repository metadata. Since Maven Central currently advertises maven-dependency-plugin <release>3.11.0</release>, Maven 3.10.x can resolve the canonical short form to 3.11.0 without a Super POM change, subject to normal metadata freshness (for example, -U if a local cache is stale).

[slawekjaranowski]

in 3.9 you can also use short version of calling plugin

mvn dependency:3.11.0:add

[cstamas]

Yup, I totally forgot the attic cleanup. All good!

[brunoborges]

in 3.9 you can also use short version of calling plugin

mvn dependency:3.11.0:add

@slawekjaranowski is this specific to 3.9.x or is it supported in older versions as well?

[brunoborges]

Ok, I tested and dependency:3.11.0:add works on Maven 3.8.8 and later.

[cstamas]

Yup, https://issues.apache.org/jira/browse/MNG-7353