Version 6.2.1 is finally there and includes various bug-fixes and improvements.
The change set is based on the comparison since the last release version v6.2.0 VS v6.2.1
New Features / Bug-Fixes:
The main key-aspects that have been improved or being worked on are the following:
- release to fix CVE-2026-59638, given the plugin operates (mostly) offline the impact of this is unclear, still want to make CVE pipelines happy.
Plugin Dependencies (directly used/needed by the plugin)
- bump org.bouncycastle:bcpkix-jdk18on from 1.81 to 1.85 for CVE-2026-59638. Thanks to @craftmaster2190 in #299
GitHub Action Updates
- #295: bump actions/cache from 5 to 6
- #294: bump actions/checkout from 6 to 7
- #300: bump actions/setup-java from 5 to 6
Getting the latest release
The plugin is available from Maven Central (see here), so you don't have to configure any additional repositories to use this plugin. All you need to do is to configure it inside your project as dependency:
<dependency>
<groupId>io.github.git-commit-id</groupId>
<artifactId>git-commit-id-plugin-core</artifactId>
<version>6.2.1</version>
</dependency>Getting the latest snapshot (build automatically)
If you can't wait for the next release, you can also get the latest snapshot version from sonatype, that is being deployed automatically by github actions:
<pluginRepositories>
<pluginRepository>
<id>sonatype-snapshots</id>
<name>Sonatype Snapshots</name>
<url>https://s01.oss.sonatype.org/content/repositories/snapshots/</url>
</pluginRepository>
</pluginRepositories>Even though the github actions will only deploy a new snapshot once all tests have finished, it is recommended to rely on the released and more stable version.
Known Issues / Limitations:
- N/A
Reporting Problems
If you find any problem with this plugin, feel free to report it here
Full Changelog:
