Bump the hyracks-dependencies group in /hyracks-fullstack with 13 updates by dependabot[bot] · Pull Request #54 · apache/asterixdb

dependabot · 2026-11-13T01:10:58Z

Bumps the hyracks-dependencies group in /hyracks-fullstack with 13 updates:

Package	From	To
org.apache:apache	`18`	`40`
org.apache.commons:commons-lang3	`3.21.0`	`3.22.0`
org.slf4j:slf4j-simple	`1.7.36`	`2.0.20`
org.apache.maven.plugins:maven-enforcer-plugin	`3.0.0-M3`	`3.7.0`
org.codehaus.mojo:versions-maven-plugin	`2.23.0`	`2.24.0`
org.apache.maven.plugins:maven-surefire-plugin	`3.6.0`	`3.6.1`
org.apache.maven.plugins:maven-failsafe-plugin	`2.22.2`	`3.6.1`
org.codehaus.mojo:build-helper-maven-plugin	`3.6.2`	`3.7.0`
org.apache.maven.plugins:maven-gpg-plugin	`1.6`	`3.2.8`
org.jacoco:jacoco-maven-plugin	`0.8.15`	`0.8.16`
org.codehaus.plexus:plexus-utils	`3.6.2`	`4.1.0`
com.github.jnr:jnr-posix	`3.2.5`	`3.2.8`
com.github.jnr:jnr-ffi	`2.3.4`	`2.3.7`

Updates org.apache:apache from 18 to 40

Release notes

Sourced from org.apache:apache's releases.

40

💥 Breaking changes

Replace nicoulaj checksum plugin with maveniverse checksum plugin (#599) @slawekjaranowski

#586: Use RAT0.18 and remove commons-lang3 configuration for JDK25 (#587) @ottlinger

Property version.maven-surefire was removed in apache/maven-apache-parent#588, should be replaced by version.maven-surefire-plugin, version.maven-failsafe-plugin or version.maven-surefire-report-plugin

🚀 New features and improvements

Fix several version property issues (#588) @ctubbsii

📝 Documentation updates

Update documentation for push-to-atr profile (#613) @slawekjaranowski

Restore the common wording on the download page (#596) @slachiewicz

👻 Maintenance

Add local maven configuration for ATR project name override (#614) @slawekjaranowski

Remove custom name-template for release-drafter (#604) @slawekjaranowski

Port the site documentation from APT to Markdown (#595) @slachiewicz

📦 Dependency updates

Bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0 (#612) @dependabot[bot]

Bump org.apache.maven.plugins:maven-install-plugin from 3.1.4 to 3.2.0 (#611) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugin-tools from 3.15.2 to 3.16.0 (#610) @slawekjaranowski

Bump surefire-plugin, failsafe-plugin, surefire-report-plugin from 3.5.6 to 3.6.0 (#605) @slawekjaranowski

Bump org.apache.tooling:atr-maven-plugin from 1.0.0-alpha-1 to 1.0.0-beta-1 (#598) @dependabot[bot]

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 (#600) @dependabot[bot]

#586: Use RAT0.18 and remove commons-lang3 configuration for JDK25 (#587) @ottlinger

Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 (#594) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#591) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#593) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml from 4 to 5 (#592) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#590) @dependabot[bot]

Bump org.apache.maven.plugins:maven-help-plugin from 3.5.1 to 3.5.2 (#589) @dependabot[bot]

39

see push-to-atr profile integration documentation for more details: https://maven.apache.org/pom/asf/#the-push-to-atr-profile

🚀 New features and improvements

add push-to-atr profile (#584) @hboutemy

👻 Maintenance

... (truncated)

Commits

See full diff in compare view

Updates org.apache.commons:commons-lang3 from 3.21.0 to 3.22.0

Updates org.slf4j:slf4j-simple from 1.7.36 to 2.0.20

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.0.0-M3 to 3.7.0

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.7.0

⚠️ Deprecated

Name enforcer 4.0.0 as the release that removes the legacy rule API (#1047) @slachiewicz

Deprecate the evaluateBeanshell rule (#1034) @slachiewicz

🚀 New features and improvements

Improve RequireUpperBoundDeps error message (#1059) @Sambuddha-Jana

[MENFORCER-433] - Add banPropertyPrefix rule to ban Maven properties by configured prefixes (#1039) @juliojgd

Improve RequireUpperBoundDeps error message (#1022) @dhruv9b

[ENFORCER-939] - Support enforcer.skip without a POM (#1021) @dhruv9b

🐛 Bug Fixes

Fix RequireUpperBoundDeps with test-scope mediation (#1064) @efegokdemir

Fix EnforcerRuleCache concurrency across plugin realms (#1057) @efegokdemir

Resolve plugins on copies of the model plugins (#1046) @slachiewicz

[MENFORCER-517] - requireReleaseDeps and bannedDependencies checks now also for optional dependencies (#1025) @schwarfl

fix: avoid misleading legacy warning for unknown rules (#1037) @efegokdemir

requireFilesExist should accept a symbolic link (#1031) @slawekjaranowski

Fix/916 require same versions for managed report plugins (#1024) @dhruv9b

fix: correct enforceBytecodeVersion excludes filtering (#990) @w3lld1

Fix: support custom output for 9 enforcer rules that ignored getMessage() (#1004) @btpka3

RequireFilesExist should accept a file reached through .. (#977) (#1011) @AzazelSensei

📝 Documentation updates

Deprecate the evaluateBeanshell rule (#1034) @slachiewicz

javadoc grammar (#1013) @elharo

Restore the common wording on the download page (#1008) @slachiewicz

Use <a id> rather than <a name> for the FAQ anchors (#1010) @slachiewicz

Convert the FAQ from FML to Markdown (#1009) @slachiewicz

Remove obsolete note, clean up typos (#1001) @scordio

Add enforceBytecodeVersion to rules index (#983) @omribz156

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#989) @potiuk

👻 Maintenance

Ignore SLF4J 2.x in Dependabot (#1062) @slachiewicz

Remove redundant rat configuration (#1061) @slawekjaranowski

Fix ATR project name (#1060) @slawekjaranowski

Use push for PR Automation (#1058) @slawekjaranowski

Use workflow_run for PR check (#1056) @slawekjaranowski

Add project metadata for ATR (#1044) @slawekjaranowski

Use ReaderInputStream builder in RequireTextFileChecksum (#1052) @slawekjaranowski

Use Resolver RemoteRepository in BannedRepositories (#1051) @slawekjaranowski

Add PR check workflow (#1053) @slawekjaranowski

Replace plexus-utils StringUtils with commons-lang3 in enforcer-rules (#1048) @slachiewicz

... (truncated)

Commits

465ebf2 [maven-release-plugin] prepare release enforcer-3.7.0
b24b05c Fix test-scope mediation in RequireUpperBoundDeps
2b75dd3 Improve RequireUpperBoundDeps error message (#1059)
b519cd0 Fix EnforcerRuleCache concurrency across plugin realms (#1055)
f622234 Ignore SLF4J 2.x in Dependabot
5a9ebca Remove redundant rat configuration
e8512d0 Fix ATR project name
08605b2 Use push for PR Automation
fbe1ae5 Use workflow_run for PR check (#1056)
b1d59aa Bump commons-codec:commons-codec from 1.22.1 to 1.23.0
Additional commits viewable in compare view

Updates org.codehaus.mojo:versions-maven-plugin from 2.23.0 to 2.24.0

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.24.0

Versions Maven Plugin 2.24.0 improves compatibility with modern Maven distributions when loading remote rulesUri configurations, refreshes its HTML report rendering and documentation site, and raises the minimum Maven version. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

Bundled file and http(s) Wagons for rulesUri: wagon-file and wagon-http are now bundled with the plugin so loading version comparison rules via <rulesUri> (http://, https://, or file://) works out of the box on Maven distributions (including Maven 4) that no longer bundle Wagon (#1474).

Plain-text status indicators in HTML reports: The dependency, plugin, and property update reports now render status indicators as clear text instead of relying on external Doxia skin icon images (#1472).

Documentation site improvements: Added a top-level landing page and navigation bar to the documentation site and clarified the XMLStreamException FAQ (#1454, #1465).

🚨 Removed

Require Maven 3.9.0 (#1453) @slachiewicz

🚀 New features and improvements

Show report status as text instead of skin images (#1472) @slachiewicz

📝 Documentation updates

Fix typo in XMLStreamException documentation (#1465) @ngocnhan-tran1996

Use the MojoHaus license header on the site pages (#1455) @slachiewicz

Add a landing page and a top bar to the site (#1454) @slachiewicz

👻 Maintenance

Bundle the file and HTTP wagons used to load rulesUri (#1474) @slachiewicz

Declare the Maven artifacts the code uses (#1467) @slachiewicz

Clean up declared dependencies (#1466) @slachiewicz

Keep Dependabot on SLF4J 1.7.x (#1460) @slachiewicz

Remove the stale bot (#1458) @slachiewicz

Keep Dependabot on Maven 3.9.x (#1456) @slachiewicz

🔧 Build

Keep Dependabot on Resolver 1.9.x (#1471) @slachiewicz

Run the fail-fast build with verify instead of install (#1462) @slachiewicz

Use the runners' cached Temurin JDKs in CI (#1459) @slachiewicz

📦 Dependency updates

Stay on maven-reporting-api 4.0.0 (#1473) @slachiewicz

Bump the maven group across 1 directory with 7 updates (#1469) @dependabot[bot]

Bump the maven group with 4 updates (#1463) @dependabot[bot]

Bump org.codehaus.woodstox:stax2-api from 4.3.1 to 4.3.2 in the maven group (#1461) @dependabot[bot]

Bump commons-codec:commons-codec from 1.22.1 to 1.23.0 in the maven group (#1457) @dependabot[bot]

Thanks to @ngocnhan-tran1996 and @slachiewicz.

Full changelog

Commits

e0ddc13 [maven-release-plugin] prepare release 2.24.0
7e87ce7 Bundle the file and HTTP wagons used to load rulesUri
772084b Stay on maven-reporting-api 4.0.0
77333ef Show report status as text instead of skin images
d93a39c Bump the maven group across 1 directory with 7 updates
964c3c3 Fix typo in XMLStreamException documentation (#1465)
c16875a Keep Dependabot on Resolver 1.9.x
0fec0d6 Declare the Maven artifacts the code uses
cd430b1 Clean up declared dependencies
44b3f44 Bump the maven group with 4 updates
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

Group module path heuristics in a single class ModulePathJpmsArguments (#3541) @olamy

Fix out of memory errors with big JUnit 4 suites (#3511) (#3515) @olamy

[SUREFIRE-3459] - Allow opting out of StackWalker stack capture (#3493) @goutamadwant

🐛 Bug Fixes

Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538) @olamy

Fix groups and excludedGroups being ignored when TestNG is on the classpath (#3534) @olamy

Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530) @olamy

Fix groups and excludedGroups for Spock and Jupiter tests when JUnit 4 is on the classpath (#3468) (#3503) (#3517) @olamy

Issue #3462 TestNG extension onStart/onFinish called too many times (#3470) @olamy

Fix forked JVM hanging forever when the exit timeout fires (#3500), Possible NPE if a thread ends while building the thread dump (#3506) @olamy

Stop rewriting the class report for every nested suite (#3511) (#3514) @olamy

Fix IllegalAccessError in the forked JVM on Java 8 and 11 (#3511) (#3513) @olamy

[SUREFIRE-3460] - Don't NPE when StackWalkerStrategy inits with a null TCCL (#3464) @kalayciburak

[SUREFIRE-3465] - Match includes/excludes the way the scanner does (#3466) @orion0616

[Issue-3456] Apply systemPropertyVariables before the fork initializes networking (#3467) @joseluisll

Fix inverted filter predicate in ForkStarter#readTestClassNames (#3453) @slachiewicz

📝 Documentation updates

Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @olamy

Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @olamy

Drop the Source Xref menu items (#3479) @slachiewicz

👻 Maintenance

Use push for PR Automation (#3536) @slawekjaranowski

Use workflow_run for PR check (#3531) @slawekjaranowski

Add project metadata for ATR (#3522) @slawekjaranowski

Add PR check workflow (#3507) @slawekjaranowski

Fix ForkCountIT failing on Windows with Maven 3.10.0 (#3509) @olamy

Fix ITs for Maven 3.10.0 (#3508) @slawekjaranowski

Migrate surefire-its fixture from maven-verifier to maven-executor (#3484) @slachiewicz

Port the IT scripts from BeanShell to Groovy (#3480) @slachiewicz

Drop the Source Xref menu items (#3479) @slachiewicz

Implement getOutputPath() and deprecate getOutputName() (#3469) @slachiewicz

🔧 Build

Drop the Maven 3.9.0 CI job (#3525) @slachiewicz

Fix ForkCountIT failing on Windows with Maven 3.10.0 (#3509) @olamy

fix test due to uneven Maven API migration, Maven 4 build (#3502) @sebtiem

Keep Dependabot off JUnit 6 (#3497) @slachiewicz

Verify the plugin on Maven 3.9.0 (#3478) @slachiewicz

... (truncated)

Commits

5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
ab7ce2f Bump org.testng:testng (#3539)
ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
cc69b3c Use push for PR Automation
b119019 Install the JUnit Platform provider for the ITs (#3535)
2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
1e4f6b9 Use workflow_run for PR check (#3531)
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 2.22.2 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.6.1

🚀 New features and improvements

Group module path heuristics in a single class ModulePathJpmsArguments (#3541) @olamy

Fix out of memory errors with big JUnit 4 suites (#3511) (#3515) @olamy

[SUREFIRE-3459] - Allow opting out of StackWalker stack capture (#3493) @goutamadwant

🐛 Bug Fixes

Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538) @olamy

Fix groups and excludedGroups being ignored when TestNG is on the classpath (#3534) @olamy

Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530) @olamy

Fix groups and excludedGroups for Spock and Jupiter tests when JUnit 4 is on the classpath (#3468) (#3503) (#3517) @olamy

Issue #3462 TestNG extension onStart/onFinish called too many times (#3470) @olamy

Fix forked JVM hanging forever when the exit timeout fires (#3500), Possible NPE if a thread ends while building the thread dump (#3506) @olamy

Stop rewriting the class report for every nested suite (#3511) (#3514) @olamy

Fix IllegalAccessError in the forked JVM on Java 8 and 11 (#3511) (#3513) @olamy

[SUREFIRE-3460] - Don't NPE when StackWalkerStrategy inits with a null TCCL (#3464) @kalayciburak

[SUREFIRE-3465] - Match includes/excludes the way the scanner does (#3466) @orion0616

[Issue-3456] Apply systemPropertyVariables before the fork initializes networking (#3467) @joseluisll

Fix inverted filter predicate in ForkStarter#readTestClassNames (#3453) @slachiewicz

📝 Documentation updates

Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @olamy

Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @olamy

Drop the Source Xref menu items (#3479) @slachiewicz

👻 Maintenance

Use push for PR Automation (#3536) @slawekjaranowski

Use workflow_run for PR check (#3531) @slawekjaranowski

Add project metadata for ATR (#3522) @slawekjaranowski

Add PR check workflow (#3507) @slawekjaranowski

Fix ForkCountIT failing on Windows with Maven 3.10.0 (#3509) @olamy

Fix ITs for Maven 3.10.0 (#3508) @slawekjaranowski

Migrate surefire-its fixture from maven-verifier to maven-executor (#3484) @slachiewicz

Port the IT scripts from BeanShell to Groovy (#3480) @slachiewicz

Drop the Source Xref menu items (#3479) @slachiewicz

Implement getOutputPath() and deprecate getOutputName() (#3469) @slachiewicz

🔧 Build

Drop the Maven 3.9.0 CI job (#3525) @slachiewicz

Fix ForkCountIT failing on Windows with Maven 3.10.0 (#3509) @olamy

fix test due to uneven Maven API migration, Maven 4 build (#3502) @sebtiem

Keep Dependabot off JUnit 6 (#3497) @slachiewicz

Verify the plugin on Maven 3.9.0 (#3478) @slachiewicz

... (truncated)

Commits

5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
ab7ce2f Bump org.testng:testng (#3539)
ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
cc69b3c Use push for PR Automation
b119019 Install the JUnit Platform provider for the ITs (#3535)
2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
1e4f6b9 Use workflow_run for PR check (#3531)
Additional commits viewable in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.6.2 to 3.7.0

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.7.0

Build Helper Maven Plugin 3.7.0 adds system time zone support to timestamp-property, literal replacement support to regex-property and regex-properties, and updates the remove-project-artifact deprecation guidance. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

System time zone in timestamp-property: Setting <timeZone>system</timeZone> (case-insensitive) formats the timestamp using the JVM's default time zone instead of GMT, working with both current and build time sources (#250).

Literal replacement mode in regex-property and regex-properties: Setting <replacementLiteral>true</replacementLiteral> treats backslashes (\) and dollar signs ($) in <replacement> as literal characters rather than regex group references or escapes — particularly useful when substituting Windows file paths such as ${project.build.directory} (#249).

Updated remove-project-artifact deprecation guidance: The documentation for the deprecated remove-project-artifact goal now points users to Maven Resolver's split local repository feature (-Daether.enhancedLocalRepository.split) as the modern alternative (#268, #270).

🚨 Removed

Require Maven 3.9.0 (#257) @slachiewicz

🚀 New features and improvements

Support the system time zone in timestamp-property (#250) @wilx

Add literal replacement support to regex property goals (#249) @wilx

📝 Documentation updates

Point the remove-project-artifact deprecation at split local repositories (#268, #270) @slachiewicz

Add AGENTS.md (#263) @slachiewicz

👻 Maintenance

Run the surefire IT fixture on JUnit 5 (#269) @slachiewicz

Replace deprecated @Component with JSR 330 injection (#267) @slachiewicz

Check the reserved ports' guarantees, not exact numbers (#265) @slachiewicz

Apply the JUnit 5 best practices to the tests (#261) @slachiewicz

Keep Dependabot on Maven 3.9.x (#259) @slachiewicz

Write the regex and timestamp verify scripts as assertions (#258) @slachiewicz

Port the IT scripts from BeanShell to Groovy (#251) @slachiewicz

🔧 Build

Preload the lifecycle plugins of the Central-backed ITs (#264) @slachiewicz

Use the runners' cached Temurin JDKs in CI (#262) @slachiewicz

Run CI on Maven 4 (#260) @slachiewicz

Assign merged pull requests to the release milestone (#255) @slachiewicz

Point the released-version ITs at the URL the build uses for central (#256) @slachiewicz

Run one integration test per CPU core (#254) @slachiewicz

Check dependencies monthly and group the updates (#253) @slachiewicz

Run fewer JDKs on macOS and Windows and the ITs in parallel (#252) @slachiewicz

Thanks to @slachiewicz and @wilx.

Full changelog

Commits

5eee186 [maven-release-plugin] prepare release 3.7.0
b506bd9 Point the remove-project-artifact deprecation at split local repositories (#268)
acf3610 Support the system time zone in timestamp-property
7690ae3 Add literal replacement support to regex property goals
8dc41fd Run the IT fixtures on JUnit 5
f881bba Replace deprecated @Component with JSR 330 injection
bb5f11c Declare the Maven artifacts the code uses
74eb3f5 Use push for PR Automation
28d7ed1 Check the reserved ports' guarantees, not exact numbers
7459cd8 Build through the MojoHaus workflow
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-gpg-plugin from 1.6 to 3.2.8

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.8

🐛 Bug Fixes

Make empty classifier null (not empty string) (#287) @cstamas

📝 Documentation updates

[MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#129) @Bukama

Describe how to prime a specific GPG key (#128) @kwin

👻 Maintenance

Enable GitHub issues (#134) @Bukama

Prefer Guice constructor injection (#126) @elharo

📦 Dependency updates

Update parent POM to 45 (#284) @cstamas

Bump bouncycastleVersion from 1.78.1 to 1.80 (#127) @dependabot[bot]

Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133) @dependabot[bot]

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125) @dependabot[bot]

Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1 (#131) @dependabot[bot]

Bump commons-io:commons-io from 2.17.0 to 2.18.0 (#124) @dependabot[bot]

3.2.7

Fixes a lingering issue affecting whole 3.2.x lineage, that resulted in "bad passphrase" on Windows OS with GPG signer (see MGPG-136 for details).

What's Changed

[MGPG-136] Windows passphrase corruption by @cstamas in apache/maven-gpg-plugin#120

Bump com.kohlschutter.junixsocket:junixsocket-core from 2.10.0 to 2.10.1 by @dependabot in apache/maven-gpg-plugin#121

Bump commons-io:commons-io from 2.16.1 to 2.17.0 by @dependabot in apache/maven-gpg-plugin#119

Full Changelog: apache/maven-gpg-plugin@maven-gpg-plugin-3.2.6...maven-gpg-plugin-3.2.7

3.2.6

Release Notes - Maven GPG Plugin - Version 3.2.6

... (truncated)

Commits

8a46455 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.8
7012821 Fix issueManagement, ciManagement system and url
a9a8c84 Make empty classifier null (not empty string) (#287)
a8368b0 Add .mvn
f0e45e0 Update parent POM to 45 (#284)
cb1236c Bump bouncycastleVersion from 1.78.1 to 1.80 (#127)
5377a10 Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133)
8b63932 Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125)

Bumps the hyracks-dependencies group in /hyracks-fullstack with 13 updates: | Package | From | To | | --- | --- | --- | | [org.apache:apache](https://github.com/apache/maven-apache-parent) | `18` | `40` | | org.apache.commons:commons-lang3 | `3.21.0` | `3.22.0` | | org.slf4j:slf4j-simple | `1.7.36` | `2.0.20` | | [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.0.0-M3` | `3.7.0` | | [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.23.0` | `2.24.0` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` | | [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `2.22.2` | `3.6.1` | | [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.6.2` | `3.7.0` | | [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `1.6` | `3.2.8` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.15` | `0.8.16` | | [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `3.6.2` | `4.1.0` | | [com.github.jnr:jnr-posix](https://github.com/jnr/jnr-posix) | `3.2.5` | `3.2.8` | | [com.github.jnr:jnr-ffi](https://github.com/jnr/jnr-ffi) | `2.3.4` | `2.3.7` | Updates `org.apache:apache` from 18 to 40 - [Release notes](https://github.com/apache/maven-apache-parent/releases) - [Commits](https://github.com/apache/maven-apache-parent/commits) Updates `org.apache.commons:commons-lang3` from 3.21.0 to 3.22.0 Updates `org.slf4j:slf4j-simple` from 1.7.36 to 2.0.20 Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.0.0-M3 to 3.7.0 - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](apache/maven-enforcer@enforcer-3.0.0-M3...enforcer-3.7.0) Updates `org.codehaus.mojo:versions-maven-plugin` from 2.23.0 to 2.24.0 - [Release notes](https://github.com/mojohaus/versions/releases) - [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md) - [Commits](mojohaus/versions@2.23.0...2.24.0) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1) Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 2.22.2 to 3.6.1 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-2.22.2...surefire-3.6.1) Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.2 to 3.7.0 - [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases) - [Commits](mojohaus/build-helper-maven-plugin@3.6.2...3.7.0) Updates `org.apache.maven.plugins:maven-gpg-plugin` from 1.6 to 3.2.8 - [Release notes](https://github.com/apache/maven-gpg-plugin/releases) - [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-1.6...maven-gpg-plugin-3.2.8) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.15 to 0.8.16 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.15...v0.8.16) Updates `org.codehaus.plexus:plexus-utils` from 3.6.2 to 4.1.0 - [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases) - [Commits](codehaus-plexus/plexus-utils@plexus-utils-3.6.2...plexus-utils-4.1.0) Updates `com.github.jnr:jnr-posix` from 3.2.5 to 3.2.8 - [Release notes](https://github.com/jnr/jnr-posix/releases) - [Commits](jnr/jnr-posix@jnr-posix-3.2.5...jnr-posix-3.2.8) Updates `com.github.jnr:jnr-ffi` from 2.3.4 to 2.3.7 - [Release notes](https://github.com/jnr/jnr-ffi/releases) - [Commits](jnr/jnr-ffi@2.3.4...jnr-ffi-2.3.7) --- updated-dependencies: - dependency-name: org.apache:apache dependency-version: '40' dependency-type: direct:production update-type: version-update:semver-major dependency-group: hyracks-dependencies - dependency-name: org.apache.commons:commons-lang3 dependency-version: 3.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: hyracks-dependencies - dependency-name: org.slf4j:slf4j-simple dependency-version: 2.0.20 dependency-type: direct:development update-type: version-update:semver-major dependency-group: hyracks-dependencies - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: hyracks-dependencies - dependency-name: org.codehaus.mojo:versions-maven-plugin dependency-version: 2.24.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: hyracks-dependencies - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: hyracks-dependencies - dependency-name: org.apache.maven.plugins:maven-failsafe-plugin dependency-version: 3.6.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: hyracks-dependencies - dependency-name: org.codehaus.mojo:build-helper-maven-plugin dependency-version: 3.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: hyracks-dependencies - dependency-name: org.apache.maven.plugins:maven-gpg-plugin dependency-version: 3.2.8 dependency-type: direct:development update-type: version-update:semver-major dependency-group: hyracks-dependencies - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: hyracks-dependencies - dependency-name: org.codehaus.plexus:plexus-utils dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: hyracks-dependencies - dependency-name: com.github.jnr:jnr-posix dependency-version: 3.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: hyracks-dependencies - dependency-name: com.github.jnr:jnr-ffi dependency-version: 2.3.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: hyracks-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 13, 2026

Navigation Menu

Repository navigation

Bump the hyracks-dependencies group in /hyracks-fullstack with 13 updates - #54

Bump the hyracks-dependencies group in /hyracks-fullstack with 13 updates#54
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/hyracks-fullstack/hyracks-dependencies-66096007fb

dependabot Bot commented on behalf of github Nov 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

40

💥 Breaking changes

🚀 New features and improvements

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

39

🚀 New features and improvements

👻 Maintenance

3.7.0

⚠️ Deprecated

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

2.24.0

✨ Highlights

🚨 Removed

🚀 New features and improvements

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

3.7.0

✨ Highlights

🚨 Removed

🚀 New features and improvements

📝 Documentation updates

👻 Maintenance

🔧 Build

3.2.8

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.2.7

What's Changed

3.2.6

Release Notes - Maven GPG Plugin - Version 3.2.6

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Nov 13, 2026 •

edited

Loading