[12.0.x EE10] Bump the build-deps group across 1 directory with 9 updates by dependabot[bot] · Pull Request #15991 · jetty/jetty.project

dependabot · 2026-10-17T00:04:38Z

Bumps the build-deps group with 9 updates in the /jetty-ee10 directory:

Package	From	To
org.codehaus.mojo:versions-maven-plugin	`2.22.0`	`2.23.0`
org.apache.maven:maven-artifact	`3.9.16`	`3.10.0`
org.apache.maven:maven-core	`3.9.16`	`3.10.0`
org.apache.maven:maven-model	`3.9.16`	`3.10.0`
org.apache.maven:maven-plugin-api	`3.9.16`	`3.10.0`
org.apache.maven:maven-model-builder	`3.9.16`	`3.10.0`
org.apache.maven:maven-resolver-api	`3.9.16`	`3.10.0`
org.apache.maven:maven-resolver-provider	`3.9.16`	`3.10.0`
org.apache.maven:maven-settings	`3.9.16`	`3.10.0`
org.apache.maven:maven-core	`3.9.16`	`3.10.0`
org.apache.maven:maven-model	`3.9.16`	`3.10.0`
org.apache.maven:maven-plugin-api	`3.9.16`	`3.10.0`
org.apache.maven:maven-model-builder	`3.9.16`	`3.10.0`
org.apache.maven:maven-resolver-api	`3.9.16`	`3.10.0`
org.apache.maven:maven-resolver-provider	`3.9.16`	`3.10.0`
org.apache.maven:maven-settings	`3.9.16`	`3.10.0`

Updates org.codehaus.mojo:versions-maven-plugin from 2.22.0 to 2.23.0

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.23.0

Versions Maven Plugin 2.23.0 makes the property goals more reliable on multi-module projects and adds a few options people have asked for over the years. It still runs on Java 8 and Maven 3.6.3 or later.

Property updates

update-property and update-properties now update a property that is defined in a reactor parent POM, rather than leaving it untouched (#997).

A property shared by a plugin and an excluded dependency is no longer updated behind the exclude's back (#1199).

The property goals look up all properties in parallel, which shortens runs on POMs with many version properties (#1157).

A dependency whose type or classifier is itself a property, such as ${native.classifier}, no longer breaks the property goals on Maven 3.10 and 4 (#1409).

lock-snapshots and unlock-snapshots now rewrite snapshot versions held in properties, where that is safe (#1269).

Other fixes and additions

versions:set with selected projects (-pl) updates the modules that inherit the version again, on Maven 3 and Maven 4 (#1338, #1339, #1357).

Includes and excludes now filter the candidate versions too, so an excluded version is never proposed as an update (#1378).

display-dependency-updates -Dversions.showNewestPerSegment lists the newest incremental, minor and major version, for example 1.0.3 -> 1.0.9, 1.3.9, 4.0.6 (#1043).

parent-updates-report supports formats, including XML (#975), and the XML property updates report now fills in the current version (#976).

The plugin update reports share their lookup with display-plugin-updates and include plugins declared only in <reporting> (#1250).

Thanks to @wilx and @adityaanikam for their contributions to this release.

🚀 New features and improvements

Resolve property versions in parallel (#1447, fixes #1157) @slachiewicz

Show the newest version of each segment in display-dependency-updates (#1450, fixes #1043) @slachiewicz

Lock and unlock snapshot versions held in properties (#1451, fixes #1269) @slachiewicz

Support the xml format in parent-updates-report (#1446, fixes #975) @slachiewicz

Share plugin discovery and version lookup between display and reports (#1397, fixes #1250) @wilx

🐛 Bug Fixes

Update properties defined in a reactor parent POM (#1448, fixes #997) @slachiewicz

Honor the excludes of modules that use an inherited property (#1449, fixes #1199) @slachiewicz

Restore versions:set propagation with selected projects (#1440, fixes #1338, #1339, #1357) @wilx

Apply excludes and includes to candidate versions, not just the current one (#1441, fixes #1378) @adityaanikam

Report the property's current version in the XML property updates report (#1437, fixes #976) @slachiewicz

Interpolate the type and classifier of dependencies whose version is a property (#1436, fixes #1409) @slachiewicz

📝 Documentation updates

Rewrite the README and add AGENTS.md (#1435) @slachiewicz

👻 Maintenance

Use localhost coordinates instead of real artifacts in the compare-dependencies fixtures (#1443) @slachiewicz

Delete the two integration tests that never ran (#1442) @slachiewicz

Move it-resolve-ranges-001 and it-unlock-snapshots-001 to unit tests (#1439) @slachiewicz

Run use-releases in it-use-releases-issue-134 (#1433) @slachiewicz

Write the remaining verify scripts as assertions (#1431) @slachiewicz

Move the tests of versions-common and versions-enforcer off Hamcrest (#1430) @slachiewicz

... (truncated)

Commits

701cf76 [maven-release-plugin] prepare release 2.23.0
05854d0 Mark the API added since 2.22.0 as @since 2.23.0
a8fac27 Prepare 2.23.0
58a2ea5 Resolve property versions in parallel
4a89885 Update a shared parent POM from one module at a time
2230fbe Update properties defined in a reactor parent POM
b495844 Honor excludes of modules that inherit an update-properties property
3330666 Show the newest version of each segment in display-dependency-updates
fe0be9a Rewrite timestamped and SNAPSHOT versions held in properties in unlock-snapsh...
bfb8f3a Support the xml format in parent-updates-report
Additional commits viewable in compare view

Updates org.apache.maven:maven-artifact from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-core from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-model from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-plugin-api from 3.9.16 to 3.10.0

Release notes

Sourced from org.apache.maven:maven-plugin-api's releases.

3.10.0

🚀 New features and improvements

Maven 3.10.x should use Maven 3.1 validation in strict mode (#1542) @gnodet

Do not depend on maven-resolver-supplier-mvn3 (#13266) @cstamas

[MNG-6797] - Remember if Maven model problems were encountered. (#298) @wilx

feat: add relativePath validation (#12742) @cstamas

Add validation for Plexus-based plugin dependency injection (#12651) @slawekjaranowski

Introduce validation control (#12549) @cstamas

Update to Resolver 2.0.21 (#12504) @cstamas

[MNG-5913] - Allow defining aliases for existing server configurations in settings.xml (#12475) @slawekjaranowski

🐛 Bug Fixes

Issue #13265: let a settings server declare the repository origins its credentials may be used with (#13275) @slawekjaranowski

Backport #13040: treat reactor BOM imports as ProjectSorter edges so -am includes them (#13263) @gnodet

[MNG-8174] - Fix NPE when a property references itself in a plugin configuration (backport #12932) (#12936) @elharo

Fix #13200: publish a complete set from MavenProject.getArtifacts (#13204) @gnodet

Fixes #13135: ensure completeness of the reactor summary, privilege f… (#13173) @rmannibucau

[3.10.x] Fix #13084: sandbox profile activation context for external model builds (#13114) @gnodet

Fix #13100: honor repositories from legitimately-active external model profiles (#13116) @gnodet

Add support for MAVEN_PROJECTBASEDIR substitution in jvm.config (backport of MNG-8598 to 3.10.x) (#13115) @gnodet

Scope server credentials and validate legacy relocation coordinates (#12954) @slachiewicz

Honour configured policy and validate inputs on the legacy compat paths (#12978) @gnodet

Add unit test for #12600 null-guard in forked executions (#12923) @gnodet

Fix: make ProjectIndex thread-safe for parallel builds (backport #12832) (#12927) @gnodet

Fail on misconfigured plugin-requested toolchains (#12616) @wilx

Resolve classified POM artifacts from the reactor in Maven 3.x (#12659) @wilx

[3.10.x] Convert paths for MSYS2 and jvm.config placeholders in bin/mvn (#12567) @gnodet

Preserve dependency scope in plugin artifacts - fix #12497 (#12503) @slawekjaranowski

📝 Documentation updates

docs: document plugin.xml V4 vs V3 (#13261) @gnodet

[maven-3.10.x] Port the site documentation from APT to Markdown (#12712) @slachiewicz

improve doc about deprecating plugin descriptor's requirement (#12555) @hboutemy

Drop mention of Plexus XML (#12482) @cstamas

👻 Maintenance

[3.10.x] maintenance: Align use of profiles (#13274) @cstamas

Remove version from rat directory deployment (#13046) @slawekjaranowski

Update NOTICE file in distribution packages (#13044) @slawekjaranowski

Restrict what a repository-resolved model contributes to the build (#12953) @slachiewicz

Validate coordinates and repository precedence during artifact resolution (#12952) @slachiewicz

[MNG-8129] - Clarify relativePath validation comment (#12966) @gnodet

[12811] Keep plexus-cipher at 2.0: POM note (#12879) @slachiewicz

[3.10.x] Use try-with-resources (#12845) @slachiewicz

... (truncated)

Commits

c43a36b [maven-release-plugin] prepare release maven-3.10.0
095eb17 Fix wrong links.
bec033e Use staged Maven Resolver 2.0.24
b39f8a7 deps: Update to Maven Resolver 2.0.24 (#13271)
ae59501 Issue #13265: let a settings server declare the repository origins its creden...
6ab2433 [3.10.x] maintenance: Align use of profiles (#13274)
f68413c Do not depend on maven-resolver-supplier-mvn3 (#13266)
3a0026c [Backport maven-3.10.x] Fix #11397: treat reactor BOM imports as ProjectSorte...
82a0f20 docs: document plugin.xml V4 vs V3 [Backport maven-3.10.x]
0fb1c8b [MNG-6797] Remember if Maven model problems were encountered. (#298)
Additional commits viewable in compare view

Updates org.apache.maven:maven-model-builder from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-resolver-api from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-resolver-provider from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-settings from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-core from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-model from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-plugin-api from 3.9.16 to 3.10.0

Release notes

Sourced from org.apache.maven:maven-plugin-api's releases.

3.10.0

🚀 New features and improvements

Maven 3.10.x should use Maven 3.1 validation in strict mode (#1542) @gnodet

Do not depend on maven-resolver-supplier-mvn3 (#13266) @cstamas

[MNG-6797] - Remember if Maven model problems were encountered. (#298) @wilx

feat: add relativePath validation (#12742) @cstamas

Add validation for Plexus-based plugin dependency injection (#12651) @slawekjaranowski

Introduce validation control (#12549) @cstamas

Update to Resolver 2.0.21 (#12504) @cstamas

[MNG-5913] - Allow defining aliases for existing server configurations in settings.xml (#12475) @slawekjaranowski

🐛 Bug Fixes

Issue #13265: let a settings server declare the repository origins its credentials may be used with (#13275) @slawekjaranowski

Backport #13040: treat reactor BOM imports as ProjectSorter edges so -am includes them (#13263) @gnodet

[MNG-8174] - Fix NPE when a property references itself in a plugin configuration (backport #12932) (#12936) @elharo

Fix #13200: publish a complete set from MavenProject.getArtifacts (#13204) @gnodet

Fixes #13135: ensure completeness of the reactor summary, privilege f… (#13173) @rmannibucau

[3.10.x] Fix #13084: sandbox profile activation context for external model builds (#13114) @gnodet

Fix #13100: honor repositories from legitimately-active external model profiles (#13116) @gnodet

Add support for MAVEN_PROJECTBASEDIR substitution in jvm.config (backport of MNG-8598 to 3.10.x) (#13115) @gnodet

Scope server credentials and validate legacy relocation coordinates (#12954) @slachiewicz

Honour configured policy and validate inputs on the legacy compat paths (#12978) @gnodet

Add unit test for #12600 null-guard in forked executions (#12923) @gnodet

Fix: make ProjectIndex thread-safe for parallel builds (backport #12832) (#12927) @gnodet

Fail on misconfigured plugin-requested toolchains (#12616) @wilx

Resolve classified POM artifacts from the reactor in Maven 3.x (#12659) @wilx

[3.10.x] Convert paths for MSYS2 and jvm.config placeholders in bin/mvn (#12567) @gnodet

Preserve dependency scope in plugin artifacts - fix #12497 (#12503) @slawekjaranowski

📝 Documentation updates

docs: document plugin.xml V4 vs V3 (#13261) @gnodet

[maven-3.10.x] Port the site documentation from APT to Markdown (#12712) @slachiewicz

improve doc about deprecating plugin descriptor's requirement (#12555) @hboutemy

Drop mention of Plexus XML (#12482) @cstamas

👻 Maintenance

[3.10.x] maintenance: Align use of profiles (#13274) @cstamas

Remove version from rat directory deployment (#13046) @slawekjaranowski

Update NOTICE file in distribution packages (#13044) @slawekjaranowski

Restrict what a repository-resolved model contributes to the build (#12953) @slachiewicz

Validate coordinates and repository precedence during artifact resolution (#12952) @slachiewicz

[MNG-8129] - Clarify relativePath validation comment (#12966) @gnodet

[12811] Keep plexus-cipher at 2.0: POM note (#12879) @slachiewicz

[3.10.x] Use try-with-resources (#12845) @slachiewicz

... (truncated)

Commits

c43a36b [maven-release-plugin] prepare release maven-3.10.0
095eb17 Fix wrong links.
bec033e Use staged Maven Resolver 2.0.24
b39f8a7 deps: Update to Maven Resolver 2.0.24 (#13271)
ae59501 Issue #13265: let a settings server declare the repository origins its creden...
6ab2433 [3.10.x] maintenance: Align use of profiles (#13274)
f68413c Do not depend on maven-resolver-supplier-mvn3 (#13266)
3a0026c [Backport maven-3.10.x] Fix #11397: treat reactor BOM imports as ProjectSorte...
82a0f20 docs: document plugin.xml V4 vs V3 [Backport maven-3.10.x]
0fb1c8b [MNG-6797] Remember if Maven model problems were encountered. (#298)
Additional commits viewable in compare view

Updates org.apache.maven:maven-model-builder from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-resolver-api from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-resolver-provider from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-settings from 3.9.16 to 3.10.0

olamy · 2026-10-17T09:01:04Z

@dependabot rebase

olamy · 2026-10-19T04:00:53Z

@dependabot rebase

olamy · 2026-10-25T10:44:17Z

@dependabot rebase

…ates Bumps the build-deps group with 9 updates in the /jetty-ee10 directory: | Package | From | To | | --- | --- | --- | | [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.22.0` | `2.23.0` | | org.apache.maven:maven-artifact | `3.9.16` | `3.10.0` | | org.apache.maven:maven-core | `3.9.16` | `3.10.0` | | org.apache.maven:maven-model | `3.9.16` | `3.10.0` | | [org.apache.maven:maven-plugin-api](https://github.com/apache/maven) | `3.9.16` | `3.10.0` | | org.apache.maven:maven-model-builder | `3.9.16` | `3.10.0` | | org.apache.maven:maven-resolver-api | `3.9.16` | `3.10.0` | | org.apache.maven:maven-resolver-provider | `3.9.16` | `3.10.0` | | org.apache.maven:maven-settings | `3.9.16` | `3.10.0` | | org.apache.maven:maven-core | `3.9.16` | `3.10.0` | | org.apache.maven:maven-model | `3.9.16` | `3.10.0` | | [org.apache.maven:maven-plugin-api](https://github.com/apache/maven) | `3.9.16` | `3.10.0` | | org.apache.maven:maven-model-builder | `3.9.16` | `3.10.0` | | org.apache.maven:maven-resolver-api | `3.9.16` | `3.10.0` | | org.apache.maven:maven-resolver-provider | `3.9.16` | `3.10.0` | | org.apache.maven:maven-settings | `3.9.16` | `3.10.0` | Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0 - [Release notes](https://github.com/mojohaus/versions/releases) - [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md) - [Commits](mojohaus/versions@2.22.0...2.23.0) Updates `org.apache.maven:maven-artifact` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-core` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-model` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-plugin-api` from 3.9.16 to 3.10.0 - [Release notes](https://github.com/apache/maven/releases) - [Commits](apache/maven@maven-3.9.16...maven-3.10.0) Updates `org.apache.maven:maven-model-builder` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-resolver-api` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-resolver-provider` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-settings` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-core` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-model` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-plugin-api` from 3.9.16 to 3.10.0 - [Release notes](https://github.com/apache/maven/releases) - [Commits](apache/maven@maven-3.9.16...maven-3.10.0) Updates `org.apache.maven:maven-model-builder` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-resolver-api` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-resolver-provider` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-settings` from 3.9.16 to 3.10.0 --- updated-dependencies: - dependency-name: org.apache.maven:maven-artifact dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-core dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-core dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-model dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-model dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-model-builder dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-model-builder dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-plugin-api dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-plugin-api dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-resolver-api dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-resolver-api dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-resolver-provider dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-resolver-provider dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-settings dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.apache.maven:maven-settings dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps - dependency-name: org.codehaus.mojo:versions-maven-plugin dependency-version: 2.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 17, 2026

dependabot Bot force-pushed the dependabot/maven/jetty-ee10/jetty-12.0.x/build-deps-dca1844021 branch from fe0064e to 7cc0061 Compare October 17, 2026 09:03

dependabot Bot force-pushed the dependabot/maven/jetty-ee10/jetty-12.0.x/build-deps-dca1844021 branch from 7cc0061 to 3d6b36d Compare October 19, 2026 04:03

dependabot Bot force-pushed the dependabot/maven/jetty-ee10/jetty-12.0.x/build-deps-dca1844021 branch from 3d6b36d to ac3d26d Compare October 25, 2026 10:47

dependabot Bot force-pushed the dependabot/maven/jetty-ee10/jetty-12.0.x/build-deps-dca1844021 branch from ac3d26d to 44c33bd Compare October 26, 2026 02:25

Navigation Menu

Repository navigation

[12.0.x EE10] Bump the build-deps group across 1 directory with 9 updates - #15991

[12.0.x EE10] Bump the build-deps group across 1 directory with 9 updates#15991
dependabot[bot] wants to merge 1 commit into
jetty-12.0.xfrom
dependabot/maven/jetty-ee10/jetty-12.0.x/build-deps-dca1844021

dependabot Bot commented on behalf of github Oct 17, 2026 •

edited

Loading

Uh oh!

olamy commented Oct 17, 2026

Uh oh!

olamy commented Oct 19, 2026

Uh oh!

olamy commented Oct 25, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.23.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

3.10.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

3.10.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

Uh oh!

olamy commented Oct 17, 2026

Uh oh!

olamy commented Oct 19, 2026

Uh oh!

olamy commented Oct 25, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 17, 2026 •

edited

Loading