feat(deps): update maven to 3.10.0 (renovate) #205

Merged
jorge.bornhausen merged 1 commit from renovate/maven-3.x into main 2026-10-08 01:27:43 +00:00
Member

This PR contains the following updates:

Package Change Age Confidence
maven (source) 3.9.16 → 3.10.0 age confidence

Release Notes

apache/maven (maven)

v3.10.0: 3.10.0

Compare Source

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - "after 9am and before 4pm every weekday" in timezone Europe/Zurich.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [maven](https://maven.apache.org/) ([source](https://github.com/apache/maven)) | `3.9.16` → `3.10.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.apache.maven:apache-maven/3.10.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.apache.maven:apache-maven/3.9.16/3.10.0?slim=true) | --- ### Release Notes <details> <summary>apache/maven (maven)</summary> ### [`v3.10.0`](https://github.com/apache/maven/releases/tag/maven-3.10.0): 3.10.0 [Compare Source](https://github.com/apache/maven/compare/maven-3.9.16...maven-3.10.0) <!-- Optional: add a release summary here --> #### 🚀 New features and improvements - Maven 3.10.x should use Maven 3.1 validation in strict mode ([#&#8203;1542](https://github.com/apache/maven/pull/1542)) [@&#8203;gnodet](https://github.com/gnodet) - Do not depend on maven-resolver-supplier-mvn3 ([#&#8203;13266](https://github.com/apache/maven/pull/13266)) [@&#8203;cstamas](https://github.com/cstamas) - [\[MNG-6797\]](https://issues.apache.org/jira/browse/MNG-6797) - Remember if Maven model problems were encountered. ([#&#8203;298](https://github.com/apache/maven/pull/298)) [@&#8203;wilx](https://github.com/wilx) - feat: add relativePath validation ([#&#8203;12742](https://github.com/apache/maven/pull/12742)) [@&#8203;cstamas](https://github.com/cstamas) - Add validation for Plexus-based plugin dependency injection ([#&#8203;12651](https://github.com/apache/maven/pull/12651)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Introduce validation control ([#&#8203;12549](https://github.com/apache/maven/pull/12549)) [@&#8203;cstamas](https://github.com/cstamas) - Update to Resolver 2.0.21 ([#&#8203;12504](https://github.com/apache/maven/pull/12504)) [@&#8203;cstamas](https://github.com/cstamas) - [\[MNG-5913\]](https://issues.apache.org/jira/browse/MNG-5913) - Allow defining aliases for existing server configurations in settings.xml ([#&#8203;12475](https://github.com/apache/maven/pull/12475)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 🐛 Bug Fixes - Issue [#&#8203;13265](https://github.com/apache/maven/issues/13265): let a settings server declare the repository origins its credentials may be used with ([#&#8203;13275](https://github.com/apache/maven/pull/13275)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Backport [#&#8203;13040](https://github.com/apache/maven/issues/13040): treat reactor BOM imports as ProjectSorter edges so -am includes them ([#&#8203;13263](https://github.com/apache/maven/pull/13263)) [@&#8203;gnodet](https://github.com/gnodet) - [\[MNG-8174\]](https://issues.apache.org/jira/browse/MNG-8174) - Fix NPE when a property references itself in a plugin configuration (backport [#&#8203;12932](https://github.com/apache/maven/issues/12932)) ([#&#8203;12936](https://github.com/apache/maven/pull/12936)) [@&#8203;elharo](https://github.com/elharo) - Fix [#&#8203;13200](https://github.com/apache/maven/issues/13200): publish a complete set from MavenProject.getArtifacts ([#&#8203;13204](https://github.com/apache/maven/pull/13204)) [@&#8203;gnodet](https://github.com/gnodet) - Fixes [#&#8203;13135](https://github.com/apache/maven/issues/13135): ensure completeness of the reactor summary, privilege f… ([#&#8203;13173](https://github.com/apache/maven/pull/13173)) [@&#8203;rmannibucau](https://github.com/rmannibucau) - \[3.10.x] Fix [#&#8203;13084](https://github.com/apache/maven/issues/13084): sandbox profile activation context for external model builds ([#&#8203;13114](https://github.com/apache/maven/pull/13114)) [@&#8203;gnodet](https://github.com/gnodet) - Fix [#&#8203;13100](https://github.com/apache/maven/issues/13100): honor repositories from legitimately-active external model profiles ([#&#8203;13116](https://github.com/apache/maven/pull/13116)) [@&#8203;gnodet](https://github.com/gnodet) - Add support for MAVEN\_PROJECTBASEDIR substitution in jvm.config (backport of MNG-8598 to 3.10.x) ([#&#8203;13115](https://github.com/apache/maven/pull/13115)) [@&#8203;gnodet](https://github.com/gnodet) - Scope server credentials and validate legacy relocation coordinates ([#&#8203;12954](https://github.com/apache/maven/pull/12954)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Honour configured policy and validate inputs on the legacy compat paths ([#&#8203;12978](https://github.com/apache/maven/pull/12978)) [@&#8203;gnodet](https://github.com/gnodet) - Add unit test for [#&#8203;12600](https://github.com/apache/maven/issues/12600) null-guard in forked executions ([#&#8203;12923](https://github.com/apache/maven/pull/12923)) [@&#8203;gnodet](https://github.com/gnodet) - Fix: make ProjectIndex thread-safe for parallel builds (backport [#&#8203;12832](https://github.com/apache/maven/issues/12832)) ([#&#8203;12927](https://github.com/apache/maven/pull/12927)) [@&#8203;gnodet](https://github.com/gnodet) - Fail on misconfigured plugin-requested toolchains ([#&#8203;12616](https://github.com/apache/maven/pull/12616)) [@&#8203;wilx](https://github.com/wilx) - Resolve classified POM artifacts from the reactor in Maven 3.x ([#&#8203;12659](https://github.com/apache/maven/pull/12659)) [@&#8203;wilx](https://github.com/wilx) - \[3.10.x] Convert paths for MSYS2 and jvm.config placeholders in bin/mvn ([#&#8203;12567](https://github.com/apache/maven/pull/12567)) [@&#8203;gnodet](https://github.com/gnodet) - Preserve dependency scope in plugin artifacts - fix [#&#8203;12497](https://github.com/apache/maven/issues/12497) ([#&#8203;12503](https://github.com/apache/maven/pull/12503)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 📝 Documentation updates - docs: document plugin.xml V4 vs V3 ([#&#8203;13261](https://github.com/apache/maven/pull/13261)) [@&#8203;gnodet](https://github.com/gnodet) - \[maven-3.10.x] Port the site documentation from APT to Markdown ([#&#8203;12712](https://github.com/apache/maven/pull/12712)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - improve doc about deprecating plugin descriptor's requirement ([#&#8203;12555](https://github.com/apache/maven/pull/12555)) [@&#8203;hboutemy](https://github.com/hboutemy) - Drop mention of Plexus XML ([#&#8203;12482](https://github.com/apache/maven/pull/12482)) [@&#8203;cstamas](https://github.com/cstamas) #### 👻 Maintenance - \[3.10.x] maintenance: Align use of profiles ([#&#8203;13274](https://github.com/apache/maven/pull/13274)) [@&#8203;cstamas](https://github.com/cstamas) - Remove version from rat directory deployment ([#&#8203;13046](https://github.com/apache/maven/pull/13046)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Update NOTICE file in distribution packages ([#&#8203;13044](https://github.com/apache/maven/pull/13044)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Restrict what a repository-resolved model contributes to the build ([#&#8203;12953](https://github.com/apache/maven/pull/12953)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Validate coordinates and repository precedence during artifact resolution ([#&#8203;12952](https://github.com/apache/maven/pull/12952)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - [\[MNG-8129\]](https://issues.apache.org/jira/browse/MNG-8129) - Clarify relativePath validation comment ([#&#8203;12966](https://github.com/apache/maven/pull/12966)) [@&#8203;gnodet](https://github.com/gnodet) - \[12811] Keep plexus-cipher at 2.0: POM note ([#&#8203;12879](https://github.com/apache/maven/pull/12879)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - \[3.10.x] Use try-with-resources ([#&#8203;12845](https://github.com/apache/maven/pull/12845)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Migrate the embedder-test-project fixture to JUnit 5 ([#&#8203;12717](https://github.com/apache/maven/pull/12717)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - \[maven-3.10.x] Port the site documentation from APT to Markdown ([#&#8203;12712](https://github.com/apache/maven/pull/12712)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Migrate legacy plugin Javadoc annotations in Maven Embedder tests ([#&#8203;12708](https://github.com/apache/maven/pull/12708)) [@&#8203;wilx](https://github.com/wilx) - Replace custom `GraphLogger` with `DependencyGraphDumper` in dependency resolution ([#&#8203;12639](https://github.com/apache/maven/pull/12639)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Fix UT: do not use checkout directly ([#&#8203;12483](https://github.com/apache/maven/pull/12483)) [@&#8203;cstamas](https://github.com/cstamas) #### 🔧 Build - Replace nicoulaj checksum plugin with maveniverse checksum plugin ([#&#8203;13053](https://github.com/apache/maven/pull/13053)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - 3.10.x Build by JDK 25, limit JDK to min and max LTS in build ([#&#8203;12848](https://github.com/apache/maven/pull/12848)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) - Update Maven version to 3.10.0-rc-1 in GH configuration ([#&#8203;12847](https://github.com/apache/maven/pull/12847)) [@&#8203;slawekjaranowski](https://github.com/slawekjaranowski) #### 📦 Dependency updates - \[3.10.x] deps: Update to Maven Resolver 2.0.24 ([#&#8203;13271](https://github.com/apache/maven/pull/13271)) [@&#8203;cstamas](https://github.com/cstamas) - build: bump xmlunitVersion from 2.13.0 to 2.14.0 ([#&#8203;13237](https://github.com/apache/maven/pull/13237)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build: bump org.apache.maven:maven-parent from 49 to 50 ([#&#8203;13242](https://github.com/apache/maven/pull/13242)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Resolver 2.0.23 and validation cleanup ([#&#8203;13078](https://github.com/apache/maven/pull/13078)) [@&#8203;cstamas](https://github.com/cstamas) - Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 ([#&#8203;13134](https://github.com/apache/maven/pull/13134)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.3.0 to 3.3.1 ([#&#8203;13132](https://github.com/apache/maven/pull/13132)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 ([#&#8203;13130](https://github.com/apache/maven/pull/13130)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.27 to 1.28 ([#&#8203;13129](https://github.com/apache/maven/pull/13129)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/setup-java from 6.0.0 to 6.0.1 ([#&#8203;13110](https://github.com/apache/maven/pull/13110)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump jlineVersion from 3.30.16 to 3.30.17 ([#&#8203;13111](https://github.com/apache/maven/pull/13111)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump slf4jVersion from 2.0.18 to 2.0.19 ([#&#8203;13074](https://github.com/apache/maven/pull/13074)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.modello:modello-maven-plugin from 2.8.0 to 2.8.1 ([#&#8203;13028](https://github.com/apache/maven/pull/13028)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - \[12811] Keep plexus-cipher at 2.0: POM note ([#&#8203;12879](https://github.com/apache/maven/pull/12879)) [@&#8203;slachiewicz](https://github.com/slachiewicz) - Bump actions/setup-java from 5.7.0 to 6.0.0 ([#&#8203;12860](https://github.com/apache/maven/pull/12860)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Deps: Bump to Resolver 2.0.22 ([#&#8203;12803](https://github.com/apache/maven/pull/12803)) [@&#8203;cstamas](https://github.com/cstamas) - Bump resolverVersion from 2.0.21 to 2.0.22 ([#&#8203;12823](https://github.com/apache/maven/pull/12823)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0 ([#&#8203;12825](https://github.com/apache/maven/pull/12825)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump com.google.guava:guava from 33.7.0-jre to 33.7.1-jre ([#&#8203;12796](https://github.com/apache/maven/pull/12796)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.plexus:plexus-utils from 3.6.1 to 3.6.2 ([#&#8203;12795](https://github.com/apache/maven/pull/12795)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.plexus:plexus-testing from 2.1.0 to 2.2.0 ([#&#8203;12794](https://github.com/apache/maven/pull/12794)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.modello:modello-maven-plugin from 2.7.0 to 2.8.0 ([#&#8203;12793](https://github.com/apache/maven/pull/12793)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump org.codehaus.plexus:plexus-classworlds from 2.12.0 to 2.12.1 ([#&#8203;12792](https://github.com/apache/maven/pull/12792)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump com.google.guava:guava from 33.6.0-jre to 33.7.0-jre ([#&#8203;12776](https://github.com/apache/maven/pull/12776)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump xmlunitVersion from 2.12.0 to 2.13.0 ([#&#8203;12673](https://github.com/apache/maven/pull/12673)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/setup-java from 5.6.0 to 5.7.0 ([#&#8203;12666](https://github.com/apache/maven/pull/12666)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 ([#&#8203;12496](https://github.com/apache/maven/pull/12496)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Deps: Bump to Eclipse Sisu 1.1.0 ([#&#8203;12547](https://github.com/apache/maven/pull/12547)) [@&#8203;cstamas](https://github.com/cstamas) - Bump resolverVersion from 2.0.21-SNAPSHOT to 2.0.21 ([#&#8203;12545](https://github.com/apache/maven/pull/12545)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump jlineVersion from 3.30.15 to 3.30.16 ([#&#8203;12518](https://github.com/apache/maven/pull/12518)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/checkout from 7.0.0 to 7.0.1 ([#&#8203;12514](https://github.com/apache/maven/pull/12514)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Update to Resolver 2.0.21 ([#&#8203;12504](https://github.com/apache/maven/pull/12504)) [@&#8203;cstamas](https://github.com/cstamas) - Bump actions/setup-java from 5.5.0 to 5.6.0 ([#&#8203;12501](https://github.com/apache/maven/pull/12501)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 ([#&#8203;12495](https://github.com/apache/maven/pull/12495)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - Bump actions/setup-java from 5.4.0 to 5.5.0 ([#&#8203;12439](https://github.com/apache/maven/pull/12439)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "after 9am and before 4pm every weekday" in timezone Europe/Zurich. 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zMy4yIiwidXBkYXRlZEluVmVyIjoiNDMuMzMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwcy9qYXZhIiwicmVub3ZhdGUiLCJ0eXBlL21pbm9yIl19-->
feat(deps): update maven to 3.10.0 (renovate)
All checks were successful
Build / build (pull_request) Successful in 1m2s
b71633b820
renovate-bot force-pushed renovate/maven-3.x from b71633b820
All checks were successful
Build / build (pull_request) Successful in 1m2s
to b91e001472
All checks were successful
Build / build (pull_request) Successful in 1m29s
2026-10-08 00:20:37 +00:00
Compare
jorge.bornhausen deleted branch renovate/maven-3.x 2026-10-08 01:27:43 +00:00
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
phoenix-oss/open-service-broker!205
No description provided.