🚀 New features and improvements

• Cache projectsUsingPlugin to fix O(N²) reactor scan (#444) @slawekjaranowski

🐛 Bug Fixes

• chore: harden embedded-POM trust boundary in install:install-file (3.x backport) (#447) @gnodet

📝 Documentation updates

• Restore the common wording on the download page (#438) @slachiewicz
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#416) @potiuk

👻 Maintenance

• Use JSR-330 for component injection (#442) @slawekjaranowski
• Restore the document metadata dropped when the pages were ported (#433) @slachiewicz
• Port the site documentation from APT to Markdown (#431) @slachiewicz
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#416) @potiuk
• Fix ITs for Maven 3.10.x (#409) @slawekjaranowski
• Migration to JUnit 5 - avoid using AbstractMojoTestCase (#396) @slawekjaranowski
• Bump m-invoker-p to 3.9.1 (#376) @slachiewicz

📦 Dependency updates

• Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#418) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#417) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#419) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#413) @dependabot[bot]
• Bump mavenVersion from 3.9.15 to 3.9.16 (#407) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#405) @dependabot[bot]
• Bump mavenVersion from 3.9.14 to 3.9.15 (#401) @dependabot[bot]
• Bump mavenVersion from 3.9.12 to 3.9.14 (#399) @dependabot[bot]
• Bump resolverVersion from 1.9.26 to 1.9.27 (#394) @dependabot[bot]
• Bump resolverVersion from 1.9.25 to 1.9.26 (#392) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#389) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 46 to 47 (#388) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.0 (#386) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 45 to 46 (#385) @dependabot[bot]
• Bump mavenVersion from 3.9.11 to 3.9.12 (#382) @dependabot[bot]
• Bump resolverVersion from 1.9.24 to 1.9.25 (#380) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.3.0 to 3.4.0 (#373) @dependabot[bot]
• Bump resolverVersion from 1.9.23 to 1.9.24 (#357) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 44 to 45 (#352) @dependabot[bot]
• Bump mavenVersion from 3.9.10 to 3.9.11 (#359) @dependabot[bot]
• Bump mavenVersion from 3.9.9 to 3.9.10 (#350) @dependabot[bot]
• Bump resolverVersion from 1.9.22 to 1.9.23 (#346) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#131) @dependabot[bot]

🚀 New features and improvements

• Cache projectsUsingPlugin to fix O(N²) reactor scan (#427) @gnodet

🐛 Bug Fixes

• chore: harden embedded-POM trust boundary in install:install-file (#446) @gnodet
• chore: harden installAtEnd integrity contracts (#445) @gnodet

📝 Documentation updates

• Restore the common wording on the download page (#436) @slachiewicz
• Convert the FAQ from FML to Markdown (#437) @slachiewicz
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#415) @potiuk

👻 Maintenance

• Migrate the site descriptor to the v2 model (#449) @slachiewicz
• Cleanups project, use plugin versions from parent in ITs (#443) @slawekjaranowski
• Inherit the maven-invoker-plugin version from the parent (#435) @slachiewicz
• Restore the document metadata dropped when the pages were ported (#434) @slachiewicz
• Port the site documentation from APT to Markdown (#432) @slachiewicz
• Pass siteMvn as a String so the site stage runs on Maven 4 (#430) @slachiewicz
• Build against Maven 4.0.0-rc-6 (#429) @slachiewicz
• Build against Maven 4.0.0-rc-5 (#410) @ascheman
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#415) @potiuk
• Bump m-invoker-p to 3.9.1 / downgrade Guice to 5.1.0 (#375) @slachiewicz
• JUnit Jupiter best practices (#370) @slachiewicz
• feat: enable prevent branch protection rules (#361) @sparsick
• [MINSTALL-206] - Add IT to verify that phase=none skips execution without errors (#340) @gnodet
• Re-enable Issue Notifs (#339) @bmarwell
• Disable notifications for jira migration (#135) @bmarwell
• Remove unused branch and argument (#125) @elharo
• Fix JIRA link (#123) @elharo
• Delete commented code (#121) @elharo
• Remove pointless cast (#122) @elharo

📦 Dependency updates

• Bump org.slf4j:slf4j-simple from 2.0.18 to 2.0.19 (#448) @dependabot[bot]
• Bump org.apache.maven.resolver:maven-resolver-api from 2.0.21 to 2.0.22 (#441) @dependabot[bot]
• Bump com.google.guava:guava from 33.7.0-jre to 33.7.1-jre (#440) @dependabot[bot]
• Bump com.google.guava:guava from 33.6.0-jre to 33.7.0-jre (#439) @dependabot[bot]
• Inherit the maven-invoker-plugin version from the parent (#435) @slachiewicz
• Bump org.apache.maven.resolver:maven-resolver-api from 2.0.20 to 2.0.21 (#424) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#423) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#421) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#420) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml from 4 to 5 (#422) @dependabot[bot]
• Bump org.apache.maven.resolver:maven-resolver-api from 2.0.18 to 2.0.20 (#414) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#412) @dependabot[bot]
• Bump org.apache.maven.resolver:maven-resolver-api from 2.0.17 to 2.0.18 (#408) @dependabot[bot]
• Bump org.slf4j:slf4j-simple from 2.0.17 to 2.0.18 (#406) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#404) @dependabot[bot]
• Bump org.apache.maven.resolver:maven-resolver-api from 2.0.16 to 2.0.17 (#403) @dependabot[bot]
• Bump org.junit:junit-bom from 5.14.3 to 5.14.4 (#402) @dependabot[bot]
• Bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre (#400) @dependabot[bot]
• Bump org.mockito:mockito-core from 5.22.0 to 5.23.0 (#398) @dependabot[bot]
• Bump org.mockito:mockito-core from 5.21.0 to 5.22.0 (#395) @dependabot[bot]
• Bump org.apache.maven.resolver:maven-resolver-api from 2.0.15 to 2.0.16 (#393) @dependabot[bot]
• Bump org.apache.maven.resolver:maven-resolver-api from 2.0.14 to 2.0.15 (#391) @dependabot[bot]
• Bump org.junit:junit-bom from 5.14.2 to 5.14.3 (#390) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 46 to 47 (#387) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 45 to 46 (#383) @dependabot[bot]
• Bump org.junit:junit-bom from 5.14.1 to 5.14.2 (#384) @dependabot[bot]
• Bump org.apache.maven.resolver:maven-resolver-api from 2.0.13 to 2.0.14 (#381) @dependabot[bot]
• Bump org.mockito:mockito-core from 5.20.0 to 5.21.0 (#379) @dependabot[bot]
• Bump m-invoker-p to 3.9.1 / downgrade Guice to 5.1.0 (#375) @slachiewicz
• Bump org.apache.maven.resolver:maven-resolver-api from 2.0.9 to 2.0.13 (#368) @dependabot[bot]
• Bump org.junit:junit-bom from 5.13.4 to 5.14.1 (#374) @dependabot[bot]
• Update Invoker plugin to 3.9.1 to support Java 25 (#369) @Bukama
• Bump org.mockito:mockito-core from 5.19.0 to 5.20.0 (#365) @dependabot[bot]
• Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre (#364) @dependabot[bot]
• Bump org.mockito:mockito-core from 5.18.0 to 5.19.0 (#362) @dependabot[bot]
• Bump org.junit:junit-bom from 5.13.3 to 5.13.4 (#360) @[dependabot[bot]](https://github.com/apps/de...

🚀 New features and improvements

• Enable GitHub Issues (#119) @slawekjaranowski
• Add release-drafter, PR automation (#101) @slawekjaranowski

📦 Dependency updates

• Bump resolverVersion from 1.9.18 to 1.9.22 (#108) @dependabot[bot]
• Bump org.mockito:mockito-core from 4.8.1 to 4.11.0 (#109) @dependabot[bot]
• Bump mavenVersion from 3.9.6 to 3.9.9 (#104) @dependabot[bot]

👻 Maintenance

• [MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#112) @Bukama
• Remove unused method (#97) @pzygielo

🚀 New features and improvements

• Enable GitHub Issues (#102) @slawekjaranowski
• [MINSTALL-207] - Change installAtEnd default value (#93) @gnodet
• Upgrade to Maven 4.0.0-rc-2 (#114) @slawekjaranowski
• Add dependabot for 3.x branch (#103) @slawekjaranowski
• Add release-drafter, PR automation (#100) @slawekjaranowski
• Upgrade to beta-5 (#89) @gnodet

📦 Dependency updates

• Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (#120) @dependabot[bot]
• Bump com.google.guava:guava from 32.0.1-jre to 33.4.0-jre (#96) @dependabot[bot]
• Bump org.mockito:mockito-core from 5.12.0 to 5.15.2 (#117) @dependabot[bot]
• Bump org.slf4j:slf4j-simple from 2.0.13 to 2.0.16 (#80) @dependabot[bot]
• Bump org.apache.maven.resolver:maven-resolver-api from 2.0.0 to 2.0.6 (#111) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 42 to 43 (#75) @dependabot[bot]
• Bump org.junit:junit-bom from 5.11.0 to 5.11.4 (#94) @dependabot[bot]
• Bump org.junit.jupiter:junit-jupiter-api from 5.10.2 to 5.11.0 (#82) @dependabot[bot]
• Bump org.apache.maven.resolver:maven-resolver-api from 2.0.0-alpha-11 to 2.0.0 (#74) @dependabot[bot]

👻 Maintenance

• Publish documentation to LATEST-4.x (#118) @slawekjaranowski
• Add Stale action (#116) @slawekjaranowski
• [MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#113) @Bukama
• Add badge for 3.x version (#110) @slawekjaranowski
• Disable Jenkins build (#99) @slawekjaranowski
• Minor copy edits (#76) @elharo

Release Notes - Maven Install Plugin - Version 3.1.3

Bug

• [MINSTALL-196] - Maven 3.9.x install:install-file doesn't recognize -Dpackaging

Dependency upgrade

• [MINSTALL-203] - Update to parent POM 43

What's Changed

• Build with Maven 4 by @slawekjaranowski in #66
• [MINSTALL-203] Use parent POM 43 by @cstamas in #83
• [MINSTALL-196] Consider packaging in install-file mojo by @cstamas in #81

Full Changelog: maven-install-plugin-3.1.2...maven-install-plugin-3.1.3

What's Changed

• Build with Maven 4 by @slawekjaranowski in #66
• [MINSTALL-187] Switch to the Maven 4 API by @gnodet in #35
• Use pluginManagement section, remove unknown scope usage by @gnodet in #69
• Fix license/notice by @gnodet in #70
• Build with JDK 17 and 21 in Jenkins by @gnodet in #71

New Contributors

• @gnodet made their first contribution in #35

Full Changelog: maven-install-plugin-3.1.2...maven-install-plugin-4.0.0-beta-1

Release Notes - Maven Install Plugin - Version 3.1.2

Bug

• [MINSTALL-190] - Fix Temporary File Information Disclosure Vulnerability

Improvement

• [MINSTALL-195] - Include artifactId in messages of InstallMojo#processProject

Task

• [MINSTALL-192] - Code cleanups

Dependency upgrade

• [MINSTALL-193] - Upgrade Parent Version 42, require min Maven 3.6.3
• [MINSTALL-197] - Upgrade parent to 41, remove deprecations

What's Changed

• [MNG-6829] Replace StringUtils#isEmpty(String) & #isNotEmpty(String) by @timtebeek in #58
• [MINSTALL-197] Update to parent 41, cleanup by @cstamas in #61
• [MINSTALL-193] Parent 42, min Maven 3.6.3 by @cstamas in #64

New Contributors

• @timtebeek made their first contribution in #58

Full Changelog: maven-install-plugin-3.1.1...maven-install-plugin-3.1.2

What's Changed

• [MINSTALL-186] Use proper repositorySystemSession by @rbioteau in #49
• [MINSTALL-188] Upgrade Parent to 39 by @slawekjaranowski in #53
• [MINSTALL-189] Add parameter to lax project validation by @cstamas in #57

New Contributors

• @rbioteau made their first contribution in #49

Full Changelog: maven-install-plugin-3.1.0...maven-install-plugin-3.1.1

Bug

• [MINSTALL-179] - installAtEnd when module does not use m-install-p

Improvement

• [MINSTALL-183] - Don't use metadata from main artifact to fetch pom.xml
• [MINSTALL-185] - Install all artifacts in one request

Task

• [MINSTALL-181] - Require Java 8
• [MINSTALL-184] - Cleanup IT tests

Dependency upgrade

• [MINSTALL-180] - Upgrade Parent to 37
• [MINSTALL-182] - Bump mockito-core from 2.28.2 to 4.8.1

What's Changed

• [MINSTALL-160] Generated POM is not installed if original POM exists by @cstamas in #36

Full Changelog: maven-install-plugin-3.0.0...maven-install-plugin-3.0.1