⚠️ Upgrade notes

Upgrading a child project from 49 usually needs these changes:

• apache-rat-plugin 0.18 (#601): rename child <excludes> to <inputExcludes combine.children="append">; the old parameter is silently ignored. Put that configuration in <pluginManagement> without executions: the parent binds the check only on JDK 17 and newer, and an execution declared in <build><plugins> would run it on older JDKs too, where rat 0.18 fails. After moving the configuration, check that no plugin blocks or **/* globs were lost on the way.
• version.maven-surefire removed: replace @version.maven-surefire@ tokens in invoker ITs with @version.maven-surefire-plugin@.
• maven-surefire-plugin 3.6.0: a console write from a thread without a context class loader (finalizers, dynamically attached agents) fails with NoClassDefFoundError: Could not initialize class ...StackWalkerStrategy (SUREFIRE-3460). Until 3.6.1, set <surefire.version>3.5.6</surefire.version>.
• maven-compiler-plugin 3.16.0 recompiles when dependencies change. A multi-release module whose module-info depends on a sibling module that exists only under META-INF/versions/9 can then fail with module not found in site/javadoc builds (apache/maven-executor#52).
• spotless checks POM formatting on CI; run mvn spotless:apply before pushing.

💥 Breaking changes

• Update configuration for apache-rat-plugin 0.18 (#601) @slawekjaranowski
• Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 (#596) @dependabot[bot]
• Property version.maven-surefire was removed in apache/maven-apache-parent#588, should be replaced by version.maven-surefire-plugin, version.maven-failsafe-plugin or version.maven-surefire-report-plugin

🚀 New features and improvements

• Exclude dev-tooling dotfiles from RAT check (#569) @ascheman

📝 Documentation updates

• Document optional repository profiles for Apache snapshots and staging (#586) @slawekjaranowski

👻 Maintenance

• Restore the document metadata dropped when the pages were ported (#592) @slachiewicz
• Port the site documentation from APT to Markdown (#591) @slachiewicz

🔧 Build

• Add use-apache-staging profile (#585) @slawekjaranowski

📦 Dependency updates

• Update parent version to 40 (#607) @slawekjaranowski
• Bump org.codehaus.mojo:taglist-maven-plugin from 3.2.2 to 3.2.3 (#605) @dependabot[bot]
• Bump org.codehaus.mojo:extra-enforcer-rules from 1.12.0 to 1.12.1 (#606) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.97.0 to 2.98.0 (#604) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.1 to 3.10.2 (#603) @dependabot[bot]
• Bump org.codehaus.modello:modello-maven-plugin from 2.6.0 to 2.8.1 (#602) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.1 (#599) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.9.0 to 3.10.0 (#595) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.96.0 to 2.97.0 (#594) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 (#596) @dependabot[bot]
• Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.2 to 2.9.3 (#590) @dependabot[bot]
• Bump version.sisu-maven-plugin from 1.0.1 to 1.1.0 (#588) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to 3.9.0 (#589) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-toolchains-plugin from 3.2.0 to 3.3.0 (#587) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.7.0 to 3.8.0 (#579) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#582) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 (#580) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#581) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#583) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml from 4 to 5 (#584) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.93.0 to 2.94.0 (#573) @dependabot[bot]

This release adds push-to-atr profile to improve ATR integration:
https://maven.apache.org/pom/asf/

🚀 New features and improvements

• Upgrade parent to 39 to benefit from push-to-atr profile (#575) @hboutemy

👻 Maintenance

• Configure ATR project (#576) @hboutemy
• Change banner right to SVG logo (#570) @Bukama
• Add Gerd Aschemann to committer list (#572) @ascheman
• Add Matthias Bünger to PMC (#564) @Bukama

📦 Dependency updates

• Bump version.sisu-maven-plugin from 1.0.0 to 1.0.1 (#574) @dependabot[bot]
• Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 (#571) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.6.0 to 3.7.0 (#568) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.4.0 to 3.6.0 (#563) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.92.0 to 2.93.0 (#567) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.91.0 to 2.92.0 (#566) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.90.0 to 2.91.0 (#562) @dependabot[bot]

🚀 New features and improvements

• Add configuration for rerunning failing integration tests (#557) @slawekjaranowski

🐛 Bug Fixes

• Fix enforce-bytecode-version configuration for ignored scopes (#545) @slawekjaranowski

👻 Maintenance

• Update banner links (#556) @slawekjaranowski
• Simplify docs configuration (#555) @slawekjaranowski
• Remove taglist/jxr/checkstyle/surefire/pmd-reports (#523) @Bukama
• Update Maven logos (#550) @Bukama

📦 Dependency updates

• Bump org.junit:junit-bom from 5.14.3 to 5.14.4 (#554) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.3.0 to 3.4.0 (#547) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.89.0 to 2.90.0 (#548) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 (#549) @dependabot[bot]
• Bump org.codehaus.mojo:extra-enforcer-rules from 1.11.0 to 1.12.0 (#546) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.2.1 to 3.3.0 (#543) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.88.0 to 2.89.0 (#542) @dependabot[bot]
• Bump org.codehaus.modello:modello-maven-plugin from 2.5.1 to 2.6.0 (#535) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.87.0 to 2.88.0 (#541) @dependabot[bot]
• Bump org.junit:junit-bom from 5.14.2 to 5.14.3 (#540) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.86.0 to 2.87.0 (#539) @dependabot[bot]
• Bump version.sisu-maven-plugin from 0.9.0.M4 to 1.0.0 (#538) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.85.0 to 2.86.0 (#537) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.2.0 to 3.2.1 (#536) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.1.0 to 3.2.0 (#534) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.84.0 to 2.85.0 (#533) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.83.0 to 2.84.0 (#532) @dependabot[bot]

📦 Dependency updates

• Bump parent to 37 (#531) @slawekjaranowski
• Bump org.junit:junit-bom from 5.14.1 to 5.14.2 (#530) @dependabot[bot]

💥 Breaking changes

• Require Maven 3.6.3+ from plugins (#520) @slachiewicz
• Update rat plugin configuration (#513) @slawekjaranowski
• Use spotless 3 when running on JDK >= 17 (#504) @gnodet
• Drop Doxia Tools parent pom (#500) @slachiewicz

🚀 New features and improvements

• [MPOM-387] - Exclude test scope from enforcedBytecodeVersion (#524) @Bukama
• feat: activate Fluido skin's anchorJs (#519) @hboutemy
• Enhance target JDK definition for JDK >= 9 (#505) @gnodet
• Update rat plugin configuration (#513) @slawekjaranowski
• Use spotless 3 when running on JDK >= 17 (#504) @gnodet
• Always render a GitHub ribbon on the right-hand side (#495) @kwin

👻 Maintenance

• [MPOM-277] - Move maven-invoker-plugin configuration to one place (#527) @slawekjaranowski
• Remove doxia-tools from documentations (#514) @slawekjaranowski
• feat: enable prevent branch protection rules (#493) @sebtiem
• Add Apache 2.0 LICENSE file (#486) @Ndacyayisenga-droid

📦 Dependency updates

• Bump com.palantir.javaformat:palantir-java-format from 2.82.0 to 2.83.0 (#522) @dependabot[bot]
• Bump org.codehaus.mojo:taglist-maven-plugin from 3.2.1 to 3.2.2 (#521) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.0.0 to 3.1.0 (#518) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.81.0 to 2.82.0 (#516) @dependabot[bot]
• Bump com.palantir.javaformat:palantir-java-format from 2.80.0 to 2.81.0 (#511) @dependabot[bot]
• Add profile with palantir javaformat dependency (#510) @slawekjaranowski
• Bump org.junit:junit-bom from 5.14.0 to 5.14.1 (#509) @dependabot[bot]
• Bump org.junit:junit-bom from 5.13.4 to 5.14.0 (#501) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-pmd-plugin from 3.27.0 to 3.28.0 (#506) @dependabot[bot]
• Bump org.codehaus.mojo:extra-enforcer-rules from 1.10.0 to 1.11.0 (#502) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 2.46.1 to 3.0.0 (#497) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 2.45.0 to 2.46.1 (#490) @dependabot[bot]
• Bump org.junit:junit-bom from 5.13.3 to 5.13.4 (#489) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-pmd-plugin from 3.26.0 to 3.27.0 (#482) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.5 to 2.45.0 (#484) @dependabot[bot]
• Bump org.junit:junit-bom from 5.13.1 to 5.13.3 (#483) @dependabot[bot]

🚀 New features and improvements

• Use a standard tag template for releases (#468) @​slawekjaranowski

🐛 Bug Fixes

• Use spotless / palantirJavaFormat - 2.56.0 for all JDKs (#477) @​slawekjaranowski

👻 Maintenance

• Use spotless on JDK 11 - 24 only (#479) @​slawekjaranowski
• Add sparsick as committer (#478) @​sparsick
• move Igor to emeritus as requested (#465) @​hboutemy

🔧 Build

• Allow manually executing release-drafter (#480) @​slawekjaranowski

📦 Dependency updates

• Bump parent to 35 (#475) @​slawekjaranowski
• Bump org.junit:junit-bom from 5.13.0 to 5.13.1 (#474) @dependabot[bot]
• Bump org.codehaus.modello:modello-maven-plugin from 2.4.0 to 2.5.1 (#473) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.3 to 2.44.5 (#471) @dependabot[bot]
• Bump org.junit:junit-bom from 5.12.2 to 5.13.0 (#472) @dependabot[bot]
• Bump version.sisu-maven-plugin from 0.9.0.M3 to 0.9.0.M4 (#469) @dependabot[bot]
• Bump org.junit:junit-bom from 5.12.1 to 5.12.2 (#466) @dependabot[bot]
• Bump org.codehaus.mojo:extra-enforcer-rules from 1.9.0 to 1.10.0 (#462) @dependabot[bot]

💥 Breaking changes

• Move snapshot repositories in a profile (#451) @slawekjaranowski
• Check test code by checkstyle (#228) @slawekjaranowski

🚀 New features and improvements

• Move snapshot repositories in a profile (#451) @slawekjaranowski
• Introduce property maven.site.path.suffix to allow override site path (#239) @slawekjaranowski
• Use v@{project.version} as tag template for releases (#455) @slawekjaranowski
• import KEYS history from svn (#240) @hboutemy
• Add licenseText to modello (#241) @slawekjaranowski
• Update site descriptor to 2.0 (#232) @slawekjaranowski
• Check test code by checkstyle (#228) @slawekjaranowski
• Add issues templates (#226) @slawekjaranowski
• Accept all line endings with spotless (#217) @kwin
• Enable automatic formatter when not on CI (#215) @gnodet
• Bump com.diffplug.spotless:spotless-maven-plugin to enable the sortpom/quiet option (#213) @gnodet

🐛 Bug Fixes

• Fix asf.yaml syntax (#459) @slawekjaranowski

📦 Dependency updates

• Bump parent to 34 (#461) @slawekjaranowski
• Bump org.junit:junit-bom from 5.12.0 to 5.12.1 (#460) @dependabot[bot]
• Bump org.junit:junit-bom from 5.11.4 to 5.12.0 (#236) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.2 to 2.44.3 (#234) @dependabot[bot]
• Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 (#208) @dependabot[bot]
• Bump org.codehaus.mojo:extra-enforcer-rules from 1.8.0 to 1.9.0 (#201) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-jxr-plugin from 3.4.0 to 3.6.0 (#210) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-pmd-plugin from 3.23.0 to 3.26.0 (#211) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 2.44.0.BETA4 to 2.44.2 (#229) @dependabot[bot]
• Bump org.junit:junit-bom from 5.11.3 to 5.11.4 (#219) @dependabot[bot]
• [MNG-8453] - Check dependency declarations by default (#220) @elharo
• Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (#202) @dependabot[bot]
• Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.0 to 2.9.1 (#214) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin to enable the sortpom/quiet option (#213) @gnodet
• Bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.0 to 2.9.0 (#207) @dependabot[bot]
• Bump org.junit:junit-bom from 5.10.3 to 5.11.3 (#209) @dependabot[bot]

👻 Maintenance

• reformat: 2 lines between sections, gpg --list-sigs before armored key (#458) @hboutemy
• add concrete gpg commands to add a key (#457) @hboutemy
• Update key information of Matthias Bünger (#456) @Bukama
• Remove link to jira from issues template (#454) @slawekjaranowski
• update instructions to edit KEYS in Git (#453) @hboutemy
• Add stale action (#452) @slawekjaranowski
• Use excludeGeneratedSources for checkstyle (#237) @slawekjaranowski
• hboutemy PMC Chair (#235) @hboutemy
• Add Matthias Bünger to committer list (#230) @Bukama
• PR Automation - use pull_request_target (#223) @slawekjaranowski
• Add PR Automation (#221) @slawekjaranowski

💥 Breaking changes

• Remove dependency on maven-plugin-annotations to better support Maven 4 plugins (#190) @gnodet
• Remove checkstyle.violation.ignore (#183) @slawekjaranowski

🚀 New features and improvements

• Skip render empty taglist report (#193) @slawekjaranowski
• [MNG-8158] - Adding name to empty components section in shared site left nav (#188) @bdemers
• Introduce property for maven-shared-resources version (#182) @slawekjaranowski
• Enable GitHUb issues (#175) @slawekjaranowski

📦 Dependency updates

• Bump ASF parent to 33 (#195) @slawekjaranowski
• Bump org.codehaus.mojo:taglist-maven-plugin from 3.0.0 to 3.1.0 (#192) @dependabot
• Bump org.apache.maven.plugins:maven-pmd-plugin from 3.22.0 to 3.23.0 (#186) @dependabot
• Bump org.apache.maven.shared:maven-shared-resources from 5 to 6 (#187) @dependabot
• Upgrade to Maven Fluido Skin 1.12.0 (#191) @michael-o
• Bump org.junit:junit-bom from 5.10.2 to 5.10.3 (#189) @dependabot
• Bump org.apache.maven.plugins:maven-jxr-plugin from 3.3.2 to 3.4.0 (#185) @dependabot
• Bump version.sisu-maven-plugin from 0.9.0.M2 to 0.9.0.M3 (#184) @dependabot
• Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.1 (#181) @dependabot
• Bump org.codehaus.modello:modello-maven-plugin from 2.3.0 to 2.4.0 (#179) @dependabot
• Bump org.apache.maven.plugins:maven-pmd-plugin from 3.21.2 to 3.22.0 (#178) @dependabot
• Bump org.apache.maven.plugins:maven-toolchains-plugin from 3.1.0 to 3.2.0 (#176) @dependabot

👻 Maintenance

• Fix link in issueManagement in docs (#177) @slawekjaranowski

🔧 Build

• Disable matrix build on GitHub (#194) @slawekjaranowski
• Add Release Drafter (#174) @slawekjaranowski

Bug

• [MPOM-449] - Remove the leading "1." from source/target properties

Improvement

• [MPOM-447] - activate javac's release flag when building with JDK supporting that feature
• [MPOM-453] - Disable annotation processing by compiler
• [MPOM-454] - Warning about usage of deprecated API by compiler
• [MPOM-477] - Skip empty PMD reports
• [MPOM-478] - Remove manually maintained history from site
• [MPOM-483] - Make a separate module for documentation

Task

• [MPOM-482] - Publish site descriptor with new parent

Dependency upgrade

• [MPOM-448] - Update spotless-maven-plugin from 2.40.0 to 2.41.1
• [MPOM-455] - Add dependencyManagement for JUnit 5
• [MPOM-459] - Bump org.apache.maven.plugins:maven-jxr-plugin from 3.3.1 to 3.3.2
• [MPOM-464] - Bump com.diffplug.spotless:spotless-maven-plugin from 2.41.1 to 2.43.0
• [MPOM-473] - Bump org.cyclonedx:cyclonedx-maven-plugin from 2.7.10 to 2.7.11
• [MPOM-474] - Bump org.codehaus.mojo:extra-enforcer-rules from 1.7.0 to 1.8.0
• [MPOM-485] - Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1
• [MPOM-487] - Bump parent to 32

Improvement

• [MPOM-426] - downgrade plexus-xml to 3.0.0: 4.0.0 is incompatible with Maven 3
• [MPOM-429] - Support development with Java 21 (palantirJavaFormat)
• [MPOM-443] - Skip empty surefire reports

Task

• [MPOM-427] - use version.artifactId property for dependency versions (like plugins)
• [MPOM-436] - Remove quality-checks profile with maven-docck-plugin
• [MPOM-445] - Use maven-checkstyle-plugin version from parent

Dependency upgrade

• [MPOM-425] - Bump com.diffplug.spotless:spotless-maven-plugin from 2.37.0 to 2.40.0
• [MPOM-441] - Bump maven-jxr-plugin from 3.3.0 to 3.3.1
• [MPOM-442] - Bump org.cyclonedx:cyclonedx-maven-plugin from 2.7.9 to 2.7.10
• [MPOM-444] - Bump maven-pmd-plugin from 3.21.0 to 3.21.2
• [MPOM-446] - Upgrade Parent to 31