Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Update dependency org.codehaus.gmavenplus:gmavenplus-plugin to v4#191

Open
renovate[bot] wants to merge 1 commit intomasteri333055/java:masterfrom
renovate-sbg/org.codehaus.gmavenplus-gmavenplus-plugin-4.xi333055/java:renovate-sbg/org.codehaus.gmavenplus-gmavenplus-plugin-4.xCopy head branch name to clipboard
Open

Update dependency org.codehaus.gmavenplus:gmavenplus-plugin to v4#191
renovate[bot] wants to merge 1 commit intomasteri333055/java:masterfrom
renovate-sbg/org.codehaus.gmavenplus-gmavenplus-plugin-4.xi333055/java:renovate-sbg/org.codehaus.gmavenplus-gmavenplus-plugin-4.xCopy head branch name to clipboard

Conversation

@renovate
Copy link

@renovate renovate bot commented Oct 3, 2024 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
org.codehaus.gmavenplus:gmavenplus-plugin (source) 1.12.1 → 4.3.1 age adoption passing confidence

Release Notes

groovy/GMavenPlus (org.codehaus.gmavenplus:gmavenplus-plugin)

v4.3.1

Compare Source

v4.3.0

Compare Source

Bugs
Enhancements
  • Support toolchains for compilation, GroovyDoc, and stub generation (#​349 and #​356). You can also opt-in to using a forked process using the new fork parameter.
Potentially breaking changes

None

Notes

Full Changelog: groovy/GMavenPlus@4.2.1...4.3.0

v4.2.1

Compare Source

Bugs
  • Fix compatibility with Groovy 4.0.27 and 5.0.0-beta-1 which changed (GROOVY-11668) the signature of the GroovyDocTool constructor (#​335).
Enhancements

None.

Potentially breaking changes

None.

Notes

None.

v4.2.0

Compare Source

Bugs

None

Enhancements
Potentially breaking changes

None

Notes

None

v4.1.1

Compare Source

Bugs
  • Accidentally changed required Maven version from >=3.6.3 to >=3.9.9 (#​324).
Enhancements

None

Potentially breaking changes

None

Notes

None

v4.1.0

Compare Source

Bugs

None

Enhancements
  • Add a property for scripts parameter, so it can be specified from the command line (#​316).
  • Add timeouts for connecting and reading from scripts URLs (#​317).
Potentially breaking changes

None

Notes

None

v4.0.1

Compare Source

Bugs

  • Fix broken plugin due to problems encountered during release process (#​314)

Enhancements

None

Potentially breaking changes

None

Notes

None

v4.0.0

Compare Source

Bugs

None

Enhancements

  • Support Java 22 and 23 (#​302)
  • Multiple dependency upgrades, including some that fixed CVEs
  • Added a warning about using SecurityManager to prevent System.exit() calls. JEP 411 deprecated SecurityManager in Java 17, for future removal. It is unclear what it will be replaced with for the use case of preventing System.exit() usages. JDK-8199704 is one possibility.

Potentially breaking changes

  • Updated the required Maven version to 3.6.3 to conform to the compatibility plan (#​309)

Notes

None

v3.0.2

Compare Source

Bugs

[#​280] The 3.0.1 jar was corrupt (thanks @​eugene-sadovsky for reporting this!).

Enhancements

Potentially breaking changes

None.

Notes

The CVE fixed were related to dependencies of the plugin. While I haven't done an analysis of whether they were exploitable (since this is a Maven plugin and not an application), it seems unlikely.

v3.0.1

Compare Source

Bugs

  • [#​276] Fix that enabling skipBytecodeCheck causes the Groovy version to be reported as not supporting the goal (thanks for reporting this @​jgenoctr!).

Enhancements

Potentially breaking changes

None.

Notes

The CVEs fixed were related to dependencies of the plugin. While I haven't done an analysis of whether they were exploitable (since this is a Maven plugin and not an application), it seems unlikely.

v3.0.0

Compare Source

Bugs

Enhancements

Potentially breaking changes

Maven's compatibility plan marked Maven versions older than 3.2.5 as EOL in March 2023. Therefore, we now require 3.2.5 to move forward with the rest of the ecosystem.

Notes

Fixing the validation warnings removed some Maven dependencies from the plugin's classpath (instead of using the ones from Maven itself). I'm not aware of any negative consequences of this, but it's possible certain specialized use cases might encounter changes in behavior.

v2.1.0

Compare Source

Bugs

None.

Enhancements

  • [#​230] Recognize JDK 19 as a valid target bytecode.
  • [#​232] Recognize JDK 20 as a valid target bytecode.

Potentially breaking changes

None.

Notes

None.

v2.0.0

Compare Source

Bugs

None.

Enhancements

  • [#​210] Improve error messages when Groovy classes can't be located (avoiding the NullPointerExceptions that were causing confusion and instead throwing our own exception).
  • [#​221] apache/groovy@8d19017 (comment) caused an exception to be thrown for Groovy 4.0.0-RC-1 and newer when binding properties in a script/console/shell and bindPropertiesToSeparateVariables is false. The error logging when this happens has been improved.
  • [#​223] Support 5, 6, 7, 8, and 1.9 arguments to targetBytecode so that validation doesn't unexpectedly fail since it uses the maven.compiler.target property and these arguments are valid for javac.

Potentially breaking changes

This release requires Java 8 and drops support for Java 7. This was necessary to update dependencies which fix vulnerabilities. Specifically, in maven-archiver. At the time of release, the following dependencies were not compatible with Java 7

  • org.apache.commons:commons-compress
  • org.codehaus.plexus:plexus-archiver
  • org.apache.maven:maven-archiver
  • org.codehaus.plexus:plexus-io
  • org.codehaus.plexus:plexus-utils

This is not the first breaking release, but it is the first breaking release to follow the semver conventions.

Notes

None.

v1.13.1

Compare Source

Bugs

  • [#​203] Using bindAllProjectProperties and bindSessionUserOverrideProperties together can cause an NPE (thanks for reporting this @​sebthom!).

Enhancements

None

Potentially breaking changes

None.

Notes

None.

v1.13.0

Compare Source

Bugs

None.

Enhancements

Potentially breaking changes

None.

Notes

None.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate-sbg/org.codehaus.gmavenplus-gmavenplus-plugin-4.x branch 2 times, most recently from db0a159 to 61255c6 Compare January 3, 2025 08:39
@renovate renovate bot force-pushed the renovate-sbg/org.codehaus.gmavenplus-gmavenplus-plugin-4.x branch from 61255c6 to 4f22e1a Compare April 29, 2025 08:37
@renovate renovate bot force-pushed the renovate-sbg/org.codehaus.gmavenplus-gmavenplus-plugin-4.x branch from 4f22e1a to 6ad9786 Compare July 6, 2025 00:01
@renovate renovate bot force-pushed the renovate-sbg/org.codehaus.gmavenplus-gmavenplus-plugin-4.x branch from 6ad9786 to 9570ae3 Compare January 22, 2026 08:03
@renovate renovate bot force-pushed the renovate-sbg/org.codehaus.gmavenplus-gmavenplus-plugin-4.x branch from 9570ae3 to 7b4dda8 Compare February 12, 2026 08:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Holiday renovate sbg

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.