------------------------------------------------------------------- Mon Feb 9 12:14:00 UTC 2026 - Fridrich Strba - Upgrade to version 3.10.0 * New features and improvements + Introduce graphRoots for dependencyFilter based mojos * Bug Fixes + Apply excludeReactor to plugin dependencies in go-offline and resolve-plugins + Only log dependency classpath when no property/file output is specified + MDEP-974: strip ansi codes when writing to a file * Documentation updates + Add analyze-only to usage page + Move doc comment to correct location + Focus on most recent version * Maintenance + Fix Jenkin bages in README + Improve dependencies filtering in AbstractAnalyzeMojo + Migration to JUnit 5 + JUnit Jupiter best practices + Migrate JUnit3 based Tests to JUnit 5 * Dependency updates + Bump org.apache.maven.shared:maven-dependency-analyzer from 1.16.0 to 1.17.0 + Bump org.assertj:assertj-core from 2.9.1 to 3.27.7 in /src/it/projects/analyze-testDependencyWithNonTestScope + Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 + Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 + Bump org.apache.maven.plugins:maven-plugins from 46 to 47 + Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.11.0 + Bump org.apache.maven.plugins:maven-plugins from 45 to 46 + Bump org.jsoup:jsoup from 1.21.2 to 1.22.1 + Bump mavenVersion from 3.9.11 to 3.9.12 + Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 + Bump commons-io:commons-io from 2.20.0 to 2.21.0 + Bump org.codehaus.plexus:plexus-io from 3.5.1 to 3.6.0 + Bump org.codehaus.plexus:plexus-i18n from 1.0.0 to 1.1.0 + Bump org.apache.maven.plugin-testing :maven-plugin-testing-harness from 3.3.0 to 3.4.0 ------------------------------------------------------------------- Sun Oct 5 15:53:57 UTC 2025 - Fridrich Strba - Upgrade to version 3.9.0 * New features and improvements + Use Resolver API in go-offline for dependencies resolving + Use Resolver API in go-offline for plugins resolving + Fixes #1522, add render-dependencies mojo + Use Resolver API in resolve-plugin + MDEP-964: unconditionally ignore dependencies known to be loaded by reflection + Update maven-dependency-analyzer to support Java24 + MDEP-972: copy-dependencies: copy signatures alongside artifacts + MDEP-776: Warn when multiple dependencies have the same file name + MDEP-966: Migrate AnalyzeDepMgt to Sisu + MDEP-957: By default, don't report slf4j-simple as unused * Bug Fixes + ProjectBuildingRequest should not be modified + Fix: markersDirectory is not working when unpack goal is executed from command line + Fix broken link for analyze-exclusions-mojo on usage-page + MDEP-839: Avoid extra blank lines in file + Update collect URL + MDEP-689: Fixes ignored dependency filtering in go-offline goal + MDEP-960: Repair silent logging * Documentation updates + MDEP-933: Document dependency tree output formats + Add additional comment to clarify the minimal supported version of outputing dependency tree in JSON fromat. + MNGSITE-529: Rename "Goals" to "Plugin Documentation" + Unix file separators * Maintenance + Simplify usage of RepositoryManager and DependencyResolver + Use Resolver API in copy and unpack + Update site descriptor to 2.0.0 + Enable prevent branch protection rules + Fix [MDEP-931: Replace PrintWriter with Writer in AbstractSerializing Visitor and subclasses + Cleanups dependencies + Copy edit parameter descriptions + Small Javadoc clarifications + MDEP-967: Change info to debug logging in AbstractFromConfigurationMojo + fix: remove duplicate maven-resolver-api and maven-resolver-util dependencies in pom.xml + Enable GH issues + Remove redundant/unneeded code + Add PR Automation and Stale actions + Keep files in temporary directory to be deleted after test + Drop unnecessary call + Avoid deprecated ArtifactFactory + MDEP-966: Convert remaining Mojos to Guice injection + MDEP-966: Convert Analyze Mojos to Guice constructor injection + MDEP-966: Prefer Guice injection + MDEP-966: Migrate TreeMojo/CopyMojo/AnalyzeExclusionsMojo/ /UnpackMojo/CopyDependenciesMojo from Plexus to Sisu Guice + MDEP-966: @component --> @Inject for DisplayAncestorsMojo + Fixing flaky test in TestCopyDependenciesMojo + MNG-2961: Remove workaround for fixed bug * Build + Build by Maven 4 * Dependency updates + Bump Maven in dependencies to 3.9.11 + Bump commons-io:commons-io from 2.16.1 to 2.20.0 + Bump jettyVersion from 9.4.56.v20240826 to 9.4.58.v20250814 + Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.19.0 + Bump org.apache.maven.plugins:maven-plugins from 43 to 45 + Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0 + Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1 + Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 + Bump org.jsoup:jsoup from 1.18.1 to 1.21.2 + MDEP-963: Bump org.apache.maven.shared:maven-dependency-analyzer from 1.15.0 to 1.15.1 ------------------------------------------------------------------- Tue Oct 29 18:33:45 UTC 2024 - Fridrich Strba - Upgrade to verion 3.8.1 * Bug + MDEP-956: silent parameter is not taken into account * New Feature + MDEP-957: Special case slf4j-simple et al to not report used but undeclared * Improvement + MDEP-932: Don't log successful file copies * Test + MDEP-930: runTreeMojo in TestTreeMojo ignores encoding * Dependency upgrade + MDEP-958: maven-dependency-analyzer to 1.15.0 + MDEP-961: Upgrade to Doxia 2.0.0 GA Stack ------------------------------------------------------------------- Tue Oct 15 19:16:33 UTC 2024 - Fridrich Strba - Upgrade to version 3.8.0 * Bug + MDEP-875: Regression: list-repositories may produce NPE + MDEP-835: dependency:tree no longer shows optional flag + MDEP-838: "Artifact has not been packaged yet" error message is not very helpful + MDEP-938: 'mdep.overIfNewer' is misnamed from its usage of 'mdep.overWriteIfNewer' + MDEP-943: [REGRESSION] appendOutput for tree goal broken for multi-module project * New Feature + MDEP-317: Add goal dependency:analyze-exclusions - check for invalid excludes + MDEP-799: improve mvn dependency:tree - add optional JSON output of the results + MDEP-928: Allow to exclude classes from dependency:analyze * Improvement + MDEP-669: Optimize the documentation of of build-classpath-mojo + MDEP-893: Get rid of commons-lang3 + MDEP-894: Use @Component instead of @Parameter for session/project + MDEP-896: Removing unused code + MDEP-897: Remove old style JavaDoc Plexus docs + MDEP-899: Upgrade maven-plugin parent to 42 + MDEP-917: dependency:analyze-exclusions - use Resolver API instead of ProjectBuilder + MDEP-924: Get rid of maven-artifact-transfer from list-classes goal + MDEP-925: Require Maven 3.6.3 + MDEP-939: Lock down classifier in dependency:sources goal + MDEP-940: Use Resolver API instead of m-a-t for resolving artifacts * Test + MDEP-710: reenable TestTreeMojo * Task + MDEP-912: Use version for plexus-utils/plexus-xml from parent + MDEP-914: collect goal description broken in documentation + MDEP-918: Use standard updatePolicy for repositories in ITs + MDEP-923: Code cleanups + MDEP-935: Improvement ITs for dependency:tree + MDEP-941: Deprecate dependency:sources in favor of dependency:resolve-sources + MDEP-945: Fix documentation about get goal + MDEP-913: dependency:collect missing from index page ------------------------------------------------------------------- Wed Sep 27 11:25:29 UTC 2023 - Fridrich Strba - Update to version 3.6.0 * Bug + MDEP-660: Obsolete example of -Dverbose on web page + MDEP-671: Unsupported verbose option still appears in docs + MDEP-680: dependency:go-offline does not use repositories from parent pom in reactor build + MDEP-700: Fix possible NPE + MDEP-693: `dependency:analyze-only` goal fails on OpenJDK 14 + MDEP-698: FileWriter and FileReader should be replaced + MDEP-739: Dependency Plugin go-offline doesn't respect artifact classifier + MDEP-740: analyze-only failed: Unsupported class file major version 60 (Java 16) + MDEP-747: analyze-only failed: Unsupported class file major version 61 (Java 17) + MDEP-749: copy-dependencies fails when using excludeScope=test + MDEP-679: mvn dependency:analyze detected wrong transitive dependency + MDEP-742: dependency plugin does not work with JDK 16 + MDEP-752: skip dependency analyze in ear packaging + MDEP-753: Non-test dependency reported as Non-test scoped test only dependency + MDEP-759: 'Dependency not found' with 3.2.0 and Java-17 while analyzing + MDEP-761: Tree plugin does not terminate with 3.2.0 + MDEP-769: Minor improvement - continue + MDEP-774: analyze-only failed: PermittedSubclasses requires ASM9 + MDEP-781: Broken Link to "Introduction to Dependency Mechanism Page" + MDEP-783: TreeMojo docs say scope doesn't work due to MSHARED-4 + MDEP-786: Sealed classes not supported + MDEP-806: Dependency tree in verbose mode for war is empty + MDEP-809: Javadoc was not updated to reflect that :tree's verbose option is now ok + MDEP-630: error dependency:list (caused by postgresql dependency) + MDEP-842: :list-classes does not skip if skip is set + MDEP-843: :list-classes does not use GAV parameters * New Feature + MDEP-644: Reintroduce the verbose option for dependency:tree + MDEP-645: List classes in a given artifact + MDEP-708: dependency:analyze should recommend narrower scope where possible + MDEP-714: Add analyze parameter "ignoreUnusedRuntime" + MDEP-787: Allow ignoring non-test-scoped dependencies + MDEP-782: Add a option to unpack goals + MDEP-804: Allow auto-ignore of all non-test scoped dependencies used only in test scope * Improvement + MDEP-705: Unused method o.a.m.p.d.t.TreeMojo.containsVersion + MDEP-763: Minor improvements + MDEP-768: GitHub Action build improvement + MDEP-779: dependency:analyze should list the classes that cause a used undeclared dependency + MDEP-789: Improve documentation of analyze - Non-test scoped + MDEP-602: Turn warnings into errors instead of failOnWarning + MDEP-674: maven-dependency-plugin should leverage plexus-build-api to support IDEs + MDEP-716: TestListClassesMojo logs too much + MDEP-827: Use outputDirectory from AbstractMavenReport + MDEP-831: Remove not used dependencies / Replace parts + MDEP-853: list-repositories - improvements + MDEP-862: warns about depending on plexus-container-default + MDEP-864: Replace AnalyzeReportView with a new AnalyzeReportRenderer * Task + MDEP-681: Remove no longer required exclusions + MDEP-760: Java 1.8 as minimum + MDEP-841: Explicitly start and end tables with Doxia Sinks in report renderers + MDEP-849: Replace Maven shared StringUtils with Commons Lang3 + MDEP-855: Remove unused and ignored parameter - useJvmChmod + MDEP-857: Remove custom plexus configuration + MDEP-859: Code refactor - UnpackUtil + MDEP-866: Refresh download page ------------------------------------------------------------------- Wed Dec 30 09:39:37 UTC 2020 - Wang Jun - Update to version 3.1.2 * Upgrade maven-plugins parent to version 32 * Upgrade plexus-io to 3.1.0 * Upgrade maven-shared-utils 3.2.1 * Upgrade plexus-archiver to 4.1.0 * Upgrade maven-artifact-transfer to 0.11.0 * Upgrade plexus-utils to 3.2.0 * Upgrade plexus-utils to 3.3.0 * Upgrade maven-common-artifact-filters to 3.1.0 * Upgrade parent POM from 32 to 33 * Upgrade maven-dependency-analyzer to 1.11.1 * Update ASM so it works with Java 13 * Add note on dependecy:tree -Dverbose support in 3.0+ * Add a TOC to ease navigating to each goal usage * Remove @param for a parameter which does not exists. * Remove newline and trailing space from log line. * Remove deprecated call. * Fix link to mailing list * Fix JavaDoc issue. * Use https for sigs, hashes and KEYS * Use sha512 checksums instead of sha1 * Switch to asfMavenTlpPlgnBuild * Unpacking File Mappers * Replace CapturingLog class with Mockito usage * Rewrite go-offline so it resembles resolve-plugins * Perform transformation to artifact keys just once - Removed patch: * 00-maven-artifact-transfer-0.11.0.patch + not needed with this version any more ------------------------------------------------------------------- Mon Nov 25 16:25:03 UTC 2019 - Fridrich Strba - Specify maven.compiler.release to fix build with jdk9+ and newer maven-javadoc-plugin - Added patch: * 00-maven-artifact-transfer-0.11.0.patch + Fix build against maven-artifact-transfer >= 0.11 ------------------------------------------------------------------- Fri Apr 5 15:06:05 UTC 2019 - Fridrich Strba - Initial packaging of maven-dependency-plugin 3.1.1