3.10.0 changelog

3.8.1

OBS-URL: https://build.opensuse.org/request/show/1219158
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/maven-dependency-plugin?expand=0&rev=6

maven-dependency-plugin-3.6.0-source-release.zip

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:72153ff056155657cba217c784e47b14a69b184df4a8825373be69b3e07ed95c
-size 667400

maven-dependency-plugin.changes

@@ -1,7 +1,193 @@
+-------------------------------------------------------------------
+Mon Feb  9 12:14:00 UTC 2026 - Fridrich Strba <fstrba@suse.com>
+
+- Upgrade to version 3.10.0
+  * New features and improvements
+    + Introduce graphRoots for dependencyFilter based mojos
+  * Bug Fixes
+    + Apply excludeReactor to plugin dependencies in go-offline and
+      resolve-plugins
+    + Only log dependency classpath when no property/file output is
+      specified
+    + MDEP-974: strip ansi codes when writing to a file
+  * Documentation updates
+    + Add analyze-only to usage page
+    + Move doc comment to correct location
+    + Focus on most recent version
+  * Maintenance
+    + Fix Jenkin bages in README
+    + Improve dependencies filtering in AbstractAnalyzeMojo
+    + Migration to JUnit 5
+    + JUnit Jupiter best practices
+    + Migrate JUnit3 based Tests to JUnit 5
+  * Dependency updates
+    + Bump org.apache.maven.shared:maven-dependency-analyzer from
+      1.16.0 to 1.17.0
+    + Bump org.assertj:assertj-core from 2.9.1 to 3.27.7 in
+      /src/it/projects/analyze-testDependencyWithNonTestScope
+    + Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
+    + Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1
+    + Bump org.apache.maven.plugins:maven-plugins from 46 to 47
+    + Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to
+      4.11.0
+    + Bump org.apache.maven.plugins:maven-plugins from 45 to 46
+    + Bump org.jsoup:jsoup from 1.21.2 to 1.22.1
+    + Bump mavenVersion from 3.9.11 to 3.9.12
+    + Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0
+    + Bump commons-io:commons-io from 2.20.0 to 2.21.0
+    + Bump org.codehaus.plexus:plexus-io from 3.5.1 to 3.6.0
+    + Bump org.codehaus.plexus:plexus-i18n from 1.0.0 to 1.1.0
+    + Bump org.apache.maven.plugin-testing
+      :maven-plugin-testing-harness from 3.3.0 to 3.4.0
+
+-------------------------------------------------------------------
+Sun Oct  5 15:53:57 UTC 2025 - Fridrich Strba <fstrba@suse.com>
+
+- Upgrade to version 3.9.0
+  * New features and improvements
+    + Use Resolver API in go-offline for dependencies resolving
+    + Use Resolver API in go-offline for plugins resolving
+    + Fixes #1522, add render-dependencies mojo
+    + Use Resolver API in resolve-plugin
+    + MDEP-964: unconditionally ignore dependencies known to be
+      loaded by reflection
+    + Update maven-dependency-analyzer to support Java24
+    + MDEP-972: copy-dependencies: copy signatures alongside
+      artifacts
+    + MDEP-776: Warn when multiple dependencies have the same file
+      name
+    + MDEP-966: Migrate AnalyzeDepMgt to Sisu
+    + MDEP-957: By default, don't report slf4j-simple as unused
+  * Bug Fixes
+    + ProjectBuildingRequest should not be modified
+    + Fix: markersDirectory is not working when unpack goal is
+      executed from command line
+    + Fix broken link for analyze-exclusions-mojo on usage-page
+    + MDEP-839: Avoid extra blank lines in file
+    + Update collect URL
+    + MDEP-689: Fixes ignored dependency filtering in go-offline
+      goal
+    + MDEP-960: Repair silent logging
+  * Documentation updates
+    + MDEP-933: Document dependency tree output formats
+    + Add additional comment to clarify the minimal supported
+      version of outputing dependency tree in JSON fromat.
+    + MNGSITE-529: Rename "Goals" to "Plugin Documentation"
+    + Unix file separators
+  * Maintenance
+    + Simplify usage of RepositoryManager and DependencyResolver
+    + Use Resolver API in copy and unpack
+    + Update site descriptor to 2.0.0
+    + Enable prevent branch protection rules
+    + Fix [MDEP-931: Replace PrintWriter with Writer in
+      AbstractSerializing Visitor and subclasses
+    + Cleanups dependencies
+    + Copy edit parameter descriptions
+    + Small Javadoc clarifications
+    + MDEP-967: Change info to debug logging in
+      AbstractFromConfigurationMojo
+    + fix: remove duplicate maven-resolver-api and
+      maven-resolver-util dependencies in pom.xml
+    + Enable GH issues
+    + Remove redundant/unneeded code
+    + Add PR Automation and Stale actions
+    + Keep files in temporary directory to be deleted after test
+    + Drop unnecessary call
+    + Avoid deprecated ArtifactFactory
+    + MDEP-966: Convert remaining Mojos to Guice injection
+    + MDEP-966: Convert Analyze Mojos to Guice constructor injection
+    + MDEP-966: Prefer Guice injection
+    + MDEP-966: Migrate TreeMojo/CopyMojo/AnalyzeExclusionsMojo/
+      /UnpackMojo/CopyDependenciesMojo from Plexus to Sisu Guice
+    + MDEP-966: @component --> @Inject for DisplayAncestorsMojo
+    + Fixing flaky test in TestCopyDependenciesMojo
+    + MNG-2961: Remove workaround for fixed bug
+  * Build
+    + Build by Maven 4
+  * Dependency updates
+    + Bump Maven in dependencies to 3.9.11
+    + Bump commons-io:commons-io from 2.16.1 to 2.20.0
+    + Bump jettyVersion from 9.4.56.v20240826 to 9.4.58.v20250814
+    + Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.19.0
+    + Bump org.apache.maven.plugins:maven-plugins from 43 to 45
+    + Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
+    + Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1
+    + Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0
+    + Bump org.jsoup:jsoup from 1.18.1 to 1.21.2
+    + MDEP-963: Bump
+      org.apache.maven.shared:maven-dependency-analyzer from 1.15.0
+      to 1.15.1
+
+-------------------------------------------------------------------
+Tue Oct 29 18:33:45 UTC 2024 - Fridrich Strba <fstrba@suse.com>
+
+- Upgrade to verion 3.8.1
+  * Bug
+    + MDEP-956: silent parameter is not taken into account
+  * New Feature
+    + MDEP-957: Special case slf4j-simple et al to not report used
+      but undeclared
+  * Improvement
+    + MDEP-932: Don't log successful file copies
+  * Test
+    + MDEP-930: runTreeMojo in TestTreeMojo ignores encoding
+  * Dependency upgrade
+    + MDEP-958: maven-dependency-analyzer to 1.15.0
+    + MDEP-961: Upgrade to Doxia 2.0.0 GA Stack
+
+-------------------------------------------------------------------
+Tue Oct 15 19:16:33 UTC 2024 - Fridrich Strba <fstrba@suse.com>
+
+- Upgrade to version 3.8.0
+  * Bug
+    + MDEP-875: Regression: list-repositories may produce NPE
+    + MDEP-835: dependency:tree no longer shows optional flag
+    + MDEP-838: "Artifact has not been packaged yet" error message
+      is not very helpful
+    + MDEP-938: 'mdep.overIfNewer' is misnamed from its usage of
+      'mdep.overWriteIfNewer'
+    + MDEP-943: [REGRESSION] appendOutput for tree goal broken for
+      multi-module project
+  * New Feature
+    + MDEP-317: Add goal dependency:analyze-exclusions - check for
+      invalid excludes
+    + MDEP-799: improve mvn dependency:tree - add optional JSON
+      output of the results
+    + MDEP-928: Allow to exclude classes from dependency:analyze
+  * Improvement
+    + MDEP-669: Optimize the documentation of <outputProperty> of
+      build-classpath-mojo
+    + MDEP-893: Get rid of commons-lang3
+    + MDEP-894: Use @Component instead of @Parameter for
+     session/project
+    + MDEP-896: Removing unused code
+    + MDEP-897: Remove old style JavaDoc Plexus docs
+    + MDEP-899: Upgrade maven-plugin parent to 42
+    + MDEP-917: dependency:analyze-exclusions - use Resolver API
+      instead of ProjectBuilder
+    + MDEP-924: Get rid of maven-artifact-transfer from list-classes
+      goal
+    + MDEP-925: Require Maven 3.6.3
+    + MDEP-939: Lock down classifier in dependency:sources goal
+    + MDEP-940: Use Resolver API instead of m-a-t for resolving
+      artifacts
+  * Test
+    + MDEP-710: reenable TestTreeMojo
+  * Task
+    + MDEP-912: Use version for plexus-utils/plexus-xml  from parent
+    + MDEP-914: collect goal description broken in documentation
+    + MDEP-918: Use standard updatePolicy for repositories in ITs
+    + MDEP-923: Code cleanups
+    + MDEP-935: Improvement ITs for dependency:tree
+    + MDEP-941: Deprecate dependency:sources in favor of
+      dependency:resolve-sources
+    + MDEP-945: Fix documentation about get goal
+    + MDEP-913: dependency:collect missing from index page
+
 -------------------------------------------------------------------
 Wed Sep 27 11:25:29 UTC 2023 - Fridrich Strba <fstrba@suse.com>
 
-- Update to verion 3.6.0
+- Update to version 3.6.0
   * Bug
     + MDEP-660: Obsolete example of -Dverbose on web page
     + MDEP-671: Unsupported verbose option still appears in docs

maven-dependency-plugin.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package maven-dependency-plugin
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2026 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           maven-dependency-plugin
-Version:        3.6.0
+Version:        3.10.0
 Release:        0
 Summary:        Plugin to manipulate, copy and unpack local and remote artifacts
 License:        Apache-2.0
@@ -27,8 +27,7 @@ Source0:        https://repo1.maven.org/maven2/org/apache/maven/plugins/%{name}/
 BuildRequires:  fdupes
 BuildRequires:  maven-local
 BuildRequires:  unzip
-BuildRequires:  mvn(commons-io:commons-io)
-BuildRequires:  mvn(org.apache.commons:commons-collections4)
+BuildRequires:  mvn(javax.inject:javax.inject)
 BuildRequires:  mvn(org.apache.commons:commons-lang3)
 BuildRequires:  mvn(org.apache.maven.doxia:doxia-sink-api)
 BuildRequires:  mvn(org.apache.maven.plugin-tools:maven-plugin-annotations)
@@ -36,25 +35,29 @@ BuildRequires:  mvn(org.apache.maven.plugins:maven-plugin-plugin)
 BuildRequires:  mvn(org.apache.maven.plugins:maven-plugins:pom:)
 BuildRequires:  mvn(org.apache.maven.reporting:maven-reporting-api)
 BuildRequires:  mvn(org.apache.maven.reporting:maven-reporting-impl)
+BuildRequires:  mvn(org.apache.maven.resolver:maven-resolver-api)
+BuildRequires:  mvn(org.apache.maven.resolver:maven-resolver-util)
 BuildRequires:  mvn(org.apache.maven.shared:maven-artifact-transfer)
 BuildRequires:  mvn(org.apache.maven.shared:maven-common-artifact-filters)
-BuildRequires:  mvn(org.apache.maven.shared:maven-dependency-analyzer)
+BuildRequires:  mvn(org.apache.maven.shared:maven-dependency-analyzer) >= 1.14.1
 BuildRequires:  mvn(org.apache.maven.shared:maven-dependency-tree)
 BuildRequires:  mvn(org.apache.maven.shared:maven-shared-utils)
-BuildRequires:  mvn(org.apache.maven:maven-aether-provider)
 BuildRequires:  mvn(org.apache.maven:maven-artifact)
 BuildRequires:  mvn(org.apache.maven:maven-core)
 BuildRequires:  mvn(org.apache.maven:maven-model)
 BuildRequires:  mvn(org.apache.maven:maven-plugin-api)
 BuildRequires:  mvn(org.apache.maven:maven-repository-metadata)
 BuildRequires:  mvn(org.apache.maven:maven-settings)
+BuildRequires:  mvn(org.apache.velocity.tools:velocity-tools-generic)
+BuildRequires:  mvn(org.apache.velocity:velocity-engine-core)
 BuildRequires:  mvn(org.codehaus.plexus:plexus-archiver)
 BuildRequires:  mvn(org.codehaus.plexus:plexus-i18n)
 BuildRequires:  mvn(org.codehaus.plexus:plexus-io)
 BuildRequires:  mvn(org.codehaus.plexus:plexus-utils)
-BuildRequires:  mvn(org.eclipse.aether:aether-api)
-BuildRequires:  mvn(org.eclipse.aether:aether-util)
+BuildRequires:  mvn(org.codehaus.plexus:plexus-xml)
+BuildRequires:  mvn(org.eclipse.sisu:org.eclipse.sisu.plexus)
 BuildRequires:  mvn(org.eclipse.sisu:sisu-maven-plugin)
+BuildRequires:  mvn(org.slf4j:slf4j-api)
 BuildRequires:  mvn(org.sonatype.plexus:plexus-build-api)
 BuildArch:      noarch
 
@@ -77,7 +80,6 @@ Group:          Documentation/HTML
 %build
 # Tests require legacy Maven
 %{mvn_build} -f -- \
-    -Dproject.build.outputTimestamp=$(date -u -d @${SOURCE_DATE_EPOCH:-$(date +%%s)} +%%Y-%%m-%%dT%%H:%%M:%%SZ) \
 %if %{?pkg_vcmp:%pkg_vcmp java-devel >= 9}%{!?pkg_vcmp:0}
     -Dmaven.compiler.release=8 \
 %endif