Skip to content

build(deps-dev): bump org.codehaus.mojo:versions-maven-plugin from 2.24.0 to 2.25.0 - #479

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.25.0
Nov 12, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.25.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown
Contributor

Bumps org.codehaus.mojo:versions-maven-plugin from 2.24.0 to 2.25.0.

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.25.0

Versions Maven Plugin 2.25.0 stops suggesting pre-release versions by default, can hold back releases until they have been published for a set number of days, and can follow the ignore rules of a project's Dependabot configuration. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

  • Pre-releases are left out by default: every goal and report now skips alpha, beta, milestone, release-candidate, preview and early-access versions, so the newest stable version is reported instead of, say, 3.34.0.CR1. Pass -DallowPreReleases=true to get the previous output. When the current version is itself a pre-release or snapshot, newer pre-releases of the same release line are still offered: from 4.0.0-beta-3, both 4.0.0-beta-4 and 4.0.0 are offered (#1482).
  • minimumReleaseAge: offer a release as an update only after it has been published for the given number of days (-Dversions.minimumReleaseAge=7). minimumReleaseAgeExcludes exempts trusted groupId:artifactId patterns. The publication date is read through Maven's own transport, so proxies, mirrors and server credentials apply (#1484).
  • Dependabot ignore rules: with -Dversions.dependabotConfig=.github/dependabot.yml, the goals and reports skip the versions that the Dependabot configuration ignores for the branch being built (#1480).
  • processPlugins for the use-latest-* and use-next-* goals: these goals can now also update plugins with a literal version in build/plugins, build/pluginManagement and reporting. A plugin version that needs a newer Maven than the project's minimum is skipped (#1477).
  • set-property -Dinsert: adds a property the POM doesn't declare yet, optionally inside a profile given with profileId (#1340).
  • rulesUri is loaded through the Maven Resolver: it works with whichever transports Maven is configured with, and the Wagon dependencies are gone. Code that constructs the mojos, reports or the maxDependencyUpdates enforcer rule directly now passes a TransporterProvider instead of a Map<String, Wagon> (#1475).
  • Fixes: BOMs imported as ${project.groupId}:bom:${project.version} no longer fail with "Not fully interpolated artifact" on Maven 3.10 and 4 (#1486). A property that only a child module uses is evaluated with that module's rules again, as in 2.22.0 (#1481). numThreads is honored by the use-latest-* and use-next-* goals (#1478).

🚨 Removed

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Thanks to @​dcolazin, @​mandritschke, @​Master-Code-Programmer and @​slachiewicz.

Full changelog

Commits
  • 818c81d [maven-release-plugin] prepare release 2.25.0
  • ff38086 Set the next version to 2.25.0-SNAPSHOT
  • a69a6c4 Interpolate raw dependencyManagement coordinates (#1485)
  • 354b1f1 Add an IT for minimumReleaseAge and its exemption
  • df0536b Read release dates through the Resolver and rename the filter minimumReleaseAge
  • e80cc41 MinDaysOld: Made minimum age of artifacts configurable
  • a7f3cf1 Parse each version once when applying the pre-release policy
  • af9205c Classify pre-releases from the canonical form of Maven 4 as well
  • d2234dc Leave pre-release versions out by default in every goal and report (#1350)
  • 7aa9bea Remove the maven-shared-utils dependency
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) from 2.24.0 to 2.25.0.
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.24.0...2.25.0)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.25.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 12, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) November 12, 2026 16:43
@codecov

codecov Bot commented Nov 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.37%. Comparing base (1c20be9) to head (ebc52f7).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #479   +/-   ##
=======================================
  Coverage   88.37%   88.37%           
=======================================
  Files          22       22           
  Lines        1540     1540           
  Branches      272      272           
=======================================
  Hits         1361     1361           
  Misses         79       79           
  Partials      100      100           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@github-actions
github-actions Bot merged commit 8b84402 into main Nov 12, 2026
17 checks passed
@github-actions
github-actions Bot deleted the dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.25.0 branch November 12, 2026 16:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants