Bump plexus-utils from 3.3.0 to 3.4.2 by dependabot[bot] · Pull Request #139 · apache/maven-shade-plugin (original) (raw)
Bumps plexus-utils from 3.3.0 to 3.4.2.
Release notes
Sourced from plexus-utils's releases.
3.4.2
🚀 New features and improvements
- Provides a CachingOuptutStream and a CachingWriter (#184) @gnodet
- Use (already) precalculated value (#186) @pzygielo
- use github shared actions (#171) @olamy
🐛 Bug Fixes
- MXParser fixes (#185) @gnodet
- Fix last modified time not being updated on linux (#203) @gnodet
- Fix regression and deprecate: FileUtils.fileAppend should create file… (#200) @slachiewicz
- Fix some testing XML files checkout with incorrect eol (#198) @belingueres
- Fixed regressions: #163 and #194 (#195) @belingueres
- Don't ignore valid SCM files (#174) @michael-o
📦 Dependency updates
- Bump github/codeql-action from 1 to 2 (#202) @dependabot
- Bump actions/checkout from 3.0.1 to 3.0.2 (#199) @dependabot
- Bump release-drafter/release-drafter from 5.18.1 to 5.19.0 (#188) @dependabot
- Bump jmh-generator-annprocess from 1.34 to 1.35 (#189) @dependabot
- Bump jmh-core from 1.34 to 1.35 (#190) @dependabot
- Bump actions/checkout from 2.4.0 to 3.0.1 (#197) @dependabot
- Bump jmh-generator-annprocess from 1.33 to 1.34 (#175) @dependabot
- Bump jmh-core from 1.33 to 1.34 (#176) @dependabot
- Bump release-drafter/release-drafter from 5.15.0 to 5.18.1 (#183) @dependabot
- Bump actions/checkout from 2.3.4 to 2.4.0 (#173) @dependabot
- Bump actions/setup-java from 2.3.0 to 2.3.1 (#170) @dependabot
3.4.1
🐛 Bug Fixes
- Fixes #163: Regression: encoding error when parsing a ISO-8859-1 xml (#164) @belingueres
📦 Dependency updates
- Bump actions/setup-java from 2.2.0 to 2.3.0 (#168) @dependabot
- Bump jmh-generator-annprocess from 1.32 to 1.33 (#166) @dependabot
- Bump jmh-core from 1.32 to 1.33 (#165) @dependabot
- Bump actions/setup-java from 2.1.0 to 2.2.0 (#167) @dependabot
- Bump junit from 4.13.1 to 4.13.2 (#162) @dependabot
- Bump actions/setup-java from 1 to 2.1.0 (#157) @dependabot
- Bump jmh-generator-annprocess from 1.29 to 1.32 (#159) @dependabot
- Bump jmh-core from 1.29 to 1.32 (#160) @dependabot
- Bump actions/cache from 2.1.5 to 2.1.6 (#161) @dependabot
- Bump actions/checkout from 2 to 2.3.4 (#154) @dependabot
... (truncated)
Commits
- 01908b2 [maven-release-plugin] prepare release plexus-utils-3.4.2
- 0d97c8b Fix endless loop caused by aborted subsequent PI or comment (#124)
- 11c749d Fix endless loop with invalid PI containing XML (#122)
- 2c6fe7e Fix start position of PI and comment for all reported errors (#124)
- 89b8ef5 Fix position on MXParser (#121)
- 407a93c SelectorUtils.matchPath(): inconsistent behaviour on POSIX-like and Windows f...
- 8dec931 Bump github/codeql-action from 1 to 2
- ee5fe41 Fix last modified time not being updated on linux (#203)
- 49773f1 Provides a CachingOuptutStream and a CachingWriter (#184)
- 0808fe3 Added Licence file
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)