Skip to content

Bump org.codehaus.plexus:plexus-utils from 3.6.2 to 4.1.0 in /jsp - #205

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/jsp/org.codehaus.plexus-plexus-utils-4.1.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/jsp/org.codehaus.plexus-plexus-utils-4.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 26, 2026

Copy link
Copy Markdown
Contributor

Bumps org.codehaus.plexus:plexus-utils from 3.6.2 to 4.1.0.

Release notes

Sourced from org.codehaus.plexus:plexus-utils's releases.

4.1.0

DirectoryScanner no longer excludes .gitignore and .cvsignore by default. Code that relied on the old defaults has to add the two patterns explicitly. That change is what makes this a minor release rather than 4.0.4.

💥 Breaking changes

  • Do not exclude ".gitignore" and ".cvsignore" by default (#326) @​kwin

👻 Maintenance

🔧 Build

📦 Dependency updates

4.0.3

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

... (truncated)

Commits
  • 572ce90 [maven-release-plugin] prepare release plexus-utils-4.1.0
  • 077e801 Bump the plexus dependencies released today
  • 840a1b4 Update parent to plexus 27
  • 9c560fa Drop the Publish Site workflow
  • 5f96b03 Bump org.codehaus.plexus:plexus from 25 to 26
  • 4846c05 Add the Publish Site workflow
  • 4df3a86 Use the shared release-drafter config instead of a local copy
  • 9eb5fc6 Apply spotless formatting to README
  • f2856f9 Rewrite README with usage, status and version guidance
  • 62fe2fa Bump release-drafter/release-drafter from 7.6.0 to 7.7.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 3.6.2 to 4.1.0.
- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)
- [Commits](codehaus-plexus/plexus-utils@plexus-utils-3.6.2...plexus-utils-4.1.0)

---
updated-dependencies:
- dependency-name: org.codehaus.plexus:plexus-utils
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 26, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 26, 2026
@jmanico

jmanico commented Sep 26, 2026

Copy link
Copy Markdown
Member

This proposal regenerates a change already reviewed and deferred in #188/#191. Its complete diff was checked against the merged dependency decision record.

This repeats the same root-POM Plexus 3.6.2 → 4.1.0 changes as #196 despite the /jsp title. Keep the reviewed publisher plugin realms pending separate migration/signing evidence.

Closing this exact repeated version proposal under that dated disposition. Security updates remain enabled; new advisory evidence or a materially different compatibility proposal requires fresh review. This does not claim that the upgrade was applied. #169 records the queue cleanup.

@jmanico jmanico closed this Sep 26, 2026
@jmanico
jmanico deleted the dependabot/maven/jsp/org.codehaus.plexus-plexus-utils-4.1.0 branch September 26, 2026 16:04
@dependabot @github

dependabot Bot commented on behalf of github Sep 26, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant