chore(deps): bump org.apache.maven:maven-plugin-api from 3.9.16 to 3.10.0 by dependabot[bot] · Pull Request #3641 · operator-framework/java-operator-sdk

dependabot · 2026-10-02T03:33:05Z

Bumps org.apache.maven:maven-plugin-api from 3.9.16 to 3.10.0.

Release notes

Sourced from org.apache.maven:maven-plugin-api's releases.

3.10.0

🚀 New features and improvements

Maven 3.10.x should use Maven 3.1 validation in strict mode (#1542) @gnodet

Do not depend on maven-resolver-supplier-mvn3 (#13266) @cstamas

[MNG-6797] - Remember if Maven model problems were encountered. (#298) @wilx

feat: add relativePath validation (#12742) @cstamas

Add validation for Plexus-based plugin dependency injection (#12651) @slawekjaranowski

Introduce validation control (#12549) @cstamas

Update to Resolver 2.0.21 (#12504) @cstamas

[MNG-5913] - Allow defining aliases for existing server configurations in settings.xml (#12475) @slawekjaranowski

🐛 Bug Fixes

Issue #13265: let a settings server declare the repository origins its credentials may be used with (#13275) @slawekjaranowski

Backport #13040: treat reactor BOM imports as ProjectSorter edges so -am includes them (#13263) @gnodet

[MNG-8174] - Fix NPE when a property references itself in a plugin configuration (backport #12932) (#12936) @elharo

Fix #13200: publish a complete set from MavenProject.getArtifacts (#13204) @gnodet

Fixes #13135: ensure completeness of the reactor summary, privilege f… (#13173) @rmannibucau

[3.10.x] Fix #13084: sandbox profile activation context for external model builds (#13114) @gnodet

Fix #13100: honor repositories from legitimately-active external model profiles (#13116) @gnodet

Add support for MAVEN_PROJECTBASEDIR substitution in jvm.config (backport of MNG-8598 to 3.10.x) (#13115) @gnodet

Scope server credentials and validate legacy relocation coordinates (#12954) @slachiewicz

Honour configured policy and validate inputs on the legacy compat paths (#12978) @gnodet

Add unit test for #12600 null-guard in forked executions (#12923) @gnodet

Fix: make ProjectIndex thread-safe for parallel builds (backport #12832) (#12927) @gnodet

Fail on misconfigured plugin-requested toolchains (#12616) @wilx

Resolve classified POM artifacts from the reactor in Maven 3.x (#12659) @wilx

[3.10.x] Convert paths for MSYS2 and jvm.config placeholders in bin/mvn (#12567) @gnodet

Preserve dependency scope in plugin artifacts - fix #12497 (#12503) @slawekjaranowski

📝 Documentation updates

docs: document plugin.xml V4 vs V3 (#13261) @gnodet

[maven-3.10.x] Port the site documentation from APT to Markdown (#12712) @slachiewicz

improve doc about deprecating plugin descriptor's requirement (#12555) @hboutemy

Drop mention of Plexus XML (#12482) @cstamas

👻 Maintenance

[3.10.x] maintenance: Align use of profiles (#13274) @cstamas

Remove version from rat directory deployment (#13046) @slawekjaranowski

Update NOTICE file in distribution packages (#13044) @slawekjaranowski

Restrict what a repository-resolved model contributes to the build (#12953) @slachiewicz

Validate coordinates and repository precedence during artifact resolution (#12952) @slachiewicz

[MNG-8129] - Clarify relativePath validation comment (#12966) @gnodet

[12811] Keep plexus-cipher at 2.0: POM note (#12879) @slachiewicz

[3.10.x] Use try-with-resources (#12845) @slachiewicz

... (truncated)

Commits

c43a36b [maven-release-plugin] prepare release maven-3.10.0
095eb17 Fix wrong links.
bec033e Use staged Maven Resolver 2.0.24
b39f8a7 deps: Update to Maven Resolver 2.0.24 (#13271)
ae59501 Issue #13265: let a settings server declare the repository origins its creden...
6ab2433 [3.10.x] maintenance: Align use of profiles (#13274)
f68413c Do not depend on maven-resolver-supplier-mvn3 (#13266)
3a0026c [Backport maven-3.10.x] Fix #11397: treat reactor BOM imports as ProjectSorte...
82a0f20 docs: document plugin.xml V4 vs V3 [Backport maven-3.10.x]
0fb1c8b [MNG-6797] Remember if Maven model problems were encountered. (#298)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.apache.maven:maven-plugin-api](https://github.com/apache/maven) from 3.9.16 to 3.10.0. - [Release notes](https://github.com/apache/maven/releases) - [Commits](apache/maven@maven-3.9.16...maven-3.10.0) --- updated-dependencies: - dependency-name: org.apache.maven:maven-plugin-api dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-02T03:33:33Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 353a7ff0-9fef-463f-a93c-e42cb6775aee

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Copilot

Copilot review overview

🟡 Changes recommended

The bump implicitly drops Maven 3.9.x compatibility while the repository wrapper remains on 3.9.16.

Review effort: Balanced
Findings: 1

Open (1)

Generated plugin requires Maven 3.10.0, breaking Maven 3.9.x compatibility · New

What changed in this PR

Updates the bootstrapper Maven plugin API dependency from 3.9.16 to 3.10.0.

Changes:

Bumps maven-plugin-api to 3.10.0.

File	Description
`bootstrapper-maven-plugin/pom.xml`	Updates the Maven plugin API version.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

  <properties>
    <maven-plugin-annotations.version>3.16.0</maven-plugin-annotations.version>
-    <maven-plugin-api.version>3.9.16</maven-plugin-api.version>
+    <maven-plugin-api.version>3.10.0</maven-plugin-api.version>


dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 2, 2026

Copilot AI balanced review requested due to automatic review settings October 2, 2026 03:33

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 2, 2026

openshift-ci Bot requested review from metacosm and xstefank October 2, 2026 03:33

Copilot started reviewing on behalf of operator-framework October 2, 2026 03:33 View session

Copilot AI reviewed Oct 2, 2026

View reviewed changes

Comment thread bootstrapper-maven-plugin/pom.xml

<properties>

<maven-plugin-annotations.version>3.16.0</maven-plugin-annotations.version>

<maven-plugin-api.version>3.9.16</maven-plugin-api.version>

<maven-plugin-api.version>3.10.0</maven-plugin-api.version>

csviri approved these changes Oct 2, 2026

View reviewed changes

csviri merged commit b300073 into main Oct 2, 2026
31 checks passed

csviri deleted the dependabot/maven/org.apache.maven-maven-plugin-api-3.10.0 branch October 2, 2026 12:06

Navigation Menu

chore(deps): bump org.apache.maven:maven-plugin-api from 3.9.16 to 3.10.0 - #3641

chore(deps): bump org.apache.maven:maven-plugin-api from 3.9.16 to 3.10.0#3641
csviri merged 1 commit into
mainfrom
dependabot/maven/org.apache.maven-maven-plugin-api-3.10.0

dependabot Bot commented on behalf of github Oct 2, 2026

Uh oh!

coderabbitai Bot commented Oct 2, 2026

Review skipped

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Oct 2, 2026

3.10.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

Uh oh!

coderabbitai Bot commented Oct 2, 2026

Review skipped

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Copilot review overview

🟡 Changes recommended

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants