From cdd56ad8588329ceaa7f7c6c3338fb2568139695 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Sep 2022 00:01:59 +0000 Subject: [PATCH 001/299] Bump maven-pmd-plugin from 3.18.0 to 3.19.0 Bumps [maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) from 3.18.0 to 3.19.0. - [Release notes](https://github.com/apache/maven-pmd-plugin/releases) - [Commits](https://github.com/apache/maven-pmd-plugin/compare/maven-pmd-plugin-3.18.0...maven-pmd-plugin-3.19.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-pmd-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index d6b453e58..ae74529c6 100644 --- a/pom.xml +++ b/pom.xml @@ -57,7 +57,7 @@ agnostic home for software distribution comprehension and audit tools. 3.6.4 2.12.1 3.4.1 - 3.18.0 + 3.19.0 0.15 0.16-SNAPSHOT From e7cbca9be2c2985b1f8a006cf3d4fad5b36dfdb9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 8 Sep 2022 00:02:23 +0000 Subject: [PATCH 002/299] Bump mockito-core from 4.7.0 to 4.8.0 Bumps [mockito-core](https://github.com/mockito/mockito) from 4.7.0 to 4.8.0. - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](https://github.com/mockito/mockito/compare/v4.7.0...v4.8.0) --- updated-dependencies: - dependency-name: org.mockito:mockito-core dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index d6b453e58..e86a1176a 100644 --- a/pom.xml +++ b/pom.xml @@ -46,7 +46,7 @@ agnostic home for software distribution comprehension and audit tools. 10 1.10.12 - 4.7.0 + 4.8.0 1.8 ${javaVersion} ${javaVersion} From 08b0cfcb51e23643dcbd409b0209257cd8309f98 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Mon, 19 Sep 2022 08:41:28 +0200 Subject: [PATCH 003/299] LHF: reformat pom --- pom.xml | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/pom.xml b/pom.xml index 6245d9664..041db9a4b 100644 --- a/pom.xml +++ b/pom.xml @@ -376,7 +376,7 @@ agnostic home for software distribution comprehension and audit tools. - + @@ -398,7 +398,7 @@ agnostic home for software distribution comprehension and audit tools. - + @@ -697,11 +697,11 @@ agnostic home for software distribution comprehension and audit tools. - - - - staged-releases-rat-015 - https://repository.apache.org/content/repositories/orgapachecreadur-1008/ - - + + + + staged-releases-rat-015 + https://repository.apache.org/content/repositories/orgapachecreadur-1008/ + + From e318aa56f14d6ef5bf5fc2dafefa02206719f6bf Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 19 Oct 2022 00:22:50 +0000 Subject: [PATCH 004/299] Bump actions/setup-java from 3.4.1 to 3.6.0 Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.4.1 to 3.6.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/v3.4.1...v3.6.0) --- updated-dependencies: - dependency-name: actions/setup-java dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/maven.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 852632387..67893430a 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -43,7 +43,7 @@ jobs: uses: actions/checkout@v3 - name: Set up JDK - uses: actions/setup-java@v3.4.1 + uses: actions/setup-java@v3.6.0 with: distribution: adopt java-version: ${{ matrix.java }} From cf09ec76fd29ac89ddd48a6d46b97c239bef4631 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Thu, 20 Oct 2022 11:57:35 +0200 Subject: [PATCH 005/299] RAT-312: Remove travis build files and links to it --- .travis.yml | 9 --------- README.md | 4 ---- 2 files changed, 13 deletions(-) delete mode 100644 .travis.yml diff --git a/.travis.yml b/.travis.yml deleted file mode 100644 index 1b56d79bd..000000000 --- a/.travis.yml +++ /dev/null @@ -1,9 +0,0 @@ -language: java -dist: focal -sudo: required - -jobs: - include: - - name: "Java 16" - jdk: openjdk16 - script: mvn -e -B -V clean package site diff --git a/README.md b/README.md index c32836205..177f6e9f7 100644 --- a/README.md +++ b/README.md @@ -2,12 +2,8 @@ ASF Jenkins: [![ASF Jenkins Build Status](https://ci-builds.apache.org/buildStatus/icon?job=Creadur%2FCreadur-Rat)](https://ci-builds.apache.org/job/Creadur/job/Creadur-Rat/) -Travis: [![Build Status](https://app.travis-ci.com/apache/creadur-rat.svg?branch=master)](https://app.travis-ci.com/apache/creadur-rat) - GA: [![Github Action master branch status](https://github.com/apache/creadur-rat/actions/workflows/maven.yml/badge.svg?branch=master)](https://github.com/apache/creadur-rat/actions) -Due to a bug in the Travis build infrastructure the builds fail regularly because Travis selects a JDK that fails animal-sniffer-plugin runs as it is not the one specified in the build. - ## What is RAT? Apache Rat is developed by the Apache Creadur project of the Apache Software From fd2e55b6ac7f7465783df32f62bed32261763b04 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Thu, 20 Oct 2022 11:59:24 +0200 Subject: [PATCH 006/299] RAT-312: Remove travis build files, replaced by GA/ASF Jenkins --- src/changes/changes.xml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/changes/changes.xml b/src/changes/changes.xml index e05c0db0b..a7110f7c1 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -60,6 +60,9 @@ The type attribute can be add,update,fix,remove. --> + + Remove Travis build as they are unreliable. Builds with ASF Jenkins and Github Actions remain as before. + TODO: collect all dependabot updates for release 0.16. From d423110cb4d849e6a6f7a1561290e124bd07d09b Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Thu, 20 Oct 2022 12:00:26 +0200 Subject: [PATCH 007/299] RAT-312: Remove RAT exclusion for travis build file --- pom.xml | 2 -- 1 file changed, 2 deletions(-) diff --git a/pom.xml b/pom.xml index 1dc519838..eca7cd1c7 100644 --- a/pom.xml +++ b/pom.xml @@ -331,8 +331,6 @@ agnostic home for software distribution comprehension and audit tools. 0.15 - - .travis.yml BUILD.txt apache-rat/README*.txt From a0a09dca0ed661c313bdfdb44304bb337adb9f36 Mon Sep 17 00:00:00 2001 From: Hugo Hirsch Date: Thu, 20 Oct 2022 13:49:04 +0200 Subject: [PATCH 008/299] RAT-312: Try to use caching of artifacts to speedup GA builds --- .github/workflows/maven.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 67893430a..186ae6958 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -42,6 +42,14 @@ jobs: - name: Checkout uses: actions/checkout@v3 + - name: Configura artifact caching + uses: actions/cache@v3.0.11 + with: + path: ~/.m2/repository + key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }} + restore-keys: | + ${{ runner.os }}-maven- + - name: Set up JDK uses: actions/setup-java@v3.6.0 with: From 69b5f33d94e96d1f539ec67aca4ffb51e7167e44 Mon Sep 17 00:00:00 2001 From: Hugo Hirsch Date: Thu, 20 Oct 2022 13:51:03 +0200 Subject: [PATCH 009/299] RAT-312: Do not show download progress during builds --- .github/workflows/maven.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 186ae6958..4c27ca837 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -58,7 +58,7 @@ jobs: cache: 'maven' - name: Build with Maven - run: mvn -e -B -V clean package site + run: mvn -e -B -V -ntp clean package site # as of 20220505: Invalid workflow file # The workflow is not valid. .github/workflows/maven.yml (Line: 55, Col: 1): Unexpected value 'notifications' From 1789dcc9f3ba2807a8255a1659c0b7b6586e6ce7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Oct 2022 00:01:07 +0000 Subject: [PATCH 010/299] Bump plexus-utils from 3.4.2 to 3.5.0 Bumps [plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 3.4.2 to 3.5.0. - [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases) - [Commits](https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.4.2...plexus-utils-3.5.0) --- updated-dependencies: - dependency-name: org.codehaus.plexus:plexus-utils dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- apache-rat-plugin/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apache-rat-plugin/pom.xml b/apache-rat-plugin/pom.xml index c24e75fbc..22dcc325c 100644 --- a/apache-rat-plugin/pom.xml +++ b/apache-rat-plugin/pom.xml @@ -264,7 +264,7 @@ org.codehaus.plexus plexus-utils - 3.4.2 + 3.5.0 org.apache.commons From e4f20584896e9d96bd4b0bcce5d97dae9f0ee198 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Oct 2022 00:01:18 +0000 Subject: [PATCH 011/299] Bump mockito-core from 4.8.0 to 4.8.1 Bumps [mockito-core](https://github.com/mockito/mockito) from 4.8.0 to 4.8.1. - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](https://github.com/mockito/mockito/compare/v4.8.0...v4.8.1) --- updated-dependencies: - dependency-name: org.mockito:mockito-core dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index eca7cd1c7..43049bf45 100644 --- a/pom.xml +++ b/pom.xml @@ -46,7 +46,7 @@ agnostic home for software distribution comprehension and audit tools. 10 1.10.12 - 4.8.0 + 4.8.1 1.8 ${javaVersion} ${javaVersion} From 0e3ca8484169c4c0a20f813273301c2cb6d3f36f Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Mon, 24 Oct 2022 23:55:44 +0200 Subject: [PATCH 012/299] Add github metadata --- .asf.yaml | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 .asf.yaml diff --git a/.asf.yaml b/.asf.yaml new file mode 100644 index 000000000..8896f727f --- /dev/null +++ b/.asf.yaml @@ -0,0 +1,11 @@ +github: + description: "Apache Creadur RAT - Release Audit Tool" + homepage: https://creadur.apache.org/ + labels: + - maven + - java + - cli + - licensechecker + - apache + - creadur + - rat From 26cbc5157601953d83731e4b0a93b31bbb4cc922 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Tue, 25 Oct 2022 00:05:51 +0200 Subject: [PATCH 013/299] Enable RAT exclusion for asf github control --- pom.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/pom.xml b/pom.xml index eca7cd1c7..4b044ca3f 100644 --- a/pom.xml +++ b/pom.xml @@ -331,6 +331,7 @@ agnostic home for software distribution comprehension and audit tools. 0.15 + .asf.yaml BUILD.txt apache-rat/README*.txt From 83c8f31d7d2ab685febbf9623b547f7a80f2a56b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 1 Nov 2022 00:03:24 +0000 Subject: [PATCH 014/299] Bump commons-compress from 1.21 to 1.22 Bumps commons-compress from 1.21 to 1.22. --- updated-dependencies: - dependency-name: org.apache.commons:commons-compress dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 4b044ca3f..c499ac242 100644 --- a/pom.xml +++ b/pom.xml @@ -108,7 +108,7 @@ agnostic home for software distribution comprehension and audit tools. org.apache.commons commons-compress - 1.21 + 1.22 junit From b456efb7c1a6c1663945ae828e3eff4c50c38ac2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 8 Nov 2022 00:01:03 +0000 Subject: [PATCH 015/299] Bump mavenPluginPluginVersion from 3.6.4 to 3.7.0 Bumps `mavenPluginPluginVersion` from 3.6.4 to 3.7.0. Updates `maven-plugin-annotations` from 3.6.4 to 3.7.0 - [Release notes](https://github.com/apache/maven-plugin-tools/releases) - [Commits](https://github.com/apache/maven-plugin-tools/compare/maven-plugin-tools-3.6.4...maven-plugin-tools-3.7.0) Updates `maven-plugin-plugin` from 3.6.4 to 3.7.0 - [Release notes](https://github.com/apache/maven-plugin-tools/releases) - [Commits](https://github.com/apache/maven-plugin-tools/compare/maven-plugin-tools-3.6.4...maven-plugin-tools-3.7.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugin-tools:maven-plugin-annotations dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: org.apache.maven.plugins:maven-plugin-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index e7d136c4f..a17cf29dc 100644 --- a/pom.xml +++ b/pom.xml @@ -54,7 +54,7 @@ agnostic home for software distribution comprehension and audit tools. 2.2.1 RAT - 3.6.4 + 3.7.0 2.12.1 3.4.1 3.19.0 From 3f5ec698d919912d31555b81cadd7bdaf2a68ae0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 15 Nov 2022 00:00:45 +0000 Subject: [PATCH 016/299] Bump mockito-core from 4.8.1 to 4.9.0 Bumps [mockito-core](https://github.com/mockito/mockito) from 4.8.1 to 4.9.0. - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](https://github.com/mockito/mockito/compare/v4.8.1...v4.9.0) --- updated-dependencies: - dependency-name: org.mockito:mockito-core dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index e7d136c4f..90476ff31 100644 --- a/pom.xml +++ b/pom.xml @@ -46,7 +46,7 @@ agnostic home for software distribution comprehension and audit tools. 10 1.10.12 - 4.8.1 + 4.9.0 1.8 ${javaVersion} ${javaVersion} From 3dd6545f4a1774699a258d5905c9ade53d84bdbb Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Wed, 16 Nov 2022 21:01:25 +0100 Subject: [PATCH 017/299] Fix spacing in site --- src/site/apt/index.apt.vm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/site/apt/index.apt.vm b/src/site/apt/index.apt.vm index 52f9cc9c8..bf4513dbe 100644 --- a/src/site/apt/index.apt.vm +++ b/src/site/apt/index.apt.vm @@ -49,7 +49,7 @@ Apache Rat Apache Rat ${project.version} ships with tooling for - * {{{https://ant.apache.org/} Apache Ant}}, + * {{{https://ant.apache.org/}Apache Ant}}, * {{{https://maven.apache.org}Apache Maven}} and From e2670ad396085512c19ba6d5474760f243ab98ff Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 23 Nov 2022 00:01:06 +0000 Subject: [PATCH 018/299] Bump apache from 27 to 28 Bumps [apache](https://github.com/apache/maven-apache-parent) from 27 to 28. - [Release notes](https://github.com/apache/maven-apache-parent/releases) - [Commits](https://github.com/apache/maven-apache-parent/commits) --- updated-dependencies: - dependency-name: org.apache:apache dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index e7d136c4f..6e502ff12 100644 --- a/pom.xml +++ b/pom.xml @@ -20,7 +20,7 @@ org.apache apache - 27 + 28 org.apache.rat apache-rat-project From 5292c721ebe4be7fa47f74eeecd8998e3bc5a3c5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 30 Nov 2022 00:00:50 +0000 Subject: [PATCH 019/299] Bump maven-dependency-plugin from 3.3.0 to 3.4.0 Bumps [maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.3.0 to 3.4.0. - [Release notes](https://github.com/apache/maven-dependency-plugin/releases) - [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.3.0...maven-dependency-plugin-3.4.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-dependency-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index e7d136c4f..9c02a3602 100644 --- a/pom.xml +++ b/pom.xml @@ -306,7 +306,7 @@ agnostic home for software distribution comprehension and audit tools. org.apache.maven.plugins maven-dependency-plugin - 3.3.0 + 3.4.0 org.apache.maven.plugins From df4ff72642537431738fa0e8920f88c79c1e7f5f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 2 Dec 2022 00:08:55 +0000 Subject: [PATCH 020/299] Bump actions/setup-java from 3.6.0 to 3.7.0 Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.6.0 to 3.7.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/v3.6.0...v3.7.0) --- updated-dependencies: - dependency-name: actions/setup-java dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/maven.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 4c27ca837..8e21375de 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -51,7 +51,7 @@ jobs: ${{ runner.os }}-maven- - name: Set up JDK - uses: actions/setup-java@v3.6.0 + uses: actions/setup-java@v3.7.0 with: distribution: adopt java-version: ${{ matrix.java }} From 5267a55a30f62ba83e3528d741f1f30692086100 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Wed, 7 Dec 2022 11:17:21 +0100 Subject: [PATCH 021/299] INFRA-23976: restrict to run on ubuntu in order to have JDK8 --- Jenkinsfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Jenkinsfile b/Jenkinsfile index 4ff77fb3b..0c6b982d0 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -19,8 +19,8 @@ */ pipeline { -// agent { label 'ubuntu' } - agent any + agent { label 'ubuntu' } +// arm does not have JDK8 anymore: agent any environment { // It seems the login the jenkins slave uses, doesn't pick up the environment changes, From 4ec3970a1202232c7d6c002ee233f180d36f82aa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 15 Dec 2022 00:00:52 +0000 Subject: [PATCH 022/299] Bump mockito-core from 4.9.0 to 4.10.0 Bumps [mockito-core](https://github.com/mockito/mockito) from 4.9.0 to 4.10.0. - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](https://github.com/mockito/mockito/compare/v4.9.0...v4.10.0) --- updated-dependencies: - dependency-name: org.mockito:mockito-core dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 46ac68b3f..5b9b7aeaa 100644 --- a/pom.xml +++ b/pom.xml @@ -46,7 +46,7 @@ agnostic home for software distribution comprehension and audit tools. 10 1.10.12 - 4.9.0 + 4.10.0 1.8 ${javaVersion} ${javaVersion} From 96df4c1a793ecb7f65acbae43a331ab8d4a81ce2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 15 Dec 2022 00:00:55 +0000 Subject: [PATCH 023/299] Bump apache from 28 to 29 Bumps [apache](https://github.com/apache/maven-apache-parent) from 28 to 29. - [Release notes](https://github.com/apache/maven-apache-parent/releases) - [Commits](https://github.com/apache/maven-apache-parent/commits) --- updated-dependencies: - dependency-name: org.apache:apache dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 46ac68b3f..56d6829cf 100644 --- a/pom.xml +++ b/pom.xml @@ -20,7 +20,7 @@ org.apache apache - 28 + 29 org.apache.rat apache-rat-project From 9b0fee104b97dc2be13076f1a01031bd775f953f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 15 Dec 2022 00:07:10 +0000 Subject: [PATCH 024/299] Bump actions/setup-java from 3.7.0 to 3.9.0 Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.7.0 to 3.9.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/v3.7.0...v3.9.0) --- updated-dependencies: - dependency-name: actions/setup-java dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/maven.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 8e21375de..4bb3f3755 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -51,7 +51,7 @@ jobs: ${{ runner.os }}-maven- - name: Set up JDK - uses: actions/setup-java@v3.7.0 + uses: actions/setup-java@v3.9.0 with: distribution: adopt java-version: ${{ matrix.java }} From 6541ac613bc889ecb453191ed1698a5c88dee04d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Dec 2022 00:00:55 +0000 Subject: [PATCH 025/299] Bump wagon-ssh from 3.5.2 to 3.5.3 Bumps wagon-ssh from 3.5.2 to 3.5.3. --- updated-dependencies: - dependency-name: org.apache.maven.wagon:wagon-ssh dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 63f2830a1..e540832c6 100644 --- a/pom.xml +++ b/pom.xml @@ -479,7 +479,7 @@ agnostic home for software distribution comprehension and audit tools. org.apache.maven.wagon wagon-ssh - 3.5.2 + 3.5.3 From 8366d0cccd1fd86262f1d6074631b3ce7dc1bccf Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 28 Dec 2022 00:14:12 +0000 Subject: [PATCH 026/299] Bump actions/cache from 3.0.11 to 3.2.2 Bumps [actions/cache](https://github.com/actions/cache) from 3.0.11 to 3.2.2. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v3.0.11...v3.2.2) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/maven.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 4bb3f3755..4c168b843 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -43,7 +43,7 @@ jobs: uses: actions/checkout@v3 - name: Configura artifact caching - uses: actions/cache@v3.0.11 + uses: actions/cache@v3.2.2 with: path: ~/.m2/repository key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }} From 1a728d12a28d0f43ec5a6dd928feaa68bc633d51 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 29 Dec 2022 00:00:49 +0000 Subject: [PATCH 027/299] Bump mockito-core from 4.10.0 to 4.11.0 Bumps [mockito-core](https://github.com/mockito/mockito) from 4.10.0 to 4.11.0. - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](https://github.com/mockito/mockito/compare/v4.10.0...v4.11.0) --- updated-dependencies: - dependency-name: org.mockito:mockito-core dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 63f2830a1..ad7850c86 100644 --- a/pom.xml +++ b/pom.xml @@ -46,7 +46,7 @@ agnostic home for software distribution comprehension and audit tools. 10 1.10.12 - 4.10.0 + 4.11.0 1.8 ${javaVersion} ${javaVersion} From 3bf655f3c892a8ba52d3d23823614557cffe97f2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 10 Jan 2023 00:10:22 +0000 Subject: [PATCH 028/299] Bump actions/cache from 3.2.2 to 3.2.3 Bumps [actions/cache](https://github.com/actions/cache) from 3.2.2 to 3.2.3. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v3.2.2...v3.2.3) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/maven.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 4c168b843..b16bea90b 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -43,7 +43,7 @@ jobs: uses: actions/checkout@v3 - name: Configura artifact caching - uses: actions/cache@v3.2.2 + uses: actions/cache@v3.2.3 with: path: ~/.m2/repository key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }} From 408810a1bce4a4798588ed5f7de4d25cf161a9de Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 11 Jan 2023 00:00:54 +0000 Subject: [PATCH 029/299] Bump ant.version from 1.10.12 to 1.10.13 Bumps `ant.version` from 1.10.12 to 1.10.13. Updates `ant` from 1.10.12 to 1.10.13 Updates `ant-testutil` from 1.10.12 to 1.10.13 --- updated-dependencies: - dependency-name: org.apache.ant:ant dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.apache.ant:ant-testutil dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 626c2d218..64550ad8f 100644 --- a/pom.xml +++ b/pom.xml @@ -45,7 +45,7 @@ agnostic home for software distribution comprehension and audit tools. 10 - 1.10.12 + 1.10.13 4.11.0 1.8 ${javaVersion} From 6b8d00022d7a900878d6a203a600e642c03784ea Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Jan 2023 00:00:55 +0000 Subject: [PATCH 030/299] Bump maven-dependency-plugin from 3.4.0 to 3.5.0 Bumps [maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.4.0 to 3.5.0. - [Release notes](https://github.com/apache/maven-dependency-plugin/releases) - [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.4.0...maven-dependency-plugin-3.5.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-dependency-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 626c2d218..b97591c8f 100644 --- a/pom.xml +++ b/pom.xml @@ -306,7 +306,7 @@ agnostic home for software distribution comprehension and audit tools. org.apache.maven.plugins maven-dependency-plugin - 3.4.0 + 3.5.0 org.apache.maven.plugins From 84c02e891b1f2647be4b5bd4200d4f87dd82a044 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Jan 2023 00:00:58 +0000 Subject: [PATCH 031/299] Bump maven-project-info-reports-plugin from 3.4.1 to 3.4.2 Bumps [maven-project-info-reports-plugin](https://github.com/apache/maven-project-info-reports-plugin) from 3.4.1 to 3.4.2. - [Release notes](https://github.com/apache/maven-project-info-reports-plugin/releases) - [Commits](https://github.com/apache/maven-project-info-reports-plugin/compare/maven-project-info-reports-plugin-3.4.1...maven-project-info-reports-plugin-3.4.2) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-project-info-reports-plugin dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 626c2d218..95b80f7a6 100644 --- a/pom.xml +++ b/pom.xml @@ -244,7 +244,7 @@ agnostic home for software distribution comprehension and audit tools. org.apache.maven.plugins maven-project-info-reports-plugin - 3.4.1 + 3.4.2 From b13af807c244afe6dc0bbc39db844d7b24e57aa7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Jan 2023 00:01:09 +0000 Subject: [PATCH 032/299] Bump maven-pmd-plugin from 3.19.0 to 3.20.0 Bumps [maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) from 3.19.0 to 3.20.0. - [Release notes](https://github.com/apache/maven-pmd-plugin/releases) - [Commits](https://github.com/apache/maven-pmd-plugin/compare/maven-pmd-plugin-3.19.0...maven-pmd-plugin-3.20.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-pmd-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 626c2d218..b63d63f5e 100644 --- a/pom.xml +++ b/pom.xml @@ -57,7 +57,7 @@ agnostic home for software distribution comprehension and audit tools. 3.7.0 2.12.1 3.4.1 - 3.19.0 + 3.20.0 0.16 0.17-SNAPSHOT From e7245b43d48f6c7df28e29eb5055bdfa5901f561 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Jan 2023 00:01:04 +0000 Subject: [PATCH 033/299] Bump doxiaVersion from 1.11.1 to 1.12.0 Bumps `doxiaVersion` from 1.11.1 to 1.12.0. Updates `doxia-core` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/apache/maven-doxia/releases) - [Commits](https://github.com/apache/maven-doxia/compare/doxia-1.11.1...doxia-1.12.0) Updates `doxia-module-xhtml` from 1.11.1 to 1.12.0 Updates `doxia-sink-api` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/apache/maven-doxia/releases) - [Commits](https://github.com/apache/maven-doxia/compare/doxia-1.11.1...doxia-1.12.0) --- updated-dependencies: - dependency-name: org.apache.maven.doxia:doxia-core dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: org.apache.maven.doxia:doxia-module-xhtml dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: org.apache.maven.doxia:doxia-sink-api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- apache-rat-plugin/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apache-rat-plugin/pom.xml b/apache-rat-plugin/pom.xml index 22dcc325c..55bba561e 100644 --- a/apache-rat-plugin/pom.xml +++ b/apache-rat-plugin/pom.xml @@ -34,7 +34,7 @@ ${project.version} - 1.11.1 + 1.12.0 1.11.1 From 3cca01080c6097c543e06a58f0d6eda0aaaae634 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Fri, 27 Jan 2023 23:18:38 +0100 Subject: [PATCH 034/299] RAT-314: Add recursive exclusion for .mvn --- .../src/main/java/org/apache/rat/mp/util/ExclusionHelper.java | 2 +- src/changes/changes.xml | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/apache-rat-plugin/src/main/java/org/apache/rat/mp/util/ExclusionHelper.java b/apache-rat-plugin/src/main/java/org/apache/rat/mp/util/ExclusionHelper.java index 9552cc513..2561a6579 100644 --- a/apache-rat-plugin/src/main/java/org/apache/rat/mp/util/ExclusionHelper.java +++ b/apache-rat-plugin/src/main/java/org/apache/rat/mp/util/ExclusionHelper.java @@ -43,7 +43,7 @@ public final class ExclusionHelper { "release.properties", // ".repository", // Used by Jenkins when a Maven job uses a private repository that is "Local to the workspace" "build.log", // RAT-160: until now maven-invoker-plugin runs create a build.log that is not part of a release - ".mvn", // Project configuration since Maven 3.3.1 which contains maven.config, jvm.config, extensions.xml + ".mvn/**", // Project configuration since Maven 3.3.1 which contains maven.config, jvm.config, extensions.xml "pom.xml.releaseBackup")); /** diff --git a/src/changes/changes.xml b/src/changes/changes.xml index a7110f7c1..3926c1530 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -60,6 +60,9 @@ The type attribute can be add,update,fix,remove. --> + + Add default recursive exclusion for maven-induced build artifacts in folder .mvn. + Remove Travis build as they are unreliable. Builds with ASF Jenkins and Github Actions remain as before. From d6313407b0d08b87fd876eaf4305f23326665023 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Fri, 27 Jan 2023 23:29:58 +0100 Subject: [PATCH 035/299] RAT-314: Apply same recursive exclusion as for existing target subfolder --- .../src/main/java/org/apache/rat/mp/util/ExclusionHelper.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apache-rat-plugin/src/main/java/org/apache/rat/mp/util/ExclusionHelper.java b/apache-rat-plugin/src/main/java/org/apache/rat/mp/util/ExclusionHelper.java index 2561a6579..fa7c74b9c 100644 --- a/apache-rat-plugin/src/main/java/org/apache/rat/mp/util/ExclusionHelper.java +++ b/apache-rat-plugin/src/main/java/org/apache/rat/mp/util/ExclusionHelper.java @@ -43,7 +43,7 @@ public final class ExclusionHelper { "release.properties", // ".repository", // Used by Jenkins when a Maven job uses a private repository that is "Local to the workspace" "build.log", // RAT-160: until now maven-invoker-plugin runs create a build.log that is not part of a release - ".mvn/**", // Project configuration since Maven 3.3.1 which contains maven.config, jvm.config, extensions.xml + ".mvn/**/*", // Project configuration since Maven 3.3.1 which contains maven.config, jvm.config, extensions.xml "pom.xml.releaseBackup")); /** From 4cf68140c1a9343ef543cf7a056f1ea3c74a894f Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Sat, 28 Jan 2023 00:15:31 +0100 Subject: [PATCH 036/299] Add 2023 to footer copyright notice --- src/site/site.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/site/site.xml b/src/site/site.xml index beda3f78b..76f93cf0c 100644 --- a/src/site/site.xml +++ b/src/site/site.xml @@ -99,7 +99,7 @@ -