[dependabot]

Bumps org.codehaus.mojo:versions-maven-plugin from 2.24.0 to 2.25.1.

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.25.1

Versions Maven Plugin 2.25.1 fixes a false warning in display-plugin-updates.

✨ Highlights

• No more false "version not specified" warnings for inherited plugins. display-plugin-updates used a parent plugin's version only when the parent declared <inherited>true</inherited>. A plugin versioned in the parent's build/plugins or reporting and used without a version in the child was reported as unversioned. Omitting <inherited> now counts as inherited, and <inherited>false</inherited> still keeps the version out (#1489, #1488 by @​hkoosha).

🐛 Bug Fixes

• Treat a parent plugin without as inherited in display-plugin-updates (#1489) @​slachiewicz

Thanks to @​slachiewicz.

Full changelog

2.25.0

Versions Maven Plugin 2.25.0 stops suggesting pre-release versions by default, can hold back releases until they have been published for a set number of days, and can follow the ignore rules of a project's Dependabot configuration. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

• Pre-releases are left out by default: every goal and report now skips alpha, beta, milestone, release-candidate, preview and early-access versions, so the newest stable version is reported instead of, say, 3.34.0.CR1. Pass -DallowPreReleases=true to get the previous output. When the current version is itself a pre-release or snapshot, newer pre-releases of the same release line are still offered: from 4.0.0-beta-3, both 4.0.0-beta-4 and 4.0.0 are offered (#1482).
• minimumReleaseAge: offer a release as an update only after it has been published for the given number of days (-Dversions.minimumReleaseAge=7). minimumReleaseAgeExcludes exempts trusted groupId:artifactId patterns. The publication date is read through Maven's own transport, so proxies, mirrors and server credentials apply (#1484).
• Dependabot ignore rules: with -Dversions.dependabotConfig=.github/dependabot.yml, the goals and reports skip the versions that the Dependabot configuration ignores for the branch being built (#1480).
• processPlugins for the use-latest-* and use-next-* goals: these goals can now also update plugins with a literal version in build/plugins, build/pluginManagement and reporting. A plugin version that needs a newer Maven than the project's minimum is skipped (#1477).
• set-property -Dinsert: adds a property the POM doesn't declare yet, optionally inside a profile given with profileId (#1340).
• rulesUri is loaded through the Maven Resolver: it works with whichever transports Maven is configured with, and the Wagon dependencies are gone. Code that constructs the mojos, reports or the maxDependencyUpdates enforcer rule directly now passes a TransporterProvider instead of a Map<String, Wagon> (#1475).
• Fixes: BOMs imported as ${project.groupId}:bom:${project.version} no longer fail with "Not fully interpolated artifact" on Maven 3.10 and 4 (#1486). A property that only a child module uses is evaluated with that module's rules again, as in 2.22.0 (#1481). numThreads is honored by the use-latest-* and use-next-* goals (#1478).

🚨 Removed

• Leave pre-release versions out by default in every goal and report (#1482) @​slachiewicz

🚀 New features and improvements

• Add minimumReleaseAge to hold back recent releases (#1484) @​slachiewicz, carrying a commit by @​Master-Code-Programmer
• Apply the ignore rules from the Dependabot configuration (#1480) @​slachiewicz
• set-property should add the property if it does not yet exist (#1340) @​mandritschke
• Load rulesUri through the Resolver transporter instead of Wagon (#1475) @​slachiewicz
• Update plugin versions with processPlugins in the use-latest and use-next goals (#1477) @​slachiewicz

🐛 Bug Fixes

• Interpolate raw dependencyManagement coordinates before resolving versions (#1486) @​slachiewicz
• Allow downgrading x.0.0-SNAPSHOT to an x.0.0 pre-release with allowMajorUpdates=false (#1374) @​dcolazin
• Evaluate a parent property used only by a module in that module (#1481) @​slachiewicz
• Honor numThreads in the use-latest and use-next goals (#1478) @​slachiewicz

📦 Dependency updates

• Remove the maven-shared-utils dependency (#1483) @​slachiewicz

... (truncated)

Commits

• 3126d12 [maven-release-plugin] prepare release 2.25.1
• 2718359 Treat a parent plugin without <inherited> as inherited (#1488)
• 998e047 [maven-release-plugin] prepare for next development iteration
• 818c81d [maven-release-plugin] prepare release 2.25.0
• ff38086 Set the next version to 2.25.0-SNAPSHOT
• a69a6c4 Interpolate raw dependencyManagement coordinates (#1485)
• 354b1f1 Add an IT for minimumReleaseAge and its exemption
• df0536b Read release dates through the Resolver and rename the filter minimumReleaseAge
• e80cc41 MinDaysOld: Made minimum age of artifacts configurable
• a7f3cf1 Parse each version once when applying the pre-release policy
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)