appassembler icon indicating copy to clipboard operation
appassembler copied to clipboard

Bump org.codehaus.plexus:plexus-archiver from 3.6.0 to 4.9.2

Open dependabot[bot] opened this issue 11 months ago • 0 comments

Bumps org.codehaus.plexus:plexus-archiver from 3.6.0 to 4.9.2.

Release notes

Sourced from org.codehaus.plexus:plexus-archiver's releases.

4.9.2

📦 Dependency updates

👻 Maintenance

4.9.1

🚀 New features and improvements

  • #311 - provide fluent setter for usingDefaultExcludes flag in Abstrac… (#312) @​redzi

📦 Dependency updates

👻 Maintenance

4.9.0

🚀 New features and improvements

📦 Dependency updates

👻 Maintenance

... (truncated)

Changelog

Sourced from org.codehaus.plexus:plexus-archiver's changelog.

Plexus Archiver Release Notes

Newer release

Newer release notes are maintained on GitHub releases

Plexus Archiver 4.2.1

Bugs

  • [Issue #126][issue-126] - Fixed broken javadoc for Archiver#configureReproducible.
  • [Issue #127][issue-127] - Fixed reproducible zip entry time depends on local daylight saving time.

Plexus Archiver 4.2.0

Improvements

  • [Pull Request #121][pr-121] - Add API to configure reproducible archives - Archiver#configureReproducible.
  • Add option to force the user and group for all archive entries.
  • Add option to force the last modified date for all archive entries.
  • [Issue #114][issue-114] - Add option to provide Comparator for Archiver. The archive entries will be added in the order specified by the provided comparator.
  • [Pull Request #117][pr-117] - Add option to limit the output size for AbstractZipUnArchiver as a way of protection against ZIP bombs. Thanks to Sergey Patrikeev and Semyon Atamas.
  • Various code improvements. Thanks to Semyon Atamas and Sergey Patrikeev.

Bugs

  • [Issue #94][issue-94] - Fixed setting archiver destination to the working directory causes NullPointerException.

Tasks

  • [Issue #119][issue-119] - Updated dependencies: commons-compress to 1.18, plexus-io to 3.2.0 and plexus-utils to 3.3.0.

Plexus Archiver 4.1.0

Improvements

... (truncated)

Commits
  • 30e3a05 [maven-release-plugin] prepare release plexus-archiver-4.9.2
  • 0d2bedc Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.1
  • caeb7d8 Bump org.codehaus.plexus:plexus from 16 to 17
  • 6077fd7 Bump org.apache.commons:commons-compress from 1.25.0 to 1.26.0
  • 7286275 Bump org.assertj:assertj-core from 3.25.2 to 3.25.3
  • 41d252e Bump release-drafter/release-drafter from 5 to 6
  • d8fb233 Bump org.assertj:assertj-core from 3.25.1 to 3.25.2
  • 661e428 Bump org.assertj:assertj-core from 3.24.2 to 3.25.1
  • 2e891e5 Bump org.codehaus.plexus:plexus-io from 3.4.1 to 3.4.2
  • a61668c [maven-release-plugin] prepare for next development iteration
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot[bot] avatar Mar 15 '24 16:03 dependabot[bot]