Bump maven-shade-plugin from 3.3.0 to 3.5.0 #77

Closed
dependabot[bot] wants to merge 1 commit from dependabot/maven/org.apache.maven.plugins-maven-shade-plugin-3.5.0 into master
dependabot[bot] commented 2023-06-19 20:09:39 +00:00 (Migrated from github.com)

Bumps maven-shade-plugin from 3.3.0 to 3.5.0.

Release notes

Sourced from maven-shade-plugin's releases.

Maven Shade Plugin 3.5.0 release notes https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317921&version=12352951

Release Notes - Maven Shade Plugin - Version 3.5.0


What's Changed

... (truncated)

Commits
  • 963e30e [maven-release-plugin] prepare release maven-shade-plugin-3.5.0
  • 9265316 Fix for tmp file creation
  • fc0f784 Get rid of security alerts (#190)
  • d3dd181 [MSHADE-446] Update dependencies (#189)
  • f251212 [MSHADE-447] Do not use forked guice, use sisu from parent (#188)
  • 2e7f87a Add git blame ignore (for reformat)
  • d5d3bd7 refactor: refactor bad smell UnnecessaryToStringCall (#186)
  • 57edc03 Bump asmVersion from 9.4 to 9.5
  • b598aef [MNG-6829] Replace StringUtils#isEmpty(String) and #isNotEmpty(String) (#187)
  • f15f26b [MSHADE-443] Fix problems with shadeSourcesContent (#185)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
Bumps [maven-shade-plugin](https://github.com/apache/maven-shade-plugin) from 3.3.0 to 3.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/maven-shade-plugin/releases">maven-shade-plugin's releases</a>.</em></p> <blockquote> <p>Maven Shade Plugin 3.5.0 release notes <a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317921&amp;version=12352951">https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317921&amp;version=12352951</a></p> <h2>Release Notes - Maven Shade Plugin - Version 3.5.0</h2> <!-- raw HTML omitted --> <!-- raw HTML omitted --> <!-- raw HTML omitted --> <!-- raw HTML omitted --> <hr /> <h2>What's Changed</h2> <ul> <li>(doc) Fix iterated collection by <a href="https://github.com/pzygielo"><code>@​pzygielo</code></a> in <a href="https://redirect.github.com/apache/maven-shade-plugin/pull/164">apache/maven-shade-plugin#164</a></li> <li>Update overlapping resources warning by <a href="https://github.com/pzygielo"><code>@​pzygielo</code></a> in <a href="https://redirect.github.com/apache/maven-shade-plugin/pull/171">apache/maven-shade-plugin#171</a></li> <li>[MSHADE-438] Update to Maven 3.2.5 by <a href="https://github.com/cstamas"><code>@​cstamas</code></a> in <a href="https://redirect.github.com/apache/maven-shade-plugin/pull/175">apache/maven-shade-plugin#175</a></li> <li>Bump xmlunit-legacy from 2.9.0 to 2.9.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/apache/maven-shade-plugin/pull/173">apache/maven-shade-plugin#173</a></li> <li>[MSHADE-400] Self-minimisation with custom entry points by <a href="https://github.com/kriegaex"><code>@​kriegaex</code></a> in <a href="https://redirect.github.com/apache/maven-shade-plugin/pull/110">apache/maven-shade-plugin#110</a></li> <li>Bump mrm-maven-plugin from 1.4.1 to 1.5.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/apache/maven-shade-plugin/pull/170">apache/maven-shade-plugin#170</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/maven-shade-plugin/commit/963e30e0cb2a10f8f453ba81b32471360c3b640a"><code>963e30e</code></a> [maven-release-plugin] prepare release maven-shade-plugin-3.5.0</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/92653160c0e31cd32e11c99d337368f146e4d807"><code>9265316</code></a> Fix for tmp file creation</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/fc0f78401a17177c2f52dac50be5221a490f828f"><code>fc0f784</code></a> Get rid of security alerts (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/190">#190</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/d3dd181a30ddef0d34b8edbb12d4ae78e4b16488"><code>d3dd181</code></a> [MSHADE-446] Update dependencies (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/189">#189</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/f2512124d76ca86d2b780564e7116490ce9f8312"><code>f251212</code></a> [MSHADE-447] Do not use forked guice, use sisu from parent (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/188">#188</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/2e7f87ad1c7c868e582a69a83bb56f6a54369a08"><code>2e7f87a</code></a> Add git blame ignore (for reformat)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/d5d3bd75d1be5691b1d8dab5a5592812a2a5da76"><code>d5d3bd7</code></a> refactor: refactor bad smell UnnecessaryToStringCall (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/186">#186</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/57edc03162557d052deec762d6b87f1a4c24d653"><code>57edc03</code></a> Bump asmVersion from 9.4 to 9.5</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/b598aef734daf361c4eb5f81b1df97d95406198a"><code>b598aef</code></a> [MNG-6829] Replace StringUtils#isEmpty(String) and #isNotEmpty(String) (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/187">#187</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/f15f26b1b8100d0c3bfa15b9e8b233922432ee15"><code>f15f26b</code></a> [MSHADE-443] Fix problems with shadeSourcesContent (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/185">#185</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apache/maven-shade-plugin/compare/maven-shade-plugin-3.3.0...maven-shade-plugin-3.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-shade-plugin&package-manager=maven&previous-version=3.3.0&new-version=3.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
dependabot[bot] commented 2023-08-13 14:01:42 +00:00 (Migrated from github.com)

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file. If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Pull request closed

Sign in to join this conversation.
No description provided.