[jira] [Commented] (MNG-7670) Upgrade misc dependencies

["Tamas Cservenak (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/MNG-7670?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17693246#comment-17693246 ] 

Tamas Cservenak commented on MNG-7670:
--------------------------------------

I would skip this for 3.9.1, maybe do it for 3.9.2, but be very careful after all these fiasco with plexus-utils, plexus-containers, etc.

> Upgrade misc dependencies
> -------------------------
>
>                 Key: MNG-7670
>                 URL: https://issues.apache.org/jira/browse/MNG-7670
>             Project: Maven
>          Issue Type: Dependency upgrade
>            Reporter: Sylwester Lachiewicz
>            Priority: Minor
>             Fix For: 3.9.1-candidate
>
>
> [INFO] The following dependencies in Dependency Management have newer versions:
> [INFO]   com.google.guava:guava .......................... 30.1-jre -> 31.1-jre
> [INFO]   org.apache.commons:commons-lang3 ..................... 3.8.1 -> 3.12.0
> [INFO]   org.codehaus.plexus:plexus-classworlds ................ 2.6.0 -> 2.7.0
> [INFO]   org.codehaus.plexus:plexus-component-annotations ...... 2.1.0 -> 2.1.1
> [INFO]   org.codehaus.plexus:plexus-utils ...................... 3.4.2 -> 3.5.0
> [INFO]   org.hamcrest:hamcrest-core ................................ 1.3 -> 2.2
> [INFO]   org.hamcrest:hamcrest-library ............................. 1.3 -> 2.2
> [INFO]   org.mockito:mockito-core ............................ 2.21.0 -> 4.11.0
> [INFO]   org.powermock:powermock-reflect ....................... 1.7.4 -> 2.0.9
> [INFO]   org.xmlunit:xmlunit-core .............................. 2.2.1 -> 2.9.1
> [INFO]   org.xmlunit:xmlunit-matchers .......................... 2.2.1 -> 2.9.1
> Logback 1.3.x depends on SLF4J 2.x, Logback 1.4.x requires Java 11



--
This message was sent by Atlassian Jira
(v8.20.10#820010)