[commons-release-plugin] branch dependabot/maven/com.github.spotbugs-spotbugs-4.1.4 updated (5348052 -> bf0bea3)

[gi...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a change to branch dependabot/maven/com.github.spotbugs-spotbugs-4.1.4
in repository https://gitbox.apache.org/repos/asf/commons-release-plugin.git.


 discard 5348052  Bump spotbugs from 4.1.3 to 4.1.4
     add 695a4e1  COMMONSSITE-138: create signature validation script for releases
     add 716a3ad  (add) license to file
     add cac3ab9  COMMONSSITE-138: add signature-validator.sh to staged directory
     add f069309  Merge branch 'master' of github.com:apache/commons-release-plugin into COMMONSSITE-138
     add 0c01348  COMMONSSITE-138: add assert statement to test
     add 73a483f  Add SECURITY.MD.
     add fbca557  Typo.
     add 85aba91  Bump checkstyle from 8.36.2 to 8.37
     add 5d1230e  Merge branch 'pr-27'
     add 1eba9b0  Bump spotbugs-maven-plugin from 4.1.3 to 4.1.4
     add a368cfc  Merge branch 'pr-26'
     add bf0bea3  Bump spotbugs from 4.1.3 to 4.1.4

This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version.  This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:

 * -- * -- B -- O -- O -- O   (5348052)
            \
             N -- N -- N   refs/heads/dependabot/maven/com.github.spotbugs-spotbugs-4.1.4 (bf0bea3)

You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.

Any revisions marked "omit" are not gone; other references still
refer to them.  Any revisions marked "discard" are gone forever.

No new revisions were added by this update.

Summary of changes:
 .../plugin/velocity/HEADER.vm => SECURITY.md       |  18 +--
 pom.xml                                            |   4 +-
 src/changes/changes.xml                            |   5 +-
 .../mojos/CommonsDistributionStagingMojo.java      |  27 ++++
 src/main/resources/signature-validator.sh          | 159 +++++++++++++++++++++
 .../mojos/CommonsDistributionStagingMojoTest.java  |   2 +
 6 files changed, 195 insertions(+), 20 deletions(-)
 copy src/main/resources/org/apache/commons/release/plugin/velocity/HEADER.vm => SECURITY.md (62%)
 mode change 100755 => 100644
 create mode 100644 src/main/resources/signature-validator.sh