You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/03/26 01:08:16 UTC
[PR] Bump org.codehaus.plexus:plexus-sec-dispatcher from 2.0 to 4.1.0 [maven]
dependabot[bot] opened a new pull request, #11848:
URL: https://github.com/apache/maven/pull/11848
Bumps [org.codehaus.plexus:plexus-sec-dispatcher](https://github.com/codehaus-plexus/plexus-sec-dispatcher) from 2.0 to 4.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/releases">org.codehaus.plexus:plexus-sec-dispatcher's releases</a>.</em></p>
<blockquote>
<h2>4.1.0</h2>
<!-- raw HTML omitted -->
<h2>🚀 New features and improvements</h2>
<ul>
<li>Version settings-security model independently of JAR (impl/spec version) (<a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/94">#94</a>) <a href="https://github.com/kwin"><code>@kwin</code></a></li>
<li>Add 1Password CLI integration (<a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/87">#87</a>) <a href="https://github.com/kwin"><code>@kwin</code></a></li>
<li>Master source lookup dispatcher (<a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/93">#93</a>) <a href="https://github.com/kwin"><code>@kwin</code></a></li>
<li>Provide security settings model documentation (<a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/89">#89</a>) <a href="https://github.com/kwin"><code>@kwin</code></a></li>
</ul>
<h2>4.0.3</h2>
<!-- raw HTML omitted -->
<h2>🚀 New features and improvements</h2>
<ul>
<li>File master source (<a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/85">#85</a>) <a href="https://github.com/cstamas"><code>@cstamas</code></a></li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Legacy passwords may have leading or trailing comment. (<a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/83">#83</a>) <a href="https://github.com/cstamas"><code>@cstamas</code></a></li>
<li>Trim master password when someone uses strange XML formatting (<a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/82">#82</a>) <a href="https://github.com/cstamas"><code>@cstamas</code></a></li>
</ul>
<h2>4.0.2</h2>
<p>Bugfix release, legacy (mvn3) passwords were detected but not handled.</p>
<h2>What's Changed</h2>
<ul>
<li>Do handle legacy as well by <a href="https://github.com/cstamas"><code>@cstamas</code></a> in <a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/79">codehaus-plexus/plexus-sec-dispatcher#79</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/compare/plexus-sec-dispatcher-4.0.1...plexus-sec-dispatcher-4.0.2">https://github.com/codehaus-plexus/plexus-sec-dispatcher/compare/plexus-sec-dispatcher-4.0.1...plexus-sec-dispatcher-4.0.2</a></p>
<h2>4.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Ingest plexus-cipher by <a href="https://github.com/cstamas"><code>@cstamas</code></a> in <a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/78">codehaus-plexus/plexus-sec-dispatcher#78</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/compare/plexus-sec-dispatcher-4.0.0...plexus-sec-dispatcher-4.0.1">https://github.com/codehaus-plexus/plexus-sec-dispatcher/compare/plexus-sec-dispatcher-4.0.0...plexus-sec-dispatcher-4.0.1</a></p>
<h2>4.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Unified, no more logic than dispatch in SecDispatcher, and is self-describable by <a href="https://github.com/cstamas"><code>@cstamas</code></a> in <a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/75">codehaus-plexus/plexus-sec-dispatcher#75</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/compare/plexus-sec-dispatcher-3.0.0...plexus-sec-dispatcher-4.0.0">https://github.com/codehaus-plexus/plexus-sec-dispatcher/compare/plexus-sec-dispatcher-3.0.0...plexus-sec-dispatcher-4.0.0</a></p>
<h2>3.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Spelling by <a href="https://github.com/jsoref"><code>@jsoref</code></a> in <a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/2">codehaus-plexus/plexus-sec-dispatcher#2</a></li>
<li>Switch from Sonatype to Plexus by <a href="https://github.com/slachiewicz"><code>@slachiewicz</code></a> in <a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/5">codehaus-plexus/plexus-sec-dispatcher#5</a></li>
<li>add gh actions, release drafter and dependabot by <a href="https://github.com/olamy"><code>@olamy</code></a> in <a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/7">codehaus-plexus/plexus-sec-dispatcher#7</a></li>
<li>Bump plexus-utils from 3.3.0 to 3.4.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/9">codehaus-plexus/plexus-sec-dispatcher#9</a></li>
<li>Bump plexus from 6.5 to 8 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/pull/10">codehaus-plexus/plexus-sec-dispatcher#10</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/commit/9df5975c8a499c2524acb540bbf46df22787580f"><code>9df5975</code></a> [maven-release-plugin] prepare for next development iteration</li>
<li><a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/commit/551ece0b0c5c39bb8d752fa71c62ad3d01381a86"><code>551ece0</code></a> [maven-release-plugin] prepare release plexus-sec-dispatcher-4.1.0</li>
<li><a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/commit/85eb8a4ec2fa6d935f1898f5f91bedebb9941be8"><code>85eb8a4</code></a> Version settings-security model independently of JAR (impl/spec version)</li>
<li><a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/commit/6c41a62ecae9fbe51fc59d23b54ab6039e4f93ea"><code>6c41a62</code></a> Update version to 4.1.0-SNAPSHOT</li>
<li><a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/commit/3d36eb7eef7da27a710941e2048168adf12bb7a9"><code>3d36eb7</code></a> Add 1Password CLI integration</li>
<li><a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/commit/47cbecf1a96f4576aaebd5a628f94018139cb102"><code>47cbecf</code></a> Master source lookup dispatcher (<a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/issues/93">#93</a>)</li>
<li><a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/commit/35ebb3d6e46d4465e1ecea069c3b87bdea416ae9"><code>35ebb3d</code></a> Provide security settings model documentation</li>
<li><a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/commit/87a2ff122c6cc23b8ddc474d470b1fb20ca26bbc"><code>87a2ff1</code></a> [maven-release-plugin] prepare for next development iteration</li>
<li><a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/commit/b5869449164aa551768fed00defee92974aeb4d9"><code>b586944</code></a> [maven-release-plugin] prepare release plexus-sec-dispatcher-4.0.3</li>
<li><a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/commit/01406e61847cc50e748b86ddea31ac2c6ee74ac6"><code>01406e6</code></a> File master source (<a href="https://redirect.github.com/codehaus-plexus/plexus-sec-dispatcher/issues/85">#85</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/codehaus-plexus/plexus-sec-dispatcher/compare/plexus-sec-dispatcher-2.0...sec-dispatcher-4.1.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump org.codehaus.plexus:plexus-sec-dispatcher from 2.0 to 4.1.0 [maven]
Posted by "slawekjaranowski (via GitHub)" <gi...@apache.org>.
slawekjaranowski commented on PR #11848:
URL: https://github.com/apache/maven/pull/11848#issuecomment-4132144568
@dependabot ignore this major version
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump org.codehaus.plexus:plexus-sec-dispatcher from 2.0 to 4.1.0 [maven]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] closed pull request #11848: Bump org.codehaus.plexus:plexus-sec-dispatcher from 2.0 to 4.1.0
URL: https://github.com/apache/maven/pull/11848
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump org.codehaus.plexus:plexus-sec-dispatcher from 2.0 to 4.1.0 [maven]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] commented on PR #11848:
URL: https://github.com/apache/maven/pull/11848#issuecomment-4132145159
OK, I won't notify you about version 4.x.x again, unless you re-open this PR.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org