chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
armonik	>=3.25.0 → >=3.29.0
jax	>=0.6.1 → >=0.9.2
maven (source)	3.9.6 → 3.9.14
maven-wrapper (source)	3.2.0 → 3.3.4
myst_parser	==4.0.0 → ==4.0.1
pymonik	>=0.2.2 → >=0.2.5
sphinx (changelog)	==8.1.3 → ==8.2.3
sphinx-rtd-theme	==3.0.2 → ==3.1.0
sphinxcontrib-mermaid (changelog)	==1.0.0 → ==1.2.3
org.apache.maven.plugins:maven-assembly-plugin (source)	3.7.1 → 3.8.0
org.codehaus.mojo:exec-maven-plugin (source)	3.1.0 → 3.6.3
org.apache.maven.plugins:maven-shade-plugin (source)	3.6.1 → 3.6.2
org.apache.maven.plugins:maven-compiler-plugin (source)	3.12.1 → 3.15.0
org.apache.maven.plugins:maven-wrapper-plugin (source)	3.2.0 → 3.3.4
ch.qos.logback:logback-classic (source, changelog)	1.5.20 → 1.5.32

---

Release Notes

aneoconsulting/ArmoniK.Api (armonik)

v3.29.0

Compare Source

   🚀 Features

• Added get_resource_data to TaskHandler  -  by @​AncientPatata in #​661 (90270)

   🐞 Bug Fixes

• Bad handling of cancellation in WaitForResultsAsync  -  by @​PierrePicard20 (45614)
• Angular package builds incorrect TaskOptionEnum  -  by @​fdewas-aneo in #​667 (ef5af)
• Bad handling of cancellation in WaitForResultsAsync  -  by @​PierrePicard20 in #​668 (15e38)
• grpc channel: Fix unix and tcp socket connection issues  -  by @​jfonseca-aneo in #​669 (cb7ed)

    View changes on GitHub

v3.28.3

Compare Source

   🏎 Performance

• Avoid sharing TCP connections accross channels  -  by @​lemaitre-aneo in #​659 (58eda)

    View changes on GitHub

v3.28.2

Compare Source

   🐞 Bug Fixes

• Session status in rust bindings  -  by @​aneojgurhem in #​654 (43993)
• Propagate right log level to formatter and writer  -  by @​lemaitre-aneo in #​653 (14870)
• Public ILogger for LocalLogger  -  by @​lemaitre-aneo in #​655 (f4130)

    View changes on GitHub

v3.28.1

Compare Source

   🐞 Bug Fixes

• Use System.Linq.AsyncEnumerable instead of System.Linq.Async to be compatible with dotnet 10  -  by @​aneojgurhem (21eb4)
• Use System.Linq.AsyncEnumerable instead of System.Linq.Async to be compatible with dotnet 10  -  by @​aneojgurhem in #​649 (b2dcb)

    View changes on GitHub

v3.28.0

Compare Source

   🚀 Features

• java:
  • Add gRPC channel builder with SSL/TLS configuration  -  by @​camory-aneo in #​629 (8d3a9)
  • Add retry policy for GrpcChannelBuilder  -  by @​camory (3573b)
  • Add retry policy for GrpcChannelBuilder  -  by @​camory in #​645 (c492d)

   🐞 Bug Fixes

• Remove grpc-proto from image used for cpp compilation  -  by @​jfonseca-aneo (690c0)
• Remove grpc-proto from image used for cpp compilation  -  by @​lemaitre-aneo in #​642 (fdfd3)
• Stream clear bug  -  by @​lemaitre-aneo in #​635 (abbbf)
• buffer: Utiliser .str() au lieu de .clear()  -  by Hugo Vuacheux (7291a)

    View changes on GitHub

v3.27.0

Compare Source

What's Changed

• refactor(java,proto)!: standardize Java gRPC package structure and add java_package options by @​camory-aneo in #​628
• chore: update dependencies by @​aneojgurhem in #​630
• chore: prepare release 3.27.0 by @​aneojgurhem in #​632

New Contributors

• @​camory-aneo made their first contribution in #​628

Full Changelog: aneoconsulting/ArmoniK.Api@3.26.1...3.27.0

v3.26.1

Compare Source

   🚀 Features

• Rust API server  -  by @​lemaitre-aneo in #​569 (12d2a)

   🐞 Bug Fixes

• Pod configuration gets used raw  -  by @​AncientPatata in #​622 (1fa91)
• Remove HashMap for names  -  by @​lemaitre-aneo in #​624 (8e3f5)
• Properly passing in task options in the worker's task handler  -  by @​AncientPatata in #​625 (424a7)

    View changes on GitHub

v3.26.0

Compare Source

   🚀 Features

• Option to turn off data deletion by armonik  -  by @​aneojgurhem (c6655)
• Option to turn off data deletion by armonik  -  by @​aneojgurhem in #​608 (560c9)

   🐞 Bug Fixes

• Fix TaskHandler  -  by @​dbrasseur-aneo (d061f)
• Add missing fields  -  by @​aneojgurhem (65996)
• Add-eslint-config  -  by @​fdewas-aneo (c2010)

    View changes on GitHub

jax-ml/jax (jax)

v0.9.2

Compare Source

• Changes:
  • The semi-private type jax._src.literals.TypedNdArray is now a subclass of
    np.ndarray, rather than a duck type of it.
  • {func}jax.numpy.arange with step specified no longer generates the array
    on host. The benefit is more efficient code, though this can lead to less
    precise outputs for narrow-width floats (e.g. bfloat16). To recover the
    previous behavior in this case, use jnp.array(np.arange(...)).

v0.9.1

Compare Source

• Changes:

  • JAX tracers that are not of Array type (e.g., of Ref type) will no
    longer report themselves to be instances of Array.
  • Using jax.shard_map in Explicit mode will raise an error
    if the PartitionSpec of input does not match the PartitionSpec specified in
    in_specs. In other words, it will act like an assert instead of an
    implicit reshard.
    in_specs is an optional argument so you can omit specifying it
    and shard_map will infer the PartitionSpec from the argument. If you
    want to reshard your inputs, you can use jax.reshard on the arguments and
    then pass those args to shard_map.

• New features:

  • Added a debug config jax_compilation_cache_check_contents. If set, we miss
    when get() is called on a value that has not been put() by the current
    process, even if the value is actually in the disk cache. When a value is
    put(), we verify that its contents match.

v0.9.0.1: JAX v0.9.0.1

Compare Source

JAX v0.9.0.1 is identical to v0.9.0 with the commits from the following four PRs patched in:

• openxla/xla#36579
• openxla/xla#36345
• openxla/xla#36755
• openxla/xla#36696

v0.9.0

Compare Source

• New features:

  • Added {func}jax.thread_guard, a context manager that detects when devices
    are used by multiple threads in multi-controller JAX.

• Bug fixes:

  • Fixed a workspace size calculation error for pivoted QR (magma_zgeqp3_gpu)
    in MAGMA 2.9.0 when using use_magma=True and pivoting=True.
    ({jax-issue}#34145).

• Deprecations:

  • The flag jax_collectives_common_channel_id was removed.
  • The jax_pmap_no_rank_reduction config state has been removed. The
    no-rank-reduction behavior is now the only supported behavior: a
    jax.pmapped function f sees inputs of the same rank as the input to
    jax.pmap(f). For example, if jax.pmap(f) receives shape (8, 128) on
    8 devices, then f receives shape (1, 128).
  • Setting the jax_pmap_shmap_merge config state is deprecated in JAX v0.9.0
    and will be removed in JAX v0.10.0.
  • {func}jax.numpy.fix is deprecated, anticipating the deprecation of
    {func}numpy.fix in NumPy v2.5.0. {func}jax.numpy.trunc is a drop-in
    replacement.

• Changes:

  • {func}jax.export now supports explicit sharding. This required a new
    export serialization format version that includes the NamedSharding,
    including the abstract mesh, and the partition spec. As part of this
    change we have added a restriction in the use of exported modules: when
    calling them the abstract mesh must match the one used at export time,
    including the axis names. Previously, only the number of the devices
    mattered.

v0.8.3: JAX v0.8.3

Compare Source

JAX v0.8.3 is identical to v0.8.2 with the following two bug fixes patched in:

• openxla/xla@4bc723d
• openxla/xla@21552fd

v0.8.2

Compare Source

• Deprecations

  • jax.lax.pvary has been deprecated.
    Please use jax.lax.pcast(..., to='varying') as the replacement.
  • Complex arguments passed to {func}jax.numpy.arange now result in a
    deprecation warning, because the output is poorly-defined.
  • From {mod}jax.core a number of symbols are newly deprecated including:
    call_impl, get_aval, mapped_aval, subjaxprs, set_current_trace,
    take_current_trace, traverse_jaxpr_params, unmapped_aval,
    AbstractToken, and TraceTag.
  • All symbols in {mod}jax.interpreters.pxla are deprecated. These are
    primarily JAX internal APIs, and users should not rely on them.

• Changes:

  • jax's Tracer no longer inherits from jax.Array at runtime. However,
    jax.Array now uses a custom metaclass such isinstance(x, Array) is true
    if an object x represents a traced Array. Only some Tracers represent
    Arrays, so it is not correct for Tracer to inherit from Array.

    For the moment, during Python type checking, we continue to declare Tracer
    as a subclass of Array, however we expect to remove this in a future
    release.

  • jax.experimental.si_vjp has been deleted.
    jax.vjp subsumes it's functionality.

v0.8.1

Compare Source

• New features:

  • {func}jax.jit now supports the decorator factory pattern; i.e instead of
    writing

    @​functools.partial(jax.jit, static_argnames=['n'])
    def f(x, n):
      ...
    

    you may write

    @​jax.jit(static_argnames=['n'])
    def f(x, n):
      ...
    

• Changes:

  • {func}jax.lax.linalg.eigh now accepts an implementation argument to
    select between QR (CPU/GPU), Jacobi (GPU/TPU), and QDWH (TPU)
    implementations. The EighImplementation enum is publicly exported from
    {mod}jax.lax.linalg.

  • {func}jax.lax.linalg.svd now implements an algorithm that uses the polar
    decomposition on CUDA GPUs. This is also an alias for the existing algorithm
    on TPUs.

• Bug fixes:

  • Fixed a bug introduced in JAX 0.7.2 where eigh failed for large matrices on
    GPU (({jax-issue}#33062).

• Deprecations:

  • jax.sharding.PmapSharding is now deprecated. Please use
    jax.NamedSharding instead.
  • jx.device_put_replicated is now deprecated. Please use jax.device_put
    with the appropriate sharding instead.
  • jax.device_put_sharded is now deprecated. Please use jax.device_put with
    the appropriate sharding instead.
  • Default axis_types of jax.make_mesh will change in JAX v0.9.0 to return
    jax.sharding.AxisType.Explicit. Leaving axis_types unspecified will raise a
    DeprecationWarning.
  • {mod}jax.cloud_tpu_init and its contents were deprecated. There is no reason for a user to import or use the contents of this module; JAX handles this for you automatically if needed.

v0.8.0

Compare Source

• Breaking changes:

  • JAX is changing the default jax.pmap implementation to one implemented in
    terms of jax.jit and jax.shard_map. jax.pmap is in maintenance mode
    and we encourage all new code to use jax.shard_map directly. See the
    migration guide for
    more information.
  • The auto= parameter of jax.experimental.shard_map.shard_map has been
    removed. This means that jax.experimental.shard_map.shard_map no longer
    supports nesting. If you want to nest shard_map calls, please use
    jax.shard_map.
  • JAX no longer allows passing objects that support __jax_array__ directly
    to, e.g. jit-ed functions. Call jax.numpy.asarray on them first.
  • {func}jax.numpy.cov is now returns NaN for empty arrays ({jax-issue}#32305),
    and matches NumPy 2.2 behavior for single-row design matrices ({jax-issue}#32308).
  • JAX no longer accepts Array values where a dtype value is expected. Call
    .dtype on these values first.
  • The deprecated function {func}jax.interpreters.mlir.custom_call was
    removed.
  • The jax.util, jax.extend.ffi, and jax.experimental.host_callback
    modules have been removed. All public APIs within these modules were
    deprecated and removed in v0.7.0 or earlier.
  • The deprecated symbol {obj}jax.custom_derivatives.custom_jvp_call_jaxpr_p
    was removed.
  • jax.experimental.multihost_utils.process_allgather raises an error when
    the input is a jax.Array and not fully-addressable and tiled=False. To fix
    this, pass tiled=True to your process_allgather invocation.
  • from {mod}jax.experimental.compilation_cache, the deprecated symbols
    is_initialized and initialize_cache were removed.
  • The deprecated function {func}jax.interpreters.xla.canonicalize_dtype
    was removed.
  • {mod}jaxlib.hlo_helpers has been removed. Use {mod}jax.ffi instead.
  • The option jax_cpu_enable_gloo_collectives has been removed. Use
    jax_cpu_collectives_implementation instead.
  • The previously-deprecated interpolation argument to
    {func}jax.numpy.percentile and {func}jax.numpy.quantile has been
    removed; use method instead.
  • The JAX-internal for_loop primitive was removed. Its functionality,
    reading from and writing to refs in the loop body, is now directly
    supported by {func}jax.lax.fori_loop. If you need help updating your
    code, please file a bug.
  • {func}jax.numpy.trimzeros now errors for non-1D input.
  • The where argument to {func}jax.numpy.sum and other reductions is now
    required to be boolean. Non-boolean values have resulted in a
    DeprecationWarning since JAX v0.5.0.
  • The deprecated functions in {mod} jax.dlpack, {mod} jax.errors, {mod}
    jax.lib.xla_bridge, {mod} jax.lib.xla_client, and {mod}
    jax.lib.xla_extension were removed.
  • jax.interpreters.mlir.dense_bool_array was removed. Use MLIR APIs to
    construct attributes instead.

• Changes

  • {func}jax.numpy.linalg.eig now returns a namedtuple (with attributes
    eigenvalues and eigenvectors) instead of a plain tuple.
  • {func}jax.grad and {func}jax.vjp will now round always primals to
    float32 if float64 mode is not enabled.
  • {func}jax.dlpack.from_dlpack now accepts arrays with non-default layouts,
    for example, transposed.
  • The default nonsymmetric eigendecomposition on NVIDIA GPUs now uses
    cusolver. The magma and LAPACK implementations are still available via the
    new implementation argument to {func}jax.lax.linalg.eig
    ({jax-issue}#27265). The use_magma argument is now deprecated in favor
    of implementation.
  • {func}jax.numpy.trim_zeros now follows NumPy 2.2 in supporting
    multi-dimensional inputs.

• Deprecations

  • {func}jax.experimental.enable_x64 and {func}jax.experimental.disable_x64
    are deprecated in favor of the new non-experimental context manager
    {func}jax.enable_x64.
  • {func}jax.experimental.shard_map.shard_map is deprecated; going forward use
    {func}jax.shard_map.
  • {func}jax.experimental.pjit.pjit is deprecated; going forward use
    {func}jax.jit.

v0.7.2

Compare Source

• Breaking changes:

  • {func}jax.dlpack.from_dlpack no longer accepts a DLPack capsule. This
    behavior was deprecated and is now removed. The function must be called
    with an array implementing __dlpack__ and __dlpack_device__.

• Changes

  • The minimum supported NumPy version is now 2.0. Since SciPy 1.13 is required
    for NumPy 2.0 support, the minimum supported SciPy version is now 1.13.

  • JAX now represents constants in its internal jaxpr representation as a
    TypedNdArray, which is a private JAX type that duck types as a
    numpy.ndarray. This type may be exposed to users via custom_jvp rules,
    for example, and may break code that uses isinstance(x, np.ndarray). If
    this breaks your code, you may convert these arrays to classic NumPy arrays
    using np.asarray(x).

• Bug fixes

  • arr.view(dtype=None) now returns the array unchanged, matching NumPy's
    semantics. Previously it returned the array with a float dtype.
  • jax.random.randint now produces a less-biased distribution for 8-bit and
    16-bit integer types ({jax-issue}#27742). To restore the previous biased
    behavior, you may temporarily set the jax_safer_randint configuration to
    False, but note this is a temporary config that will be removed in a
    future release.

• Deprecations:

  • The parameters enable_xla and native_serialization for jax2tf.convert
    are deprecated and will be removed in a future version of JAX. These were
    used for jax2tf with non-native serialization, which has been now removed.
  • Setting the config state jax_pmap_no_rank_reduction to False is
    deprecated. By default, jax_pmap_no_rank_reduction will be set to True
    and jax.pmap shards will not have their rank reduced, keeping the same
    rank as their enclosing array.

v0.7.1

Compare Source

• New features

  • JAX now ships Python 3.14 and 3.14t wheels.
  • JAX now ships Python 3.13t and 3.14t wheels on Mac. Previously we only
    offered free-threading builds on Linux.

• Changes

  • Exposed jax.set_mesh which acts as a global setter and a context manager.
    Removed jax.sharding.use_mesh in favor of jax.set_mesh.
  • JAX is now built using CUDA 12.9. All versions of CUDA 12.1 or newer remain
    supported.
  • {func}jax.lax.dot now implements the general dot product via the optional
    dimension_numbers argument.

• Deprecations:

  • {func}jax.lax.zeros_like_array is deprecated. Please use
    {func}jax.numpy.zeros_like instead.
  • Attempting to import {mod}jax.experimental.host_callback now results in
    a DeprecationWarning, and will result in an ImportError starting in JAX
    v0.8.0. Its APIs have raised NotImplementedError since JAX version 0.4.35.
  • In {func}jax.lax.dot, passing the precision and preferred_element_type
    arguments by position is deprecated. Pass them by explicit keyword instead.
  • Several dozen internal APIs have been deprecated from {mod}jax.interpreters.ad,
    {mod}jax.interpreters.batching, and {mod}jax.interpreters.partial_eval; they
    are used rarely if ever outside JAX itself, and most are deprecated without any
    public replacement.

v0.7.0

Compare Source

• New features:

  • Added jax.P which is an alias for jax.sharding.PartitionSpec.
  • Added {func}jax.tree.reduce_associative.
  • The {attr}jax.numpy.ndarray.at indexing methods now support a wrap_negative_indices
    argument, which defaults to True to match the current behavior ({jax-issue}#29434).

• Breaking changes:

  • JAX is migrating from GSPMD to Shardy by default. See the
    migration guide
    for more information.
  • JAX autodiff is switching to using direct linearization by default (instead of
    implementing linearization via JVP and partial eval).
    See migration guide
    for more information.
  • jax.stages.OutInfo has been replaced with jax.ShapeDtypeStruct.
  • {func}jax.jit now requires fun to be passed by position, and additional
    arguments to be passed by keyword. Doing otherwise will result in an error
    starting in v0.7.x. This raised a DeprecationWarning in v0.6.x.
  • The minimum Python version is now 3.11. 3.11 will remain the minimum
    supported version until July 2026.
  • Layout API renames:
    • Layout, .layout, .input_layouts and .output_layouts have been
      renamed to Format, .format, .input_formats and .output_formats
    • DeviceLocalLayout, .device_local_layout have been renamed to Layout
      and .layout
  • jax.experimental.shard module has been deleted and all the APIs have been
    moved to the jax.sharding endpoint. So use jax.sharding.reshard,
    jax.sharding.auto_axes and jax.sharding.explicit_axes instead of their
    experimental endpoints.
  • lax.infeed and lax.outfeed were removed, after being deprecated in
    JAX 0.6. The transfer_to_infeed and transfer_from_outfeed methods were
    also removed the Device objects.
  • The jax.extend.core.primitives.pjit_p primitive has been renamed to
    jit_p, and its name attribute has changed from "pjit" to "jit".
    This affects the string representations of jaxprs. The same primitive is no
    longer exported from the jax.experimental.pjit module.
  • The (undocumented) function jax.extend.backend.add_clear_backends_callback
    has been removed. Users should use jax.extend.backend.register_backend_cache
    instead.
  • out_sharding arg added to x.at[y].set and x.at[y].add. Previous
    behavior propagating operand sharding removed. Please use
    x.at[y].set/add(z, out_sharding=jax.typeof(x).sharding) to retain previous
    behavior if scatter op requires collectives.

• Deprecations:

  • {obj}jax.dlpack.SUPPORTED_DTYPES is deprecated; please use the new
    {func}jax.dlpack.is_supported_dtype function.
  • {func}jax.scipy.special.sph_harm has been deprecated following a similar
    deprecation in SciPy; use {func}jax.scipy.special.sph_harm_y instead.
  • From {mod}jax.interpreters.xla, the previously deprecated symbols
    abstractify and pytype_aval_mappings have been removed.
  • {func}jax.interpreters.xla.canonicalize_dtype is deprecated. For
    canonicalizing dtypes, prefer {func}jax.dtypes.canonicalize_dtype.
    For checking whether an object is a valid jax input, prefer
    {func}jax.core.valid_jaxtype.
  • From {mod}jax.core, the previously deprecated symbols AxisName,
    ConcretizationTypeError, axis_frame, call_p, closed_call_p,
    get_type, trace_state_clean, typematch, and typecheck have been
    removed.
  • From {mod}jax.lib.xla_client, the previously deprecated symbols
    DeviceAssignment, get_topology_for_devices, and mlir_api_version
    have been removed.
  • jax.extend.ffi was removed after being deprecated in v0.5.0.
    Use {mod}jax.ffi instead.
  • {func}jax.lib.xla_bridge.get_compile_options is deprecated, and replaced by
    {func}jax.extend.backend.get_compile_options.

v0.6.2

Compare Source

• New features:

  • Added {func}jax.tree.broadcast which implements a pytree prefix broadcasting helper.

• Changes

  • The minimum NumPy version is 1.26 and the minimum SciPy version is 1.12.

apache/maven (maven)

v3.9.14

Compare Source

v3.9.13

Compare Source

v3.9.12: 3.9.12

Compare Source

🚀 New features and improvements

• [3.9.x] Apply resolver changes and improvements (#​11536) @​cstamas
• Update formatting of prerequisites-requirements error to improve readability (#​11523) @​slawekjaranowski
• Allow a Maven plugin to require a Java version (#​11479) @​slawekjaranowski
• Use MavenRepositorySystem in ProjectBuildingHelper instead of deprecated RepositorySystem (#​11358) @​slawekjaranowski
• Make maven.config use UTF8 (#​11264) @​cstamas
• Simplify prefix resolution (#​11197) @​slawekjaranowski

🐛 Bug Fixes

• Add default implementation for new method in MavenPluginManager (#​11522) @​slawekjaranowski
• Repository layout should be used in MavenRepositorySystem (#​11495) @​slawekjaranowski
• Fix plugin prefix resolution when metadata is not available from repository (#​11290) @​slawekjaranowski
• Improve source root modification warning message (#​11105) @​gnodet
• Bug: bad cache isolation between two sessions (#​11082) @​cstamas
• Set Guice class loading to CHILD - avoid using terminally deprecated methods (#​11003) @​slawekjaranowski
• Avoid parsing MAVEN_OPTS (3.9.x) (#​10969) @​BobVul

📝 Documentation updates

• clarify repository vs deployment repository (#​11492) @​hboutemy
• add maintained branches (#​11448) @​hboutemy

👻 Maintenance

• Add IntelliJ icon (#​11408) @​Bukama
• Build by JDK 25 (#​11187) @​slawekjaranowski
• Deprecate org.apache.maven.repository.RepositorySystem in 3.9.x (#​11096) @​slawekjaranowski

🔧 Build

• Bump actions/download-artifact from 5.0.0 to 6.0.0 (#​11335) @​dependabot[bot]
• Bump actions/upload-artifact from 4.6.2 to 5.0.0 (#​11336) @​dependabot[bot]

📦 Dependency updates

• Bump actions/cache from 4.3.0 to 5.0.0 (#​11542) @​dependabot[bot]
• Bump resolverVersion from 1.9.24 to 1.9.25 (#​11533) @​dependabot[bot]
• Bump actions/checkout from 6.0.0 to 6.0.1 (#​11512) @​dependabot[bot]
• Bump actions/setup-java from 5.0.0 to 5.1.0 (#​11519) @​dependabot[bot]
• Bump actions/checkout from 5.0.1 to 6.0.0 (#​11476) @​dependabot[bot]
• Bump actions/checkout from 5.0.0 to 5.0.1 (#​11458) @​dependabot[bot]
• Bump commons-cli:commons-cli from 1.10.0 to 1.11.0 (#​11438) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-interpolation from 1.28 to 1.29 (#​11416) @​dependabot[bot]
• Bump commons-io:commons-io from 2.20.0 to 2.21.0 (#​11417) @​dependabot[bot]
• Bump xmlunitVersion from 2.10.4 to 2.11.0 (#​11331) @​dependabot[bot]
• Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.24 to 1.26 (#​11231) @​dependabot[bot]
• Bump org.ow2.asm:asm from 9.8 to 9.9 (#​11203) @​dependabot[bot]
• Bump actions/cache from 4.2.4 to 4.3.0 (#​11172) @​dependabot[bot]
• Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre (#​11143) @​dependabot[bot]
• Bump xmlunitVersion from 2.10.3 to 2.10.4 (#​11121) @​dependabot[bot]
• Bump actions/cache from 4.2.3 to 4.2.4 (#​11032) @​dependabot[bot]
• Bump commons-cli:commons-cli from 1.9.0 to 1.10.0 (#​11018) @​dependabot[bot]
• Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#​10966) @​dependabot[bot]

v3.9.11: 3.9.11

Compare Source

🚀 New features and improvements

• Augment version range resolution used repositories (#​2574) @​cstamas

🐛 Bug Fixes

• Deduplicate filtered dependency graph (#​2489) @​alzimmermsft
• Move ensure in boundaries of project lock (#​2470) @​cstamas

👻 Maintenance

• [MNGSITE-393] - remove references to Maven 2 (#​2438) @​elharo
• Update CONTRIBUTING after GitHub issues enabled (#​2449) @​slawekjaranowski
• Enable Github Issues (3.9.x) (#​2414) @​Bukama
• [MNG-8763] - Remove name from site bannerLeft (#​2419) @​slawekjaranowski

🔧 Build

• Pin GitHub action versions by hash (#​10898) @​slawekjaranowski
• Build the project by JDK 21 as default (#​10896) @​slawekjaranowski
• Use Maven 3.9.10 for build on GitHub (#​2452) @​slawekjaranowski

📦 Dependency updates

• Bump resolverVersion from 1.9.23 to 1.9.24 (#​2540) @​dependabot[bot]
• Bump xmlunitVersion from 2.10.2 to 2.10.3 (#​2500) @​dependabot[bot]
• Bump org.apache.maven:maven-parent from 44 to 45 (#​2491) @​dependabot[bot]
• Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.0 to 3.6.1 (#​2432) @​dependabot[bot]

v3.9.10: 3.9.10

Compare Source

Release Notes - Maven - Version 3.9.10

Bug

• [MNG-8096] - Inconsistent dependency resolution behaviour for concurrent multi-module build can cause failures
• [MNG-8169] - MINGW support requires --add-opens java.base/java.lang=ALL-UNNAMED
• [MNG-8170] - Maven 3.9.8 contains weird native library for Jansi on Windows/arm64
• [MNG-8211] - Maven should fail builds that use CI Friendly versions but have no values set
• [MNG-8248] - WARNING: A restricted method in java.lang.System has been called
• [MNG-8256] - ProjectDependencyGraph bug: in case of filtering, non-direct module links are lost
• [MNG-8315] - Failure of mvn.cmd if a .mvn directory is located at drive root
• [MNG-8396] - Maven takes forever to resume
• [MNG-8711] - "Duplicate artifact" in LifecycleDependencyResolver

Improvement

• [MNG-8370] - Introduce maven.repo.local.head
• [MNG-8399] - JDK 24+ issues warning about usage of sun.misc.Unsafe
• [MNG-8707] - Add methods to remove compile and test source roots
• [MNG-8712] - improve dependency version explanation: it&#​39;s a requirement, not always effective version
• [MNG-8717] - Remove maven-plugin-plugin:addPluginArtifactMetadata from default binding
• [MNG-8722] - Use a single standalone version of asm
• [MNG-8731] - Use https for xsi:schemaLocation in generated descriptors
• [MNG-8734] - Simplify scripting like "get project version" cases

Task

• [MNG-8728] - Bump Eclipse Sisu from 0.9.0.M3 to 0.9.0.M4 and use Java 24 on CI

Dependency upgrade

• [MNG-8289] - Update Plexus annotations to 2.2.0
• [MNG-8443] - Bump com.google.guava:guava from 33.2.1-jre to 33.4.0-jre
• [MNG-8531] - Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0
• [MNG-8532] - Bump commons-io:commons-io from 2.16.1 to 2.18.0
• [MNG-8534] - Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.0 to 3.2.1
• [MNG-8635] - Bump com.google.guava:failureaccess from 1.0.2 to 1.0.3
• [MNG-8636] - Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre
• [MNG-8640] - Bump org.apache.maven:maven-parent from 43 to 44
• [MNG-8661] - Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre
• [MNG-8701] - Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28
• [MNG-8702] - Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0
• [MNG-8703] - Bump commons-io:commons-io from 2.18.0 to 2.19.0
• [MNG-8704] - Bump com.google.guava:guava from 33.4.6-jre to 33.4.8-jre
• [MNG-8705] - Bump commons-jxpath:commons-jxpath from 1.3 to 1.4.0
• [MNG-8706] - Bump commons-cli:commons-cli from 1.8.0 to 1.9.0
• [MNG-8715] - Bump org.fusesource.jansi:jansi from 2.4.1 to 2.4.2
• [MNG-8716] - Bump resolver to 1.9.23
• [MNG-8745] - Bump xmlunitVersion from 2.10.0 to 2.10.2

What's Changed

• [MNG-8211] Fail the build if CI Friendly revision used without value by @​cstamhttps://github.com/apache/maven/pull/1656l/1656
• Add missing since by @​cstamhttps://github.com/apache/maven/pull/1682l/1682
• [MNG-8256] FilteredProjectDependencyGraph fix for non-transitive case by @​cstamhttps://github.com/apache/maven/pull/1724l/1724
• [MNG-8315] Failure of mvn.cmd if a .mvn folder is located at drive root by @​fmarhttps://github.com/apache/maven/pull/1806l/1806
• [MNG-8289] Update Plexus Annotations to 2.2.0 by @​dependabhttps://github.com/apache/maven/pull/1666l/1666
• [MNG-8370] Add maven.repo.local.head by @​slawekjaranowshttps://github.com/apache/maven/pull/1915l/1915
• [MNG-8443] Bump com.google.guava:guava from 33.2.1-jre to 33.4.0-jre by @​dependabhttps://github.com/apache/maven/pull/1991l/1991
• [MNG-8531] Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0 by @​dependabhttps://github.com/apache/maven/pull/2013l/2013
• [MNG-8532] Bump commons-io:commons-io from 2.16.1 to 2.18.0 by @​dependabhttps://github.com/apache/maven/pull/1926l/1926
• [MNG-8534] Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.0 to 3.2.1 by @​dependabhttps://github.com/apache/maven/pull/1699l/1699
• Add PR Automation action by @​slawekjaranowshttps://github.com/apache/maven/pull/2113l/2113
• Bump com.google.guava:failureaccess from 1.0.2 to 1.0.3 by @​dependabhttps://github.com/apache/maven/pull/2167l/2167
• Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre by @​dependabhttps://github.com/apache/maven/pull/2168l/2168
• [MNG-8640] Bump org.apache.maven:maven-parent from 43 to 44 by @​dependabhttps://github.com/apache/maven/pull/2163l/2163
• Use Maven 3.9.9 for build maven-3.9.x branch by @​slawekjaranowshttps://github.com/apache/maven/pull/2177l/2177
• [MNG-8248] Add enable-native-access to startup scripts by @​slawekjaranowshttps://github.com/apache/maven/pull/2171l/2171
• [MNG-8661] Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre by @​dependabhttps://github.com/apache/maven/pull/2185l/2185
• Use dedicated local repo for ITs on Jenkins by @​slawekjaranows[https://github.com/apache/maven/pull

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.