Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the maven group with 4 updates in the / directory: org.apache.maven.plugins:maven-release-plugin, com.github.siom79.japicmp:japicmp-maven-plugin, com.google.protobuf:protobuf-java and io.github.ascopes:protobuf-maven-plugin.

Updates org.apache.maven.plugins:maven-release-plugin from 3.3.0 to 3.3.1

Release notes

Sourced from org.apache.maven.plugins:maven-release-plugin's releases.

3.3.1

💥 Breaking changes

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 7e8ebac [maven-release-plugin] prepare release maven-release-3.3.1
  • f0f28e5 Revert inclusion of ci skip in release commit msg
  • 2a82901 Bump org.codehaus.plexus:plexus-testing from 2.0.1 to 2.0.2 (#1444)
  • c8613d2 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates com.github.siom79.japicmp:japicmp-maven-plugin from 0.24.2 to 0.25.0

Commits
  • 67ecde3 [maven-release-plugin] prepare release japicmp-base-0.25.0
  • 6c3cfb1 upgraded version in *.md files to 0.25.0
  • 677eabe 0.25.0-SNAPSHOT
  • 3cc9aa4 ReleaseNotes.md
  • c640748 Merge pull request #467 from jonahgraham/guess-version-in-cli
  • 88ebc06 Remove use of Java 11 in tests
  • 4ba7445 Add support for guessing version numbers to CLI invocations
  • 265004d Merge pull request #466 from siom79/maven-site-3.21
  • a484131 Merge pull request #465 from siom79/junit-6
  • e1aa5a9 junit 6.0.1, maven profile before-java-17
  • Additional commits viewable in compare view

Updates com.google.protobuf:protobuf-java from 4.33.1 to 4.33.2

Commits

Updates io.github.ascopes:protobuf-maven-plugin from 4.0.3 to 4.1.1

Release notes

Sourced from io.github.ascopes:protobuf-maven-plugin's releases.

v4.1.1

  • Reworked plugin resolution to be able to run in parallel.
  • Consistent generation of plugin ID naming is now enforced across all protoc plugin kinds.
  • JVM plugin executable generation is now abstracted, internal paths have changed slightly so users may want to run mvn clean on projects when updating to ensure any old files are cleaned up.
  • plugins specification order is now retained internally. This does not influence execution order (which is what the order param is to be used for by consumers), but does influence the naming of internally generated files. This leads to stronger buildvconsistency guarantees when updating this Maven plugin in the future.
  • Removed some incorrectly documented attributes from documentation that did not exist for certain protoc plugin variants.

v4.1.0

This release implements a new way of specifying protoc plugins. Whilst the old mechanism still works, it is now deprecated for removal in v5.0.

Plugins are now specified as a discriminated list with a kind attribute.

For example:

<plugin>
  <groupId>io.github.ascopes</groupId>
  <artifactId>protobuf-maven-plugin</artifactId>
  <version>4.1.0</version>
<configuration>
<plugins>
<plugin kind="binary-maven">
...
</plugin>
</plugins>
</configuration>
</plugin>

See https://ascopes.github.io/protobuf-maven-plugin/using-protoc-plugins.html for full details of usage, with examples.

This paves the way for cleaning up some ugly parts of the API in v5.0, as well as supporting consistency with GH-877 which aims to allow eventually using WASM distributions of protoc as an optional alternative to platform-specific binaries.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven group with 4 updates in the / directory: [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release), [com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp), [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) and [io.github.ascopes:protobuf-maven-plugin](https://github.com/ascopes/protobuf-maven-plugin).


Updates `org.apache.maven.plugins:maven-release-plugin` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/apache/maven-release/releases)
- [Commits](apache/maven-release@maven-release-3.3.0...maven-release-3.3.1)

Updates `com.github.siom79.japicmp:japicmp-maven-plugin` from 0.24.2 to 0.25.0
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
- [Commits](siom79/japicmp@japicmp-base-0.24.2...japicmp-base-0.25.0)

Updates `com.google.protobuf:protobuf-java` from 4.33.1 to 4.33.2
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `io.github.ascopes:protobuf-maven-plugin` from 4.0.3 to 4.1.1
- [Release notes](https://github.com/ascopes/protobuf-maven-plugin/releases)
- [Commits](ascopes/protobuf-maven-plugin@v4.0.3...v4.1.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-release-plugin
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.33.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.github.ascopes:protobuf-maven-plugin
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 1, 2026
<groupId>com.github.siom79.japicmp</groupId>
<artifactId>japicmp-maven-plugin</artifactId>
<version>0.24.2</version>
<version>0.25.0</version>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you please try version 0.25.1? There is a bug in 0.25.0 (siom79/japicmp#473) which probably causes the current GitHub workflow failure: It erroneously tries to process the gson-parent POM as JAR.

Suggested change
<version>0.25.0</version>
<version>0.25.1</version>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants