Skip to content

build(deps): bump org.codehaus.plexus:plexus-xml from 3.0.1 to 4.0.0 - #8832

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/org.codehaus.plexus-plexus-xml-4.0.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/org.codehaus.plexus-plexus-xml-4.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor

Bumps org.codehaus.plexus:plexus-xml from 3.0.1 to 4.0.0.

Release notes

Sourced from org.codehaus.plexus:plexus-xml's releases.

4.0.0

3.1.0

A UTF-8 file with no BOM whose XML declaration names ISO-8859-1 now parses, instead of failing as an incompatible encoding. The fix has been on the 4.x line since 2023; Maven 3.9 ships plexus-xml 3.x, so this line carried the bug until now.

The artifact also carries Automatic-Module-Name: org.codehaus.plexus.util.xml, the same name the 4.x line uses, so a downstream that swaps lines keeps requiring the same module.

Requires Java 8 and works under Maven 3 and Maven 4.

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

3.0.2

... (truncated)

Commits
  • cac55e8 [maven-release-plugin] prepare release plexus-xml-4.0.0
  • 17787e5 Reformat using spotless
  • d58719d Upgrade to plexus 13
  • 9547a2d Fix Xpp3DomUtils imports
  • b1794a3 Fix site generation (#15)
  • e1f38f1 Switch build ci workflow to master branch (#14)
  • 9ba44eb Fix SCM urls (#13)
  • 792f947 MXParser tokenization fails when PI is before first tag (fixes #7) (#12)
  • 85fe71e Deprecate Xpp3DomUtils (fixes #6) (#9)
  • 8351c4e Use a ArrayDeque and enable test only for JDK < 1.8 (#5)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
org.codehaus.plexus:plexus-xml [>= 4.a, < 5]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.codehaus.plexus:plexus-xml](https://github.com/codehaus-plexus/plexus-xml) from 3.0.1 to 4.0.0.
- [Release notes](https://github.com/codehaus-plexus/plexus-xml/releases)
- [Commits](codehaus-plexus/plexus-xml@plexus-xml-3.0.1...plexus-xml-4.0.0)

---
updated-dependencies:
- dependency-name: org.codehaus.plexus:plexus-xml
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies java Pull requests that update Java code labels Oct 9, 2026
@boring-cyborg boring-cyborg Bot added the maven changes to the maven plugin label Oct 9, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies java Pull requests that update Java code maven changes to the maven plugin

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants