Bump plexus-archiver from 4.2.5 to 4.6.1 #81

Merged

dependabot[bot] merged 1 commit from dependabot/maven/org.codehaus.plexus-plexus-archiver-4.6.1 into main

2025-05-04 13:21:25 -04:00

dependabot[bot] commented

2023-01-02 13:04:05 -05:00

(Migrated from github.com)

Bumps plexus-archiver from 4.2.5 to 4.6.1.

Release notes

Sourced from plexus-archiver's releases.

4.6.1

Normalize file separators before warning about equal archive entries (#249) @Bananeweizen

📦 Dependency updates

Bump commons-compress from 1.21 to 1.22 (#243) @dependabot

4.6.0

🚀 New features and improvements

keep file/directory permissions in Reproducible Builds mode (#241) @hboutemy

📦 Dependency updates

Bump junitVersion from 5.9.0 to 5.9.1 (#236) @dependabot

Bump plexus-utils from 3.4.2 to 3.5.0 (#242) @dependabot

Bump zstd-jni from 1.5.2-4 to 1.5.2-5 (#240) @dependabot

Plexus Archiver 4.5.0

🚀 New features and improvements

Add zstd (un)archiver support (#226) @pleeplop

🐛 Bug Fixes

Fix UnArchiver#isOverwrite not working as expected (#229) @plamentotev Existing files were overridden only if UnArchiver#isOverwrite was set and the existing files were older than the archive entry. Now it works as documented: older files are always overridden; when UnArchiver#isOverwrite is true, existing files are always overridden regardless if they are older or not.

Plexus Archiver 4.4.0

🚀 New features and improvements

Drop legacy plexus API and use only JSR330 components (#220) @cstamas

Plexus Archiver 4.3.0

🚀 New features and improvements

Require Java 8 (#206) @plamentotev

Refactor to use FileTime API (#199) @jorsol

Rename setTime method to setZipEntryTime (#209) @jorsol

Convert InputStreamSupplier to lambdas (#212) @jorsol

Update plexus-container-default to 2.1.1, commons-io 2.11.0 (#211) @jorsol

FIX: Reproducible Builds not working when using modular jar (#205) @jorsol

... (truncated)

Commits

f23f7ad [maven-release-plugin] prepare release plexus-archiver-4.6.1
0460332 Revert "[maven-release-plugin] prepare for next development iteration"
291b03a [maven-release-plugin] prepare for next development iteration
e9cc0c0 (doc) switch scm url to https
3c1bfc4 Added unit test based on pr#180
9b6b399 Normalize file separators before warning about equal archive entries
b5e8974 Bump commons-compress from 1.21 to 1.22
6a4b48b [maven-release-plugin] prepare for next development iteration
4a03f29 [maven-release-plugin] prepare release plexus-archiver-4.6.0
6bd43c3 keep file/directory permissions in Reproducible Builds mode
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.2.5 to 4.6.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/codehaus-plexus/plexus-archiver/releases">plexus-archiver's releases</a>.</em></p> <blockquote> <h2>4.6.1</h2>  <ul> <li>Normalize file separators before warning about equal archive entries (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/249">#249</a>) <a href="https://github.com/Bananeweizen"><code>@Bananeweizen</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Bump commons-compress from 1.21 to 1.22 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/243">#243</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> </ul> <h2>4.6.0</h2> <h2>🚀 New features and improvements</h2> <ul> <li>keep file/directory permissions in Reproducible Builds mode (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/241">#241</a>) <a href="https://github.com/hboutemy"><code>@hboutemy</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Bump junitVersion from 5.9.0 to 5.9.1 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/236">#236</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> <li>Bump plexus-utils from 3.4.2 to 3.5.0 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/242">#242</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> <li>Bump zstd-jni from 1.5.2-4 to 1.5.2-5 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/240">#240</a>) <a href="https://github.com/dependabot"><code>@dependabot</code></a></li> </ul> <h2>Plexus Archiver 4.5.0</h2> <h2>🚀 New features and improvements</h2> <ul> <li>Add zstd (un)archiver support (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/226">#226</a>) <a href="https://github.com/pleeplop"><code>@pleeplop</code></a></li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>Fix <code>UnArchiver#isOverwrite</code> not working as expected (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/pull/229">#229</a>) <a href="https://github.com/plamentotev"><code>@plamentotev</code></a> Existing files were overridden only if <code>UnArchiver#isOverwrite</code> was set and the existing files were older than the archive entry. Now it works as documented: older files are always overridden; when <code>UnArchiver#isOverwrite</code> is <code>true</code>, existing files are always overridden regardless if they are older or not.</li> </ul> <h2>Plexus Archiver 4.4.0</h2>  <h2>🚀 New features and improvements</h2> <ul> <li>Drop legacy plexus API and use only JSR330 components (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/220">#220</a>) <a href="https://github.com/cstamas"><code>@cstamas</code></a></li> </ul> <h2>Plexus Archiver 4.3.0</h2>  <h2>🚀 New features and improvements</h2> <ul> <li>Require Java 8 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/206">#206</a>) <a href="https://github.com/plamentotev"><code>@plamentotev</code></a></li> <li>Refactor to use FileTime API (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/199">#199</a>) <a href="https://github.com/jorsol"><code>@jorsol</code></a></li> <li>Rename setTime method to setZipEntryTime (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/209">#209</a>) <a href="https://github.com/jorsol"><code>@jorsol</code></a></li> <li>Convert InputStreamSupplier to lambdas (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/212">#212</a>) <a href="https://github.com/jorsol"><code>@jorsol</code></a></li> <li>Update plexus-container-default to 2.1.1, commons-io 2.11.0 (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/211">#211</a>) <a href="https://github.com/jorsol"><code>@jorsol</code></a></li> <li>FIX: Reproducible Builds not working when using modular jar (<a href="https://github-redirect.dependabot.com/codehaus-plexus/plexus-archiver/issues/205">#205</a>) <a href="https://github.com/jorsol"><code>@jorsol</code></a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/f23f7ad8cc510c4a7e888699937d782371cb700c"><code>f23f7ad</code></a> [maven-release-plugin] prepare release plexus-archiver-4.6.1</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/04603321fdcaa1a12372c609a891c657b300da45"><code>0460332</code></a> Revert "[maven-release-plugin] prepare for next development iteration"</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/291b03ab779d351645d3f7b887517a75823db272"><code>291b03a</code></a> [maven-release-plugin] prepare for next development iteration</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/e9cc0c0715857b75880931c380a5e200ad63dd73"><code>e9cc0c0</code></a> (doc) switch scm url to https</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/3c1bfc4b9c0ad4df294cfaf2bf4b44578075db0a"><code>3c1bfc4</code></a> Added unit test based on pr#180</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/9b6b399edc8d7053ba020ccc9677da33e1317870"><code>9b6b399</code></a> Normalize file separators before warning about equal archive entries</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/b5e8974fba395dd7428f238860649925818d896c"><code>b5e8974</code></a> Bump commons-compress from 1.21 to 1.22</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/6a4b48b77fc4c8692ad058ed041a54257b19d06b"><code>6a4b48b</code></a> [maven-release-plugin] prepare for next development iteration</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/4a03f29be0c79679fde6c66ae9281176e15950b5"><code>4a03f29</code></a> [maven-release-plugin] prepare release plexus-archiver-4.6.0</li> <li><a href="https://github.com/codehaus-plexus/plexus-archiver/commit/6bd43c3b9e932d3fd5431943ac4a2dee03ebed6f"><code>6bd43c3</code></a> keep file/directory permissions in Reproducible Builds mode</li> <li>Additional commits viewable in <a href="https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.2.5...plexus-archiver-4.6.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.plexus:plexus-archiver&package-manager=maven&previous-version=4.2.5&new-version=4.6.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>