Update Bouncy Castle release note links
[odlparent.git] / docs / NEWS.rst
1 ========================
2 ODL Parent release notes
3 ========================
4
5 Version 13.0.1
6 --------------
7 This is a bug-fix upgrade from version 13.0.0.
8
9 Bug fixes
10 ~~~~~~~~~
11 * Generated features included ``org.eclipse.jdt.annotation`` and ``value`` annotation JARs. This has been corrected by
12   excluding from generation See `ODLPARENT-302 <https://jira.opendaylight.org/browse/ODLPARENT-302>`__ for details.
13
14 Version 13.0.0
15 --------------
16 This is a major upgrade from version 12, with breaking changes; downstream projects may need to make changes to upgrade
17 to this version.
18
19 Bug fixes
20 ~~~~~~~~~
21 * Declaration of annotation artifacts for ``spotbugs-annotations``, ``org.eclipse.jdt.annotation`` and
22   ``modernizer-maven-annotations`` are no longer by default as ``<scope>provided</scope>``. This means that users
23   of these annotations need to explicitly depend on them. Note that ``spotbugs-annotations`` are not provided
24   at runtime and therefore should be used with ``<optional>true</optional>``.
25   See `ODLPARENT-300 <https://jira.opendaylight.org/browse/ODLPARENT-300>`__ for details.
26
27 * Default configuration now includes test-scoped dependency to ``jassert-core``. Users are encouraged to migrate
28   assertions from Hamcrest to AssertJ. See `ODLPARENT-295 <https://jira.opendaylight.org/browse/ODLPARENT-295>`__ for details.
29
30 Upstream version removals
31 ~~~~~~~~~~~~~~~~~~~~~~~~~
32 The following upstream dependencies have been removed from dependency/plugin management:
33
34 * Declaration of ``commons-lang`` has been removed. This dependency is not used by any active downstream and ``commons-lang3``
35   already provides better or equivalent replacements.
36
37 Third-party dependencies
38 ~~~~~~~~~~~~~~~~~~~~~~~~
39 * Checkstyle `10.11.0 → 10.12.0 <https://checkstyle.org/releasenotes.html#Release_10.12.0>`__
40
41 * Guava `31.1 → 32.0.0 <https://github.com/google/guava/releases/tag/v32.0.0>`__
42
43 * Jackson 2.14.3 → 2.15.1, release notes:
44   * `2.15 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.15>`__
45   * `2.15.1 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.15.1>`__
46
47 Plugin upgrades
48 ~~~~~~~~~~~~~~~
49 * asciidoctor-maven-plugin `2.2.3 → 2.2.4 <https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-2.2.4>`__
50
51 * maven-bundle-plugin `5.1.8 → 5.1.9 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12353241>`__
52
53 Version 12.0.6
54 --------------
55 This is a bug-fix upgrade from version 12.0.5.
56
57 Third-party dependencies
58 ~~~~~~~~~~~~~~~~~~~~~~~~
59 * asciidoctor-jdiagram `2.2.4 → 2.2.8 <https://github.com/asciidoctor/asciidoctorj-diagram/releases/tag/v2.2.8>`__
60
61 * checker-qual 3.33.0 → 3.34.0
62
63 * Checkstyle 10.9.3 → 10.11.0, release notes:
64   * `10.10.0 <https://checkstyle.org/releasenotes.html#Release_10.10.0>`__
65   * `10.11.0 <https://checkstyle.org/releasenotes.html#Release_10.11.0>`__
66
67 * commons-io `2.11.0 → 2.12.0, <https://commons.apache.org/proper/commons-io/changes-report.html#a2.12.0>`__
68
69 * Jackson `2.14.2 → 2.14.3 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.14.3>`__
70
71 * JUnit `5.9.2 → 5.9.3 <https://junit.org/junit5/docs/snapshot/release-notes/#release-notes-5.9.3>`__
72
73 * Mockito `5.3.0 → 5.3.1 <https://github.com/mockito/mockito/releases/tag/v5.3.1>`__
74
75 * Netty 4.1.91 → 4.1.93, release notes:
76   * `4.1.92 <https://netty.io/news/2023/04/25/4-1-92-Final.html>`__
77   * `4.1.93 <https://netty.io/news/2023/05/25/4-1-93-Final.html>`__
78
79 * TrieMap `1.3.0 → 1.3.1 <https://github.com/PANTHEONtech/triemap/releases/tag/triemap-1.3.1>`__
80
81 * Woodstox 6.4.0 → 6.5.1, release notes:
82   * `6.5.0 <https://github.com/FasterXML/woodstox/wiki/Woodstox-Release-6.5#650-14-jan-2023>`__
83   * `6.5.1 <https://github.com/FasterXML/woodstox/issues/170>`__
84
85 Plugin upgrades
86 ~~~~~~~~~~~~~~~
87 * asciidoctor-maven-plugin `2.2.2 → 2.2.3 <https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-2.2.3>`__
88
89 * builder-helper-maven-plugin `3.3.0 → 3.4.0 <https://github.com/mojohaus/build-helper-maven-plugin/releases/tag/build-helper-maven-plugin-3.4.0>`__
90
91 * cyclonedx-maven-plugin 2.7.5 → 2.7.9, release notes:
92   * `2.7.6 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.6>`__
93   * `2.7.7 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.7>`__
94   * `2.7.8 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.8>`__
95   * `2.7.9 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.9>`__
96
97 * git-commit-id-maven-plugin `5.0.0 → 6.0.0 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v6.0.0>`__
98
99 * Jacoco Maven plugin 0.8.8 → 0.8.10, release notes:
100   * `0.8.9 <https://github.com/jacoco/jacoco/releases/tag/v0.8.9>`__
101   * `0.8.10 <https://github.com/jacoco/jacoco/releases/tag/v0.8.10>`__
102
103 * maven-assembly-plugin 3.4.2 → 3.6.0, release notes:
104   * `3.5.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12352065>`__
105   * `3.6.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12352952>`__
106
107 * maven-checkstyle-plugin 3.2.1 → 3.3.0, release notes:
108   * `3.2.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317223&version=12352856>`__
109   * `3.3.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317223&version=12353164>`__
110
111 * maven-dependency-plugin `3.5.0 → 3.6.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12352921>`__
112
113 * maven-help-plugin `3.3.0 → 3.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317522&version=12352206>`__
114
115 * maven-invoker-plugin 3.4.0 → 3.5.1, release notes:
116   * `3.5.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317525&version=12352645>`__
117   * `3.5.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317525&version=12352974>`__
118
119 * maven-plugin-plugin 3.7.1 → 3.8.2, release notes:
120   * `3.8.1 <https://issues.apache.org/jira/projects/MPLUGIN/versions/12352545>`__
121   * `3.8.2 <https://issues.apache.org/jira/projects/MPLUGIN/versions/12352508>`__
122
123 * maven-project-info-reports-plugin 3.4.1 → 3.4.3, release notes:
124   * `3.4.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12352728>`__
125   * `3.4.3 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12352922>`__
126
127 * maven-resources-plugin `3.3.0 → 3.3.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317827&version=12352140>`__
128
129 * maven-source-plugin `3.2.1 → 3.3.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317924&version=12346658>`__
130
131 * maven-surefire-plugin `3.0.0 → 3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12351273>`__
132
133 * versions-maven-plugin `2.14.2 → 2.15.0 <https://github.com/mojohaus/versions/releases/tag/2.15.0>`__
134
135 Version 12.0.5
136 --------------
137 This is a bug-fix upgrade from version 12.0.4.
138
139 Bug fixes
140 ~~~~~~~~~
141 * cyclonedx-maven-plugin has been rolled back to version ``2.7.5`` because newer
142   versions execute incredibly slowly on large dependency graphs.
143
144 Third-party dependencies
145 ~~~~~~~~~~~~~~~~~~~~~~~~
146 * Bouncy Castle `1.72 → 1.73 <https://www.bouncycastle.org/releasenotes.html#r1rv73>`__
147
148 * Mockito `5.2.0 → 5.3.0 <https://github.com/mockito/mockito/releases/tag/v5.3.0>`__
149
150 * TrieMap 1.2.0 → 1.3.0
151   * `1.2.1 <https://github.com/PANTHEONtech/triemap/releases/tag/triemap-1.2.0>`__
152   * `1.3.0 <https://github.com/PANTHEONtech/triemap/releases/tag/triemap-1.3.0>`__
153
154 Version 12.0.4
155 --------------
156 This is a bug-fix upgrade from version 12.0.4.
157
158 Third-party dependencies
159 ~~~~~~~~~~~~~~~~~~~~~~~~
160 * Antlr `4.11.1 → 4.12.0 <https://github.com/antlr/antlr4/releases/tag/4.12.0>`__
161
162 * checker-qual 3.30.0 → 3.33.0
163
164 * Checkstyle 10.7.0 → 10.9.3, release notes:
165   * `10.8.0 <https://checkstyle.org/releasenotes.html#Release_10.8.0>`__
166   * `10.8.1 <https://checkstyle.org/releasenotes.html#Release_10.8.1>`__
167   * `10.9.0 <https://checkstyle.org/releasenotes.html#Release_10.9.0>`__
168   * `10.9.1 <https://checkstyle.org/releasenotes.html#Release_10.9.1>`__
169   * `10.9.2 <https://checkstyle.org/releasenotes.html#Release_10.9.2>`__
170   * `10.9.3 <https://checkstyle.org/releasenotes.html#Release_10.9.3>`__
171
172 * Dropwizard Metrics 4.2.15 → 4.2.18, release notes:
173   * `4.2.16 <https://github.com/dropwizard/metrics/releases/tag/v4.2.16>`__
174   * `4.2.17 <https://github.com/dropwizard/metrics/releases/tag/v4.2.17>`__
175   * `4.2.18 <https://github.com/dropwizard/metrics/releases/tag/v4.2.18>`__
176
177 * Jersey 2.38 → 2.39.1, release notes:
178   * `2.39 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.39>`__
179   * `2.39.1 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.39.1>`__
180
181 * Mockito `5.1.1 → 5.2.0 <https://github.com/mockito/mockito/releases/tag/v5.2.0>`__
182
183 * Netty 4.1.89 → 4.1.91, release notes:
184   * `4.1.90 <https://netty.io/news/2023/03/14/4-1-90-Final.html>`__
185   * `4.1.91 <https://netty.io/news/2023/04/03/4-1-91-Final.html>`__
186
187 Plugin upgrades
188 ~~~~~~~~~~~~~~~
189 * cyclonedx-maven-plugin `2.7.5 → 2.7.6 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.6>`__
190
191 * maven-compiler-plugin `3.10.1 → 3.11.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12351444>`__
192
193 * maven-enforcer-plugin `3.2.1 → 3.3.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317520&version=12352877>`__
194
195 * maven-surefire-plugin 3.0.0-M8 → 3.0.0, release notes:
196   * `3.0.0-M9 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12352730>`__
197   * `3.0.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12352998>`__
198
199 * modernizer-maven-plugin `2.5.0 → 2.6.0 <https://github.com/gaul/modernizer-maven-plugin/releases/tag/modernizer-maven-plugin-2.6.0>`__
200
201 * spotbugs-maven-plugin 4.7.3.0 → 4.7.3.4, release notes:
202   * `4.7.3.1 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.3.1>`__
203   * `4.7.3.2 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.3.2>`__
204   * `4.7.3.3 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.3.3>`__
205   * `4.7.3.4 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.3.4>`__
206
207 Version 12.0.3
208 --------------
209 This is a bug-fix upgrade from version 12.0.2.
210
211 Bug fixes
212 ~~~~~~~~~
213 * The configuration of ``spotbugs-maven-plugin`` was incorrect in that it referenced
214   ``FindBugs`` settings. This issue is reported with ``maven-3.9.0`` and later and has
215   now been corrected. See `ODLPARENT-299 <https://jira.opendaylight.org/browse/ODLPARENT-299>`__
216   for details.
217
218 Third-party dependencies
219 ~~~~~~~~~~~~~~~~~~~~~~~~
220 * asciidoctor-jdiagram `2.2.3 → 2.2.4 <https://github.com/asciidoctor/asciidoctorj-diagram/releases/tag/v2.2.4>`__
221
222 * Checkstyle `10.6.0 → 10.7.0 <https://checkstyle.org/releasenotes.html#Release_10.7.0>`__
223
224 * Jackson `2.14.1 → 2.14.2 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.14.2>`__
225
226 * Mockito 4.11.0 → 5.1.1, release notes:
227   * `5.0.0 <https://github.com/mockito/mockito/releases/tag/v5.0.0>`__
228   * `5.1.0 <https://github.com/mockito/mockito/releases/tag/v5.1.0>`__
229   * `5.1.1 <https://github.com/mockito/mockito/releases/tag/v5.1.1>`__
230
231 * Netty 4.1.86 → 4.1.89, release notes:
232   * `4.1.87 <https://netty.io/news/2023/01/12/4-1-87-Final.html>`__
233   * `4.1.88 <https://netty.io/news/2023/02/12/4-1-88-Final.html>`__
234   * `4.1.89 <https://netty.io/news/2023/02/13/4-1-89-Final.html>`__
235
236 Plugin upgrades
237 ~~~~~~~~~~~~~~~
238 * cyclonedx-maven-plugin `2.7.4 → 2.7.5 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.5>`__
239
240 * echo-maven-plugin 1.3.2 → 2.0.1, release notes:
241   * `2.0.0 <https://github.com/Ekryd/echo-maven-plugin/releases/tag/echo-plugin-2.0.0>`__
242   * `2.0.1 <https://github.com/Ekryd/echo-maven-plugin/releases/tag/echo-plugin-2.0.1>`__
243
244 * maven-checkstyle-plugin `3.2.0 → 3.2.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317223&version=12352729>`__
245
246 * maven-dependency-plugin `3.4.0 → 3.5.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12352602>`__
247
248 * maven-enforcer-plugin `3.2.0 → 3.2.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317520&version=12352857>`__
249
250 * maven-javadoc-plugin `3.4.1 → 3.5.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12352256>`__
251
252 * maven-plugin-plugin `3.7.0 → 3.7.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317820&version=12352745>`__
253
254 * maven-surefire-plugin `3.0.0-M7 → 3.0.0-M8 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12351809>`__
255
256 Version 12.0.2
257 --------------
258 This is a security bug-fix upgrade from version 12.0.1.
259
260 New features
261 ~~~~~~~~~~~~
262 * Two new features, ``odl-asm`` and ``odl-apache-spifly`` have been added.
263   See `ODLPARENT-296 <https://jira.opendaylight.org/browse/ODLPARENT-296>`__
264   for details.
265
266 Third-party dependencies
267 ~~~~~~~~~~~~~~~~~~~~~~~~
268 * Checkstyle 10.4 → 10.6.0
269   * `10.5.0 <https://checkstyle.org/releasenotes.html#Release_10.5.0>`__
270   * `10.6.0 <https://checkstyle.org/releasenotes.html#Release_10.6.0>`__
271
272 * Dropwizard Metrics 4.2.13 → 4.2.15, release notes:
273   * `4.2.14 <https://github.com/dropwizard/metrics/releases/tag/v4.2.14>`__
274   * `4.2.15 <https://github.com/dropwizard/metrics/releases/tag/v4.2.15>`__
275
276 * GSON `2.10.0 → 2.10.1 <https://github.com/google/gson/releases/tag/gson-parent-2.10.1>`__
277
278 * immutables.org `2.9.2 → 2.9.3 <https://github.com/immutables/immutables/releases/tag/2.9.3>`__
279
280 * Jackson 2.13.4 → 2.14.1, release notes:
281   * `2.14 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.14>`__
282   * `2.14.1 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.14.1>`__
283
284 * Jetty `9.4.49.v20220914 → 9.4.50.v20221201 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.50.v20221201>`__
285
286 * Jolokia 1.7.1 → 1.7.2
287
288 * Jersey `2.37 → 2.38 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.38>`__
289
290 * JUnit `5.9.1 → 5.9.2 <https://junit.org/junit5/docs/snapshot/release-notes/#release-notes-5.9.2>`__
291
292 * Karaf `4.4.2 → 4.4.3 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12352267>`__
293
294 * Mockito 4.9.0 → 4.11.0, release notes:
295   * `4.10.0 <https://github.com/mockito/mockito/releases/tag/v4.10.0>`__
296   * `4.11.0 <https://github.com/mockito/mockito/releases/tag/v4.11.0>`__
297
298 * Netty 4.1.84 → 4.1.86, release notes:
299   * `4.1.85 <https://netty.io/news/2022/11/09/4-1-85-Final.html>`__
300   * `4.1.86 <https://netty.io/news/2022/12/12/4-1-86-Final.html>`__
301
302 * Sevntu 1.43.0 → 1.44.1, release notes:
303   * `1.44.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.44.0>`__
304   * `1.44.1 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.44.1>`__
305
306 * ThreeTen `1.7.1 → 1.7.2 <https://www.threeten.org/threeten-extra/changes-report.html#a1.7.2>`__
307
308 * xmlunit `2.9.0 → 2.9.1 <https://github.com/xmlunit/xmlunit/releases/tag/v2.9.1>`__
309
310 Plugin upgrades
311 ~~~~~~~~~~~~~~~
312 * bnd-maven-plugin `6.3.1 → 6.4.0 <https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0>`__
313
314 * cyclonedx-maven-plugin 2.7.1 → 2.7.4, release notes:
315   * `2.7.2 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.2>`__
316   * `2.7.3 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.3>`__
317   * `2.7.4 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.4>`__
318
319 * duplicate-finder-maven-plugin `1.5.0 → 1.5.1 <https://github.com/basepom/duplicate-finder-maven-plugin/releases/tag/duplicate-finder-maven-plugin-1.5.1>`__
320
321 * exec-maven-plugin `3.0.0 → 3.1.0 <https://github.com/mojohaus/exec-maven-plugin/releases/tag/exec-maven-plugin-3.1.0>`__
322
323 * maven-archetype-plugin `3.2.0 → 3.2.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317122&version=12348615>`__
324
325 * maven-dependency-plugin `3.3.0 → 3.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12351068>`__
326
327 * maven-help-plugin `3.2.0 → 3.3.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317522&version=12345417>`__
328
329 * maven-invoker-plugin 3.2.2 → 3.4.0, release notes:
330   * `3.3.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317525&version=12349728>`__
331   * `3.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317525&version=12330828>`__
332
333 * maven-plugin-plugin 3.6.2 → 3.7.0, release notes:
334   * `3.6.4 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317820&version=12351222>`__
335   * `3.7.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317820&version=12344367>`__
336
337 * maven-remote-resources-plugin `1.7.0 → 3.0.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317825&version=12346864>`__
338
339 * properties-maven-plugin 1.0.0 → 1.1.0
340
341 * spotbugs-maven-plugin `4.7.2.2 → 4.7.3.0 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.3.0>`__
342
343 * versions-maven-plugin 2.8.1 → 2.14.2, release notes:
344   * `2.9.0 <https://github.com/mojohaus/versions/releases/tag/versions-maven-plugin-2.9.0>`__
345   * `2.10.0 <https://github.com/mojohaus/versions/releases/tag/versions-maven-plugin-2.10.0>`__
346   * `2.11.0 <https://github.com/mojohaus/versions/releases/tag/versions-maven-plugin-2.11.0>`__
347   * `2.12.0 <https://github.com/mojohaus/versions/releases/tag/versions-maven-plugin-2.12.0>`__
348   * `2.13.0 <https://github.com/mojohaus/versions/releases/tag/2.13.0>`__
349   * `2.14.0 <https://github.com/mojohaus/versions/releases/tag/2.14.0>`__
350   * `2.14.1 <https://github.com/mojohaus/versions/releases/tag/2.14.1>`__
351   * `2.14.2 <https://github.com/mojohaus/versions/releases/tag/2.14.2>`__
352
353 Version 12.0.1
354 --------------
355 This is a security bug-fix upgrade from version 12.0.0.
356
357 Improvements and new features
358 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
359 * ``junit-jupiter-params`` is now a test dependency. This allows using JUnit 5 parameterized types without further
360   declarations.
361
362 Third-party dependencies
363 ~~~~~~~~~~~~~~~~~~~~~~~~
364 * Checkstyle `10.3.4 → 10.4 <https://checkstyle.org/releasenotes.html#Release_10.4>`__
365
366 * Dropwizard Metrics `4.2.12 → 4.2.13 <https://github.com/dropwizard/metrics/releases/tag/v4.2.13>`__
367
368 * GSON `2.9.0 → 2.10.0 <https://github.com/google/gson/releases/tag/gson-parent-2.10.0>`__
369
370 * Jackson `2.13.4 → 2.13.4.20221013 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13#micro-patches>`__
371
372 * Mockito `4.8.1 → 4.9.0 <https://github.com/mockito/mockito/releases/tag/v4.9.0>`__
373
374 * Netty `4.1.84 → 4.1.85 <https://netty.io/news/2022/11/09/4-1-85-Final.html>`__
375
376 * Sevntu `1.42.0 → 1.43.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.43.0>`__
377
378 * Woodstox `6.3.1 → 6.4.0 <https://github.com/FasterXML/woodstox/wiki/Woodstox-Release-6.4#640-24-oct-2022>`__
379
380 Plugin upgrades
381 ~~~~~~~~~~~~~~~
382 * maven-shade-plugin 3.3.0 → 3.4.1, release notes:
383   * `3.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317921&version=12351491>`__
384   * `3.4.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317921&version=12352285>`__
385
386 * modernizer-maven-plugin `2.4.0 → 2.5.0 <https://github.com/gaul/modernizer-maven-plugin/releases/tag/modernizer-maven-plugin-2.5.0>`__
387
388 * spotbugs-maven-plugin `4.7.2.1 → 4.7.2.2 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.2.2>`__
389
390 Version 12.0.0
391 --------------
392 This is a major upgrade from version 11, with breaking changes; downstream projects may need to make changes to upgrade
393 to this version.
394
395 Upstream version removals
396 ~~~~~~~~~~~~~~~~~~~~~~~~~
397 The following upstream dependencies have been removed from dependency/plugin management:
398
399 * Declaration of ``Enunciate`` has been removed. This dependency is not used by any active downstream.
400
401 * The opt-in for generating HTML4 Javadoc documentation has been removed.
402
403 Third-party dependencies
404 ~~~~~~~~~~~~~~~~~~~~~~~~
405 * Antlr 4.9.2 → 4.11.1, release notes:
406   * `4.10 <https://github.com/antlr/antlr4/releases/tag/4.10>`__
407   * `4.10.1 <https://github.com/antlr/antlr4/releases/tag/4.10.1>`__
408   * `4.11.0 <https://github.com/antlr/antlr4/releases/tag/4.11.0>`__
409   * `4.11.1 <https://github.com/antlr/antlr4/releases/tag/4.11.1>`__
410
411 * Bouncy Castle 1.70 → 1.72, release notes:
412   * `1.71 <https://www.bouncycastle.org/releasenotes.html#r1rv71>`__
413   * `1.72 <https://www.bouncycastle.org/releasenotes.html#r1rv72>`__
414
415 * Checkstyle 10.3.1 → 10.3.4, release notes:
416   * `10.3.2 <https://checkstyle.org/releasenotes.html#Release_10.3.2>`__
417   * `10.3.3 <https://checkstyle.org/releasenotes.html#Release_10.3.3>`__
418   * `10.3.4 <https://checkstyle.org/releasenotes.html#Release_10.3.4>`__
419
420 * commons-text `1.9 → 1.10.0 <https://commons.apache.org/proper/commons-text/changes-report.html#a1.10.0>`__
421
422 * Dropwizard Metrics 4.2.10 → 4.2.12, release notes:
423   * `4.2.11 <https://github.com/dropwizard/metrics/releases/tag/v4.2.11>`__
424   * `4.2.12 <https://github.com/dropwizard/metrics/releases/tag/v4.2.12>`__
425
426 * immutables.org 2.8.8 → 2.9.2, release notes:
427   * `2.9.0 <https://github.com/immutables/immutables/milestone/76?closed=1>`__
428   * `2.9.1 <https://github.com/immutables/immutables/milestone/77?closed=1>`__
429   * `2.9.2 <https://github.com/immutables/immutables/milestone/78?closed=1>`__
430
431 * Jackson `2.13.3 → 2.13.4 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13.4>`__
432
433 * Javassist 3.28.0-GA → 3.29.2-GA
434
435 * Jersey `2.36 → 2.37 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.37>`__
436
437 * Jetty 9.4.46.v20220331 → 9.4.49.v20220914, release notes:
438   * `9.4.47.v20220610 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.47.v20220610>`__
439   * `9.4.48.v20220622 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.48.v20220622>`__
440   * `9.4.49.v20220914 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.49.v20220914>`__
441
442 * JUnit `5.9.0 → 5.9.1 <https://junit.org/junit5/docs/snapshot/release-notes/#release-notes-5.9.1>`__
443
444 * Karaf `4.4.1 → 4.4.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12352048>`__
445
446 * Mockito 4.6.1 → 4.8.1, release notes:
447   * `4.7.0 <https://github.com/mockito/mockito/releases/tag/v4.7.0>`__
448   * `4.8.0 <https://github.com/mockito/mockito/releases/tag/v4.8.0>`__
449   * `4.8.1 <https://github.com/mockito/mockito/releases/tag/v4.8.1>`__
450
451 * Netty 4.1.76 → 4.1.84, release notes:
452   * `4.1.77 <https://netty.io/news/2022/05/06/2-1-77-Final.html>`__
453   * `4.1.78 <https://netty.io/news/2022/06/14/4-1-78-Final.html>`__
454   * `4.1.79 <https://netty.io/news/2022/07/11/4-1-79-Final.html>`__
455   * `4.1.80 <https://netty.io/news/2022/08/26/4-1-80-Final.html>`__
456   * `4.1.81 <https://netty.io/news/2022/09/08/4-1-81-Final.html>`__
457   * `4.1.82 <https://netty.io/news/2022/09/13/4-1-82-Final.html>`__
458   * `4.1.84 <https://netty.io/news/2022/10/11/4-1-84-Final.html>`__
459
460 * SpotBugs 4.7.1 → 4.7.3, release notes:
461   * `4.7.2 <https://github.com/spotbugs/spotbugs/releases/tag/4.7.2>`__
462   * `4.7.3 <https://github.com/spotbugs/spotbugs/releases/tag/4.7.3>`__
463
464 * ThreeTen `1.7.0 → 1.7.1 <https://www.threeten.org/threeten-extra/changes-report.html#a1.7.1>`__
465
466 Plugin upgrades
467 ~~~~~~~~~~~~~~~
468 * bnd-maven-plugin 6.2.0 → 6.3.1, release notes:
469   * `6.3.0 <https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0>`__
470   * `6.3.1 <https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1>`__
471
472 * maven-bundle-plugin 5.1.6 → 5.1.8, release notes:
473   * `5.1.7 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12352061>`__
474   * `5.1.8 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12352145>`__
475
476 * maven-checkstyle-plugin `3.1.2 → 3.2.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317223&version=12345559>`__
477
478 * maven-jar-plugin `3.2.2 → 3.3.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317526&version=12351126>`__
479
480 * maven-javadoc-plugin `3.4.0 → 3.4.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12352053>`__
481
482 * maven-resources-plugin `3.2.0 → 3.3.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317827&version=12348676>`__
483
484 * maven-site-plugin `3.12.0 → 3.12.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317923&version=12351751>`__
485
486 * project-info-reports-plugin 3.3.0 → 3.4.1, release notes:
487   * `3.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12351758>`__
488   * `3.4.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12352097>`__
489
490 Version 11.0.1
491 --------------
492 This is a bug-fix upgrade from version 11.0.0.
493
494 Improvements and new features
495 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
496 * An alternative way of defining features has been introduced. This is hosted by the ``template-feature-parent``
497   and unlike ``single-feature-parent``, only performs replacement of versions in a provided template. See
498   `ODLPARENT-235 <https://jira.opendaylight.org/browse/ODLPARENT-235>`__ for more information.
499
500 Third-party dependencies
501 ~~~~~~~~~~~~~~~~~~~~~~~~
502 * Checkstyle `10.3 → 10.3.1 <https://checkstyle.org/releasenotes.html#Release_10.3.1>`__
503
504 * Dropwizard Metrics `4.2.9 → 4.2.10 <https://github.com/dropwizard/metrics/releases/tag/v4.2.10>`__
505
506 * Jersey `2.35 → 2.36 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.36>`__
507
508 * Jetty 9.4.46.v20220331 → 9.4.48.v20220622, release notes:
509   * `9.4.47.v20220610 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.47.v20220610>`__
510   * `9.4.48.v20220622 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.48.v20220622>`__
511
512 * JUnit `5.8.2 → 5.9.0 <https://junit.org/junit5/docs/snapshot/release-notes/#release-notes-5.9.0>`__
513
514 * Karaf `4.4.0 → 4.4.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12351548>`__
515
516 * PAX-URL `2.6.10 → 2.6.11 <https://github.com/ops4j/org.ops4j.pax.url/milestone/76?closed=1>`__
517
518 * SpotBugs `4.7.0 → 4.7.1 <https://github.com/spotbugs/spotbugs/releases/tag/4.7.1>`__
519
520 Plugin upgrades
521 ~~~~~~~~~~~~~~~
522 * bnd-maven-plugin 6.2.0 → 6.3.1, release notes:
523   * `6.3.0 <https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0>`__
524   * `6.3.1 <https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1>`__
525
526 * cyclonedx-maven-plugin 2.6.2 → 2.7.1
527
528 * maven-antrun-plugin `3.0.0 → 3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317121&version=12348085>`__
529
530 * maven-assebly-plugin 3.3.0 → 3.4.2, release notes:
531   * `3.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12348203>`__
532   * `3.4.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12352049>`__
533   * `3.4.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12352095>`__
534
535 * maven-enforcer-plugin `3.0.0 → 3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317520&version=12341008>`__
536
537 * maven-site-plugin `3.11.0 → 3.12.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317923&version=12351142>`__
538
539 * maven-surefire-plugin `3.0.0-M6 → 3.0.0-M7 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12351502>`__
540
541 * spotbugs-maven-plugin 4.7.0.0 → 4.7.1.1, release notes:
542   * `4.7.1.0 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.1.0>`__
543   * `4.7.1.1 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.1.1>`__
544
545 Version 11.0.0
546 --------------
547 This is a major upgrade from version 10, with breaking changes; downstream projects may need to make changes to upgrade
548 to this version.
549
550 Improvements and new features
551 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
552 * Minimum required ``Java`` version is 17. Attempts to build a downstream project or load in a previous Java version
553   will result in a failure.
554
555 * The declaration for ``argparse4j`` has been addded. See
556   `ODLPARENT-289 <https://jira.opendaylight.org/browse/ODLPARENT-289>`__ for more information.
557
558 Upstream version removals
559 ~~~~~~~~~~~~~~~~~~~~~~~~~
560 The following upstream dependencies have been removed from dependency/plugin management:
561
562 * Declaration of ``Google Truth`` has been removed. This dependency is not used by any active downstream. See
563   `ODLPARENT-283 <https://jira.opendaylight.org/browse/ODLPARENT-283>`__ for more information.
564
565 * Declaration of ``commons-codec`` has been removed. This dependency is not used by any active downstream. See
566   `ODLPARENT-285 <https://jira.opendaylight.org/browse/ODLPARENT-285>`__ for more information.
567
568 * Declaration of ``commons-fileupload`` has been removed. This dependency is not used by any active downstream. See
569   `ODLPARENT-286 <https://jira.opendaylight.org/browse/ODLPARENT-286>`__ for more information.
570
571 * Declaration of ``commons-net`` has been removed. This dependency is not used by any active downstream. See
572   `ODLPARENT-287 <https://jira.opendaylight.org/browse/ODLPARENT-287>`__ for more information.
573
574 * Declaration of ``jsonassert`` has been removed. This dependency is not used by any active downstream. See
575   `ODLPARENT-288 <https://jira.opendaylight.org/browse/ODLPARENT-288>`__ for more information.
576
577 * Declaration of ``jung`` has been removed. This dependency is not used by any active downstream. See
578   `ODLPARENT-290 <https://jira.opendaylight.org/browse/ODLPARENT-290>`__ for more information.
579
580 * Declaration of ``spring-osgi-mock`` has been removed. This dependency is not used by any active downstream.
581
582 Third-party dependencies
583 ~~~~~~~~~~~~~~~~~~~~~~~~
584 * Checkstyle `10.2 → 10.3 <https://checkstyle.org/releasenotes.html#Release_10.3>`__
585
586 * Jackson `2.13.2 → 2.13.3 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13.3>`__
587
588 * Jersey 2.27 → 2.35, release notes:
589   * `2.28 <https://eclipse-ee4j.github.io/jersey.github.io/release-notes/2.28.html>`__
590   * `2.29 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.29>`__
591   * `2.29.1 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.29.1>`__
592   * `2.30 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.30>`__
593   * `2.30.1 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.30.1>`__
594   * `2.31 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.31>`__
595   * `2.32 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.32>`__
596   * `2.33 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.33>`__
597   * `2.34 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.34>`__
598   * `2.35 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.35>`__
599
600 * Karaf `4.3.7 → 4.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12349243>`__
601
602 * Mockito 4.5.1 → 4.6.1, release notes:
603   * `4.6.0 <https://github.com/mockito/mockito/releases/tag/v4.6.0>`__
604   * `4.6.1 <https://github.com/mockito/mockito/releases/tag/v4.6.1>`__
605
606 * SpotBugs `4.6.0 → 4.7.0 <https://github.com/spotbugs/spotbugs/releases/tag/4.7.0>`__
607
608 Plugin upgrades
609 ~~~~~~~~~~~~~~~
610 * cyclonedx-maven-plugin 2.5.3 → 2.6.2
611
612 * maven-bundle-plugin `5.1.5 → 5.1.6 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12351722>`__
613
614 * maven-javadoc-plugin 3.1.1 → 3.4.0, release notes:
615   * `3.2.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12345698>`__
616   * `3.3.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12346637>`__
617   * `3.3.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12347807>`__
618   * `3.3.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12350586>`__
619   * `3.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12330874>`__
620
621 * maven-surefire-plugin 2.22.2 → 3.0.0-M6, release notes:
622   * `3.0.0-M1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12342871>`__
623   * `3.0.0-M2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12344396>`__
624   * `3.0.0-M3 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12342872>`__
625   * `3.0.0-M4 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12344668>`__
626   * `3.0.0-M5 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12344612>`__
627   * `3.0.0-M6 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12344613>`__
628
629 * project-info-reports-plugin `3.2.2 → 3.3.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12351604>`__
630
631 * spotbugs-maven-plugin `4.6.0.0 → 4.7.0.0 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.0.0>`__
632
633 Version 10.0.0
634 --------------
635 This is a major upgrade from version 9, with breaking changes; downstream projects may need to make changes to upgrade
636 to this version.
637
638 Log4Shell and similar vulnerabilities
639 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
640 This release addresses following security issues by its adopting ``log4j-2.17.1``,
641 ``logback-1.2.10`` and ``pax-logging-2.0.14``:
642
643 * `CVE-2021-42550 <https://nvd.nist.gov/vuln/detail/CVE-2021-42550>`__ and related problems
644   were further mitigated by reducing complexity in ``logback-1.2.10``
645
646 * `CVE-2021-44228 <https://nvd.nist.gov/vuln/detail/CVE-2021-44228>`__
647
648 * `CVE-2021-44832 <https://nvd.nist.gov/vuln/detail/CVE-2021-44832>`__
649
650 * `CVE-2021-45046 <https://nvd.nist.gov/vuln/detail/CVE-2021-45046>`__
651
652 * `CVE-2021-45105 <https://nvd.nist.gov/vuln/detail/CVE-2021-45105>`__
653
654 Upstream version removals
655 ~~~~~~~~~~~~~~~~~~~~~~~~~
656 The following upstream dependencies have been removed from dependency/plugin management:
657
658 * Declaration of ``blueprint-maven-plugin`` has been removed. This plugin has not seen a release in 3 years
659   and its use typically leads to split container definitions. Users are advised to migrate to either
660   hand-written Blueprint XML files or, preferrably, migrate to OSGi Declarative Services. See
661   `ODLPARENT-267 <https://jira.opendaylight.org/browse/ODLPARENT-267>`__ for more information.
662
663 * The declaration and execution of ``maven-pmd-plugin`` has been removed. See
664   `ODLPARENT-269 <https://jira.opendaylight.org/browse/ODLPARENT-269>`__ for more information.
665
666 * All ``Xtend`` dependency and plugin declarations have been removed. Xtend is currently only used by
667   a single artifact in MD-SAL, hence the dependency is best managed there. Furthermore Xtend is facing
668   challenges around maintainership, hence its use is discouraged. See
669   `ODLPARENT-273 <https://jira.opendaylight.org/browse/ODLPARENT-273>`__ for more information.
670
671 * All ``Powermock``  dependency declarations have been removed. We have very few remaining downstream
672   users, who can manage this dependency themselves. The version of ``Mockito`` we declare has facilities
673   to cover all use cases previously covered only by PowerMock. See
674   `ODLPARENT-275 <https://jira.opendaylight.org/browse/ODLPARENT-275>`__ for more information.
675
676 * Declarations of ``osgi.annotation``, ``osgi.cmpn`` and ``osgi.core`` have been removed. These are
677   monolithic JARs providing, which are no longer shipped in OSGi Release 8. Users are advised to use
678   component dependencies, such as ``org.osgi.annotation.bundle``, ``org.osgi.framework``,
679   ``org.osgi.service.component.annotations`` and similar. See
680   `ODLPARENT-277 <https://jira.opendaylight.org/browse/ODLPARENT-277>`__ for more information.
681
682 * The ``H2 Database`` version declaration has been removed. It is used only by as single downstream
683   user, who also provides its OSGi packaging and hence it is best maintained there.
684
685 Improvements and new features
686 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
687 * Minimum ``Maven`` version required to build projects using ``odlparent`` has been raised to ``3.8.3``.
688   See `ODLPARENT-260 <https://jira.opendaylight.org/browse/ODLPARENT-260>`__ for more information.
689 * Unit tests are now using ``JUnit 5 Jupiter Engime`` for unit test execution, with ``JUnit 4`` tests
690   supported by ``junit-vintage-engine``. This enables downstreams to use the much more modern JUnit 5 APIs
691   as well as the corresponding Mockito integration out of the box. See
692   `ODLPARENT-271 <https://jira.opendaylight.org/browse/ODLPARENT-271>`__ for more information.
693 * A CycloneDX SBOM is generated by default for all artifacts using ``odlparent-lite``. See
694   `ODLPARENT-280 <https://jira.opendaylight.org/browse/ODLPARENT-280>`__ for more information.
695 * ``netty-transport-native-epoll`` is now supported on Linux/AArch64. See
696   `ODLPARENT-241 <https://jira.opendaylight.org/browse/ODLPARENT-241>`__ for more information.
697 * A number of stale Karaf ``custom.properties`` have been removed. See
698   `ODLPARENT-34 <https://jira.opendaylight.org/browse/ODLPARENT-34>`__ for more information.
699 * Karaf features are now tested when building with Java versions up to and including 17.
700 * SpotBugs analysis is now enabled when building with Java versions up to and including 17.
701
702 Third-party dependencies
703 ~~~~~~~~~~~~~~~~~~~~~~~~
704 * Bouncy Castle `1.69 → 1.70 <https://www.bouncycastle.org/releasenotes.html#r1rv70>`__
705
706 * Checkstyle 8.45.1 → 9.2.1, release notes:
707   * `9.0 <https://checkstyle.org/releasenotes.html#Release_9.0>`__
708   * `9.0 <https://checkstyle.org/releasenotes.html#Release_9.0.1>`__
709   * `9.1 <https://checkstyle.org/releasenotes.html#Release_9.1>`__
710   * `9.2 <https://checkstyle.org/releasenotes.html#Release_9.2>`__
711   * `9.2.1 <https://checkstyle.org/releasenotes.html#Release_9.2.1>`__
712
713 * Dropwizard Metrics 4.1.25 → 4.2.8, release notes:
714   * `4.2.0 <https://github.com/dropwizard/metrics/releases/tag/v4.2.0>`__
715   * `4.2.1 <https://github.com/dropwizard/metrics/releases/tag/v4.2.1>`__
716   * `4.2.2 <https://github.com/dropwizard/metrics/releases/tag/v4.2.2>`__
717   * `4.2.3 <https://github.com/dropwizard/metrics/releases/tag/v4.2.3>`__
718   * `4.2.4 <https://github.com/dropwizard/metrics/releases/tag/v4.2.4>`__
719   * `4.2.5 <https://github.com/dropwizard/metrics/releases/tag/v4.2.5>`__
720   * `4.2.6 <https://github.com/dropwizard/metrics/releases/tag/v4.2.6>`__
721   * `4.2.7 <https://github.com/dropwizard/metrics/releases/tag/v4.2.7>`__
722   * `4.2.8 <https://github.com/dropwizard/metrics/releases/tag/v4.2.8>`__
723
724 * GSON `2.8.9 → 2.9.0 <https://github.com/google/gson/releases/tag/gson-parent-2.9.0>`__
725
726 * Guava 30.1.1 → 31.1, release notes:
727   * `31.0 <https://github.com/google/guava/releases/tag/v31.0>`__
728   * `31.0.1 <https://github.com/google/guava/releases/tag/v31.0.1>`__
729   * `31.1 <https://github.com/google/guava/releases/tag/v31.1>`__
730
731 * Jackson `2.16.5 → 2.16.6 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.6>`__
732
733 * Javassist 3.27.0 → 3.28.0
734
735 * Karaf 4.3.3 → 4.3.6, release notes:
736   * `4.3.4 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12350547>`__
737   * `4.3.5 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12350856>`__
738   * `4.3.6 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12351123>`__
739
740 * Log4J 2.14.1 → 2.17.1, release notes:
741   * `2.15.0 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.15.0>`__
742   * `2.16.0 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.16.0>`__
743   * `2.17.0 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.17.0>`__
744   * `2.17.1 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.17.1>`__
745
746 * Logback `1.2.5 → 1.2.10 <http://logback.qos.ch/news.html>`__
747
748 * Mockito 3.12.4 → 4.3.1, release notes:
749   * `4.0.0 <https://github.com/mockito/mockito/releases/tag/v4.0.0>`__
750   * `4.2.0 <https://github.com/mockito/mockito/releases/tag/v4.1.0>`__
751   * `4.3.0 <https://github.com/mockito/mockito/releases/tag/v4.2.0>`__
752   * `4.3.1 <https://github.com/mockito/mockito/releases/tag/v4.3.1>`__
753
754 * Netty 4.1.67 → 4.1.74, release notes:
755   * `4.1.70 <https://netty.io/news/2021/10/11/4-1-70-Final.html>`__
756   * `4.1.71 <https://netty.io/news/2021/12/09/4-1-71-Final.html>`__
757   * `4.1.72 <https://netty.io/news/2021/12/13/4-1-72-Final.html>`__
758   * `4.1.73 <https://netty.io/news/2022/01/12/4-1-73-Final.html>`__
759   * `4.1.74 <https://netty.io/news/2022/02/08/4-1-74-Final.html>`__
760
761 * Sevntu `1.40.0 → 1.41.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.41.0>`__
762
763 * Woodstox 6.2.6 → 6.2.8, release notes:
764   * `6.2.7 <https://github.com/FasterXML/woodstox/milestone/24?closed=1>`__
765   * `6.2.8 <https://github.com/FasterXML/woodstox/milestone/26?closed=1>`__
766
767 * xmlunit 2.8.3 → 2.9.0, release notes:
768   * `2.8.4 <https://github.com/xmlunit/xmlunit/releases/tag/v2.8.4>`__
769   * `2.9.0 <https://github.com/xmlunit/xmlunit/releases/tag/v2.9.0>`__
770
771 Plugin upgrades
772 ~~~~~~~~~~~~~~~
773 * asciidoctor-maven-plugin `2.2.1 → 2.2.2 <https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-2.2.2>`__
774
775 * bnd-maven-plugin 6.0.0 → 6.2.0, release notes:
776   * `6.1.0 <https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0>`__
777   * `6.2.0 <https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0>`__
778
779 * builder-helper-maven-plugin `3.2.0 → 3.3.0 <https://github.com/mojohaus/build-helper-maven-plugin/releases/tag/build-helper-maven-plugin-3.3.0>`__
780
781 * git-commit-id-maven-plugin `4.0.5 → 5.0.0 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v5.0.0>`__
782
783 * maven-compiler-plugin 3.8.1 → 3.10.0, release notes:
784   * `3.9.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12345214>`__
785   * `3.10.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12351256>`__
786
787 * maven-bundle-plugin 5.1.2 → 5.1.4, release notes:
788   * `5.1.3 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12350117>`__
789   * `5.1.4 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12351195>`__
790
791 * maven-jar-plugin 3.2.0 → 3.2.2, release notes:
792   * `3.2.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317526&version=12348050>`__
793   * `3.2.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317526&version=12351215>`__
794
795 * maven-plugin-plugin `3.6.1 → 3.6.2 <https://maven.apache.org/docs/3.6.2/release-notes.html>`__
796
797 * maven-site-plugin `3.9.1 → 3.10.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317923&version=12348370>`__
798
799 * modernizer-maven-plugin `2.2.0 → 2.3.0 <https://github.com/gaul/modernizer-maven-plugin/releases/tag/modernizer-maven-plugin-2.3.0>`__
800
801 * spotbugs-maven-plugin 3.12.2 → 4.5.3, release notes:
802   `4.0.0 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#400---2020-02-15>`__
803   `4.0.1 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#401---2020-03-19>`__
804   `4.0.2 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#402---2020-04-15>`__
805   `4.0.3 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#403---2020-05-13>`__
806   `4.0.4 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#404---2020-06-09>`__
807   `4.0.5 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#405---2020-06-20>`__
808   `4.0.6 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#406---2020-06-23>`__
809   `4.1.0 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#410---2020-07-30>`__
810   `4.1.1 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#411---2020-07-31>`__
811   `4.1.2 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#412---2020-08-18>`__
812   `4.1.3 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#413---2020-09-25>`__
813   `4.1.4 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#414---2020-10-15>`__
814   `4.2.0 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#420---2020-11-28>`__
815   `4.2.1 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#421---2021-02-04>`__
816   `4.2.2 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#422---2021-03-03>`__
817   `4.2.3 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#423---2021-04-12>`__
818   `4.3.0 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#430---2021-07-01>`__
819   `4.4.0 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#440---2021-08-12>`__
820   `4.4.1 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#441---2021-09-07>`__
821   `4.4.2 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#442---2021-10-08>`__
822   `4.5.0 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#450---2021-11-05>`__
823   `4.5.1 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#451---2021-12-08>`__
824   `4.5.2 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#452---2021-12-13>`__
825   `4.5.3 <https://github.com/spotbugs/spotbugs/blob/4.5.3/CHANGELOG.md#453---2022-01-04>`__
826
827 Version 9.0.8
828 -------------
829 This is a bug-fix upgrade from version 9.0.7.
830
831 Bug fixes
832 ~~~~~~~~~
833 * The fix for `ODLPARENT-220 <https://jira.opendaylight.org/browse/ODLPARENT-220>`__ ended up
834   changing behavior and packaging ``INFO.yaml`` instead of ``PROJECT_INFO.yaml``. This has now
835   been fixed.
836
837 Version 9.0.7
838 -------------
839 This is a bug-fix upgrade from version 9.0.6.
840
841 Bug fixes
842 ~~~~~~~~~
843 * The upgrade of ``maven-dependency-plugin`` to version 3.2.0 has caused a regression in accuracy
844   of reports, with quite a few false positives being generated. The declaration has been rolled
845   back to version 3.1.2 with a few tweaks to improve JDK compatibility. See
846   `ODLPARENT-270 <https://jira.opendaylight.org/browse/ODLPARENT-270>`__ for more information.
847
848 Improvements
849 ~~~~~~~~~~~~
850 * The declaration and invocation of ``script-maven-plugin`` has been replaced with a dedicated
851   plugin providing the same functionality in a much more performant way.  See
852   `ODLPARENT-220 <https://jira.opendaylight.org/browse/ODLPARENT-220>`__ for more information.
853
854 * A new parent pom.xml, ``bnd-parent``, is now available as an alternative to the existing
855   ``bundle-parent``.  It has a more streamlined integration with other plugins, for example
856   maven-jar-plugin, and a much healthier community. See
857   `ODLPARENT-258 <https://jira.opendaylight.org/browse/ODLPARENT-258>`__ for more information.
858
859 * The definition of ``odl-karaf-feat-jdbc`` feature has been reworked to not pull in the entire
860   ``enterprise`` feature repository, leading to significant savings in terms of Karaf distribution
861   size for most downstream projects. See
862   `ODLPARENT-266 <https://jira.opendaylight.org/browse/ODLPARENT-266>`__ for more information.
863
864 * The declaration of ``maven-compiler-plugin`` is now available in ``odlparent-lite``. This is
865   improves locality, as the JDK version enforcement is already part of odlparent-lite.
866
867 Third-party dependencies
868 ~~~~~~~~~~~~~~~~~~~~~~~~
869 * GSON 2.8.5 → 2.8.8, release notes:
870   * `2.8.6 <https://github.com/google/gson/blob/master/CHANGELOG.md#version-286>`__
871   * `2.8.7 <https://github.com/google/gson/blob/master/CHANGELOG.md#version-287>`__
872   * `2.8.8 <https://github.com/google/gson/blob/master/CHANGELOG.md#version-288>`__
873
874 * Jolokia `1.7.0 → 1.7.1 <https://jolokia.org/changes-report.html#a1.7.1>`__
875
876 * Mockito 3.9.0 → 3.12.4, release notes:
877   * `3.9.2 <https://github.com/mockito/mockito/releases/tag/v3.9.2>`__
878   * `3.9.3 <https://github.com/mockito/mockito/releases/tag/v3.9.3>`__
879   * `3.9.7 <https://github.com/mockito/mockito/releases/tag/v3.9.7>`__
880   * `3.9.9 <https://github.com/mockito/mockito/releases/tag/v3.9.9>`__
881   * `3.9.10 <https://github.com/mockito/mockito/releases/tag/v3.9.10>`__
882   * `3.11.0 <https://github.com/mockito/mockito/releases/tag/v3.11.0>`__
883   * `3.11.1 <https://github.com/mockito/mockito/releases/tag/v3.11.1>`__
884   * `3.11.2 <https://github.com/mockito/mockito/releases/tag/v3.11.2>`__
885   * `3.12.0 <https://github.com/mockito/mockito/releases/tag/v3.12.0>`__
886   * `3.12.1 <https://github.com/mockito/mockito/releases/tag/v3.12.1>`__
887   * `3.12.2 <https://github.com/mockito/mockito/releases/tag/v3.12.2>`__
888   * `3.12.3 <https://github.com/mockito/mockito/releases/tag/v3.12.3>`__
889
890 * Netty 4.1.67 → 4.1.69, release notes:
891   * `4.1.68 <https://netty.io/news/2021/09/09/4-1-68-Final.html>`__
892   * `4.1.69 <https://netty.io/news/2021/10/11/4-1-69-Final.html>`__
893
894 Version 9.0.6
895 -------------
896 This is a bug-fix upgrade from version 9.0.5.
897
898 Third-party dependencies
899 ~~~~~~~~~~~~~~~~~~~~~~~~
900 * Jackson 2.11.4 → 2.12.5, release notes:
901   * `2.12 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12>`__
902   * `2.12.1 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.1>`__
903   * `2.12.2 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.2>`__
904   * `2.12.3 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.3>`__
905   * `2.12.4 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.4>`__
906   * `2.12.5 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.5>`__
907
908 * Jetty 9.4.40 → 9.4.43.v20210629, release notes:
909   * `9.4.41.v20210516 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.41.v20210516>`__
910   * `9.4.42.v20210604 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.42.v20210604>`__
911   * `9.4.43.v20210629 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.43.v20210629>`__
912
913 * Jolokia `1.6.2 → 1.7.0 <https://jolokia.org/changes-report.html#a1.7.0>`__
914
915 * Karaf `4.3.2 → 4.3.3 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12350142>`__
916
917 * Pax URL 2.5.4 → 2.6.7, release notes:
918   * `2.6.0 <https://github.com/ops4j/org.ops4j.pax.url/milestone/67?closed=1>`__
919   * `2.6.3 <https://github.com/ops4j/org.ops4j.pax.url/milestone/68?closed=1>`__
920   * `2.6.4 <https://github.com/ops4j/org.ops4j.pax.url/milestone/69?closed=1>`__
921   * `2.6.6 <https://github.com/ops4j/org.ops4j.pax.url/milestone/71?closed=1>`__
922   * `2.6.7 <https://github.com/ops4j/org.ops4j.pax.url/milestone/72?closed=1>`__
923
924 Plugin upgrades
925 ~~~~~~~~~~~~~~~
926 * maven-enforcer-plugin `3.0.0-M3 → 3.0.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317520&version=12346527>`__
927
928 * asciidoctor-maven-plugin 2.1.0 → 2.2.1
929
930 Version 9.0.5
931 -------------
932 This is a minor upgrade from version 9.0.4.
933
934 Bug fixes
935 ~~~~~~~~~
936 * Previous patch to address Bouncy Castle missed a critical piece for populating boot class path. This has now
937   been corrected.
938
939
940 Version 9.0.4
941 -------------
942 This is a minor upgrade from version 9.0.3.
943
944 Bug fixes
945 ~~~~~~~~~
946 * The upgrade to Bouncy Castle 1.69 turned out to be broken due to some code movement and introduction of a new
947   ``bcutil-jdk15on`` artifact. It has also highlighted duplicate packaging, where Karaf's features would install
948   version 1.66, while we have been on a newer version for some time. Both these issues have now ween resolved.
949   See `ODLPARENT-254 <https://jira.opendaylight.org/browse/ODLPARENT-254>`__ for more information.
950
951
952 Version 9.0.3
953 -------------
954 This is a minor upgrade from version 9.0.2.
955
956 Third-party dependencies
957 ~~~~~~~~~~~~~~~~~~~~~~~~
958 * awaitility `4.0.3 → 4.1.0 <https://raw.githubusercontent.com/awaitility/awaitility/master/changelog.txt>`__
959
960 * Bouncy Castle `1.68 → 1.69 <https://www.bouncycastle.org/releasenotes.html>`__
961
962 * Checkstyle 8.42 → 8.45.1, release notes:
963   * `8.43 <https://checkstyle.org/releasenotes.html#Release_8.43>`__
964   * `8.44 <https://checkstyle.org/releasenotes.html#Release_8.44>`__
965   * `8.45 <https://checkstyle.org/releasenotes.html#Release_8.45>`__
966   * `8.45.1 <https://checkstyle.org/releasenotes.html#Release_8.45.1>`__
967
968 * commons-io 2.8.0 → 2.11.0, release notes:
969   * `2.9.0 <https://commons.apache.org/proper/commons-io/changes-report.html#a2.9.0>`__
970   * `2.10.0 <https://commons.apache.org/proper/commons-io/changes-report.html#a2.10.0>`__
971   * `2.11.0 <https://commons.apache.org/proper/commons-io/changes-report.html#a2.11.0>`__
972
973 * Dropwizard Metrics 4.1.21 → 4.1.25, release notes:
974   * `4.1.22 <https://github.com/dropwizard/metrics/releases/tag/v4.1.22>`__
975   * `4.1.23 <https://github.com/dropwizard/metrics/releases/tag/v4.1.23>`__
976   * `4.1.24 <https://github.com/dropwizard/metrics/releases/tag/v4.1.24>`__
977   * `4.1.25 <https://github.com/dropwizard/metrics/releases/tag/v4.1.25>`__
978
979 * Google Truth `1.1.2 → 1.1.3 <https://github.com/google/truth/releases/tag/release_1_1_3>`__
980
981 * logback 1.2.3 → 1.2.5, release notes:
982   * `1.2.4 <https://jira.qos.ch/issues/?jql=project+%3D+LOGBACK+AND+fixVersion+%3D+1.2.4>`__
983   * `1.2.5 <https://jira.qos.ch/issues/?jql=project+%3D+LOGBACK+AND+fixVersion+%3D+1.2.5>`__
984
985 * Netty 4.1.65 → 4.1.67, release notes:
986   * `4.1.66 <https://netty.io/news/2021/07/16/4-1-66-Final.html>`__
987   * `4.1.67 <https://netty.io/news/2021/08/16/4-1-67-Final.html>`__
988
989 * Sevntu `1.39.0 → 1.40.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.40.0>`__
990
991 * ThreeTen `1.6.0 → 1.7.0 <https://www.threeten.org/threeten-extra/changes-report.html#a1.7.0>`__
992
993 Plugin upgrades
994 ~~~~~~~~~~~~~~~
995 * git-commit-id-plugin `4.0.4 → 4.0.5 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v4.0.5>`__
996
997 * Jacoco Maven plugin `0.8.6 → 0.8.7 <https://github.com/jacoco/jacoco/releases/tag/v0.8.7>`__
998
999 * maven-dependency-plugin `3.1.2 → 3.2.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12348705>`__
1000
1001 * maven-plugin-plugin `3.6.0 → 3.6.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317820&version=12344365>`__
1002
1003 * project-info-reports-plugin `3.1.1 → 3.1.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12349521>`__
1004
1005 Version 9.0.2
1006 -------------
1007 This is a minor upgrade from version 9.0.1.
1008
1009 Bug fixes
1010 ~~~~~~~~~
1011 * The upgrade to Karaf 4.3.0 caused a slight misalignment of ``org.apache.felix.metatype``
1012   and ``org.osgi.service.event`` versions, leading to an unnecessary rewiring of the container
1013   most notably during Single Feature Test. This has now been corrected.
1014   See `ODLPARENT-253 <https://jira.opendaylight.org/browse/ODLPARENT-253>`__ for more information.
1015
1016 * ``stax-utils`` component has a default dependency on ``com.bea.xml:jsr174-ri``, which is not
1017   resolvable from Maven Central. This artifact is not needed with modern JRE versions, hence add
1018   an explicit exclusion.
1019
1020 Third-party dependencies
1021 ~~~~~~~~~~~~~~~~~~~~~~~~
1022 * Jetty 9.4.38.v20210224 → 9.4.40.v20210413, release notes:
1023   * `9.4.39.v20210325 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.39.v20210325>`__
1024   * `9.4.40.v20210413 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.40.v20210413>`__
1025
1026 * Karaf `4.3.1 → 4.3.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12349968>`__
1027
1028 * Netty `4.1.63 → 4.1.65 <https://netty.io/news/2021/05/19/4-1-65-Final.html>`__
1029
1030 Version 9.0.1
1031 -------------
1032 This is a minor upgrade from version 9.0.0.
1033
1034 Bug fixes
1035 ~~~~~~~~~
1036 The upgrade of ``duplicate-finder-maven-plugin`` ended up triggering build failures on ``.api_description``
1037 files packaged in artifacts. This regression has now been fixed.
1038
1039 Third-party dependencies
1040 ~~~~~~~~~~~~~~~~~~~~~~~~
1041 * Checkstyle `8.41 → 8.42 <https://checkstyle.org/releasenotes.html#Release_8.42>`__.
1042
1043 * Dropwizard Metrics 4.1.19 → 4.1.21, release notes:
1044   * `4.1.20 <https://github.com/dropwizard/metrics/releases/tag/v4.1.20>`__
1045   * `4.1.21 <https://github.com/dropwizard/metrics/releases/tag/v4.1.21>`__
1046
1047 * LMAX Disruptor 3.4.2 → 3.4.4, release notes:
1048   * `3.4.3 <https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.3>`__
1049   * `3.4.3 <https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.4>`__
1050
1051 * Woodstox `6.2.5 → 6.2.6 <https://github.com/FasterXML/woodstox/milestone/23?closed=1>`__
1052
1053 * XBean finder `4.18 → 4.19 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310312&version=12348824>`__
1054
1055 Plugin upgrades
1056 ~~~~~~~~~~~~~~~
1057 * maven-bundle-plugin 4.2.1 → 5.1.2, release notes:
1058   * `5.1.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12346016>`__
1059   * `5.1.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12350026>`__
1060
1061 Version 9.0.0
1062 -------------
1063 This is a major upgrade from version 8, with breaking changes; downstream projects may need to make changes to upgrade
1064 to this version.
1065
1066 Upstream version removals
1067 ~~~~~~~~~~~~~~~~~~~~~~~~~
1068 The following upstream dependencies have been removed from dependency management:
1069
1070 * ``javax.inject:javax.inject``. This dependency should be provided by target runtime. Furthermore we provide the same
1071   functionality via ``com.guicedee.services:javax.inject``, which is properly declared and is a JPMS module. See
1072   `ODLPARENT-246 <https://jira.opendaylight.org/browse/ODLPARENT-246>`__ for more information.
1073
1074 Improvements
1075 ~~~~~~~~~~~~
1076 * The configuration of ``maven-compiler-plugin`` has been updated to expand ``javac`` warning options to include almost
1077   all of them.
1078 * The default description in parent ``pom.xml`` has been updated to only include ``${project.artifactId}``, not a generic
1079   blurb. See `ODLPARENT-244 <https://jira.opendaylight.org/browse/ODLPARENT-244>`__ for more information.
1080 * The ``single-feature-test`` substrate has been updated to allow Java Flight Recorder to be enabled during testing runs.
1081   This feature has falled into disrepair as the JFR facility has been productized.
1082 * Configuration of various components has been updated to be deactivated when executing with JDK versions newer than 11,
1083   so that odlparent infrastructure works out of the box with JDK 16, albeit sacrificing some validation. Most notably
1084   ``SpotBugs`` and ``Single Feature Test`` are disabled, with corresponding notices displayed.
1085 * We now expose the ability to check dependency declaration consistency via ``maven-dependency-plugin``'s ``analyze-only``
1086   goal. This functionality is enabled by default, but does not cause the build to fail when inconsistencies are found. It
1087   can be disabled by on a per-artifact basis by definining ``odlparent.dependency.skip`` property to ``true``. It can also
1088   be configured to fail the build on a per-artifact basis by defining ``odlparent.dependency.enforce`` property to ``true``.
1089
1090 Third-party dependencies
1091 ~~~~~~~~~~~~~~~~~~~~~~~~
1092 * Antlr 4.8-1 → 4.9.2, release notes:
1093   * `4.9 <https://github.com/antlr/antlr4/releases/tag/4.9>`__
1094   * `4.9.1 <https://github.com/antlr/antlr4/releases/tag/4.9.1>`__
1095   * `4.9.2 <https://github.com/antlr/antlr4/releases/tag/4.9.2>`__
1096
1097 * Checkstyle 8.39.0 → 8.41.1, release notes:
1098   * `8.40.0 <https://checkstyle.org/releasenotes.html#Release_8.40.0>`__
1099   * `8.41.0 <https://checkstyle.org/releasenotes.html#Release_8.41.0>`__
1100   * `8.41.1 <https://checkstyle.org/releasenotes.html#Release_8.41.1>`__
1101
1102 * commons-lang3 `3.11 → 3.12 <https://commons.apache.org/proper/commons-lang/changes-report.html#a3.12>`__
1103
1104 * Dropwizard Metrics 4.1.12.1 → 4.1.19, release notes:
1105   * `4.1.13 <https://github.com/dropwizard/metrics/releases/tag/v4.1.13>`__
1106   * `4.1.14 <https://github.com/dropwizard/metrics/releases/tag/v4.1.14>`__
1107   * `4.1.15 <https://github.com/dropwizard/metrics/releases/tag/v4.1.15>`__
1108   * `4.1.16 <https://github.com/dropwizard/metrics/releases/tag/v4.1.16>`__
1109   * `4.1.17 <https://github.com/dropwizard/metrics/releases/tag/v4.1.17>`__
1110   * `4.1.18 <https://github.com/dropwizard/metrics/releases/tag/v4.1.18>`__
1111   * `4.1.19 <https://github.com/dropwizard/metrics/releases/tag/v4.1.19>`__
1112
1113 * Enunciate `2.13.2 → 2.13.3 <https://github.com/stoicflame/enunciate/releases/tag/v2.13.3>`__
1114
1115 * Google Truth 1.1 → 1.1.2, release notes:
1116   * `1.1.1 <https://github.com/google/truth/releases/tag/release_1_1_1>`__
1117   * `1.1.2 <https://github.com/google/truth/releases/tag/release_1_1_2>`__
1118
1119 * Guava 29.0 → 30.1.1, release notes:
1120   * `30.0 <https://github.com/google/guava/releases/tag/v30.0>`__
1121   * `30.1 <https://github.com/google/guava/releases/tag/v30.1>`__
1122   * `30.1.1 <https://github.com/google/guava/releases/tag/v30.1.1>`__
1123
1124 * JUnit `4.13.1 → 4.13.2 <https://github.com/junit-team/junit4/blob/HEAD/doc/ReleaseNotes4.13.2.md>`__
1125
1126 * Karaf `4.3.0 → 4.3.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12348818>`__
1127
1128 * Log4J 2.13.3 → 2.14.1, release notes:
1129   * `2.14.0 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.14.0>`__
1130   * `2.14.1 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.14.1>`__
1131
1132 * Netty 4.1.59 → 4.1.63, release notes:
1133   * `4.1.60 <https://netty.io/news/2021/03/09/4-1-60-Final.html>`__
1134   * `4.1.61 <https://netty.io/news/2021/03/30/4-1-61-Final.html>`__
1135   * `4.1.62 <https://netty.io/news/2021/03/31/4-1-62-Final.html>`__
1136   * `4.1.63 <https://netty.io/news/2021/04/01/4-1-63-Final.html>`__
1137
1138 * Sevntu `1.38.0 → 1.39.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.39.0>`__
1139
1140 * ThreeTen `1.5.0 → 1.6.0 <https://www.threeten.org/threeten-extra/changes-report.html#a1.6.0>`__
1141
1142 * Woodstox `6.2.4 → 6.2.5 <https://github.com/FasterXML/woodstox/milestone/22?closed=1>`__
1143
1144 * Xtend `2.24.0 → 2.25.0 <https://www.eclipse.org/xtend/releasenotes.html#/releasenotes/2021/03/02/version-2-25-0>`__
1145
1146 Plugin upgrades
1147 ~~~~~~~~~~~~~~~
1148 * Asciidoctor 1.5.7.1 → 2.1.0 (with related AsciidoctorJ upgrades)
1149   * `2.0.0 <https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-2.0.0>`__
1150   * `2.1.0 <https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-2.1.0>`__
1151
1152 * git-commit-id-plugin 3.0.1 → 4.0.4, release notes:
1153   * `4.0.0 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v4.0.0>`__
1154   * `4.0.1 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v4.0.1>`__
1155   * `4.0.2 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v4.0.2>`__
1156   * `4.0.3 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v4.0.3>`__
1157   * `4.0.4 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v4.0.4>`__
1158
1159 * modernizer-maven-plugin `2.1.0 → 2.2.0 <https://github.com/gaul/modernizer-maven-plugin/releases/tag/modernizer-maven-plugin-2.2.0>`__
1160
1161 Version 8.1.1
1162 -------------
1163 This is a minor upgrade from version 8.1.0.
1164
1165 Improvements
1166 ~~~~~~~~~~~~
1167 * Support for building a `static Karaf distribution <https://karaf.apache.org/manual/latest/#_instances_and_distributions_goals>`__
1168   has been added. It is driven by a new parent pom.xml, ``karaf-dist-static``. For more information
1169   see Karaf documentation and `ODLPARENT-251 <https://jira.opendaylight.org/browse/ODLPARENT-251>`__.
1170 * Support for `improved documentation tags <https://bugs.openjdk.java.net/browse/JDK-8068562>`__ has
1171   been added to default ``maven-javadoc-plugin`` configuration. See
1172   `ODLPARENT-252 <https://jira.opendaylight.org/browse/ODLPARENT-252>`__ for more information.
1173 * Version declaration for ``osgi.annotation`` has been added.
1174
1175 Third-party dependencies
1176 ~~~~~~~~~~~~~~~~~~~~~~~~
1177 * commons-net `3.7.2 → 3.8.0 <https://commons.apache.org/proper/commons-net/changes-report.html#a3.8.0>`__
1178
1179 * Netty `4.1.58 → 4.1.59 <https://netty.io/news/2021/02/08/4-1-59-Final.html>`__
1180
1181 * Woodstox `6.2.3 → 6.2.4 <https://github.com/FasterXML/woodstox/milestone/21?closed=1>`__
1182
1183 Plugin upgrades
1184 ~~~~~~~~~~~~~~~
1185 * maven-checkstyle-plugin `3.1.1 → 3.1.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317223&version=12347024>`__
1186
1187 * maven-invoker-plugin `3.2.1 → 3.2.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317525&version=12346157>`__
1188
1189 Version 8.1.0
1190 -------------
1191 This is a minor upgrade from version 8.0.1, with some potentially-breaking
1192 changes.
1193
1194 The most prominent is the upgrade to Karaf 4.3.0, which brings in a host of
1195 updates to related components -- including OSGi Release 7 and Jackson 2.11.x.
1196
1197 Feature updates
1198 ~~~~~~~~~~~~~~~
1199 * The ``odl-jackson-2.10`` feature and artifact were renamed to ``odl-jackson-2.11``
1200   to reflect the bump in Jackson version.
1201
1202 Third-party dependencies
1203 ~~~~~~~~~~~~~~~~~~~~~~~~
1204 * Bouncy Castle `1.66 → 1.68 <https://www.bouncycastle.org/releasenotes.html>`__
1205
1206 * Checkstyle 8.36.1 → 8.39.0, release notes:
1207   * `8.36.2 <https://checkstyle.org/releasenotes.html#Release_8.36.2>`__
1208   * `8.37.0 <https://checkstyle.org/releasenotes.html#Release_8.37.0>`__
1209   * `8.38.0 <https://checkstyle.org/releasenotes.html#Release_8.38.0>`__
1210   * `8.39.0 <https://checkstyle.org/releasenotes.html#Release_8.39.0>`__
1211
1212 * commons-net 3.7 → 3.7.2, release notes:
1213   * `3.7.1 <https://commons.apache.org/proper/commons-net/changes-report.html#a3.7.1>`__
1214   * `3.7.2 <https://commons.apache.org/proper/commons-net/changes-report.html#a3.7.2>`__
1215
1216 * enunciate `2.13.1 → 2.13.2 <https://github.com/stoicflame/enunciate/releases/tag/v2.13.2>`__
1217
1218 * Jackson 2.10.5 → 2.11.4, release notes:
1219   * `2.11.0 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.11>`__
1220   * `2.11.1 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.11.1>`__
1221   * `2.11.2 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.11.2>`__
1222   * `2.11.3 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.11.3>`__
1223   * `2.11.4 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.11.4>`__
1224
1225 * Karaf `4.2.10 → 4.3.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12343304>`__
1226
1227 * Netty 4.1.53 → 4.1.58, release notes:
1228   * `4.1.54 <https://netty.io/news/2020/11/11/4-1-54-Final.html>`__
1229   * `4.1.55 <https://netty.io/news/2020/12/08/4-1-55-Final.html>`__
1230   * `4.1.56 <https://netty.io/news/2020/12/17/4-1-56-Final.html>`__
1231   * `4.1.57 <https://netty.io/news/2021/01/12/4-1-57-Final.html>`__
1232   * `4.1.58 <https://netty.io/news/2021/01/13/4-1-58-Final.html>`__
1233
1234 * Google Truth `1.0.1 → 1.1 <https://github.com/google/truth/releases/tag/release_1_1>`__
1235
1236 * Powermock 2.0.7 → 2.0.9, release notes:
1237   * `2.0.8 <https://github.com/powermock/powermock/blob/release/2.x/docs/release-notes/official.md#208>`__
1238   * `2.0.9 <https://github.com/powermock/powermock/blob/release/2.x/docs/release-notes/official.md#209>`__
1239
1240 * Sevntu `1.37.1 → 1.38.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.38.0>`__
1241
1242 * XBean finder `4.17 → 4.18 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310312&version=12348171>`__
1243
1244 * xmlunit 2.7.0 → 2.8.2, release notes:
1245   * `2.8.0 <https://github.com/xmlunit/xmlunit/releases/tag/v2.8.0>`__
1246   * `2.8.1 <https://github.com/xmlunit/xmlunit/releases/tag/v2.8.1>`__
1247   * `2.8.2 <https://github.com/xmlunit/xmlunit/releases/tag/v2.8.2>`__
1248
1249 * Xtend `2.23.0 → 2.24.0 <https://www.eclipse.org/xtend/releasenotes.html#/releasenotes/2020/12/01/version-2-24-0>`__
1250
1251 Plugin upgrades
1252 ~~~~~~~~~~~~~~~
1253 * build-helper-maven-plugin `3.1.0 → 3.2.0 <https://github.com/mojohaus/build-helper-maven-plugin/issues?q=is%3Aissue+milestone%3A3.1.0+is%3Aclosed>`__
1254
1255 * duplicate-finder-maven-plugin `1.4.0 → 1.5.0 <https://github.com/basepom/duplicate-finder-maven-plugin/releases/tag/duplicate-finder-maven-plugin-1.5.0>`__
1256
1257 * exec-maven-plugin `1.6.0 → 3.0.0 <https://github.com/mojohaus/exec-maven-plugin/releases/tag/exec-maven-plugin-3.0.0>`__
1258
1259 * maven-pmd-plugin `3.13.0 → 3.14.0 <https://www.mail-archive.com/announce@maven.apache.org/msg00978.html>`__
1260
1261 * maven-resource-plugin `3.9.0 → 3.9.1 <https://www.mail-archive.com/announce@maven.apache.org/msg00972.html>`__
1262
1263 * maven-site-plugin `3.9.0 → 3.9.1 <https://www.mail-archive.com/announce@maven.apache.org/msg00966.html>`__
1264
1265 * versions-maven-plugin `2.7 → 2.8.1 <https://github.com/mojohaus/versions-maven-plugin/releases/tag/versions-maven-plugin-2.8.1>`__
1266
1267
1268 Version 8.0.1
1269 -------------
1270 This is a minor big-fix/enhancement update from verision 8.0.0.
1271
1272 Improvements
1273 ~~~~~~~~~~~~
1274 * ``javax.inject`` is now provided by the artifact from `GuicedEE <https://guicedee.com/>`__.
1275   This improves things a lot, as it is a proper jar (not MANIFEST.MF warning), it also is
1276   a JPMS module, hence can be used for linkage. This dependency is properly ``scope=provided``,
1277   so it should not leak into runtimes where it should not be.
1278   See `ODLPARENT-247 <https://jira.opendaylight.org/browse/ODLPARENT-247>`__ for details.
1279
1280 * Transitive dependencies of Guava are now mostly filtered from runtime, so that we do not
1281   require ``wrap`` for them. We still retain checker-qual, as we are actively using those
1282   and it is a proper bundle.
1283   See `ODLPARENT-248 <https://jira.opendaylight.org/browse/ODLPARENT-248>`__ for details.
1284
1285 Third-party dependencies
1286 ~~~~~~~~~~~~~~~~~~~~~~~~
1287 * Jackson `2.10.4 → 2.10.5 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.10.5>`__
1288
1289 * JaCoCo `0.8.5 → 0.8.6 <https://github.com/jacoco/jacoco/releases/tag/v0.8.6>`__
1290
1291 * JUnit `4.13.0 → 4.13.1 <https://github.com/junit-team/junit4/blob/HEAD/doc/ReleaseNotes4.13.1.md>`__
1292
1293 * Karaf `4.2.9 → 4.2.10 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12348288>`__
1294
1295 * Netty `4.1.52 → 4.1.53 <https://netty.io/news/2020/10/13/4-1-53-Final.html>`__
1296
1297 * Pax-Exam `4.13.3 → 4.13.4 <https://ops4j1.jira.com/secure/ReleaseNote.jspa?projectId=10170&version=24393>`__
1298
1299 * Woodstox 6.2.1 → 6.2.3, fixed issues:
1300   * `6.2.2 <https://github.com/FasterXML/woodstox/issues/112>`__
1301   * `6.2.3 <https://github.com/FasterXML/woodstox/issues/117>`__
1302
1303
1304 Version 8.0.0
1305 -------------
1306 This is a major upgrade from version 7, with breaking changes; downstream projects may need to make changes to upgrade
1307 to this version.
1308
1309 Improvements
1310 ~~~~~~~~~~~~
1311 * ``modernizer-maven-plugin`` configuration has been updated to issue warnings for constructs
1312   improved in all Java versions up to and including Java 11.
1313
1314 * ``modernizer-maven-plugin`` is configured by default to fail the build when it issues any
1315   warnings. This behavior can be opted-out of on a per-artifact basis by defining
1316   ``odlparent.modernizer.enforce`` property to ``false``.
1317
1318 Upstream version removals
1319 ~~~~~~~~~~~~~~~~~~~~~~~~~
1320 The following upstream dependencies have been removed from dependency management:
1321
1322 * ``javax.json``. This dependency is used only in Neutron project, hence this version is best
1323   maintained there. See `ODLPARENT-238 <https://jira.opendaylight.org/browse/ODLPARENT-238>`__
1324   for details.
1325
1326 * All ``org.eclipse.persistence`` artifacts. These dependencies are only used in Neutron,
1327   which actually duplicates the declarations, hence they are best maintained there.
1328   See `ODLPARENT-237 <https://jira.opendaylight.org/browse/ODLPARENT-237>`__ for details.
1329
1330 * All ``org.apache.sshd`` and ``net.i2p.crypto`` artifacts. Overriding versions does not play
1331   nice with Karaf's versions during ``feature:install``, causing issues when the installing
1332   over an SSH connection. NETCONF project is providing a repackaged version in OpenDaylight
1333   namespace. See `ODLPARENT-233 <https://jira.opendaylight.org/browse/ODLPARENT-233>`__ for
1334   details.
1335
1336 * ``jettison``. This dependency is used only in LISP Flow Mapping project for integration
1337   tests, hence this version is best maintained there.
1338   See `ODLPARENT-239 <https://jira.opendaylight.org/browse/ODLPARENT-239>`__ for details.
1339
1340 * All ``com.typesafe``, ``io.aeron``, ``org.agrona``, ``org.scala-lang`` declarations. Akka is
1341   removing their support for OSGi, with no working releases in their current ``2.6.x.`` branch.
1342   Since dealing with these requires quite a bit of dance, which needs to sit outside of odlparent POM,
1343   the controller project will package Akka to the extent it needs.
1344   See `ODLPARENT-243 <https://jira.opendaylight.org/browse/ODLPARENT-243>`__ for details.
1345
1346 * ``org.apache.felix.dependencymanager`` and ``org.apache.felix.dependencymanager.shell``. These
1347   components are ancient, having been replaced by either Blueprint or Declarative Services. The only
1348   project using these is AAA, hence it is best to maintain these declarations there.
1349
1350 Feature removals
1351 ~~~~~~~~~~~~~~~~
1352 * ``odl-apache-sshd`` feature has been removed, mirroring the removal of related dependency
1353   declarations. See `ODLPARENT-233 <https://jira.opendaylight.org/browse/ODLPARENT-233>`__ for details.
1354
1355 * ``odl-akka-all``, ``odl-akka-scala-2.13``, ``odl-akka-system-2.5``, ``odl-akka-clustering-2.5``
1356   and ``odl-akka-persistence-2.5`` features. mirroring the removal of related dependency declarations.
1357   See `ODLPARENT-243 <https://jira.opendaylight.org/browse/ODLPARENT-243>`__ for details.
1358
1359 Third-party dependencies
1360 ~~~~~~~~~~~~~~~~~~~~~~~~
1361 * awaitility `3.0.0 → 4.0.3 <https://github.com/awaitility/awaitility/wiki/ReleaseNotes40>`__
1362
1363 * checkstyle 8.34 → 8.36.1, release notes:
1364   * `8.35 <https://checkstyle.org/releasenotes.html#Release_8.35>`__
1365   * `8.36 <https://checkstyle.org/releasenotes.html#Release_8.36>`__
1366   * `8.36.1 <https://checkstyle.org/releasenotes.html#Release_8.36.1>`__
1367
1368 * commons-codec `1.14 → 1.15 <https://commons.apache.org/proper/commons-codec/changes-report.html#a1.15>`__
1369
1370 * commons-io `2.7 → 2.8.0 <https://commons.apache.org/proper/commons-io/changes-report.html#a2.8.0>`__
1371
1372 * commons-net `3.6 → 3.7 <https://commons.apache.org/proper/commons-net/changes-report.html#a3.7>`__
1373
1374 * dropwizard-metrics 4.1.9 → 4.1.12.1, release notes:
1375   * `4.1.10 <https://github.com/dropwizard/metrics/releases/tag/v4.1.10>`__
1376   * `4.1.10.1 <https://github.com/dropwizard/metrics/releases/tag/v4.1.10.1>`__
1377   * `4.1.11 <https://github.com/dropwizard/metrics/releases/tag/v4.1.11>`__
1378   * `4.1.12 <https://github.com/dropwizard/metrics/releases/tag/v4.1.12>`__
1379   * `4.1.12.1 <https://github.com/dropwizard/metrics/releases/tag/v4.1.12.1>`__
1380
1381 * Guava `28.2 → 29.0 <https://github.com/google/guava/releases/tag/v29.0>`__
1382
1383 * immutables.org → 2.8.8, release notes:
1384   * `2.8.0 <https://github.com/immutables/immutables/releases/tag/2.8.0>`__
1385   * `2.8.1 <https://github.com/immutables/immutables/releases/tag/2.8.1>`__
1386   * `2.8.2 <https://github.com/immutables/immutables/releases/tag/2.8.2>`__
1387   * `2.8.3 <https://github.com/immutables/immutables/releases/tag/2.8.3>`__
1388   * `2.8.4 <https://github.com/immutables/immutables/releases/tag/2.8.4>`__
1389   * `2.8.8 <https://github.com/immutables/immutables/releases/tag/2.8.8>`__
1390
1391 * mockito `3.3.3 → 3.5.11 <https://github.com/mockito/mockito/blob/release/3.x/doc/release-notes/official.md>`__
1392
1393 * Netty `4.1.51 → 4.1.52 <https://netty.io/news/2020/09/08/4-1-52-Final.html>`__
1394
1395 * Xtend `2.22.0 → 2.23.0 <https://www.eclipse.org/xtend/releasenotes.html#/releasenotes/2020/09/01/version-2-23-0>`__
1396
1397 Plugin upgrades
1398 ~~~~~~~~~~~~~~~
1399 * maven-archetype-plugin `3.1.2 → 3.2.0 <https://blogs.apache.org/maven/entry/apache-maven-archetype-plugin-version1>`__
1400
1401 * project-info-reports-plugin `3.1.0 → 3.1.1 <https://blogs.apache.org/maven/entry/apache-maven-project-info-reports1>`__
1402
1403 Version 7.0.5
1404 -------------
1405 This is a bug-fix upgrade from version 7.0.4.
1406
1407 Bug fixes
1408 ~~~~~~~~~
1409 * ``odl-netty-4`` feature definition specified both ``x86_64`` and ``aarch64`` artifacts
1410   for ``netty-native-epoll``. This actually results only in ``aarch64`` package being
1411   installed, rendering epoll unavailable on ``x86_64`` architecture. This has been corrected
1412   by removing the ``aarch64`` package.
1413   See `ODLPARENT-240 <https://jira.opendaylight.org/browse/ODLPARENT-240>`__ for details.
1414
1415 Version 7.0.4
1416 -------------
1417 This is a security/bug-fix upgrade from version 7.0.3.
1418
1419 Bug fixes
1420 ~~~~~~~~~
1421 * ``Single Feature Test`` setup of the JVM for Karaf container ended up using
1422   wrong versions of Karaf components, leading to a failure to initialize
1423   OSGiLocator and subsequent warnings with stack traces. This has now been
1424   corrected.
1425   See `ODLPARENT-228 <https://jira.opendaylight.org/browse/ODLPARENT-228>`__ for details.
1426 * Pax-Exam setup interacts badly with pipes used by maven-surefire plugin,
1427   leading to pauses lasting around 30 seconds after SFT test success.
1428   This has now been worked around by using maven-surefire-plugin version 3.0.0-M5,
1429   with TCP sockets used for communication.
1430   See `ODLPARENT-179 <https://jira.opendaylight.org/browse/ODLPARENT-179>`__ for details.
1431 * Our Jersey dependency was held back on version 2.25.1 during Neon upgrade cycle, mostly
1432   due to large-scale incompatibilities around JAX-RS version. We have upgraded to Karaf-4.2.8+,
1433   which pulls in JAX-RS 2.1, hence re-aligning to a more modern version, 2.27, is now
1434   feasible.
1435   See `ODLPARENT-208 <https://jira.opendaylight.org/browse/ODLPARENT-208>`__ for details.
1436
1437 Third-party dependencies
1438 ~~~~~~~~~~~~~~~~~~~~~~~~
1439 * Bouncy Castle `1.65 → 1.66 <https://www.bouncycastle.org/releasenotes.html>`__
1440
1441 * Checkstyle 8.32 → 8.34, release notes:
1442   * `8.33 <https://checkstyle.org/releasenotes.html#Release_8.33>`__
1443   * `8.34 <https://checkstyle.org/releasenotes.html#Release_8.34>`__
1444
1445 * commons-io `2.6 → 2.7 <https://commons.apache.org/proper/commons-io/changes-report.html#a2.7>`__
1446
1447 * Jersey 2.25.1 → 2.27, release notes:
1448   * `2.26 <https://eclipse-ee4j.github.io/jersey.github.io/release-notes/2.26.html>`__
1449   * `2.27 <https://eclipse-ee4j.github.io/jersey.github.io/release-notes/2.27.html>`__
1450
1451 * Karaf `4.2.8 → 4.2.9, with related upgrades <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12345539>`__
1452
1453 * Netty 4.1.49 → 4.1.51, release notes:
1454   * `4.1.50 <https://netty.io/news/2020/05/13/4-1-50-Final.html>`__
1455   * `4.1.51 <https://netty.io/news/2020/07/09/4-1-51-Final.html>`__
1456
1457 * Scala `2.13.2 → 2.13.3 <https://github.com/scala/scala/releases/tag/v2.13.3>`__
1458
1459 * TrieMap `1.1.0 → 1.2.0 <https://github.com/PANTHEONtech/triemap/releases/tag/triemap-1.2.0>`__
1460
1461 * XBean finder 4.14 → 4.17, release notes:
1462   * `4.15 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310312&version=12345583>`__
1463   * `4.16 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310312&version=12345584>`__
1464   * `4.17 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310312&version=12346905>`__
1465
1466 Plugin upgrades
1467 ~~~~~~~~~~~~~~~
1468 * maven-project-info-reports-plugin `3.0.0 → 3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12346620>`__.
1469
1470 * maven-shade-plugin `3.2.3 → 3.2.4 <https://blogs.apache.org/maven/entry/apache-maven-shade-plugin-version5>`__
1471
1472 Version 7.0.3
1473 -------------
1474 This is a security/bug-fix upgrade from version 7.0.2. Changes in this release
1475 pertain strictly to Karaf packaging and do not affect other runtimes.
1476
1477 Bug fixes
1478 ~~~~~~~~~
1479 * Felix SCR 2.1.16, as shipping before Karaf-4.2.9, contains a bug, which could
1480   lead to NullPointerException being thrown when components were examined. This
1481   has been rectified via upgrade to Felix SCR 2.1.20.
1482   See `ODLPARENT-236 <https://jira.opendaylight.org/browse/ODLPARENT-236>`__ for details.
1483 * Karaf-4.2.8 changed packaged log4j2 version, rendering the configuration supplied
1484   with ``ODLPARENT-231`` inconsistent. This has led to a warning being printed in the
1485   Karaf console on each startup. This has now been corrected.
1486 * Karaf-4.2.8 is packaging pax-logging-1.11.4, which embeds a a vulnerable version
1487   of log4j2 (2.3.0). This would render the upgrades delivered in version 7.0.2
1488   ineffective at runtime, potentially leading to exposure. This has been corrected
1489   with upgrade of pax-logging to 1.11.6, which is packaging log4j2-2.3.2.
1490
1491 Version 7.0.2
1492 -------------
1493 This is a security/bug-fix upgrade from version 7.0.1.
1494
1495 Improvements
1496 ~~~~~~~~~~~~
1497 * Infrastructure for identifying confidential log messages was added, along with
1498   Karaf configuration update to routing such messages into a separate log file.
1499   See `ODLPARENT-231 <https://jira.opendaylight.org/browse/ODLPARENT-231>`__ for details.
1500
1501 * Netty has been disconnected from Javassist way back in its 4.1.9 release, but
1502   we failed to notice. This has now been rectified by ``odl-netty-4`` not depending
1503   on ``odl-javassist-3``.
1504
1505 Third-party dependencies
1506 ~~~~~~~~~~~~~~~~~~~~~~~~
1507 * Checkstyle `8.31 → 8.32 <https://checkstyle.org/releasenotes.html#Release_8.32>`__
1508
1509 * Dropwizard Metrics 4.1.5 → 4.1.9, release notes:
1510   * `4.1.6 <https://github.com/dropwizard/metrics/releases/tag/v4.1.6>`__
1511   * `4.1.7 <https://github.com/dropwizard/metrics/releases/tag/v4.1.7>`__
1512   * `4.1.8 <https://github.com/dropwizard/metrics/releases/tag/v4.1.8>`__
1513   * `4.1.9 <https://github.com/dropwizard/metrics/releases/tag/v4.1.9>`__
1514
1515 * Enunciate 2.12.1 → 2.13.1, release notes:
1516   * `2.13.0 <https://github.com/stoicflame/enunciate/releases/tag/v2.13.0>`__
1517   * `2.13.1 <https://github.com/stoicflame/enunciate/releases/tag/v2.13.1>`__
1518
1519 * Jackson 2.10.2 → 2.10.4, release notes:
1520   * `2.10.3 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.10.3>`__
1521   * `2.10.4 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.10.4>`__
1522
1523 * log4j2 2.13.1 → 2.13.3, release notes:
1524   * `2.13.2 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.13.2>`__
1525   * `2.13.3 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.13.3>`__
1526
1527 * Netty `4.1.48 → 4.1.49 <https://netty.io/news/2020/02/28/4-1-46-Final.html>`__
1528
1529 * Powermock `2.0.6 → 2.0.7 <https://github.com/powermock/powermock/blob/release/2.x/docs/release-notes/official.md#207>`__
1530
1531 * Scala `2.13.1 → 2.13.2 <https://github.com/scala/scala/releases/tag/v2.13.2>`__
1532
1533 * Woodstox 6.1.1 → 6.2.1, release notes:
1534   * `6.2.0 <https://github.com/FasterXML/woodstox/wiki/Woodstox-Release-6.2#620-25-apr-2020>`__
1535   * `6.2.1 <https://github.com/FasterXML/woodstox/wiki/Woodstox-Release-6.2#621-13-may-2020>`__
1536
1537 * xmlunit 2.6.3 → 2.7.0, release notes:
1538   * `2.6.4 <https://github.com/xmlunit/xmlunit/releases/tag/v2.6.4>`__
1539   * `2.7.0 <https://github.com/xmlunit/xmlunit/releases/tag/v2.7.0>`__
1540
1541 Plugin upgrades
1542 ~~~~~~~~~~~~~~~
1543 * builder-helper-maven-plugin `3.0.0 → 3.1.0 <https://github.com/mojohaus/build-helper-maven-plugin/issues?q=is%3Aissue+milestone%3A3.1.0+is%3Aclosed>`__
1544
1545 * duplicate-finder-maven-plugin `1.3.0 → 1.4.0 <https://github.com/basepom/duplicate-finder-maven-plugin/releases/tag/duplicate-finder-maven-plugin-1.4.0>`__
1546
1547 * maven-antrun-plugin `1.8 → 3.0.0 <https://blogs.apache.org/maven/entry/apache-maven-antrun-plugin-version>`__
1548
1549 * maven-assembly-plugin `3.2.0 → 3.3.0 <https://blogs.apache.org/maven/entry/apache-maven-assembly-plugin-version1>`__
1550
1551 * maven-invoker-plugin `3.2.0 → 3.2.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317525&version=12344863>`__
1552
1553 * maven-remote-resources-plugin `1.6.0 → 1.7.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317825&version=12331232>`__
1554
1555 * maven-shade-plugin `3.2.2 → 3.2.3 <https://blogs.apache.org/maven/entry/apache-maven-shade-plugin-version4>`__
1556
1557 Version 7.0.1
1558 -------------
1559 This is a bug-fix upgrade from version 7.0.0.
1560
1561 Bug fixes
1562 ~~~~~~~~~
1563 * Upgrade of ``maven-javadoc-plugin`` is causing issues in downstream javadoc jobs and therefore it has been reverted.
1564   See `ODLPARENT-229 <https://jira.opendaylight.org/browse/ODLPARENT-229>`__ for details.
1565
1566 Third-party dependencies
1567 ~~~~~~~~~~~~~~~~~~~~~~~~
1568 * Akka `2.5.30 → 2.5.31 <https://akka.io/blog/news/2020/03/31/akka-2.5.31-released>`__
1569
1570 * Bouncy Castle `1.64 → 1.65 <https://www.bouncycastle.org/releasenotes.html>`__
1571
1572 * Checkstyle `8.30 → 8.31 <https://checkstyle.org/releasenotes.html#Release_8.31>`__
1573
1574 * commons-lang3 `3.9 → 3.10 <https://commons.apache.org/proper/commons-lang/changes-report.html#a3.10>`__
1575
1576 * Xtend 1.19.0 → 1.21.0, release notes:
1577   * `1.20.0 <https://www.eclipse.org/xtend/releasenotes.html#/releasenotes/2019/12/03/version-2-20-0>`__
1578   * `1.21.0 <https://www.eclipse.org/xtend/releasenotes.html#/releasenotes/2020/03/03/version-2-21-0>`__
1579
1580 Version 7.0.0
1581 -------------
1582 This is a major upgrade from version 6, with breaking changes; downstream projects may need to make changes to upgrade
1583 to this version.
1584
1585 Property removals
1586 ~~~~~~~~~~~~~~~~~
1587 * ``enforcer.version`` and ``projectinfo`` properties were removed. These properties do not serve any legal purpose as
1588   the plugins referenced by them are declared in ``pluginManagement`` section.
1589
1590 Upstream version removals
1591 ~~~~~~~~~~~~~~~~~~~~~~~~~
1592 The following upstream dependencies have been removed from dependency management:
1593
1594 * ``immutables.org/value`` without ``<classifier>annotations</classifier>``
1595
1596 * ``javax.xml.bind/jaxb-api``, replaced with ``jakarta.xml.bind/jakarta.xml.bind-api``
1597
1598 * ``com.google.inject/guice``
1599
1600 * ``com.mycila.guice.extensions/mycila-guice-jsr250``
1601
1602 * ``org.apache.shiro/shiro-core``
1603
1604 * ``org.apache.shiro/shiro-web``
1605
1606 Feature removals
1607 ~~~~~~~~~~~~~~~~
1608 * ``odl-akka-leveldb-0.10`` feature was removed. This feature provided leveldb-backed implementation of Akka
1609   Persistence, which is not supported for production environments by upstream. Furthermore this feature relied on a
1610   custom-built binary, which we do not have a means to reproduce -- limiting our portability. The controller project,
1611   which is the only downstream user of persistence provides an alternative implementation, hence we are removing this
1612   historical baggage. See `ODLPARENT-213 <https://jira.opendaylight.org/browse/ODLPARENT-213>`__ for details.
1613
1614 * ``odl-caffeine-2`` feature was removed. This feature provided a ``JSR-107 JCache`` implementation, an API deemed to
1615   be problematic where high-performance and correctness in required.
1616
1617 New features
1618 ~~~~~~~~~~~~
1619 * OSGi R6 Declarative Services enabled in Karaf. The ``scr`` feature is now part of startup features, hence Service
1620   Component Runtime can be used without incurring an additional refresh.
1621   See `ODLPARENT-227 <https://jira.opendaylight.org/browse/ODLPARENT-227>`__ for details.
1622
1623 Third-party dependencies
1624 ~~~~~~~~~~~~~~~~~~~~~~~~
1625 * Akka `2.5.29 → 2.5.30 <https://akka.io/blog/news/2020/03/12/akka-2.5.30-released>`__
1626
1627 * antl4r `4.7.2 → 4.8-1 <https://github.com/antlr/antlr4/releases/tag/4.8>`__
1628
1629 * Asciidoctor `1.5.7.1 → 1.5.8 <https://github.com/asciidoctor/asciidoctor/releases/tag/v1.5.8>`__
1630
1631 * Checkstyle 8.26 → 8.30, release notes:
1632   * `8.27 <https://checkstyle.org/releasenotes.html#Release_8.27>`__
1633   * `8.28 <https://checkstyle.org/releasenotes.html#Release_8.28>`__
1634   * `8.29 <https://checkstyle.org/releasenotes.html#Release_8.29>`__
1635   * `8.30 <https://checkstyle.org/releasenotes.html#Release_8.30>`__
1636
1637 * Dropwizard Metrics 4.0.5 → 4.1.5, release notes:
1638   * `4.1.0-rc0 <https://github.com/dropwizard/metrics/releases/tag/v4.1.0-rc0>`__
1639   * `4.1.0-rc2 <https://github.com/dropwizard/metrics/releases/tag/v4.1.0-rc2>`__
1640   * `4.1.0-rc3 <https://github.com/dropwizard/metrics/releases/tag/v4.1.0-rc3>`__
1641   * `4.1.1 <https://github.com/dropwizard/metrics/releases/tag/v4.1.1>`__
1642   * `4.1.2 <https://github.com/dropwizard/metrics/releases/tag/v4.1.2>`__
1643   * `4.1.3 <https://github.com/dropwizard/metrics/releases/tag/v4.1.3>`__
1644   * `4.1.4 <https://github.com/dropwizard/metrics/releases/tag/v4.1.4>`__
1645
1646 * Google Truth 0.43 → 1.0.1, release notes:
1647   * `0.44 <https://github.com/google/truth/releases/tag/release_0_44>`__
1648   * `0.45 <https://github.com/google/truth/releases/tag/release_0_45>`__
1649   * `0.46 <https://github.com/google/truth/releases/tag/release_0_46>`__
1650   * `1.0-rc1 <https://github.com/google/truth/releases/tag/release_1_0_rc1>`__
1651   * `1.0-rc2 <https://github.com/google/truth/releases/tag/release_1_0_rc2>`__
1652   * `1.0 <https://github.com/google/truth/releases/tag/release_1_0>`__
1653   * `1.0.1 <https://github.com/google/truth/releases/tag/release_1_0_1>`__
1654
1655 * Guava 27.1 → 28.2, release notes:
1656   * `28.0 <https://github.com/google/guava/releases/tag/v28.0>`__
1657   * `28.1 <https://github.com/google/guava/releases/tag/v28.1>`__
1658   * `28.2 <https://github.com/google/guava/releases/tag/v28.2>`__
1659
1660 * Javassist 3.26.0 → 3.27.0
1661
1662 * jdt-annotations 2.2.100 → 2.2.400
1663
1664 * Karaf 4.2.6 → 4.2.8, with related upgrades, release notes:
1665   * `4.2.7 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12345539>`__
1666   * `4.2.8 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12346100>`__
1667
1668 * log4j2 `2.13.0 → 2.13.1 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.13.1>`__
1669
1670 * Netty 4.1.45 → 4.1.48, release notes:
1671   * `4.1.46 <https://netty.io/news/2020/02/28/4-1-46-Final.html>`__
1672   * `4.1.47 <https://netty.io/news/2020/03/09/4-1-47-Final.html>`__
1673   * `4.1.48 <https://netty.io/news/2020/03/17/4-1-48-Final.html>`__
1674
1675 * Powermock 2.0.4 → 2.0.6, release notes:
1676   * `2.0.5 <https://github.com/powermock/powermock/blob/release/2.x/docs/release-notes/official.md#205>`__
1677   * `2.0.6 <https://github.com/powermock/powermock/blob/release/2.x/docs/release-notes/official.md#206>`__
1678
1679 * Scala 2.12.10 → 2.13.1, release notes:
1680   * `2.13.0 <https://github.com/scala/scala/releases/tag/v2.13.0>`__
1681   * `2.13.1 <https://github.com/scala/scala/releases/tag/v2.13.1>`__
1682
1683 * scala-java8-compat 0.8.0 → 0.9.1, release notes:
1684   * `0.9.0 <https://github.com/scala/scala-java8-compat/releases/tag/v0.9.0>`__
1685   * `0.9.1 <https://github.com/scala/scala-java8-compat/releases/tag/v0.9.1>`__
1686
1687 * Sevntu 1.36.0 → 1.37.1, release notes:
1688   * `1.37.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.37.0>`__
1689   * `1.37.1 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.37.1>`__
1690
1691 * woodstox-core 5.3.0 → 6.1.1
1692
1693 Plugin upgrades
1694 ~~~~~~~~~~~~~~~
1695
1696 * findbugs-slf4j `1.4.0 → 1.5.0 <https://github.com/KengoTODA/findbugs-slf4j/blob/master/CHANGELOG.md#150---2019-07-04>`__
1697
1698 * maven-checkstyle-plugin `3.1.0 → 3.1.1 <https://blogs.apache.org/maven/entry/apache-maven-checkstyle-plugin-version1>`__
1699
1700 * maven-dependency-plugin `3.1.1 → 3.1.2 <https://blogs.apache.org/maven/entry/apache-maven-dependency-plugin-version2>`__
1701
1702 * maven-enforcer-plugin `3.0.0-M2 → 3.0.0-M3 <https://blogs.apache.org/maven/entry/apache-maven-enforcer-version-3>`__
1703
1704 * maven-javadoc-plugin `3.1.1 → 3.2.0 <https://blogs.apache.org/maven/entry/apache-maven-javadoc-plugin-version1>`__
1705
1706 * maven-shade-plugin `3.2.1 → 3.2.2 <https://blogs.apache.org/maven/entry/apache-maven-shade-plugin-version3>`__
1707
1708 * modernizer-maven-plugin `2.0.0 → 2.1.0 <https://github.com/gaul/modernizer-maven-plugin/releases/tag/modernizer-maven-plugin-2.1.0>`__
1709
1710 * pmd-maven-plugin `3.12.0 → 3.13.0 <https://blogs.apache.org/maven/entry/apache-maven-pmd-plugin-version2>`__
1711
1712 Version 6.0.5
1713 -------------
1714 This is a bug-fix upgrade from version 6.0.4.
1715
1716 Third-party dependencies
1717 ~~~~~~~~~~~~~~~~~~~~~~~~
1718 * Akka 2.5.26 → 2.5.29, release notes:
1719   * `2.5.27 <https://akka.io/blog/news/2019/12/10/akka-2.5.27-released>`__
1720   * `2.5.29 <https://akka.io/blog/news/2020/01/28/akka-2.5.29-released>`__
1721
1722 * commons-codec `1.13 → 1.14 <https://commons.apache.org/proper/commons-codec/changes-report.html#a1.14>`__
1723
1724 * Jackson `2.9.10 → 2.9.10.20200103 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9#micro-patches>`__
1725
1726 Plugin upgrades
1727 ~~~~~~~~~~~~~~~
1728 * maven-source-plugin `3.2.0 → 3.2.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317924&version=12346480>`__
1729
1730 Version 6.0.4
1731 -------------
1732 This is a bug-fix upgrade from version 6.0.3.
1733
1734 Bug fixes
1735 ~~~~~~~~~
1736 * ``single-feature-test`` was using outdated repositories, including Maven Central,
1737   which `broke on Jan 15, 2020 <https://support.sonatype.com/hc/en-us/articles/360041287334-Central-501-HTTPS-Required>`__.
1738   This has been corrected.
1739
1740 Third-party dependencies
1741 ~~~~~~~~~~~~~~~~~~~~~~~~
1742
1743 * JUnit 4.11 → 4.13, release notes:
1744   * `4.12 <https://github.com/junit-team/junit4/blob/master/doc/ReleaseNotes4.12.md>`__
1745   * `4.13 <https://github.com/junit-team/junit4/blob/master/doc/ReleaseNotes4.13.md>`__
1746
1747 * log4j2 2.11.2 → 2.13.0, release notes:
1748   * `2.12.0 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.13.0>`__
1749   * `2.12.1 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.12.1>`__
1750   * `2.13.0 <https://logging.apache.org/log4j/2.x/changes-report.html#a2.13.0>`__
1751
1752 * netty 4.1.42 → 4.1.45, release notes:
1753   * `4.1.43 <https://netty.io/news/2019/10/24/4-1-43-Final.html>`__
1754   * `4.1.44 <https://netty.io/news/2019/12/18/4-1-44-Final.html>`__
1755   * `4.1.45 <https://netty.io/news/2020/01/13/4-1-45-Final.html>`__
1756
1757 Plugin upgrades
1758 ~~~~~~~~~~~~~~~
1759 * maven-assembly-plugin 2.2-beta5 → 3.2.0
1760
1761 * maven-archetype-plugin `3.1.1 → 3.1.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317122&version=12345957>`__
1762
1763 Version 6.0.3
1764 -------------
1765 This is a bug-fix upgrade from version 6.0.2.
1766
1767 Bug fixes
1768 ~~~~~~~~~
1769 * The fix for `ODLPARENT-216 <https://jira.opendaylight.org/browse/ODLPARENT-216>`__ ended up
1770   breaking ``org.kohsuke.metainf-services`` integration. While this could be fixed in downstreams
1771   by adding proper </annotationProcessorPaths> entry, it is a regression from 6.0.1.
1772
1773 Version 6.0.2
1774 -------------
1775 This is a security/bug-fix upgrade from version 6.0.1.
1776
1777 Bug fixes
1778 ~~~~~~~~~
1779 * ``single-feature-parent`` was setting up Karaf repositories incorrectly, leading to
1780   the test using unpatched Karaf resources. This has now been fixed and the test run
1781   is using environment equivalent to the contents of the distribution. See
1782   `ODLPARENT-209 <https://jira.opendaylight.org/browse/ODLPARENT-209>`__ for details.
1783
1784 * ``immutables.org`` integration relied on pre-JDK9 way of integration, where the annotation processor
1785   was just dropped as a dependency. This does not work with JDK9+ artifacts which are also explicit
1786   JMPS modules. Note that users are advised to switch to depending on the ``annotations``-classified
1787   artifact. See `ODLPARENT-216 <https://jira.opendaylight.org/browse/ODLPARENT-216>`__ for details.
1788
1789 * Assembled Karaf distribution did not perform proper JDK checks and allowed launching with JDK8,
1790   leading to a failure to install OpenDaylight components with an error stack, which confuses users
1791   not familiar with OSGi. The distribution now refuses to start with anything other than JDK11. See
1792   `ODLPARENT-218 <https://jira.opendaylight.org/browse/ODLPARENT-218>`__ for details.
1793
1794 Third-party dependencies
1795 ~~~~~~~~~~~~~~~~~~~~~~~~
1796
1797 * Akka `2.5.25 → 2.5.26 <https://akka.io/blog/news/2019/10/17/akka-2.5.26-released>`__
1798
1799 * Checkstyle 8.20 → 8.26, release notes:
1800   * `8.21 <https://checkstyle.org/releasenotes.html#Release_8.21>`__
1801   * `8.22 <https://checkstyle.org/releasenotes.html#Release_8.22>`__
1802   * `8.23 <https://checkstyle.org/releasenotes.html#Release_8.23>`__
1803   * `8.24 <https://checkstyle.org/releasenotes.html#Release_8.24>`__
1804   * `8.25 <https://checkstyle.org/releasenotes.html#Release_8.25>`__
1805   * `8.26 <https://checkstyle.org/releasenotes.html#Release_8.26>`__
1806
1807 * H2 database `1.4.199 → 1.4.200 <http://www.h2database.com/html/changelog.html>`__
1808
1809 * Hamcrest `2.1 → 2.2 <https://github.com/hamcrest/JavaHamcrest/releases/tag/v2.2>`__
1810
1811 * JaCoCo `0.8.4 → 0.8.5 <https://github.com/jacoco/jacoco/releases/tag/v0.8.5>`__
1812
1813 * Karaf 4.2.2 → 4.2.6, release notes:
1814   * `4.2.3 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12344587>`__
1815   * `4.2.4 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12344856>`__
1816   * `4.2.5 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12345153>`__
1817   * `4.2.6 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12345365>`__
1818
1819 * Powermock `2.0.2 → 2.0.4 <https://github.com/powermock/powermock/blob/release/2.x/docs/release-notes/official.md#204>`__
1820
1821 * Sevntu `1.35.0 → 1.36.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.36.0>`__
1822
1823 Plugin upgrades
1824 ~~~~~~~~~~~~~~~
1825
1826 * maven-bundle-plugin `4.1.0 → 4.2.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12345491>`__
1827
1828 * maven-jar-plugin `3.1.2 → 3.2.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317526&version=12345503>`__
1829
1830 * maven-source-plugin `3.1.0 → 3.2.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317924&version=12345522>`__
1831
1832 * modernizer-maven-plugin `1.9.0 → 2.0.0 <https://github.com/gaul/modernizer-maven-plugin/releases/tag/modernizer-maven-plugin-2.0.0>`__
1833
1834 Version 6.0.1
1835 -------------
1836 This is a security/bug-fix upgrade from version 6.0.0.
1837
1838 Bug fixes
1839 ~~~~~~~~~
1840 * ``karaf-plugin`` ignored exceptions coming from its failure to resolve ${karaf.etc} variable. This
1841   has now been fixed and the URL handling has been revised to fix build on Windows. See
1842   `ODLPARENT-214 <https://jira.opendaylight.org/browse/ODLPARENT-214>`__ for details.
1843
1844 * ``leveldb-jni`` jar, which has been seeded to nexus.opendaylight.org long time ago is not published
1845   in Maven Central. This has been resolved by repackaging this jar and publishing it from odlparent.
1846   See `ODLPARENT-210 <https://jira.opendaylight.org/browse/ODLPARENT-210>`__ for details.
1847
1848 Third-party dependencies
1849 ~~~~~~~~~~~~~~~~~~~~~~~~
1850
1851 * Bouncy Castle `1.63 → 1.64 <http://www.bouncycastle.org/releasenotes.html>`__
1852
1853 * Jackson `2.9.9 → 2.9.10 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.10>`__
1854
1855 * Javassist 3.24.1-GA → 3.26.0-GA
1856
1857 * Guice 4.1.0 → 4.2.2, release notes:
1858   * `4.2.0 <https://github.com/google/guice/wiki/Guice42>`__
1859   * `4.2.1 <https://github.com/google/guice/wiki/Guice421>`__
1860   * `4.2.2 <https://github.com/google/guice/wiki/Guice422>`__
1861
1862 * Mockito 2.25.1 → 2.28.2, release notes:
1863   * `2.25.2 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2252>`__
1864   * `2.25.3 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2253>`__
1865   * `2.25.4 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2254>`__
1866   * `2.25.5 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2255>`__
1867   * `2.25.6 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2256>`__
1868   * `2.25.7 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2257>`__
1869   * `2.26.1 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2261>`__
1870   * `2.26.2 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2262>`__
1871   * `2.27.1 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2271>`__
1872   * `2.27.2 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2272>`__
1873   * `2.27.3 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2273>`__
1874   * `2.27.4 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2274>`__
1875   * `2.27.5 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2275>`__
1876   * `2.28.0 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2280>`__
1877
1878 * Netty 4.1.39 → 4.1.42, release notes:
1879   * `4.1.41 <https://netty.io/news/2019/09/12/4-1-41-Final.html>`__
1880   * `4.1.42 <https://netty.io/news/2019/09/25/4-1-42-Final.html>`__
1881
1882 * pt-triemap `1.0.6 → 1.1.0 <https://github.com/PantheonTechnologies/triemap/releases/tag/triemap-1.1.0>`__
1883
1884 * reactive-streams `1.0.2 → 1.0.3 <http://www.reactive-streams.org/announce-1.0.3>`__
1885
1886 * stax2-api `3.1.4 → 4.2 <https://github.com/FasterXML/stax2-api/blob/master/release-notes/VERSION>`__
1887
1888 * woodstox-core 5.0.3 → 5.3.0, release notes:
1889   * `5.1.0 <https://github.com/FasterXML/woodstox/wiki/Woodstox-Release-5.1>`__
1890   * `5.2.0 <https://github.com/FasterXML/woodstox/wiki/Woodstox-Release-5.2>`__
1891   * `5.3.0 <https://github.com/FasterXML/woodstox/wiki/Woodstox-Release-5.3>`__
1892
1893 Version 6.0.0
1894 -------------
1895 This is a major upgrade from version 5, with breaking changes; projects will
1896 need to make changes to upgrade to this version.
1897
1898 Java 11 is required
1899 ~~~~~~~~~~~~~~~~~~~
1900 This release sets ``maven.compiler.release=11`` and enforces that the JDK used to build
1901 is Java 11+. As there may be issues with various maven plugins when faced with JDK9+
1902 constructs and JDK11+ classes, target release can be controlled on a per-artifact
1903 basis (i.e. target Java 10 with ``maven.compiler.release=10`` property).
1904
1905 This release has been validated with ``openjdk-11.0.4`` and is not supported on any lower
1906 version. As usual, we recommend using latest available JDK/JRE for Java 11 during development
1907 and deployment.
1908
1909 Checkstyle/SpotBugs/Modernizer run by default
1910 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1911 With this release code artifacts always run ``maven-checkstyle-plugin``, ``spotbugs-maven-plugin``
1912 and ``modernizer-maven-plugin``. Checkstyle and SpotBugs run in enforcing mode, i.e. will fail
1913 build if any violations are found. Modernizer is configured to report Java 8-compatible constructs
1914 and will not fail the build unless instructed to do so.
1915
1916 Behavior of each of these is controlled via a maven property on a per-artifact basis:
1917
1918 * ``odlparent.checkstyle.enforce`` controls checkstyle enforcement: defaults to ``true``, but can be set to ``false``
1919 * ``odlparent.checkstyle.skip`` controls checkstyle invocation: defaults to ``false``, but can be set to ``true``
1920 * ``odlparent.spotbugs.enforce`` controls SpotBugs enforcement: defaults to ``true``, but can be set to ``false``
1921 * ``odlparent.spotbugs.skip`` controls SpotBugs invocation: defaults to ``false``, but can be set to ``true``
1922 * ``odlparent.modernizer.enforce`` controls modernizer enforcement: defaults to ``false``, but can be set to ``true``
1923 * ``odlparent.modernizer.skip`` controls modernizer invocation: defaults to ``false``, but can be set to ``true``
1924 * ``odlparent.modernizer.target`` controls modernizer Java version: defaults to ``1.8``, but can be set to ``1.11`` or similar
1925
1926 Bug fixes
1927 ~~~~~~~~~
1928
1929 * ``blueprint container`` had ``org.apache.aries.blueprint.preemptiveShutdown`` set to false
1930   to enable it to work with Config Subsystem. As that component is long gone, this property has
1931   been removed as part of `ODLPARENT-34 <https://jira.opendaylight.org/browse/ODLPARENT-34>`__.
1932   Furthermore, system properties related to Config Subsystem/NETCONF integration have been removed
1933   as well.
1934
1935 Upstream version removals
1936 ~~~~~~~~~~~~~~~~~~~~~~~~~
1937
1938 The following upstream dependencies have been removed from dependency management:
1939
1940 * com.google.code.findbugs/jsr305
1941
1942 Third-party dependencies
1943 ~~~~~~~~~~~~~~~~~~~~~~~~
1944
1945 The dependency on `xmlunit-assertj` and `modernizer-maven-annotations` has been added and the following
1946 dependencies have been upgraded:
1947
1948 * Akka 2.5.23 → 2.5.25, release notes:
1949   * `2.5.24 <https://akka.io/blog/news/2019/08/09/akka-2.5.24-released>`__
1950   * `2.5.25 <https://akka.io/blog/news/2019/08/20/akka-2.5.25-released>`__
1951
1952 * apache-sshd `2.2.0 → 2.3.0 <https://github.com/apache/mina-sshd/blob/master/docs/changes/2.3.0.md>`__
1953
1954 * Bouncy Castle `1.62 → 1.63 <https://www.bouncycastle.org/releasenotes.html>`__
1955
1956 * commons-beanutils `1.9.3 → 1.9.4 <https://www.apache.org/dist/commons/beanutils/RELEASE-NOTES.txt>`__
1957
1958 * commons-codec `1.12 → 1.13 <http://www.apache.org/dist/commons/codec/RELEASE-NOTES.txt>`__
1959
1960 * commons-text 1.6 → 1.8, release notes:
1961   * `1.7 <https://commons.apache.org/proper/commons-text/changes-report.html#a1.7>`__
1962   * `1.8 <https://commons.apache.org/proper/commons-text/changes-report.html#a1.8>`__
1963
1964 * Checkstyle 8.18 → 8.20, release notes:
1965   * `8.19 <https://checkstyle.org/releasenotes.html#Release_8.19>`__
1966   * `8.20 <https://checkstyle.org/releasenotes.html#Release_8.20>`__
1967
1968 * jackson-databind `2.9.9 → 2.9.9.3 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9#micro-patches>`__
1969
1970 * jaxb-api 2.2.8 → 2.3.0, aligning it with Karaf-provided version
1971
1972 * Netty 4.1.36 → 4.1.39, release notes:
1973   * `4.1.37 <https://netty.io/news/2019/06/28/4-1-37-Final.html>`__
1974   * `4.1.38 <https://netty.io/news/2019/07/24/4-1-38-Final.html>`__
1975   * `4.1.39 <https://netty.io/news/2019/08/13/4-1-39-Final.html>`__
1976
1977 * Sevntu 1.32.0 → 1.35.0, release notes:
1978   * `1.33.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.33.0>`__
1979   * `1.34.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.34.0>`__
1980   * `1.34.1 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.34.1>`__
1981   * `1.35.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.35.0>`__
1982
1983 * Scala 2.12.8 → 2.12.9, release notes:
1984   * `2.12.9 <https://github.com/scala/scala/releases/tag/v2.12.9>`__
1985   * `2.12.10 <https://github.com/scala/scala/releases/tag/v2.12.10>`__
1986
1987 * slf4j `1.7.25 → 1.7.28 <https://www.slf4j.org/news.html>`__
1988
1989 * triemap `1.0.5 → 1.0.6 <https://github.com/PantheonTechnologies/triemap/releases/tag/triemap-1.0.6>`__
1990
1991 * typesafe/ssl-config `0.3.7 → 0.3.8 <https://github.com/lightbend/ssl-config/compare/v0.3.7...v0.3.8>`__
1992
1993 * Xtend 1.17.1 → 1.19.0, release notes:
1994   * `1.18.0 <https://www.eclipse.org/xtend/releasenotes.html#/releasenotes/2019/06/04/version-2-18-0>`__
1995   * `1.19.0 <https://www.eclipse.org/Xtext/releasenotes.html#/releasenotes/2019/09/03/version-2-19-0>`__
1996
1997 Plugin upgrades
1998 ~~~~~~~~~~~~~~~
1999
2000 * git-commit-id-plugin 2.2.6 → 3.0.1, release notes:
2001   * `3.0.0 <https://github.com/git-commit-id/maven-git-commit-id-plugin/releases/tag/v3.0.0>`__
2002   * `3.0.1 <https://github.com/git-commit-id/maven-git-commit-id-plugin/releases/tag/v3.0.1>`__
2003
2004 * maven-javadoc-plugin `3.1.0 → 3.1.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12345060>`__
2005
2006 * pmd-maven-plugin `3.11.0 → 3.12.0 <https://blogs.apache.org/maven/entry/apache-maven-pmd-plugin-version1>`__
2007
2008 * spotbugs-maven-plugin 3.1.11  → 3.1.12.2, release notes:
2009   * `3.1.12 <https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-3.1.11...spotbugs-maven-plugin-3.1.12>`__
2010   * `3.1.12.1 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-3.1.12.1>`__
2011   * `3.1.12.2 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-3.1.12.2>`__
2012
2013 Version 5.0.1
2014 -------------
2015
2016 This is a bug-fix upgrade from version 5.0.0.
2017
2018 Third-party dependencies
2019 ~~~~~~~~~~~~~~~~~~~~~~~~
2020
2021 The following dependencies have been upgraded:
2022
2023 * Akka 2.5.21 → 2.5.23, release notes:
2024   * `2.5.22 <https://akka.io/blog/news/2019/04/03/akka-2.5.22-released>`__
2025   * `2.5.23 <https://akka.io/blog/news/2019/05/21/akka-2.5.23-released>`__
2026
2027 * asciidoctorj-diagram 1.5.12 → 1.5.16
2028
2029 * Bouncy Castle `1.61 → 1.62 <http://www.bouncycastle.org/releasenotes.html>`__
2030
2031 * commons-lang3 `3.8.1 → 3.9 <http://www.apache.org/dist/commons/lang/RELEASE-NOTES.txt>`__
2032
2033 * JaCoCo `0.8.3 → 0.8.4 <https://github.com/jacoco/jacoco/releases/tag/v0.8.4>`__
2034
2035 * Jackson `2.9.8 → 2.9.9 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.9>`__
2036
2037 * Jolokia 1.6.0 → 1.6.2, release notes:
2038   * `1.6.1 <https://jolokia.org/changes-report.html#a1.6.1>`__
2039   * `1.6.2 <https://jolokia.org/changes-report.html#a1.6.2>`__
2040
2041 * Mockito `2.25.0 → 2.25.1 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2251>`__
2042
2043 * Netty 4.1.34 → 4.1.36, release notes:
2044   * `4.1.35 <https://netty.io/news/2019/04/17/4-1-35-Final.html>`__
2045   * `4.1.36 <https://netty.io/news/2019/04/30/4-1-36-Final.html>`__
2046
2047 * PowerMock 2.0.0 → 2.0.2, release notes:
2048   * `2.0.1 <https://github.com/powermock/powermock/releases/tag/powermock-2.0.1>`__
2049   * `2.0.2 <https://github.com/powermock/powermock/releases/tag/powermock-2.0.2>`__
2050
2051 * Reactive Streams `1.0.1 → 1.0.2 <https://www.lightbend.com/blog/update-reactive-streams-102-released>`__
2052
2053 * scala-parser-combinators `1.1.1 → 1.1.2 <https://github.com/scala/scala-parser-combinators/releases/tag/v1.1.2>`__
2054
2055 * Sevntu `1.32.0 → 1.33.0 <http://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.33.0>`__
2056
2057 * Typesafe Config `1.3.2 → 1.3.3 <https://github.com/lightbend/config/releases/tag/v1.3.3>`__
2058
2059 * triemap `1.0.4 → 1.0.5 <https://github.com/PantheonTechnologies/triemap/releases/tag/triemap-1.0.5>`__
2060
2061 * XBean finder 4.12 → 4.14, release notes:
2062   * `4.13 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12344253&projectId=12310312>`__
2063   * `4.14 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310312&version=12345220>`__
2064
2065 * xmlunit `2.6.2 → 2.6.3 <https://github.com/xmlunit/xmlunit/releases/tag/v2.6.3>`__
2066
2067 * Xtend `2.17.0 → 2.17.1 <https://www.eclipse.org/xtend/releasenotes.html#/releasenotes/2019/04/03/version-2-17-1>`__
2068
2069 Plugin upgrades
2070 ~~~~~~~~~~~~~~~
2071
2072 * maven-archetype-plugin 3.0.1 → 3.1.1, release notes:
2073   * `3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317122&version=12340346>`__
2074   * `3.1.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317122&version=12345450>`__
2075
2076 * maven-bundle-plugin `4.1.0 → 4.2.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12345047>`__
2077
2078 * maven-checkstyle-plugin `3.1.0 → 3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317223&version=12342397>`__
2079
2080 * maven-compiler-plugin `3.8.0 → 3.8.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12343484>`__
2081
2082 * maven-help-plugin `3.1.1 → 3.2.0 <https://blog.soebes.de/blog/2019/04/22/apache-maven-help-plugin-version-3-dot-2-0-released/>`__
2083
2084 * maven-jar-plugin `3.1.1 → 3.1.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317526&version=12344629>`__
2085
2086 * maven-plugin-plugin `3.5.2 → 3.6.0 <https://blogs.apache.org/maven/entry/apache-maven-plugin-tools-version1>`__
2087
2088 * maven-source-plugin `3.0.1 → 3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317924&version=12336941>`__
2089
2090 * maven-surefire-plugin 2.22.1 → 2.22.2
2091
2092 New plugins
2093 ~~~~~~~~~~~
2094
2095 * ``modernizer-maven-plugin`` declared, allowing downstreams to more easily activate it,
2096   and so detect code which should be updated to more modern equivalent.
2097
2098 New features
2099 ~~~~~~~~~~~~
2100
2101 * ``odl-caffeine-2`` provides a pre-packaged feature for the Caffeine caching framework,
2102   along with the Guava compabitility layer.
2103
2104 Version 5.0.0
2105 -------------
2106
2107 This is a major upgrade from version 4, with breaking changes; projects will
2108 need to make changes to upgrade to this version.
2109
2110 The most significant change is `ODLPARENT-198 <https://jira.opendaylight.org/browse/ODLPARENT-198>`__,
2111 which removes JSR305 from default dependencies and does not present it at class path by default.
2112
2113 Deleted artifacts
2114 ~~~~~~~~~~~~~~~~~
2115
2116 ``findbugs`` has been removed, as its only purpose was to provide FindBugs
2117 rule definitions. Equivalent definitions are available in ``spotbugs``.
2118
2119 Bug fixes
2120 ~~~~~~~~~
2121
2122 * ``blueprint-maven-plugin`` used to scan the entire classpath, resulting in potential conflicts
2123   across projects. Scanning is now limited to ``${project.groupId}``, limiting conflict domain
2124   to single project. See `ODLPARENT-109 <https://jira.opendaylight.org/browse/ODLPARENT-109>`__.
2125
2126 * ``bundle-maven-plugin`` configuration ignored generated ServiceLoader service entries,
2127   which has now been fixed. See `ODLPARENT-197 <https://jira.opendaylight.org/browse/ODLPARENT-197>`__.
2128
2129 * Bundle tests are now enabled by default. See `ODLPARENT-158 <https://jira.opendaylight.org/browse/ODLPARENT-158>`__
2130   and `ODLPARENT-80 <https://jira.opendaylight.org/browse/ODLPARENT-80>`__ for details.
2131
2132 * Karaf log file rollover was not explictly set up, leading to inability to easily override
2133   the defaults. See `ODLPARENT-153 <https://jira.opendaylight.org/browse/ODLPARENT-153>`__ for details.
2134
2135 * Karaf log file used to use default maximum 16MiB file size, this has now been increased to 64MiB.
2136   See `ODLPARENT-154 <https://jira.opendaylight.org/browse/ODLPARENT-154>`__.
2137
2138 * ``features-test`` excluded opendaylight-karaf-empty's transitive dependencies, leading
2139   to the need to re-declare them in single-feature-parent. This re-declaration was forgotten
2140   in for ``bcpkix-framework-ext`` and ``bcprov-framework-ext`` bundles, which lead to them
2141   not being present in the local repository. See `ODLPARENT-130 <https://jira.opendaylight.org/browse/ODLPARENT-130>`__.
2142
2143 Upstream version removals
2144 ~~~~~~~~~~~~~~~~~~~~~~~~~
2145
2146 The following upstream dependencies have been removed from dependency management:
2147
2148 * cassandra-driver-core
2149
2150 * org.codehaus.enunciate/enunciate-core-annotations
2151
2152 * org.jboss.resteasy/jaxrs-api
2153
2154 * org.json/json
2155
2156 * org.osgi/org.osgi.compendium
2157
2158 Removed features
2159 ~~~~~~~~~~~~~~~~
2160
2161 * odl-jersey-1
2162
2163 * ``features-akka`` feature repository has been integrated into ``features-odlparent``
2164
2165 Third-party dependencies
2166 ~~~~~~~~~~~~~~~~~~~~~~~~
2167
2168 The following dependencies have been upgraded:
2169
2170 * apache-sshd `2.0.0 → 2.2.0 <https://github.com/apache/mina-sshd/compare/sshd-2.0.0...sshd-2.2.0>`__
2171
2172 * Aeron 1.12.0 → 1.15.3, release notes:
2173   * `1.13.0 <https://github.com/real-logic/aeron/releases/tag/1.13.0>`__
2174   * `1.14.0 <https://github.com/real-logic/aeron/releases/tag/1.14.0>`__
2175   * `1.15.0 <https://github.com/real-logic/aeron/releases/tag/1.15.0>`__
2176   * `1.15.1 <https://github.com/real-logic/aeron/releases/tag/1.15.1>`__
2177   * `1.15.2 <https://github.com/real-logic/aeron/releases/tag/1.15.2>`__
2178   * `1.15.3 <https://github.com/real-logic/aeron/releases/tag/1.15.3>`__
2179
2180 * Agrona 0.9.27 → 0.9.33, release notes:
2181   * `0.9.28 <https://github.com/real-logic/agrona/releases/tag/0.9.28>`__
2182   * `0.9.29 <https://github.com/real-logic/agrona/releases/tag/0.9.29>`__
2183   * `0.9.30 <https://github.com/real-logic/agrona/releases/tag/0.9.30>`__
2184   * `0.9.31 <https://github.com/real-logic/agrona/releases/tag/0.9.31>`__
2185   * `0.9.32 <https://github.com/real-logic/agrona/releases/tag/0.9.32>`__
2186   * `0.9.33 <https://github.com/real-logic/agrona/releases/tag/0.9.33>`__
2187
2188 * Akka 2.5.19 → 2.5.21, release notes:
2189   * `2.5.20 <https://akka.io/blog/news/2019/01/29/akka-2.5.20-released>`__
2190   * `2.5.21 <https://akka.io/blog/news/2019/02/13/akka-2.5.21-released>`__
2191
2192 * antl4r `4.7.1 → 4.7.2 <https://github.com/antlr/antlr4/releases/tag/4.7.2>`__
2193
2194 * asciidoctorj-diagram 1.5.11 → 1.5.12
2195
2196 * Bouncy Castle `1.60 → 1.61 <http://www.bouncycastle.org/releasenotes.html>`__
2197
2198 * checkstyle 8.16 → 8.18, release notes:
2199   * `8.17 <http://checkstyle.sourceforge.net/releasenotes.html#Release_8.17>`__
2200   * `8.18 <http://checkstyle.sourceforge.net/releasenotes.html#Release_8.18>`__
2201
2202 * commons-codec `1.11 → 1.12 <http://www.apache.org/dist/commons/codec/RELEASE-NOTES.txt>`__
2203
2204 * Google Error Prone 2.3.2 → 2.3.3
2205
2206 * Google Guava 25.1 → 27.1, release notes:
2207   * `26.0 <https://github.com/google/guava/releases/tag/v26.0>`__
2208   * `27.0 <https://github.com/google/guava/releases/tag/v27.0>`__
2209   * `27.0.1 <https://github.com/google/guava/releases/tag/v27.0.1>`__
2210   * `27.1 <https://github.com/google/guava/releases/tag/v27.1>`__
2211
2212 * Google Truth `0.42 → 0.43 <https://github.com/google/truth/releases/tag/release_0_43>`__
2213
2214 * h2 database `1.4.196 → 1.4.199 <http://www.h2database.com/html/changelog.html>`__
2215
2216 * Immutables `2.7.3 → 2.7.5 <https://github.com/immutables/immutables/#changelog>`__
2217
2218 * Javassist `3.24.0-GA → 3.24.1-GA <https://github.com/jboss-javassist/javassist/releases/tag/rel_3_24_1_ga>`__
2219
2220 * log4j2 `2.11.1 → 2.11.2 <https://github.com/apache/logging-log4j2/blob/log4j-2.11.2/RELEASE-NOTES.md>`__
2221
2222 * Mockito 2.23.4 → 2.25.0, release notes:
2223   * `2.24.0 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2240>`__
2224   * `2.25.0 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2250>`__
2225
2226 * Netty 4.1.32 → 4.1.34, release notes:
2227   * `4.1.32 <https://netty.io/news/2018/11/29/4-1-32-Final.html>`__
2228   * `4.1.33 <https://netty.io/news/2019/01/21/4-1-33-Final.html>`__
2229   * `4.1.34 <https://netty.io/news/2019/03/08/4-1-34-Final.html>`__
2230
2231 * OSGi 5.0.0 → 6.0.0
2232
2233 * Powermockito 1.7.4 → 2.0.0, release notes:
2234   * `2.0.0-beta.5 <https://github.com/powermock/powermock/releases/tag/powermock-2.0.0-beta.5>`__
2235   * `2.0.0-RC.1 <https://github.com/powermock/powermock/releases/tag/powermock-2.0.0-RC.1>`__
2236   * `2.0.0 <https://github.com/powermock/powermock/releases/tag/powermock-2.0.0>`__
2237
2238 * SpotBugs `3.1.9 → 3.1.12 <https://github.com/spotbugs/spotbugs/blob/3.1.12/CHANGELOG.md>`__
2239
2240 * ThreeTen `1.4.0 → 1.5.0 <https://www.threeten.org/threeten-extra/changes-report.html#a1.5.0>`__
2241
2242 * Xtend `2.16.0 → 2.17.0 <http://www.eclipse.org/xtend/releasenotes.html#/releasenotes/2019/03/05/version-2-17-0>`__
2243
2244 Plugin removals
2245 ~~~~~~~~~~~~~~~
2246
2247 * gmaven-plugin
2248
2249 * maven-findbugs-plugin
2250
2251 Plugin upgrades
2252 ~~~~~~~~~~~~~~~
2253
2254 * jacoco-maven-plugin `0.8.2 → 0.8.3 <https://github.com/jacoco/jacoco/releases/tag/v0.8.3>`__
2255
2256 * maven-invoker-plugin `3.1.0 → 3.2.0 <https://mail-archives.apache.org/mod_mbox/maven-announce/201901.mbox/%3Cop.zvzdg9tbkdkhrr@desktop-2khsk44%3E>`__
2257
2258 * maven-javadoc-plugin `3.0.1 → 3.1.0 <https://mail-archives.apache.org/mod_mbox/maven-announce/201903.mbox/%3C6064d830-474c-4b43-afef-99502c3a305a%40getmailbird.com%3E>`__
2259
2260 * spotbugs-maven-plugin 3.1.8 → 3.1.11
2261
2262 Version 4.0.9
2263 -------------
2264
2265 This is a bug-fix upgrade from version 4.0.8.
2266
2267 Bug fixes
2268 ~~~~~~~~~
2269
2270 * ``karaf-plugin`` invocation in ``karaf4-parent`` caused previously
2271   patched features to be overwritten with their stock versions, referencing
2272   bundles which were not populated in the local repository. (See
2273   `ODLPARENT-194 <https://jira.opendaylight.org/browse/ODLPARENT-194>`__.)
2274
2275 * ``karaf-plugin`` version in ``karaf4-parent`` is now provided through
2276   plugin management so downstreams can override it without needing
2277   to repeat its configuration.
2278
2279 * ``karaf-plugin`` no longer reads features twice when running discovery,
2280   speeding up the process a bit.
2281
2282 * Recent versions of the SpotBugs Maven plugin use SLF4J 1.8 beta 2, which
2283   can’t use the 1.7.25 implementation we provide; we therefore provide an
2284   implementation of 1.8 beta 2 when SpotBugs is used. (See
2285   `ODLPARENT-184 <https://jira.opendaylight.org/browse/ODLPARENT-184>`__.)
2286
2287 New features
2288 ~~~~~~~~~~~~
2289
2290 * ``odl-woodstox`` wraps the Woodstox StAX implementation which is imposed on
2291   us by Karaf.
2292
2293 Version 4.0.8
2294 -------------
2295
2296 This is a bug-fix and minor upstream bump upgrade from version 4.0.7.
2297
2298 Bug fixes
2299 ~~~~~~~~~
2300
2301 * ``bcprov-ext-jdk15on`` is a superset of ``bcprov-jdk15on``, so there’s no
2302   need to ship both; we now only ship the former. In addition, we install the
2303   Bouncy Castle JARs in ``lib/boot`` so that they continue to be available on
2304   the boot classpath (JDK 9 removes the extension mechanism which was used
2305   previously), and provide the corresponding bundles from the boot classpath
2306   instead of using separate JARs in the system repository. (See
2307   `ODLPARENT-183 <https://jira.opendaylight.org/browse/ODLPARENT-183>`__ and
2308   `ODLPARENT-185 <https://jira.opendaylight.org/browse/ODLPARENT-185>`__.)
2309
2310 * A dependency check has been added to ensure that we don’t run into the
2311   TrieMap dependency bug in 4.0.6 again.
2312
2313 * Dependencies pulled in by features are now checked for convergence, and
2314   ``karaf-plugin`` warns when it finds diverging dependencies (the same
2315   artifact with two different versions). Upstream-provided features are
2316   patched to avoid the following divergences (and upgrade some dependencies in
2317   the process):
2318
2319   * Aries utilities 1.1.0/1.1.3 (upgraded to 1.1.3).
2320   * Commons Beanutils 1.8.3/1.9.3 (upgraded to 1.9.3).
2321   * Commons Codec 1.8/1.10 (upgraded to 1.11).
2322   * ``javax.mail`` 1.4.4/1.4.7 (upgraded to 1.4.7).
2323
2324   (See `ODLPARENT-189 <https://jira.opendaylight.org/browse/ODLPARENT-189>`__.)
2325
2326 New features
2327 ~~~~~~~~~~~~
2328
2329 * ``odl-dropwizard-metrics`` provides Dropwizard Metrics (which are also
2330   available in dependency management).
2331
2332 * ``enunciate-maven-plugin`` is added as the replacement for
2333   ``maven-enunciate-plugin``.
2334
2335 Third-party dependencies
2336 ~~~~~~~~~~~~~~~~~~~~~~~~
2337
2338 The following dependencies are no longer provided by the JVM, starting with
2339 version 11, but we make them available via dependency management for projects
2340 which need them:
2341
2342 * ``javax.annotation-api``.
2343
2344 * JAXB (``jaxb-core``, ``jaxb-impl``).
2345
2346 The following dependencies have been upgraded:
2347
2348 * Checkstyle `8.15 → 8.16 <https://checkstyle.org/releasenotes.html#Release_8.16>`__.
2349
2350 * Dependency Check `4.0.0 → 4.0.2 <https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md>`__.
2351
2352 * ``git-commit-id`` `2.2.5 → 2.2.6 <https://github.com/ktoso/maven-git-commit-id-plugin/releases>`__.
2353
2354 * Immutables 2.7.1 → 2.7.3:
2355
2356   * `2.7.2 <https://github.com/immutables/immutables#272-2018-11-05>`__.
2357   * `2.7.3 <https://github.com/immutables/immutables#273-2018-11-10>`__.
2358
2359   (2.7.4 breaks our Javadocs.)
2360
2361 * Jackson `2.9.7 → 2.9.8 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8>`__.
2362
2363 Version 4.0.7
2364 -------------
2365
2366 This is a bug-fix release, correcting the ``triemap`` import declaration.
2367
2368 Version 4.0.6
2369 -------------
2370
2371 This is a bug-fix and minor upstream packaging upgrade from version 4.0.5.
2372
2373 Bug fixes
2374 ~~~~~~~~~
2375
2376 Single-feature-test was broken with JDK 9 and later and Karaf 4.2.2; this
2377 release adds the additional JVM configuration needed.
2378
2379 Third-party dependencies
2380 ~~~~~~~~~~~~~~~~~~~~~~~~
2381
2382 This release adds the ``triemap`` BOM to dependency management.
2383
2384 Version 4.0.5
2385 -------------
2386
2387 This is a bug-fix release: the Karaf Maven plugin, in version 4.2.2, is
2388 `broken <https://issues.apache.org/jira/browse/KARAF-6057>`__ in some cases we
2389 need in OpenDaylight; we revert to 4.2.1 in ``karaf4-parent`` to avoid this.
2390
2391 Version 4.0.4
2392 -------------
2393
2394 This is a bug-fix release, reverting the change made in 4.0.3 to handle
2395 building with either ``zip`` or ``tar.gz`` Karaf archives (which breaks
2396 builds in our infrastructure, without the empty Karaf archive).
2397
2398 Version 4.0.3
2399 -------------
2400
2401 This is a bug-fix and minor upstream bump upgrade from version 4.0.2.
2402
2403 Bug fixes
2404 ~~~~~~~~~
2405
2406 * Our FindBugs configuration for JDK 9 and later caused the plugin to run
2407   everywhere; instead, this version defines the ``findbugs.skip`` property to
2408   disable the plugin in modules where it would be used otherwise.
2409
2410 * The PowerMock declarations in dependency management missed
2411   ``powermock-api-mockito2``, which is necessary for modules using PowerMock
2412   with Mockito 2.
2413
2414 * The “quick” profile (``-Pq``) now skips SpotBugs.
2415
2416 * JSR-305 annotations are now optional, which fixes a number of issues when
2417   building with newer JDKs.
2418
2419 * We provide JAXB with JDK 11 and later (where it is no longer provided by the
2420   base platform).
2421
2422 * ``odlparent-artifacts`` has been updated to accurately represent the
2423   artifacts provided.
2424
2425 * ``javax.activation`` is now excluded from generated features (it’s provided
2426   on Karaf’s boot classpath).
2427
2428 * When the build is configured to build Karaf distributions in ``tar.gz``
2429   archives, but not ``zip`` archives, ``features-test`` used to fail; it will
2430   now used whichever is available
2431   (`ODLPARENT-174 <https://jira.opendaylight.org/browse/ODLPARENT-174>`__).
2432
2433 * Explicit GCs are disabled by default, so that calls to ``System.gc()`` are
2434   ignored
2435   (`ODLPARENT-175 <https://jira.opendaylight.org/browse/ODLPARENT-175>`__).
2436
2437 * Null checks are disabled in SpotBugs because of bad interactions with newer
2438   annotations and the bytecode produces by JDK 11 and later for
2439   ``try``-with-resources.
2440
2441 * Akka Persistence expects LevelDB 0.10, so we now pull in that version
2442   instead of 0.7.
2443
2444 Dependency convergence
2445 ~~~~~~~~~~~~~~~~~~~~~~
2446
2447 A number of dependencies have been added or constrained so that projects using
2448 this parent can enforce dependency convergence:
2449
2450 * Karaf’s ``framework`` feature is used as an import POM, so that we converge
2451   by default on the versions used in Karaf.
2452
2453 * The following dependencies have been added to dependency management:
2454
2455   * ``commons-beanutils``
2456   * the Checker Framework
2457   * Error Prone annotations
2458   * ``javax.activation``
2459   * ``xml-apis``
2460
2461 New features
2462 ~~~~~~~~~~~~
2463
2464 The following Karaf features have been added:
2465
2466 * ``odl-antlr4`` (providing ``antlr4-runtime``);
2467
2468 * ``odl-gson`` (providing ``gson``);
2469
2470 * ``odl-jersey-2`` (providing Jersey client, server, and container servlet,
2471   along with the necessary feature dependencies);
2472
2473 * ``odl-servlet-api`` (providing ``javax.servlet-api``);
2474
2475 * ``odl-stax2-api`` (providing ``stax2-api``);
2476
2477 * ``odl-ws-rs-api`` (providing ``javax.ws.rs-api``);
2478
2479 A new ``sonar-jacoco-aggregate`` profile can be used to produce Sonar reports
2480 with aggregated JaCoCo reports. Additionally, Sonar builds (run with
2481 ``-Dsonar``) are detected and run with a number of irrelevant plugins disabled.
2482
2483 Upstream version upgrades
2484 ~~~~~~~~~~~~~~~~~~~~~~~~~
2485
2486 * Akka 2.5.14 → 2.5.19 (and related ``ssl-config``, Aeron and Agrona upgrades):
2487
2488   * `2.5.15 <https://akka.io/blog/news/2018/08/24/akka-2.5.15-released>`__.
2489   * `2.5.16 <https://akka.io/blog/news/2018/08/29/akka-2.5.16-security-fix-released>`__.
2490   * `2.5.17 <https://akka.io/blog/news/2018/09/27/akka-2.5.17-released>`__.
2491   * `2.5.18 <https://akka.io/blog/news/2018/10/07/akka-2.5.18-released>`__.
2492   * `2.5.19 <https://akka.io/blog/news/2018/12/07/akka-2.5.19-released>`__.
2493
2494 * Commons Text `1.4 → 1.6 <http://www.apache.org/dist/commons/text/RELEASE-NOTES.txt>`__.
2495
2496 * Eclipse JDT annotations 2.2.0 → 2.2.100.
2497
2498 * Javassist 3.23.1 → 3.24.0.
2499
2500 * Karaf 4.2.1 → 4.2.2, with related upgrades.
2501
2502 * LMAX Disruptor `3.4.1 → 3.4.2 <https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.2>`__.
2503
2504 * Mockito `2.20.1 → 2.23.4 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md>`__.
2505
2506 * Netty 4.1.29 → 4.1.31:
2507
2508   * `4.1.30 <https://netty.io/news/2018/09/28/4-1-30-Final.html>`__.
2509   * `4.1.31 <https://netty.io/news/2018/10/30/4-1-31-Final.html>`__.
2510
2511 * Pax Exam 4.12.0 → 4.13.1.
2512
2513 * Scala 2.12.6 → 2.12.8:
2514
2515   * `2.12.7 <https://github.com/scala/scala/releases/tag/v2.12.7>`__.
2516   * `2.12.8 <https://github.com/scala/scala/releases/tag/v2.12.8>`__.
2517
2518 * Wagon HTTP 3.1.0 → 3.2.0.
2519
2520 * Xtend `2.14.0 → 2.16.0 <https://www.eclipse.org/xtend/releasenotes.html>`__.
2521
2522 Plugin version upgrades
2523 ~~~~~~~~~~~~~~~~~~~~~~~
2524
2525 * Asciidoctor `1.5.6 → 1.5.7.1 <https://github.com/asciidoctor/asciidoctor-maven-plugin/releases>`__
2526   (with related AsciidoctorJ upgrades).
2527
2528 * Bundle 4.0.0 → 4.1.0.
2529
2530 * Checkstyle `8.12 → 8.15 <https://checkstyle.org/releasenotes.html#Release_8.13>`__.
2531
2532 * DependencyCheck `3.3.2 → 4.0.0 <https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md>`__.
2533
2534 * Failsafe / Surefire `2.22.0 → 2.22.1 <https://blogs.apache.org/maven/entry/apache-maven-surefire-plugin-version1>`__.
2535
2536 * Help 3.1.0 → 3.1.1.
2537
2538 * JAR 3.1.0 → 3.1.1.
2539
2540 * PMD `3.10.0 → 3.11.0 <https://blogs.apache.org/maven/entry/apache-maven-pmd-plugin-3>`__.
2541
2542 * Remote Resources `1.5 → 1.6.0 <https://blogs.apache.org/maven/entry/apache-maven-remote-resources-plugin>`__.
2543
2544 * Shade
2545   `3.2.0 → 3.2.1 <https://blog.soebes.de/blog/2018/11/12/apache-maven-shade-plugin-version-3-dot-2-1-released/>`__.
2546
2547 * SpotBugs `3.1.6 → 3.1.9 <https://github.com/spotbugs/spotbugs/blob/release-3.1/CHANGELOG.md>`__.
2548
2549 * XBean finder 4.9 → 4.12.
2550
2551 * XTend 2.14.0 → 2.16.0.
2552
2553 Version 4.0.2
2554 -------------
2555
2556 This is a bug-fix and minor upstream bump upgrade from version 4.0.1.
2557
2558 Bug fixes
2559 ~~~~~~~~~
2560
2561 Previous releases overrode Karaf’s ``jre.properties``; this is no longer
2562 necessary, and was causing failures with Java 9 and later (our version of
2563 ``jre.properties`` didn’t have the appropriate settings for anything after
2564 Java 8). This release drops that override. See
2565 `ODLPARENT-168 <https://jira.opendaylight.org/browse/ODLPARENT-168>`__ for
2566 details.
2567
2568 Upstream version upgrades
2569 ~~~~~~~~~~~~~~~~~~~~~~~~~
2570
2571 * Commons Lang `3.8 → 3.8.1 <http://www.apache.org/dist/commons/lang/RELEASE-NOTES.txt>`__.
2572
2573 * Jackson `2.9.6 → 2.9.7 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7>`__.
2574
2575 * Netty `4.1.28 → 4.1.29 <http://netty.io/news/2018/08/24/4-1-29-Final.html>`__.
2576
2577 Plugin version upgrades
2578 ~~~~~~~~~~~~~~~~~~~~~~~
2579
2580 * JAR `3.0.2 → 3.1.0 <https://blog.soebes.de/blog/2018/04/10/apache-maven-jar-plugin-version-3-dot-1-dot-0-released>`__.
2581
2582 * Javadoc `3.0.0 → 3.0.1 <https://blogs.apache.org/maven/entry/apache-maven-javadoc-plugin-version>`__.
2583
2584 * Jersey `2.22.2 → 2.25.1 <https://jersey.github.io/release-notes/2.25.html>`__,
2585   along with Glassfish JSON 1.0.4 → 1.1.2.
2586
2587 * Plugin 3.5 → 3.5.2:
2588
2589   * `3.5.1 <https://blog.soebes.de/blog/2018/01/22/apache-maven-plugin-tools-version-3-dot-5-1-released/>`__.
2590   * `3.5.2 <https://blog.soebes.de/blog/2018/05/26/apache-mave-plugin-tools-version-3-dot-5-2-released/>`__.
2591
2592 * Resources `3.0.1 → 3.1.0 <https://blogs.apache.org/maven/entry/apache-maven-resources-plugin-version>`__.
2593
2594 Version 4.0.1
2595 -------------
2596
2597 This is a bug-fix and minor upstream bump upgrade from version 4.0.0.
2598
2599 Bug fixes
2600 ~~~~~~~~~
2601
2602 The JaCoCo execution profile was incorrect, breaking Sonar; the report is now
2603 written correctly, so that Sonar can find it.
2604
2605 The Blueprint Maven plugin fails when it encounters Java 9 classes; this is
2606 fixed by forcefully upgrading its dependency on xbean-finder. See
2607 `ODLPARENT-167 <https://jira.opendaylight.org/browse/ODLPARENT-167>`__ for
2608 details.
2609
2610 Upstream version upgrades
2611 ~~~~~~~~~~~~~~~~~~~~~~~~~
2612
2613 * SpotBugs `3.1.6 → 3.1.7 <https://github.com/spotbugs/spotbugs/blob/release-3.1/CHANGELOG.md>`__.
2614
2615 Upstream version additions
2616 ~~~~~~~~~~~~~~~~~~~~~~~~~~
2617
2618 * Mockito Inline is added alongside Mockito Core, to ensure that the versions
2619   are kept in sync.
2620
2621 Plugin version upgrades
2622 ~~~~~~~~~~~~~~~~~~~~~~~
2623
2624 * Clean `3.0.0 → 3.1.0 <https://blog.soebes.de/blog/2018/04/14/apache-maven-clean-plugin-version-3-dot-1-0-released/>`__.
2625
2626 * Compiler `3.7.0 → 3.8.0 <https://blog.soebes.de/blog/2018/07/30/apache-maven-compiler-plugin-version-3-dot-8-0-released/>`__.
2627
2628 * Dependency 3.0.2 → 3.1.1:
2629
2630   * `3.1.0 <https://blog.soebes.de/blog/2018/04/06/apache-maven-dependency-plugin-version-3-dot-1-0-released/>`__.
2631   * `3.1.1 <https://blog.soebes.de/blog/2018/05/24/apache-maven-dependency-plugin-version-3-dot-1-1-released/>`__.
2632
2633 * Dependency Check `3.3.1 → 3.3.2 <https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md>`__.
2634
2635 * Enforcer `3.0.0-M1 → 3.0.0-M2 <https://mail-archives.apache.org/mod_mbox/maven-announce/201806.mbox/%3Cop.zko9b2vhkdkhrr%40desktop-2khsk44.dynamic.ziggo.nl%3E>`__.
2636
2637 * Failsafe 2.20.1 → 2.22:
2638
2639   * `2.21 <https://blog.soebes.de/blog/2018/03/06/apache-maven-surefire-plugin-version-2-dot-21-released/>`__.
2640   * `2.22 <https://blog.soebes.de/blog/2018/06/16/apache-maven-surefire-plugin-version-2-dot-22-released/>`__.
2641
2642 * Help 2.2 → 3.1.0:
2643
2644   * `3.0.0 <https://blog.soebes.de/blog/2018/03/18/apache-maven-help-plugin-version-3-dot-0-0-released/>`__.
2645   * `3.0.1 <https://blog.soebes.de/blog/2018/03/28/apache-maven-help-plugin-version-3-dot-0-1-released/>`__.
2646   * `3.1.0 <https://blog.soebes.de/blog/2018/06/09/apache-maven-help-plugin-version-3-dot-1-0-released/>`__.
2647
2648 * Invoker 2.0.0 → 3.1.0:
2649
2650   * `3.0.0 <https://blog.soebes.de/blog/2017/05/24/apache-maven-invoker-plugin-version-3-dot-0-0-released/>`__.
2651   * `3.1.0 <https://blog.soebes.de/blog/2018/05/31/apache-maven-invoker-plugin-version-3-dot-1-0-released/>`__.
2652
2653 * JAR `3.0.2 → 3.1.0 <https://blog.soebes.de/blog/2018/04/10/apache-maven-jar-plugin-version-3-dot-1-dot-0-released/>`__.
2654
2655 * Project Info Reports `2.9 → 3.0.0 <https://blog.soebes.de/blog/2018/06/27/apache-maven-project-info-reports-plugin-3-dot-0-0-released/>`__.
2656
2657 * Resources `3.0.1 → 3.1.0 <https://blog.soebes.de/blog/2018/05/01/apache-maven-resources-plugin-version-3-dot-1-0-released/>`__.
2658
2659 * Shade `3.1.0 → 3.2.0 <https://blog.soebes.de/blog/2018/09/13/apache-maven-shade-plugin-version-3-dot-2-0-released/>`__.
2660
2661 * Site `3.7 → 3.7.1 <https://blog.soebes.de/blog/2018/04/29/apache-maven-site-plugin-version-3-dot-7-1-released/>`__.
2662
2663 * Surefire 2.18.1 → 2.22.0:
2664
2665   * `2.19 <https://blog.soebes.de/blog/2015/10/19/apache-maven-surefire-plugin-version-2-dot-19-released/>`__.
2666   * `2.19.1 <https://blog.soebes.de/blog/2016/01/03/apache-maven-surefire-plugin-version-2-dot-19-dot-1-released/>`__.
2667   * `2.20 <https://blog.soebes.de/blog/2017/04/12/apache-maven-surefire-plugin-version-2-dot-20-released/>`__.
2668   * `2.21 <https://blog.soebes.de/blog/2018/03/06/apache-maven-surefire-plugin-version-2-dot-21-released/>`__.
2669   * `2.22 <https://blog.soebes.de/blog/2018/06/16/apache-maven-surefire-plugin-version-2-dot-22-released/>`__.
2670
2671
2672 Version 4.0.0
2673 -------------
2674
2675 This is a major upgrade from version 3, with breaking changes; projects will
2676 need to make changes to upgrade to this version.
2677
2678 `This Wiki page <https://wiki.opendaylight.org/view/Neon_platform_upgrade>`__
2679 has detailed step-by-step migration instructions.
2680
2681 ODL Parent 4 requires Maven 3.5.3 or later; this is needed in particular to
2682 enable SpotBugs support with current versions of the SpotBugs plugin.
2683
2684 Known issues
2685 ~~~~~~~~~~~~
2686
2687 This release’s SpotBugs support doesn’t handle Guava 25.1 correctly, resulting
2688 in false-positives regarding null handling; see
2689 `ODLPARENT-161 <https://jira.opendaylight.org/browse/ODLPARENT-161>`__ for
2690 details. Until this is fixed, the corresponding warnings are disabled, which
2691 matches our existing FindBugs configuration (which suffers from the a variant
2692 of this, with the same consequences).
2693
2694 We are planning on upgrading Akka during the 4.x cycle, even if it results in
2695 a technically breaking upgrade. This is currently blocked on an OSGi bug in
2696 Akka; see `Akka issue 25579 <https://github.com/akka/akka/issues/25579>`__ for
2697 details.
2698
2699 Blueprint and OSGi service handling
2700 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2701
2702 Previous releases used an OpenDaylight-specific directory for Blueprint XML
2703 files, ``org/opendaylight/blueprint``. It turned out this wasn’t useful, so
2704 version 4 uses the default directory, ``OSGI-INF/blueprint``.
2705
2706 The Maven bundle plugin is now configured to omit the ``Import-Service`` and
2707 ``Export-Service`` headers, since they are deprecated, unnecessary in
2708 OpenDaylight, and liable to cause issues.
2709
2710 With previous releases of OpenDaylight, projects were encouraged to use Pax
2711 CDI API annotations to describe their Blueprint beans, services and injections;
2712 with version 4, Blueprint annotations should be used instead:
2713
2714 * modules should depend on
2715   ``org.apache.aries.blueprint:blueprint-maven-plugin-annotation``, with the
2716   ``<optional>true</optional>`` flag, instead of
2717   ``org.ops4j.pax.cdi:pax-cdi-api``;
2718
2719 * ``@OsgiServiceProvider`` on bean definitions is replaced by ``@Service``;
2720
2721 * ``@OsgiService`` at injection points is replaced by ``@Reference``;
2722
2723 * ``@OsgiService`` on bean definitions, while technically wrong, can be seen in
2724   the OpenDaylight codebase; this is replaced by ``@Service``;
2725
2726 * service lists can be injected using ``@ReferenceList``.
2727
2728 See `this Gerrit patch <https://git.opendaylight.org/gerrit/75699>`__ for an
2729 example.
2730
2731 Compiler settings
2732 ~~~~~~~~~~~~~~~~~
2733
2734 Builds now warn about unchecked type uses (such as raw types where generics
2735 are available).
2736
2737 JUnit and Mockito are always available as test dependencies and no longer need
2738 to be declared in POMs.
2739
2740 New build profiles
2741 ~~~~~~~~~~~~~~~~~~
2742
2743 An OWASP profile is now available to run OWASP’s dependency checker; this will
2744 check all third-party dependencies against the NVD vulnerability database. To
2745 enable this, run Maven with ``-Powasp``.
2746
2747 Build profile changes
2748 ~~~~~~~~~~~~~~~~~~~~~
2749
2750 ``-Pq`` now skips Modernizer.
2751
2752 New features
2753 ~~~~~~~~~~~~
2754
2755 ``odl-akka-leveldb-0.10`` wraps LevelDB 0.10 for Akka.
2756
2757 ``odl-apache-commons-codec`` wraps Apache Commons Codec.
2758
2759 ``odl-apache-commons-lang3`` wraps Apache Commons Lang 3.
2760
2761 ``odl-apache-commons-net`` wraps Apache Commons Net.
2762
2763 ``odl-apache-commons-text`` wraps Apache Commons Text.
2764
2765 ``odl-apache-sshd`` wraps Apache SSHD.
2766
2767 ``odl-guava`` provides the default ODL version of Guava; it should be used
2768 instead of ``odl-guava-23`` or the new ``odl-guava-25``.
2769
2770 ``odl-jackson-2.9`` wraps Jackson 2.9.
2771
2772 New FindBugs and SpotBugs settings
2773 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2774
2775 FindBugs and SpotBugs are configured with
2776 `the SLF4J extension <http://kengotoda.github.io/findbugs-slf4j/>`__ (version
2777 1.4.0 for FindBugs, 1.4.1 for SpotBugs). This will flag misused SLF4J calls, in
2778 particular message templates which don’t match the arguments, and invalid
2779 placeholders (*e.g.* ``%s`` instead of ``{}``).
2780
2781 Deleted artifacts
2782 ~~~~~~~~~~~~~~~~~
2783
2784 ``aggregator-parent`` was unusable outside ``odlparent`` and has been removed.
2785 Instead, the ``maven.deploy.skip`` and ``maven.install.skip`` properties are
2786 available to disable deploying and installing artifacts.
2787
2788 Upstream version upgrades
2789 ~~~~~~~~~~~~~~~~~~~~~~~~~
2790
2791 This version upgrades the following third-party dependencies:
2792
2793 * Aeron 1.7.0 → 1.9.3:
2794
2795   * `1.8.0 <https://github.com/real-logic/aeron/releases/tag/1.8.0>`__.
2796   * `1.8.1 <https://github.com/real-logic/aeron/releases/tag/1.8.1>`__.
2797   * `1.8.2 <https://github.com/real-logic/aeron/releases/tag/1.8.2>`__.
2798   * `1.9.0 <https://github.com/real-logic/aeron/releases/tag/1.9.0>`__.
2799   * `1.9.1 <https://github.com/real-logic/aeron/releases/tag/1.9.1>`__.
2800   * `1.9.2 <https://github.com/real-logic/aeron/releases/tag/1.9.2>`__.
2801   * `1.9.3 <https://github.com/real-logic/aeron/releases/tag/1.9.3>`__.
2802
2803 * Agrona 0.9.12 → 0.9.21:
2804
2805   * `0.9.13 <https://github.com/real-logic/agrona/releases/tag/0.9.13>`__.
2806   * `0.9.14 <https://github.com/real-logic/agrona/releases/tag/0.9.14>`__.
2807   * `0.9.15 <https://github.com/real-logic/agrona/releases/tag/0.9.15>`__.
2808   * `0.9.16 <https://github.com/real-logic/agrona/releases/tag/0.9.16>`__.
2809   * `0.9.17 <https://github.com/real-logic/agrona/releases/tag/0.9.17>`__.
2810   * `0.9.18 <https://github.com/real-logic/agrona/releases/tag/0.9.18>`__.
2811   * `0.9.19 <https://github.com/real-logic/agrona/releases/tag/0.9.19>`__.
2812   * `0.9.20 <https://github.com/real-logic/agrona/releases/tag/0.9.20>`__.
2813   * `0.9.21 <https://github.com/real-logic/agrona/releases/tag/0.9.21>`__.
2814
2815 * Akka 2.5.11 → 2.5.14:
2816
2817   * `2.5.12 <https://akka.io/blog/news/2018/04/13/akka-2.5.12-released>`__.
2818   * `2.5.13 <https://akka.io/blog/news/2018/06/08/akka-2.5.13-released>`__.
2819   * `2.5.14 <https://akka.io/blog/news/2018/07/13/akka-2.5.14-released>`__.
2820
2821 * ASM 5.1 → 6.2.1 (synchronised with Karaf).
2822
2823 * Bouncy Castle `1.59 → 1.60 <https://www.bouncycastle.org/releasenotes.html>`__.
2824
2825 * Checkstyle `8.4 → 8.12 <http://checkstyle.sourceforge.net/releasenotes.html#Release_8.12>`__.
2826
2827 * Commons Lang `3.7 → 3.8 <http://www.apache.org/dist/commons/lang/RELEASE-NOTES.txt>`__.
2828
2829 * Commons Text 1.1 → 1.4:
2830
2831   * `1.2 <https://commons.apache.org/proper/commons-text/release-notes/RELEASE-NOTES-1.2.txt>`__.
2832   * `1.3 <https://commons.apache.org/proper/commons-text/release-notes/RELEASE-NOTES-1.3.txt>`__.
2833   * `1.4 <https://commons.apache.org/proper/commons-text/release-notes/RELEASE-NOTES-1.4.txt>`__.
2834
2835 * Eclipse JDT annotations 2.1.150 → 2.2.0.
2836
2837 * EclipseLink Moxy JAXB `2.7.1 → 2.7.3 <https://www.eclipse.org/eclipselink/releases/2.7.php>`__.
2838
2839 * Enunciate core annotations
2840   `2.10.1 → 2.11.1 <https://github.com/stoicflame/enunciate/releases>`__.
2841
2842 * Felix Metatype 1.1.6 → 1.2.0 (synchronised with Karaf).
2843
2844 * Google Truth `0.40 → 0.42 <https://github.com/google/truth/releases>`__.
2845
2846 * Guava 23.6.1 → 25.1:
2847
2848   * `23.4 <https://github.com/google/guava/releases/tag/v23.4>`__.
2849   * `23.5 <https://github.com/google/guava/releases/tag/v23.5>`__.
2850   * `23.6 <https://github.com/google/guava/releases/tag/v23.6>`__.
2851   * `24.0 <https://github.com/google/guava/releases/tag/v24.0>`__.
2852   * `24.1 <https://github.com/google/guava/releases/tag/v24.1>`__.
2853   * `25.0 <https://github.com/google/guava/releases/tag/v25.0>`__.
2854   * `25.1 <https://github.com/google/guava/releases/tag/v25.1>`__.
2855
2856 * Immutables `2.5.6 → 2.7.1 <https://github.com/immutables/immutables/blob/master/README.md#changelog>`__.
2857
2858 * Jackson 2.8.9 → 2.9.6:
2859
2860   * `2.9 feature overview <https://medium.com/@cowtowncoder/jackson-2-9-features-b2a19029e9ff>`__.
2861   * `2.9 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9>`__.
2862   * `2.9.1 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.1>`__.
2863   * `2.9.2 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.2>`__.
2864   * `2.9.3 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.3>`__.
2865   * `2.9.4 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.4>`__.
2866   * `2.9.5 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.5>`__.
2867   * `2.9.6 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.6>`__.
2868
2869 * JaCoCo `0.8.1 → 0.8.2 <https://github.com/jacoco/jacoco/releases/tag/v0.8.2>`__.
2870
2871 * Javassist 3.22.0 → 3.23.1. This provides compatibility with Java 9 and later,
2872   and `fixes a file handle leak <https://github.com/jboss-javassist/javassist/issues/165>`__.
2873
2874 * Jettison 1.3.8 → 1.4.0.
2875
2876 * Jetty 9.3.21 → 9.4.11 (synchronised with Karaf):
2877
2878   * `9.4.0 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00097.html>`__.
2879   * `9.4.1 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00100.html>`__.
2880   * `9.4.2 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00101.html>`__.
2881   * `9.4.3 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00102.html>`__.
2882   * `9.4.4 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00105.html>`__.
2883   * `9.4.5 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00107.html>`__.
2884   * `9.4.6 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00109.html>`__.
2885   * `9.4.7 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00111.html>`__.
2886   * `9.4.8 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00114.html>`__.
2887   * `9.4.9 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00117.html>`__.
2888   * `9.4.10 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00119.html>`__.
2889   * `9.4.11 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00122.html>`__.
2890
2891 * Jolokia OSGi `1.5.0 → 1.6.0 <https://jolokia.org/changes-report.html#a1.6.0>`__.
2892
2893 * Karaf 4.1.5 → 4.2.1:
2894
2895   * `4.1.6 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12342748>`__.
2896   * `4.2.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12342945>`__.
2897
2898 * LMAX Disruptor 3.3.10 → 3.4.1:
2899
2900   * `3.4.0 <https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.0>`__.
2901   * `3.4.1 <https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.1>`__.
2902
2903 * META-INF services 1.7 → 1.8.
2904
2905 * Mockito 1.10.19 → 2.20.1; see
2906   `What’s new in Mockito 2 <https://github.com/mockito/mockito/wiki/What%27s-new-in-Mockito-2>`__
2907   for upgrade instructions and
2908   `the list of issues you might run into <https://asolntsev.github.io/en/2016/10/11/mockito-2.1/>`__.
2909
2910 * Netty 4.1.22 → 4.1.28:
2911
2912   * `4.1.17 <http://netty.io/news/2017/11/08/4-0-53-Final-4-1-17-Final.html>`__.
2913   * `4.1.18 <http://netty.io/news/2017/12/11/4-0-54-Final-4-1-18-Final.html>`__.
2914   * `4.1.19 <http://netty.io/news/2017/12/18/4-1-19-Final.html>`__.
2915   * `4.1.20 <http://netty.io/news/2018/01/22/4-0-55-Final-4-1-20-Final.html>`__.
2916   * `4.1.21 <http://netty.io/news/2018/02/05/4-0-56-Final-4-1-21-Final.html>`__.
2917   * `4.1.22 <http://netty.io/news/2018/02/21/4-1-22-Final.html>`__.
2918   * `4.1.23 <http://netty.io/news/2018/04/04/4-1-23-Final.html>`__.
2919   * `4.1.24 <http://netty.io/news/2018/04/19/4-1-24-Final.html>`__.
2920   * `4.1.25 <http://netty.io/news/2018/05/14/4-1-25-Final.html>`__.
2921   * `4.1.26 <http://netty.io/news/2018/07/10/4-1-26-Final.html>`__.
2922   * `4.1.27 <http://netty.io/news/2018/07/11/4-1-27-Final.html>`__.
2923   * `4.1.28 <http://netty.io/news/2018/07/27/4-1-28-Final.html>`__.
2924
2925 * Pax Exam 4.11.0 → 4.12.0.
2926
2927 * Pax URL 2.5.3 → 2.5.4, which only fixes
2928   `a potential NullPointerException <https://ops4j1.jira.com/browse/PAXURL-346>`__.
2929
2930 * PowerMock 1.6.4 → 1.7.4:
2931
2932   * `1.6.5 <https://github.com/powermock/powermock/releases/tag/powermock-1.6.5>`__.
2933   * `1.6.6 <https://github.com/powermock/powermock/releases/tag/powermock-1.6.6>`__.
2934   * `1.7.0 <https://github.com/powermock/powermock/releases/tag/powermock-1.7.0>`__.
2935   * `1.7.1 <https://github.com/powermock/powermock/releases/tag/powermock-1.7.1>`__.
2936   * `1.7.2 <https://github.com/powermock/powermock/releases/tag/powermock-1.7.2>`__.
2937   * `1.7.3 <https://github.com/powermock/powermock/releases/tag/powermock-1.7.3>`__.
2938   * `1.7.4 <https://github.com/powermock/powermock/releases/tag/powermock-1.7.4>`__.
2939
2940 * Scala parser combinators 1.0.7 → 1.1.1:
2941
2942   * `1.1.0 <https://github.com/scala/scala-parser-combinators/releases/tag/v1.1.0>`__.
2943   * `1.1.1 <https://github.com/scala/scala-parser-combinators/releases/tag/v1.1.1>`__.
2944
2945 * SpotBugs `3.1.0 → 3.1.6 <https://github.com/spotbugs/spotbugs/blob/3.1.6/CHANGELOG.md>`__.
2946
2947 * Threeten Extra `1.3.2 → 1.4 <https://github.com/ThreeTen/threeten-extra/releases>`__.
2948
2949 * Typesafe SSL config 0.2.2 → 0.2.4:
2950
2951   * `0.2.3 <https://github.com/lightbend/ssl-config/releases/tag/v0.2.3>`__.
2952   * `0.2.4 <https://github.com/lightbend/ssl-config/releases/tag/v0.2.4>`__.
2953
2954 * Wagon HTTP
2955   `2.10 → 3.1.0 <https://lists.apache.org/thread.html/96024c54db7680697cb066e22a37b0ed5b4498386714a8a9ae1ec9cd@%3Cannounce.maven.apache.org%3E>`__.
2956
2957 * XMLUnit `1.6 → 2.6.2 <https://github.com/xmlunit/xmlunit/blob/master/RELEASE_NOTES.md>`__.
2958
2959 Upstream version additions
2960 ~~~~~~~~~~~~~~~~~~~~~~~~~~
2961
2962 The following upstream dependencies have been added to dependency management:
2963
2964 * Apache SSHD 2.0.0, with EdDSA and Netty support (EdDSA is provided by ``net.i2p.crypto:eddsa``).
2965
2966 * Blueprint annotations (``org.apache.aries.blueprint:blueprint-maven-plugin-annotation``).
2967
2968 * Log4J2.
2969
2970 * Pax Web 7.2.3 (synchronised with Karaf).
2971
2972 Upstream version removals
2973 ~~~~~~~~~~~~~~~~~~~~~~~~~
2974
2975 The following upstream dependencies have been removed from dependency management:
2976
2977 * Google Protobuf.
2978
2979 * Our repackaging of Jersey Servlet.
2980
2981 * JUnit’s ``junit-dep``, which has long been obsolete.
2982
2983 * LevelDB (which is still available as features).
2984
2985 * Pax CDI API — Blueprint annotations should be used instead.
2986
2987 Plugin version upgrades
2988 ~~~~~~~~~~~~~~~~~~~~~~~
2989
2990 The following plugins have been upgraded:
2991
2992 * Blueprint 1.4.0 → 1.10.0.
2993
2994 * Build helper 1.12 → 3.0.0.
2995
2996 * Bundle plugin 3.5.0 → 4.0.0.
2997
2998 * Checkstyle
2999   `2.17 → 3.0.0 <https://mail-archives.apache.org/mod_mbox/maven-announce/201801.mbox/%3Cop.zchs68akkdkhrr%40desktop-2khsk44.mshome.net%3E>`__.
3000
3001 * Duplicate finder
3002   `1.2.1 → 1.3.0 <https://github.com/basepom/duplicate-finder-maven-plugin/blob/master/CHANGES.md>`__.
3003
3004 * Git commit id `2.2.4 → 2.2.5 <https://github.com/ktoso/maven-git-commit-id-plugin/releases/tag/v2.2.5>`__.
3005
3006 * Jacoco Maven plugin `0.8.1 → 0.8.2 <https://github.com/jacoco/jacoco/releases/tag/v0.8.2>`__.
3007
3008 * Javadoc `3.0.0 → 3.0.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12342283>`__.
3009
3010 * PMD 3.8 → 3.10.0:
3011
3012   * `3.10.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12342689&styleName=Text&projectId=12317621>`__.
3013
3014 * Sevntu `1.29.0 → 1.32.0 <http://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.32.0>`__.
3015
3016 * SpotBugs 3.1.0-RC6 → 3.1.6 (see the SpotBugs changes above).
3017
3018 Version 3.1.3
3019 -------------
3020
3021 This version fixes the following issues:
3022
3023 * `ODLPARENT-156 <https://jira.opendaylight.org/browse/ODLPARENT-156>`_:
3024   ``xtend-maven-plugin``’s dependencies end up pulling in conflicting
3025   dependencies. ODL Parent now constrains part of its dependency tree to avoid
3026   this.
3027
3028 This version adds ``odl-jackson-2.8`` to ``odlparent-artifacts``.
3029
3030 Version 3.1.2
3031 -------------
3032
3033 This version fixes the following issues:
3034
3035 * `INFRAUTILS-41 <https://jira.opendaylight.org/browse/INFRAUTILS-41>`_:
3036   ``jre.properties`` includes ``com.sun.management`` so that it can be
3037   enabled if necessary. (This doesn’t add a dependency on
3038   ``com.sun.management``, it allows bundles to use it if it is present.)
3039
3040 * `ODLPARENT-136 <https://jira.opendaylight.org/browse/ODLPARENT-136>`_:
3041   ``SingleFeatureTest`` pulls in ``org.osgi.compendium``.
3042
3043 * `ODLPARENT-144 <https://jira.opendaylight.org/browse/ODLPARENT-144>`_:
3044   ``org.apache.karaf.scr.management`` is whitelisted so that it no longer
3045   affects ``SingleFeatureTest``.
3046
3047 * `ODLPARENT-146 <https://jira.opendaylight.org/browse/ODLPARENT-146>`_:
3048   null-related FindBugs checks which produce false-positives with Guava 23.6
3049   and later are disabled, so that this really is fully backwards-compatible
3050   with 3.0 and later.
3051
3052 * `ODLPARENT-148 <https://jira.opendaylight.org/browse/ODLPARENT-148>`_:
3053   ``SingleFeatureTest`` preserves ``target/SFT/karaf.log``.
3054
3055 This version includes the following improvements:
3056
3057 * ``custom.properties`` no longer includes OVSDB-specific configuration.
3058
3059 * The ``odl-jersey-1`` feature includes the Jersey client.
3060
3061 * Redundant bundle dependency declarations in ``SingleFeatureTest`` have been
3062   removed (these are declarations which are also present in our base Karaf
3063   distribution).
3064
3065 * Build errors involving invalid feature or bundle URLs now indicate which
3066   feature is at fault.
3067
3068 * Obsolete Log4J overrides have been removed from ``SingleFeatureTest``.
3069
3070 When building using JDK 9 or 10, the default settings have been changed as
3071 follows to avoid errors or extraneous warnings:
3072
3073 * SFT is disabled (it needs Karaf 4.2 or later);
3074
3075 * Javadocs are generated as HTML 4;
3076
3077 * SpotBugs is disabled on JDK 10 or later;
3078
3079 * FindBugs is disabled on JDK 9 or later.
3080
3081 The following third-party dependencies have been upgraded:
3082
3083 * `EclipseLink Moxy JAXB 2.6.2 → 2.7.1 <https://www.eclipse.org/eclipselink/releases/2.7.php>`_.
3084
3085 * `Google Truth 0.36 → 0.40 <https://github.com/google/truth/releases>`_.
3086
3087 * `Gson 2.8.2 → 2.8.5 <https://github.com/google/gson/blob/master/CHANGELOG.md>`_.
3088
3089 * `Guava 23.6 → 23.6.1 <https://github.com/google/guava/compare/v23.6...v23.6.1>`_.
3090   This addresses CVE-2018-10237 (that’s the only change in this release).
3091
3092 * `Jacoco Maven plugin 0.8.0 → 0.8.1 <https://github.com/jacoco/jacoco/releases/tag/v0.8.1>`_.
3093
3094 * JDT annotations 2.1.0 → 2.1.150.
3095
3096 * `Scala 2.12.5 → 2.12.6 <https://github.com/scala/scala/releases/tag/v2.12.6>`_.
3097
3098 * `Scala Parser Combinators 1.0.6 → 1.0.7 <https://github.com/scala/scala-parser-combinators/releases/tag/v1.0.7>`_.
3099
3100 * `Sevntu 1.24.2 → 1.29.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.29.0>`_.
3101
3102 * `Xtext and Xtend 2.13.0 → 2.14.0 <https://github.com/eclipse/xtext/blob/website-master/xtend-website/_posts/releasenotes/2018-05-23-version-2-14-0.md>`_.
3103
3104 The following Maven plugin has been upgraded:
3105
3106 * `Javadoc 3.0.0 → 3.0.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12342283>`_.
3107
3108 Version 3.1.1
3109 -------------
3110
3111 This version fixes the following issues:
3112
3113 * `ODLPARENT-137 <https://jira.opendaylight.org/browse/ODLPARENT-137>`_:
3114   restore the OpenDaylight prompt.
3115
3116 * `ODLPARENT-146 <https://jira.opendaylight.org/browse/ODLPARENT-146>`_:
3117   Guava 23.6 switched from @Nullable to @NullableDecl, which causes false
3118   positives in FindBugs’ ``NP_NONNULL_PARAM_VIOLATION`` rule; we’re
3119   disabling the rule for now.
3120
3121 Version 3.1.0
3122 -------------
3123
3124 This version fixes the following issues:
3125
3126 * Mycila dependencies are now “compile” scoped rather than “test”; this allows
3127   child projects to use Guice with Mycila more easily.
3128
3129 * The duplicate finder now ignores ``web.xml`` and BluePrint XML files.
3130
3131 This version includes the following improvements:
3132
3133 * The ``-Pq`` profile skips Maven Modernizer, in preparation for its future
3134   integration (and its use in child projects).
3135
3136 * An OWASP profile, ``-Powasp`` is available for vulnerability checking.
3137
3138 * A new ``odl-jackson-2.8`` feature provides Jackson 2.8 to child projects.
3139
3140 The following third-party dependencies have been added to dependency management:
3141
3142 * `ThreeTen-Extra <http://www.threeten.org/threeten-extra/>`_
3143
3144 The following third-party dependencies have been upgraded:
3145
3146 * Aeron 1.2.5 → 1.7.0; release notes:
3147
3148   * `1.3.0 <https://github.com/real-logic/aeron/releases/tag/1.3.0>`_
3149   * `1.4.0 <https://github.com/real-logic/aeron/releases/tag/1.4.0>`_
3150   * `1.5.0 <https://github.com/real-logic/aeron/releases/tag/1.5.0>`_
3151   * `1.5.1 <https://github.com/real-logic/aeron/releases/tag/1.5.1>`_
3152   * `1.5.2 <https://github.com/real-logic/aeron/releases/tag/1.5.2>`_
3153   * `1.6.0 <https://github.com/real-logic/aeron/releases/tag/1.6.0>`_
3154   * `1.7.0 <https://github.com/real-logic/aeron/releases/tag/1.7.0>`_
3155
3156 * Agrona 0.9.5 → 0.9.12; release notes:
3157
3158   * `0.9.6 <https://github.com/real-logic/Agrona/releases/tag/0.9.6>`_
3159   * `0.9.7 <https://github.com/real-logic/Agrona/releases/tag/0.9.7>`_
3160   * `0.9.8 <https://github.com/real-logic/Agrona/releases/tag/0.9.8>`_
3161   * `0.9.9 <https://github.com/real-logic/Agrona/releases/tag/0.9.9>`_
3162   * `0.9.10 <https://github.com/real-logic/Agrona/releases/tag/0.9.10>`_
3163   * `0.9.11 <https://github.com/real-logic/Agrona/releases/tag/0.9.11>`_
3164   * `0.9.12 <https://github.com/real-logic/Agrona/releases/tag/0.9.12>`_
3165
3166 * Akka 2.5.5 → 2.5.11; release notes:
3167
3168   * `2.5.6 <https://akka.io/blog/news/2017/09/28/akka-2.5.6-released>`_
3169   * `2.5.7 <https://akka.io/blog/news/2017/11/17/akka-2.5.7-released>`_
3170   * `2.5.8 <https://akka.io/blog/news/2017/12/08/akka-2.5.8-released>`_
3171   * `2.5.9 <https://akka.io/blog/news/2018/01/11/akka-2.5.9-released-2.4.x-end-of-life>`_
3172   * `2.5.10 <https://akka.io/blog/news/2018/02/23/akka-2.5.10-released>`_
3173   * `2.5.11 <https://akka.io/blog/news/2018/02/28/akka-2.5.11-released>`_
3174
3175 * Commons Lang 3 `3.6 → 3.7 <http://www.apache.org/dist/commons/lang/RELEASE-NOTES.txt>`_
3176
3177 * Guava 23.3 → 23.6; release notes:
3178
3179   * `23.4 <https://github.com/google/guava/releases/tag/v23.4>`_
3180   * `23.5 <https://github.com/google/guava/releases/tag/v23.5>`_
3181   * `23.6 <https://github.com/google/guava/releases/tag/v23.6>`_
3182
3183 * H2 database `1.4.193 → 1.4.196 <http://www.h2database.com/html/changelog.html>`_
3184
3185 * Jacoco `0.7.9 → 0.8.0 <https://github.com/jacoco/jacoco/releases/tag/v0.8.0>`_
3186
3187 * Javassist `3.21.0 → 3.22.0 <https://github.com/jboss-javassist/javassist/compare/rel_3_21_0_ga...rel_3_22_0_ga>`_
3188
3189 * lmax-disruptor 3.3.7 → 3.3.10; release notes:
3190
3191   * `3.3.8 <https://github.com/LMAX-Exchange/disruptor/releases/tag/3.3.8>`_
3192   * `3.3.9 <https://github.com/LMAX-Exchange/disruptor/releases/tag/3.3.9>`_
3193   * `3.3.10 <https://github.com/LMAX-Exchange/disruptor/releases/tag/3.3.10>`_
3194
3195 * Netty 4.1.16 → 4.1.22; release notes:
3196
3197   * `4.1.17 <http://netty.io/news/2017/11/08/4-0-53-Final-4-1-17-Final.html>`_
3198   * `4.1.18 <http://netty.io/news/2017/12/11/4-0-54-Final-4-1-18-Final.html>`_
3199   * `4.1.19 <http://netty.io/news/2017/12/18/4-1-19-Final.html>`_
3200   * `4.1.20 <http://netty.io/news/2018/01/22/4-0-55-Final-4-1-20-Final.html>`_
3201   * `4.1.21 <http://netty.io/news/2018/02/05/4-0-56-Final-4-1-21-Final.html>`_
3202   * `4.1.22 <http://netty.io/news/2018/02/21/4-1-22-Final.html>`_
3203
3204 * Scala `2.12.4 → 2.12.5 <http://www.scala-lang.org/news/2.12.5>`_
3205
3206 * Typesafe Config `0.2.1 → 0.2.2 <https://github.com/typesafehub/config/blob/master/NEWS.md>`_
3207
3208 The following Maven plugins have been upgraded:
3209
3210 * FindBugs 3.0.4 → 3.0.5
3211
3212 * Git commit id 2.2.2 → 2.2.4; release notes:
3213
3214   * `2.2.3 <https://github.com/ktoso/maven-git-commit-id-plugin/releases/tag/v2.2.3>`_
3215   * `2.2.4 <https://github.com/ktoso/maven-git-commit-id-plugin/releases/tag/v2.2.4>`_
3216
3217 Version 3.0.3
3218 -------------
3219
3220 This version fixes the following issues:
3221
3222 * `ODLPARENT-136`_: ``features-test`` needs ``org.osgi.compendium``.
3223
3224 * Jackson dependencies are declared using ``jackson-bom`` to ensure all they
3225   remain consistent.
3226
3227 * ``find-duplicate-classpath-entries`` is run in the “verify” phase rather than
3228   the “validate” phase, which is too early.
3229
3230 * The version of Jetty we pull in is now aligned with that declared in Karaf,
3231   resolving a number of restart and dependency issues.
3232
3233 * Pulling in the ``wrap`` feature unconditionally is no longer necessary, so
3234   ``karaf4-parent`` no longer does so.
3235
3236 * ``metainf-services`` are declared with scope “provided” to avoid their being
3237   included in downstream features (it’s a build-time dependency only).
3238
3239 * ``leveldb-api`` is excluded from ``odl-akka-leveldb-0.7``, and ``jsr250-api``
3240   from ``enunciate-core-annotations``, to avoid duplicate having classes on the
3241   classpath.
3242
3243 * Since the ``ssh`` feature is excluded from generated features, our Karaf
3244   need to enable it at boot in all cases.
3245
3246 * ``bundle-test-lib`` is now a bundle.
3247
3248 * Since we use static SLF4J loggers, the ``SLF4J_LOGGER_SHOULD_BE_NON_STATIC``
3249   rule needs to be disabled in our FindBugs configuration (this allows
3250   downstream projects to enable ``findbugs-slf4j`` without having to deal with
3251   all the resulting false-positives).
3252
3253 * ``org.apache.karaf.scr.management`` is white-listed in SFT to avoid failures
3254   apparently related to that component (which we don’t care about).
3255
3256 .. _ODLPARENT-136: https://jira.opendaylight.org/browse/ODLPARENT-136
3257
3258 This version upgrades the following third-party dependencies:
3259
3260 * `Antlr 4.7 → 4.7.1`_
3261
3262 * `BouncyCastle 1.58 → 1.59`_
3263
3264 * Jersey 1.17 → 1.19.4 (additionally available as the ``odl-jersey-1`` feature)
3265
3266 * Jolokia 1.3.7 → 1.5.0
3267
3268 * Karaf 4.1.3 → 4.1.5; release notes:
3269
3270   * `Karaf 4.1.4`_
3271   * `Karaf 4.1.5`_
3272
3273 .. _Antlr 4.7 → 4.7.1: https://github.com/antlr/antlr4/releases/tag/4.7.1
3274 .. _BouncyCastle 1.58 → 1.59: https://www.bouncycastle.org/releasenotes.html
3275 .. _Karaf 4.1.4: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12341702
3276 .. _Karaf 4.1.5: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12342294
3277
3278 Version 3.0.2
3279 -------------
3280
3281 This version fixes the following issues:
3282
3283 * SingleFeatureTest uses the configured local Maven repository for Pax Exam.
3284
3285 * JavaDoc links are disabled for now to `speed up builds`_. A new
3286   ``javadoc-links`` profile enables the links.
3287
3288 * Conditional feature dependencies are processed, ensuring our
3289   `distribution is complete`_.
3290
3291 * Startup features are `adjusted for Karaf 4.1`_, avoiding unnecessary
3292   refreshes.
3293
3294 * The ``hiddenField`` Checkstyle check is disabled for abstract methods.
3295
3296 * The default logging configuration uses Log4J2, which is the new default in
3297   Karaf 4.1.
3298
3299 .. _speed up builds: https://jira.opendaylight.org/browse/ODLPARENT-121
3300 .. _distribution is complete: https://jira.opendaylight.org/browse/ODLPARENT-133
3301 .. _adjusted for Karaf 4.1: https://jira.opendaylight.org/browse/ODLPARENT-134
3302
3303 This version upgrades the following dependencies or plugins:
3304
3305 * ``maven-enforcer-plugin`` 1.4.1 → 3.0.0-M1
3306
3307 * ``maven-javadoc-plugin`` 3.0.0-M1 → 3.0.0
3308
3309 Version 3.0.1
3310 -------------
3311
3312 This version fixes the following issues:
3313
3314 * Karaf pulls in an invalid Hibernate feature repository, breaking downstream
3315   dependencies pulling in the “war” feature. ``populate-local-repo`` corrects
3316   the repository dependency.
3317
3318
3319 Version 3.0.0
3320 -------------
3321
3322 Compiler settings
3323 ~~~~~~~~~~~~~~~~~
3324
3325 Build now show compiler warnings and deprecation warnings. This doesn't affect
3326 the result or require any changes currently, it just makes the issues more
3327 visible.
3328
3329 New Checkstyle rules
3330 ~~~~~~~~~~~~~~~~~~~~
3331
3332 Checkstyle has been upgraded from 7.6 to 8.4 (see the
3333 `Checkstyle release notes`_ for details), and Sevntu from 1.21.0 to 1.24.2
3334 (note that the latter's group identifier changed from
3335 ``com.github.sevntu.checkstyle`` to ``com.github.sevntu-checkstyle``; you
3336 might need to update your IDE's configuration).
3337
3338 The following Checkstyle rules are enabled; this might require changes in
3339 projects which enforce Checkstyle validation:
3340
3341 * `AvoidHidingCauseExceptionCheck`_
3342 * `FinalClass`_: utility classes must be declared ``final``
3343 * `HiddenField`_: fields must not be shadowed
3344 * `HideUtilityClassConstructor`_: utility classes must hide their constructor
3345
3346 .. _Checkstyle release notes: http://checkstyle.sourceforge.net/releasenotes.html
3347
3348 .. _AvoidHidingCauseExceptionCheck: http://sevntu-checkstyle.github.io/sevntu.checkstyle/apidocs/com/github/sevntu/checkstyle/checks/coding/AvoidHidingCauseExceptionCheck.html
3349 .. _FinalClass: http://checkstyle.sourceforge.net/config_design.html#FinalClass
3350 .. _HiddenField: http://checkstyle.sourceforge.net/config_coding.html#HiddenField
3351 .. _HideUtilityClassConstructor: http://checkstyle.sourceforge.net/config_design.html#HideUtilityClassConstructor
3352
3353 Karaf
3354 ~~~~~
3355
3356 Karaf has been upgraded to 4.1.3. This should be transparent for dependent
3357 projects.
3358
3359 Karaf distributions
3360 ~~~~~~~~~~~~~~~~~~~
3361
3362 * When building a Karaf distribution using ``karaf4-parent``, projects can
3363   specify which archives to build: the ``karaf.archiveZip`` property will
3364   enable ZIP files if true, and ``karaf.archiveTarGz`` will enable
3365   gzip-compressed tarballs if true. By default both are enabled.
3366
3367 * Our Karaf distribution provides Bouncy Castle at startup. Auto-generated
3368   feature descriptors take this into account (they won't embed a Bouncy
3369   Castle dependency).
3370
3371 Feature removals
3372 ~~~~~~~~~~~~~~~~
3373
3374 * The ``odl-triemap-0.2`` feature wrapping
3375   ``com.github.romix:java-concurrent-hash-trie-map`` was rendered obsolete by
3376   YANG Tools' implementation and has been removed.
3377
3378 Feature additions
3379 ~~~~~~~~~~~~~~~~~
3380
3381 * ``odl-javassist-3`` provides Javassist in a feature.
3382
3383 * ``odl-jung-2.1`` provides `JUNG`_ in a feature.
3384
3385 .. _JUNG: http://jung.sourceforge.net/
3386
3387 Upstream version upgrades
3388 ~~~~~~~~~~~~~~~~~~~~~~~~~
3389
3390 The following upstream dependencies have been upgraded:
3391
3392 * Akka 2.4.18 → 2.5.4; release notes:
3393
3394   * `Akka 2.5.0`_
3395   * `Akka 2.5.1`_
3396   * `Akka 2.5.2`_
3397   * `Akka 2.5.3`_
3398   * `Akka 2.5.4`_
3399
3400 * `Awaitility 2 → 3`_
3401
3402 * `Bouncy Castle 1.57 → 1.58`_
3403
3404 * `Commons Codec 1.10 → 1.11`_
3405
3406 * `Commons File Upload 1.3.2 → 1.3.3`_
3407
3408 * `Commons IO 2.5 → 2.6`_
3409
3410 * Eclipse JDT annotations 2.0.0 → 2.1.0
3411
3412 * Felix Dependency Manager 4.3.0 → 4.4.1
3413 * Felix Dependency Manager Shell 4.0.4 → 4.0.6
3414 * Felix Metatype 1.1.2 → 1.1.6
3415
3416 * `Google Truth 0.28 → 0.36`_ (with the Java 8 extensions)
3417
3418 * `Gson 2.7 → 2.8.2`_
3419
3420 * Guava 22 → 23.3 along with the associated feature name change from
3421   ``odl-guava-22`` to ``odl-guava-23`` (dependent packages *must* change their
3422   dependency); release notes:
3423
3424   * `Guava 23`_
3425   * `Guava 23.1`_
3426   * `Guava 23.2`_
3427   * `Guava 23.3`_
3428
3429 * Immutables 2.4.2 → 2.5.6
3430
3431 * Jackson 2.3.2 → 2.8.9
3432
3433 * Jacoco 0.7.7 → 0.7.9; release notes:
3434
3435   * `Jacoco 0.7.8`_
3436   * `Jacoco 0.7.9`_
3437
3438 * Jacoco Listeners 2.4 → 3.8
3439
3440 * `Javassist 3.20.0 → 3.21.0`_
3441
3442 * `Jettison 1.3.7 → 1.3.8`_
3443
3444 * `Jolokia 1.3.6 → 1.3.7`_
3445
3446 * `JSONassert 1.3.0 → 1.5.0`_
3447
3448 * `logback 1.2.2 → 1.2.3`_
3449
3450 * `LMAX Disruptor 3.3.6 → 3.3.7`_
3451
3452 * Netty 4.1.8 → 4.1.16; release notes:
3453
3454   * `Netty 4.1.9`_
3455   * `Netty 4.1.10`_
3456   * `Netty 4.1.11`_
3457   * `Netty 4.1.12`_
3458   * `Netty 4.1.13`_
3459   * `Netty 4.1.14`_
3460   * `Netty 4.1.15`_
3461   * `Netty 4.1.16`_
3462
3463 * `Pax URL 2.5.2 → 2.5.3`_
3464
3465 * Scala 2.11.11 → 2.12.4; release notes:
3466
3467   * `Scala 2.12.0`_
3468   * `Scala 2.12.1`_
3469   * `Scala 2.12.2`_
3470   * `Scala 2.12.3`_
3471   * `Scala 2.12.4`_
3472
3473 * Servlet API 3.0.1 → 3.1.0
3474
3475 * `SLF4J 1.7.21 → 1.7.25`_
3476
3477 * `webcohesion enunciate 2.6.0 → 2.10.1`_
3478
3479 * `Xtend 2.12 → 2.13`_
3480
3481 .. _Akka 2.5.0: http://akka.io/blog/news/2017/04/13/akka-2.5.0-released
3482 .. _Akka 2.5.1: http://akka.io/blog/news/2017/05/02/akka-2.5.1-released
3483 .. _Akka 2.5.2: http://akka.io/blog/news/2017/05/24/akka-2.5.2-released
3484 .. _Akka 2.5.3: http://akka.io/blog/news/2017/06/19/akka-2.5.3-released
3485 .. _Akka 2.5.4: http://akka.io/blog/news/2017/08/10/akka-2.5.4-released
3486
3487 .. _Awaitility 2 → 3: https://github.com/awaitility/awaitility/wiki/ReleaseNotes30
3488
3489 .. _Bouncy Castle 1.57 → 1.58: https://www.bouncycastle.org/releasenotes.html
3490
3491 .. _Commons Codec 1.10 → 1.11: http://www.apache.org/dist/commons/codec/RELEASE-NOTES.txt
3492
3493 .. _Commons File Upload 1.3.2 → 1.3.3: http://www.apache.org/dist/commons/fileupload/RELEASE-NOTES.txt
3494
3495 .. _Commons IO 2.5 → 2.6: http://www.apache.org/dist/commons/io/RELEASE-NOTES.txt
3496
3497 .. _Google Truth 0.28 → 0.36: https://github.com/google/truth/releases
3498
3499 .. _Gson 2.7 → 2.8.2: https://github.com/google/gson/blob/master/CHANGELOG.md
3500
3501 .. _Guava 23: https://github.com/google/guava/wiki/Release23
3502 .. _Guava 23.1: https://github.com/google/guava/releases/tag/v23.1
3503 .. _Guava 23.2: https://github.com/google/guava/releases/tag/v23.2
3504 .. _Guava 23.3: https://github.com/google/guava/releases/tag/v23.3
3505
3506 .. _Jacoco 0.7.8: https://github.com/jacoco/jacoco/releases/tag/v0.7.8
3507 .. _Jacoco 0.7.9: https://github.com/jacoco/jacoco/releases/tag/v0.7.9
3508
3509 .. _Javassist 3.20.0 → 3.21.0: https://github.com/jboss-javassist/javassist/compare/rel_3_20_0_ga...rel_3_21_0_ga
3510
3511 .. _Jettison 1.3.7 → 1.3.8: https://github.com/jettison-json/jettison/compare/jettison-1.3.7...jettison-1.3.8
3512
3513 .. _Jolokia 1.3.6 → 1.3.7: https://github.com/rhuss/jolokia/releases/tag/v1.3.7
3514
3515 .. _JSONassert 1.3.0 → 1.5.0: https://github.com/skyscreamer/JSONassert/releases
3516
3517 .. _logback 1.2.2 → 1.2.3: https://logback.qos.ch/news.html
3518
3519 .. _LMAX Disruptor 3.3.6 → 3.3.7: https://github.com/LMAX-Exchange/disruptor/releases/tag/3.3.7
3520
3521 .. _Netty 4.1.9: http://netty.io/news/2017/03/10/4-0-45-Final-4-1-9-Final.html
3522 .. _Netty 4.1.10: http://netty.io/news/2017/04/30/4-0-46-Final-4-1-10-Final.html
3523 .. _Netty 4.1.11: http://netty.io/news/2017/05/12/4-0-47-Final-4-1-11-Final.html
3524 .. _Netty 4.1.12: http://netty.io/news/2017/06/09/4-0-48-Final-4-1-12-Final.html
3525 .. _Netty 4.1.13: http://netty.io/news/2017/07/06/4-0-49-Final-4-1-13-Final.html
3526 .. _Netty 4.1.14: http://netty.io/news/2017/08/03/4-0-50-Final-4-1-14-Final.html
3527 .. _Netty 4.1.15: http://netty.io/news/2017/08/25/4-0-51-Final-4-1-15-Final.html
3528 .. _Netty 4.1.16: http://netty.io/news/2017/09/25/4-0-52-Final-4-1-16-Final.html
3529
3530 .. _Pax URL 2.5.2 → 2.5.3: https://ops4j1.jira.com/browse/PAXURL-345?jql=project%20%3D%20PAXURL%20AND%20fixVersion%20%3D%202.5.3
3531
3532 .. _Scala 2.12.0: https://github.com/scala/scala/releases/tag/v2.12.0
3533 .. _Scala 2.12.1: https://github.com/scala/scala/releases/tag/v2.12.1
3534 .. _Scala 2.12.2: https://github.com/scala/scala/releases/tag/v2.12.2
3535 .. _Scala 2.12.3: https://github.com/scala/scala/releases/tag/v2.12.3
3536 .. _Scala 2.12.4: https://github.com/scala/scala/releases/tag/v2.12.4
3537
3538 .. _SLF4J 1.7.21 → 1.7.25: https://www.slf4j.org/news.html
3539
3540 .. _webcohesion enunciate 2.6.0 → 2.10.1: https://github.com/stoicflame/enunciate/releases
3541
3542 .. _Xtend 2.12 → 2.13: https://www.eclipse.org/xtend/releasenotes.html
3543
3544 Upstream version additions
3545 ~~~~~~~~~~~~~~~~~~~~~~~~~~
3546
3547 The following upstream dependencies have been added to dependency management:
3548
3549 * Commons Text, ``org.apache.commons:commons-text`` (this will allow downstreams
3550   to migrate from ``commons-lang3``\’s ``WordUtils``, which is deprecated)
3551
3552 Upstream version removals
3553 ~~~~~~~~~~~~~~~~~~~~~~~~~
3554
3555 The following upstream dependencies have been removed from dependency
3556 management (they are obsolete and unused):
3557
3558 * Chameleon MBeans
3559 * Eclipse Link
3560 * Equinox HTTP service bridge
3561 * ``equinoxSDK381`` artifacts
3562 * Coda Hale Metrics, which are mostly unused and should eventually be wrapped
3563   by InfraUtils
3564 * ``com.google.code.findbugs:jsr305`` (which *must not* be used; this is
3565   enforced — ``annotations`` should be used instead)
3566 * Felix File Install and Web Console
3567 * Gemini Web
3568 * Orbit
3569 * ``org.mockito:mockito-all`` (which *must not* be used; this is enforced —
3570   ``mockito-core`` should be used instead)
3571 * Spring Framework
3572 * ``txw2``
3573 * Xerces
3574 * ``xml-apis``
3575
3576 Plugin version upgrades
3577 ~~~~~~~~~~~~~~~~~~~~~~~
3578
3579 The following plugins have been upgraded:
3580
3581 * ``org.apache.servicemix.tooling:depends-maven-plugin`` 1.3.1 → 1.4.0
3582 * ``org.apache.felix:maven-bundle-plugin`` 2.4.0 → 3.3.0
3583 * ``maven-compiler-plugin`` 3.6.1 → 3.7.0
3584 * ``maven-dependency-plugin`` 3.0.1 → 3.0.2
3585 * ``maven-enforcer-plugin`` 1.4.1 → 3.0.0-M1
3586 * ``maven-failsafe-plugin`` 2.18.1 → 2.20.1
3587 * ``maven-javadoc-plugin`` 2.10.4 → 3.0.0-M1
3588 * ``maven-shade-plugin`` 2.4.3 → 3.1.0
3589
3590 New plugins
3591 ~~~~~~~~~~~
3592
3593 * The `Maven Find Duplicates`_ plugin can be enabled by setting the
3594   ``duplicate-finder.skip`` property to ``false``.
3595
3596 * The SpotBugs_ Maven plugin can now be used instead of the FindBugs plugin
3597   (both are available, so no change is required). To use SpotBugs, replace
3598   ``org.codehaus.mojo:findbugs-maven-plugin`` with
3599   ``com.github.spotbugs:spotbugs-maven-plugin``.
3600
3601 .. _Maven Find Duplicates: https://github.com/basepom/duplicate-finder-maven-plugin/
3602
3603 .. _SpotBugs: https://spotbugs.github.io/