Bump triemap to 1.0.6
[odlparent.git] / NEWS.rst
index 210d1324f570f94bb28f32876b5f943e6cd6ec6b..2bbbc11433710fcfc88c2a018443dac096a19c92 100644 (file)
--- a/NEWS.rst
+++ b/NEWS.rst
 ODL Parent release notes
 ========================
 
+Version 5.0.1
+-------------
+
+This is a bug-fix upgrade from version 5.0.0.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+
+The following dependencies have been upgraded:
+
+* Akka 2.5.21 → 2.5.23, release notes:
+  * `2.5.22 <https://akka.io/blog/news/2019/04/03/akka-2.5.22-released>`__
+  * `2.5.23 <https://akka.io/blog/news/2019/05/21/akka-2.5.23-released>`__
+
+* asciidoctorj-diagram 1.5.12 → 1.5.16
+
+* Bouncy Castle `1.61 → 1.62 <http://www.bouncycastle.org/releasenotes.html>`__
+
+* commons-lang3 `3.8.1 → 3.9 <http://www.apache.org/dist/commons/lang/RELEASE-NOTES.txt>`__
+
+* JaCoCo `0.8.3 → 0.8.4 <https://github.com/jacoco/jacoco/releases/tag/v0.8.4>`__
+
+* Jackson `2.9.8 → 2.9.9 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.9>`__
+
+* Jolokia 1.6.0 → 1.6.2, release notes:
+  * `1.6.1 <https://jolokia.org/changes-report.html#a1.6.1>`__
+  * `1.6.2 <https://jolokia.org/changes-report.html#a1.6.2>`__
+
+* Mockito `2.25.0 → 2.25.1 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2251>`__
+
+* Netty 4.1.34 → 4.1.36, release notes:
+  * `4.1.35 <https://netty.io/news/2019/04/17/4-1-35-Final.html>`__
+  * `4.1.36 <https://netty.io/news/2019/04/30/4-1-36-Final.html>`__
+
+* PowerMock 2.0.0 → 2.0.2, release notes:
+  * `2.0.1 <https://github.com/powermock/powermock/releases/tag/powermock-2.0.1>`__
+  * `2.0.2 <https://github.com/powermock/powermock/releases/tag/powermock-2.0.2>`__
+
+* Reactive Streams `1.0.1 → 1.0.2 <https://www.lightbend.com/blog/update-reactive-streams-102-released>`__
+
+* scala-parser-combinators `1.1.1 → 1.1.2 <https://github.com/scala/scala-parser-combinators/releases/tag/v1.1.2>`__
+
+* Sevntu `1.32.0 → 1.33.0 <http://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.33.0>`__
+
+* Typesafe Config `1.3.2 → 1.3.3 <https://github.com/lightbend/config/releases/tag/v1.3.3>`__
+
+* triemap `1.0.4 → 1.0.5 <https://github.com/PantheonTechnologies/triemap/releases/tag/triemap-1.0.5>`__
+
+* XBean finder 4.12 → 4.14, release notes:
+  * `4.13 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12344253&projectId=12310312>`__
+  * `4.14 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310312&version=12345220>`__
+
+* xmlunit `2.6.2 → 2.6.3 <https://github.com/xmlunit/xmlunit/releases/tag/v2.6.3>`__
+
+* Xtend `2.17.0 → 2.17.1 <https://www.eclipse.org/xtend/releasenotes.html#/releasenotes/2019/04/03/version-2-17-1>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+
+* maven-archetype-plugin 3.0.1 → 3.1.1, release notes:
+  * `3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317122&version=12340346>`__
+  * `3.1.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317122&version=12345450>`__
+
+* maven-bundle-plugin `4.1.0 → 4.2.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310100&version=12345047>`__
+
+* maven-checkstyle-plugin `3.1.0 → 3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317223&version=12342397>`__
+
+* maven-compiler-plugin `3.8.0 → 3.8.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12343484>`__
+
+* maven-help-plugin `3.1.1 → 3.2.0 <https://blog.soebes.de/blog/2019/04/22/apache-maven-help-plugin-version-3-dot-2-0-released/>`__
+
+* maven-jar-plugin `3.1.1 → 3.1.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317526&version=12344629>`__
+
+* maven-plugin-plugin `3.5.2 → 3.6.0 <https://blogs.apache.org/maven/entry/apache-maven-plugin-tools-version1>`__
+
+* maven-source-plugin `3.0.1 → 3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317924&version=12336941>`__
+
+* maven-surefire-plugin 2.22.1 → 2.22.2
+
+New plugins
+~~~~~~~~~~~
+
+* ``modernizer-maven-plugin`` declared, allowing downstreams to more easily activate it,
+  and so detect code which should be updated to more modern equivalent.
+
+New features
+~~~~~~~~~~~~
+
+* ``odl-caffeine-2`` provides a pre-packaged feature for the Caffeine caching framework,
+  along with the Guava compabitility layer.
+
+Version 5.0.0
+-------------
+
+This is a major upgrade from version 4, with breaking changes; projects will
+need to make changes to upgrade to this version.
+
+The most significant change is `ODLPARENT-198 <https://jira.opendaylight.org/browse/ODLPARENT-198>`__,
+which removes JSR305 from default dependencies and does not present it at class path by default.
+
+Deleted artifacts
+~~~~~~~~~~~~~~~~~
+
+``findbugs`` has been removed, as its only purpose was to provide FindBugs
+rule definitions. Equivalent definitions are available in ``spotbugs``.
+
+Bug fixes
+~~~~~~~~~
+
+* ``blueprint-maven-plugin`` used to scan the entire classpath, resulting in potential conflicts
+  across projects. Scanning is now limited to ``${project.groupId}``, limiting conflict domain
+  to single project. See `ODLPARENT-109 <https://jira.opendaylight.org/browse/ODLPARENT-109>`__.
+
+* ``bundle-maven-plugin`` configuration ignored generated ServiceLoader service entries,
+  which has now been fixed. See `ODLPARENT-197 <https://jira.opendaylight.org/browse/ODLPARENT-197>`__.
+
+* Bundle tests are now enabled by default. See `ODLPARENT-158 <https://jira.opendaylight.org/browse/ODLPARENT-158>`__
+  and `ODLPARENT-80 <https://jira.opendaylight.org/browse/ODLPARENT-80>`__ for details.
+
+* Karaf log file rollover was not explictly set up, leading to inability to easily override
+  the defaults. See `ODLPARENT-153 <https://jira.opendaylight.org/browse/ODLPARENT-153>`__ for details.
+
+* Karaf log file used to use default maximum 16MiB file size, this has now been increased to 64MiB.
+  See `ODLPARENT-154 <https://jira.opendaylight.org/browse/ODLPARENT-154>`__.
+
+* ``features-test`` excluded opendaylight-karaf-empty's transitive dependencies, leading
+  to the need to re-declare them in single-feature-parent. This re-declaration was forgotten
+  in for ``bcpkix-framework-ext`` and ``bcprov-framework-ext`` bundles, which lead to them
+  not being present in the local repository. See `ODLPARENT-130 <https://jira.opendaylight.org/browse/ODLPARENT-130>`__.
+
+Upstream version removals
+~~~~~~~~~~~~~~~~~~~~~~~~~
+
+The following upstream dependencies have been removed from dependency management:
+
+* cassandra-driver-core
+
+* org.codehaus.enunciate/enunciate-core-annotations
+
+* org.jboss.resteasy/jaxrs-api
+
+* org.json/json
+
+* org.osgi/org.osgi.compendium
+
+Removed features
+~~~~~~~~~~~~~~~~
+
+* odl-jersey-1
+
+* ``features-akka`` feature repository has been integrated into ``features-odlparent``
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+
+The following dependencies have been upgraded:
+
+* apache-sshd `2.0.0 → 2.2.0 <https://github.com/apache/mina-sshd/compare/sshd-2.0.0...sshd-2.2.0>`__
+
+* Aeron 1.12.0 → 1.15.3, release notes:
+  * `1.13.0 <https://github.com/real-logic/aeron/releases/tag/1.13.0>`__
+  * `1.14.0 <https://github.com/real-logic/aeron/releases/tag/1.14.0>`__
+  * `1.15.0 <https://github.com/real-logic/aeron/releases/tag/1.15.0>`__
+  * `1.15.1 <https://github.com/real-logic/aeron/releases/tag/1.15.1>`__
+  * `1.15.2 <https://github.com/real-logic/aeron/releases/tag/1.15.2>`__
+  * `1.15.3 <https://github.com/real-logic/aeron/releases/tag/1.15.3>`__
+
+* Agrona 0.9.27 → 0.9.33, release notes:
+  * `0.9.28 <https://github.com/real-logic/agrona/releases/tag/0.9.28>`__
+  * `0.9.29 <https://github.com/real-logic/agrona/releases/tag/0.9.29>`__
+  * `0.9.30 <https://github.com/real-logic/agrona/releases/tag/0.9.30>`__
+  * `0.9.31 <https://github.com/real-logic/agrona/releases/tag/0.9.31>`__
+  * `0.9.32 <https://github.com/real-logic/agrona/releases/tag/0.9.32>`__
+  * `0.9.33 <https://github.com/real-logic/agrona/releases/tag/0.9.33>`__
+
+* Akka 2.5.19 → 2.5.21, release notes:
+  * `2.5.20 <https://akka.io/blog/news/2019/01/29/akka-2.5.20-released>`__
+  * `2.5.21 <https://akka.io/blog/news/2019/02/13/akka-2.5.21-released>`__
+
+* antl4r `4.7.1 → 4.7.2 <https://github.com/antlr/antlr4/releases/tag/4.7.2>`__
+
+* asciidoctorj-diagram 1.5.11 → 1.5.12
+
+* Bouncy Castle `1.60 → 1.61 <http://www.bouncycastle.org/releasenotes.html>`__
+
+* checkstyle 8.16 → 8.18, release notes:
+  * `8.17 <http://checkstyle.sourceforge.net/releasenotes.html#Release_8.17>`__
+  * `8.18 <http://checkstyle.sourceforge.net/releasenotes.html#Release_8.18>`__
+
+* commons-codec `1.11 → 1.12 <http://www.apache.org/dist/commons/codec/RELEASE-NOTES.txt>`__
+
+* Google Error Prone 2.3.2 → 2.3.3
+
+* Google Guava 25.1 → 27.1, release notes:
+  * `26.0 <https://github.com/google/guava/releases/tag/v26.0>`__
+  * `27.0 <https://github.com/google/guava/releases/tag/v27.0>`__
+  * `27.0.1 <https://github.com/google/guava/releases/tag/v27.0.1>`__
+  * `27.1 <https://github.com/google/guava/releases/tag/v27.1>`__
+
+* Google Truth `0.42 → 0.43 <https://github.com/google/truth/releases/tag/release_0_43>`__
+
+* h2 database `1.4.196 → 1.4.199 <http://www.h2database.com/html/changelog.html>`__
+
+* Immutables `2.7.3 → 2.7.5 <https://github.com/immutables/immutables/#changelog>`__
+
+* Javassist `3.24.0-GA → 3.24.1-GA <https://github.com/jboss-javassist/javassist/releases/tag/rel_3_24_1_ga>`__
+
+* log4j2 `2.11.1 → 2.11.2 <https://github.com/apache/logging-log4j2/blob/log4j-2.11.2/RELEASE-NOTES.md>`__
+
+* Mockito 2.23.4 → 2.25.0, release notes:
+  * `2.24.0 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2240>`__
+  * `2.25.0 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md#2250>`__
+
+* Netty 4.1.32 → 4.1.34, release notes:
+  * `4.1.32 <https://netty.io/news/2018/11/29/4-1-32-Final.html>`__
+  * `4.1.33 <https://netty.io/news/2019/01/21/4-1-33-Final.html>`__
+  * `4.1.34 <https://netty.io/news/2019/03/08/4-1-34-Final.html>`__
+
+* OSGi 5.0.0 → 6.0.0
+
+* Powermockito 1.7.4 → 2.0.0, release notes:
+  * `2.0.0-beta.5 <https://github.com/powermock/powermock/releases/tag/powermock-2.0.0-beta.5>`__
+  * `2.0.0-RC.1 <https://github.com/powermock/powermock/releases/tag/powermock-2.0.0-RC.1>`__
+  * `2.0.0 <https://github.com/powermock/powermock/releases/tag/powermock-2.0.0>`__
+
+* SpotBugs `3.1.9 → 3.1.12 <https://github.com/spotbugs/spotbugs/blob/3.1.12/CHANGELOG.md>`__
+
+* ThreeTen `1.4.0 → 1.5.0 <https://www.threeten.org/threeten-extra/changes-report.html#a1.5.0>`__
+
+* Xtend `2.16.0 → 2.17.0 <http://www.eclipse.org/xtend/releasenotes.html#/releasenotes/2019/03/05/version-2-17-0>`__
+
+Plugin removals
+~~~~~~~~~~~~~~~
+
+* gmaven-plugin
+
+* maven-findbugs-plugin
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+
+* jacoco-maven-plugin `0.8.2 → 0.8.3 <https://github.com/jacoco/jacoco/releases/tag/v0.8.3>`__
+
+* maven-invoker-plugin `3.1.0 → 3.2.0 <https://mail-archives.apache.org/mod_mbox/maven-announce/201901.mbox/%3Cop.zvzdg9tbkdkhrr@desktop-2khsk44%3E>`__
+
+* maven-javadoc-plugin `3.0.1 → 3.1.0 <https://mail-archives.apache.org/mod_mbox/maven-announce/201903.mbox/%3C6064d830-474c-4b43-afef-99502c3a305a%40getmailbird.com%3E>`__
+
+* spotbugs-maven-plugin 3.1.8 → 3.1.11
+
+Version 4.0.9
+-------------
+
+This is a bug-fix upgrade from version 4.0.8.
+
+Bug fixes
+~~~~~~~~~
+
+* ``karaf-plugin`` invocation in ``karaf4-parent`` caused previously
+  patched features to be overwritten with their stock versions, referencing
+  bundles which were not populated in the local repository. (See
+  `ODLPARENT-194 <https://jira.opendaylight.org/browse/ODLPARENT-194>`__.)
+
+* ``karaf-plugin`` version in ``karaf4-parent`` is now provided through
+  plugin management so downstreams can override it without needing
+  to repeat its configuration.
+
+* ``karaf-plugin`` no longer reads features twice when running discovery,
+  speeding up the process a bit.
+
+* Recent versions of the SpotBugs Maven plugin use SLF4J 1.8 beta 2, which
+  can’t use the 1.7.25 implementation we provide; we therefore provide an
+  implementation of 1.8 beta 2 when SpotBugs is used. (See
+  `ODLPARENT-184 <https://jira.opendaylight.org/browse/ODLPARENT-184>`__.)
+
+New features
+~~~~~~~~~~~~
+
+* ``odl-woodstox`` wraps the Woodstox StAX implementation which is imposed on
+  us by Karaf.
+
+Version 4.0.8
+-------------
+
+This is a bug-fix and minor upstream bump upgrade from version 4.0.7.
+
+Bug fixes
+~~~~~~~~~
+
+* ``bcprov-ext-jdk15on`` is a superset of ``bcprov-jdk15on``, so there’s no
+  need to ship both; we now only ship the former. In addition, we install the
+  Bouncy Castle JARs in ``lib/boot`` so that they continue to be available on
+  the boot classpath (JDK 9 removes the extension mechanism which was used
+  previously), and provide the corresponding bundles from the boot classpath
+  instead of using separate JARs in the system repository. (See
+  `ODLPARENT-183 <https://jira.opendaylight.org/browse/ODLPARENT-183>`__ and
+  `ODLPARENT-185 <https://jira.opendaylight.org/browse/ODLPARENT-185>`__.)
+
+* A dependency check has been added to ensure that we don’t run into the
+  TrieMap dependency bug in 4.0.6 again.
+
+* Dependencies pulled in by features are now checked for convergence, and
+  ``karaf-plugin`` warns when it finds diverging dependencies (the same
+  artifact with two different versions). Upstream-provided features are
+  patched to avoid the following divergences (and upgrade some dependencies in
+  the process):
+
+  * Aries utilities 1.1.0/1.1.3 (upgraded to 1.1.3).
+  * Commons Beanutils 1.8.3/1.9.3 (upgraded to 1.9.3).
+  * Commons Codec 1.8/1.10 (upgraded to 1.11).
+  * ``javax.mail`` 1.4.4/1.4.7 (upgraded to 1.4.7).
+
+  (See `ODLPARENT-189 <https://jira.opendaylight.org/browse/ODLPARENT-189>`__.)
+
+New features
+~~~~~~~~~~~~
+
+* ``odl-dropwizard-metrics`` provides Dropwizard Metrics (which are also
+  available in dependency management).
+
+* ``enunciate-maven-plugin`` is added as the replacement for
+  ``maven-enunciate-plugin``.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+
+The following dependencies are no longer provided by the JVM, starting with
+version 11, but we make them available via dependency management for projects
+which need them:
+
+* ``javax.annotation-api``.
+
+* JAXB (``jaxb-core``, ``jaxb-impl``).
+
+The following dependencies have been upgraded:
+
+* Checkstyle `8.15 → 8.16 <https://checkstyle.org/releasenotes.html#Release_8.16>`__.
+
+* Dependency Check `4.0.0 → 4.0.2 <https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md>`__.
+
+* ``git-commit-id`` `2.2.5 → 2.2.6 <https://github.com/ktoso/maven-git-commit-id-plugin/releases>`__.
+
+* Immutables 2.7.1 → 2.7.3:
+
+  * `2.7.2 <https://github.com/immutables/immutables#272-2018-11-05>`__.
+  * `2.7.3 <https://github.com/immutables/immutables#273-2018-11-10>`__.
+
+  (2.7.4 breaks our Javadocs.)
+
+* Jackson `2.9.7 → 2.9.8 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8>`__.
+
+Version 4.0.7
+-------------
+
+This is a bug-fix release, correcting the ``triemap`` import declaration.
+
+Version 4.0.6
+-------------
+
+This is a bug-fix and minor upstream packaging upgrade from version 4.0.5.
+
+Bug fixes
+~~~~~~~~~
+
+Single-feature-test was broken with JDK 9 and later and Karaf 4.2.2; this
+release adds the additional JVM configuration needed.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+
+This release adds the ``triemap`` BOM to dependency management.
+
+Version 4.0.5
+-------------
+
+This is a bug-fix release: the Karaf Maven plugin, in version 4.2.2, is
+`broken <https://issues.apache.org/jira/browse/KARAF-6057>`__ in some cases we
+need in OpenDaylight; we revert to 4.2.1 in ``karaf4-parent`` to avoid this.
+
+Version 4.0.4
+-------------
+
+This is a bug-fix release, reverting the change made in 4.0.3 to handle
+building with either ``zip`` or ``tar.gz`` Karaf archives (which breaks
+builds in our infrastructure, without the empty Karaf archive).
+
+Version 4.0.3
+-------------
+
+This is a bug-fix and minor upstream bump upgrade from version 4.0.2.
+
+Bug fixes
+~~~~~~~~~
+
+* Our FindBugs configuration for JDK 9 and later caused the plugin to run
+  everywhere; instead, this version defines the ``findbugs.skip`` property to
+  disable the plugin in modules where it would be used otherwise.
+
+* The PowerMock declarations in dependency management missed
+  ``powermock-api-mockito2``, which is necessary for modules using PowerMock
+  with Mockito 2.
+
+* The “quick” profile (``-Pq``) now skips SpotBugs.
+
+* JSR-305 annotations are now optional, which fixes a number of issues when
+  building with newer JDKs.
+
+* We provide JAXB with JDK 11 and later (where it is no longer provided by the
+  base platform).
+
+* ``odlparent-artifacts`` has been updated to accurately represent the
+  artifacts provided.
+
+* ``javax.activation`` is now excluded from generated features (it’s provided
+  on Karaf’s boot classpath).
+
+* When the build is configured to build Karaf distributions in ``tar.gz``
+  archives, but not ``zip`` archives, ``features-test`` used to fail; it will
+  now used whichever is available
+  (`ODLPARENT-174 <https://jira.opendaylight.org/browse/ODLPARENT-174>`__).
+
+* Explicit GCs are disabled by default, so that calls to ``System.gc()`` are
+  ignored
+  (`ODLPARENT-175 <https://jira.opendaylight.org/browse/ODLPARENT-175>`__).
+
+* Null checks are disabled in SpotBugs because of bad interactions with newer
+  annotations and the bytecode produces by JDK 11 and later for
+  ``try``-with-resources.
+
+* Akka Persistence expects LevelDB 0.10, so we now pull in that version
+  instead of 0.7.
+
+Dependency convergence
+~~~~~~~~~~~~~~~~~~~~~~
+
+A number of dependencies have been added or constrained so that projects using
+this parent can enforce dependency convergence:
+
+* Karaf’s ``framework`` feature is used as an import POM, so that we converge
+  by default on the versions used in Karaf.
+
+* The following dependencies have been added to dependency management:
+
+  * ``commons-beanutils``
+  * the Checker Framework
+  * Error Prone annotations
+  * ``javax.activation``
+  * ``xml-apis``
+
+New features
+~~~~~~~~~~~~
+
+The following Karaf features have been added:
+
+* ``odl-antlr4`` (providing ``antlr4-runtime``);
+
+* ``odl-gson`` (providing ``gson``);
+
+* ``odl-jersey-2`` (providing Jersey client, server, and container servlet,
+  along with the necessary feature dependencies);
+
+* ``odl-servlet-api`` (providing ``javax.servlet-api``);
+
+* ``odl-stax2-api`` (providing ``stax2-api``);
+
+* ``odl-ws-rs-api`` (providing ``javax.ws.rs-api``);
+
+A new ``sonar-jacoco-aggregate`` profile can be used to produce Sonar reports
+with aggregated JaCoCo reports. Additionally, Sonar builds (run with
+``-Dsonar``) are detected and run with a number of irrelevant plugins disabled.
+
+Upstream version upgrades
+~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* Akka 2.5.14 → 2.5.19 (and related ``ssl-config``, Aeron and Agrona upgrades):
+
+  * `2.5.15 <https://akka.io/blog/news/2018/08/24/akka-2.5.15-released>`__.
+  * `2.5.16 <https://akka.io/blog/news/2018/08/29/akka-2.5.16-security-fix-released>`__.
+  * `2.5.17 <https://akka.io/blog/news/2018/09/27/akka-2.5.17-released>`__.
+  * `2.5.18 <https://akka.io/blog/news/2018/10/07/akka-2.5.18-released>`__.
+  * `2.5.19 <https://akka.io/blog/news/2018/12/07/akka-2.5.19-released>`__.
+
+* Commons Text `1.4 → 1.6 <http://www.apache.org/dist/commons/text/RELEASE-NOTES.txt>`__.
+
+* Eclipse JDT annotations 2.2.0 → 2.2.100.
+
+* Javassist 3.23.1 → 3.24.0.
+
+* Karaf 4.2.1 → 4.2.2, with related upgrades.
+
+* LMAX Disruptor `3.4.1 → 3.4.2 <https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.2>`__.
+
+* Mockito `2.20.1 → 2.23.4 <https://github.com/mockito/mockito/blob/release/2.x/doc/release-notes/official.md>`__.
+
+* Netty 4.1.29 → 4.1.31:
+
+  * `4.1.30 <https://netty.io/news/2018/09/28/4-1-30-Final.html>`__.
+  * `4.1.31 <https://netty.io/news/2018/10/30/4-1-31-Final.html>`__.
+
+* Pax Exam 4.12.0 → 4.13.1.
+
+* Scala 2.12.6 → 2.12.8:
+
+  * `2.12.7 <https://github.com/scala/scala/releases/tag/v2.12.7>`__.
+  * `2.12.8 <https://github.com/scala/scala/releases/tag/v2.12.8>`__.
+
+* Wagon HTTP 3.1.0 → 3.2.0.
+
+* Xtend `2.14.0 → 2.16.0 <https://www.eclipse.org/xtend/releasenotes.html>`__.
+
+Plugin version upgrades
+~~~~~~~~~~~~~~~~~~~~~~~
+
+* Asciidoctor `1.5.6 → 1.5.7.1 <https://github.com/asciidoctor/asciidoctor-maven-plugin/releases>`__
+  (with related AsciidoctorJ upgrades).
+
+* Bundle 4.0.0 → 4.1.0.
+
+* Checkstyle `8.12 → 8.15 <https://checkstyle.org/releasenotes.html#Release_8.13>`__.
+
+* DependencyCheck `3.3.2 → 4.0.0 <https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md>`__.
+
+* Failsafe / Surefire `2.22.0 → 2.22.1 <https://blogs.apache.org/maven/entry/apache-maven-surefire-plugin-version1>`__.
+
+* Help 3.1.0 → 3.1.1.
+
+* JAR 3.1.0 → 3.1.1.
+
+* PMD `3.10.0 → 3.11.0 <https://blogs.apache.org/maven/entry/apache-maven-pmd-plugin-3>`__.
+
+* Remote Resources `1.5 → 1.6.0 <https://blogs.apache.org/maven/entry/apache-maven-remote-resources-plugin>`__.
+
+* Shade
+  `3.2.0 → 3.2.1 <https://blog.soebes.de/blog/2018/11/12/apache-maven-shade-plugin-version-3-dot-2-1-released/>`__.
+
+* SpotBugs `3.1.6 → 3.1.9 <https://github.com/spotbugs/spotbugs/blob/release-3.1/CHANGELOG.md>`__.
+
+* XBean finder 4.9 → 4.12.
+
+* XTend 2.14.0 → 2.16.0.
+
+Version 4.0.2
+-------------
+
+This is a bug-fix and minor upstream bump upgrade from version 4.0.1.
+
+Bug fixes
+~~~~~~~~~
+
+Previous releases overrode Karaf’s ``jre.properties``; this is no longer
+necessary, and was causing failures with Java 9 and later (our version of
+``jre.properties`` didn’t have the appropriate settings for anything after
+Java 8). This release drops that override. See
+`ODLPARENT-168 <https://jira.opendaylight.org/browse/ODLPARENT-168>`__ for
+details.
+
+Upstream version upgrades
+~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* Commons Lang `3.8 → 3.8.1 <http://www.apache.org/dist/commons/lang/RELEASE-NOTES.txt>`__.
+
+* Jackson `2.9.6 → 2.9.7 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7>`__.
+
+* Netty `4.1.28 → 4.1.29 <http://netty.io/news/2018/08/24/4-1-29-Final.html>`__.
+
+Plugin version upgrades
+~~~~~~~~~~~~~~~~~~~~~~~
+
+* JAR `3.0.2 → 3.1.0 <https://blog.soebes.de/blog/2018/04/10/apache-maven-jar-plugin-version-3-dot-1-dot-0-released>`__.
+
+* Javadoc `3.0.0 → 3.0.1 <https://blogs.apache.org/maven/entry/apache-maven-javadoc-plugin-version>`__.
+
+* Jersey `2.22.2 → 2.25.1 <https://jersey.github.io/release-notes/2.25.html>`__,
+  along with Glassfish JSON 1.0.4 → 1.1.2.
+
+* Plugin 3.5 → 3.5.2:
+
+  * `3.5.1 <https://blog.soebes.de/blog/2018/01/22/apache-maven-plugin-tools-version-3-dot-5-1-released/>`__.
+  * `3.5.2 <https://blog.soebes.de/blog/2018/05/26/apache-mave-plugin-tools-version-3-dot-5-2-released/>`__.
+
+* Resources `3.0.1 → 3.1.0 <https://blogs.apache.org/maven/entry/apache-maven-resources-plugin-version>`__.
+
+Version 4.0.1
+-------------
+
+This is a bug-fix and minor upstream bump upgrade from version 4.0.0.
+
+Bug fixes
+~~~~~~~~~
+
+The JaCoCo execution profile was incorrect, breaking Sonar; the report is now
+written correctly, so that Sonar can find it.
+
+The Blueprint Maven plugin fails when it encounters Java 9 classes; this is
+fixed by forcefully upgrading its dependency on xbean-finder. See
+`ODLPARENT-167 <https://jira.opendaylight.org/browse/ODLPARENT-167>`__ for
+details.
+
+Upstream version upgrades
+~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* SpotBugs `3.1.6 → 3.1.7 <https://github.com/spotbugs/spotbugs/blob/release-3.1/CHANGELOG.md>`__.
+
+Upstream version additions
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* Mockito Inline is added alongside Mockito Core, to ensure that the versions
+  are kept in sync.
+
+Plugin version upgrades
+~~~~~~~~~~~~~~~~~~~~~~~
+
+* Clean `3.0.0 → 3.1.0 <https://blog.soebes.de/blog/2018/04/14/apache-maven-clean-plugin-version-3-dot-1-0-released/>`__.
+
+* Compiler `3.7.0 → 3.8.0 <https://blog.soebes.de/blog/2018/07/30/apache-maven-compiler-plugin-version-3-dot-8-0-released/>`__.
+
+* Dependency 3.0.2 → 3.1.1:
+
+  * `3.1.0 <https://blog.soebes.de/blog/2018/04/06/apache-maven-dependency-plugin-version-3-dot-1-0-released/>`__.
+  * `3.1.1 <https://blog.soebes.de/blog/2018/05/24/apache-maven-dependency-plugin-version-3-dot-1-1-released/>`__.
+
+* Dependency Check `3.3.1 → 3.3.2 <https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md>`__.
+
+* Enforcer `3.0.0-M1 → 3.0.0-M2 <https://mail-archives.apache.org/mod_mbox/maven-announce/201806.mbox/%3Cop.zko9b2vhkdkhrr%40desktop-2khsk44.dynamic.ziggo.nl%3E>`__.
+
+* Failsafe 2.20.1 → 2.22:
+
+  * `2.21 <https://blog.soebes.de/blog/2018/03/06/apache-maven-surefire-plugin-version-2-dot-21-released/>`__.
+  * `2.22 <https://blog.soebes.de/blog/2018/06/16/apache-maven-surefire-plugin-version-2-dot-22-released/>`__.
+
+* Help 2.2 → 3.1.0:
+
+  * `3.0.0 <https://blog.soebes.de/blog/2018/03/18/apache-maven-help-plugin-version-3-dot-0-0-released/>`__.
+  * `3.0.1 <https://blog.soebes.de/blog/2018/03/28/apache-maven-help-plugin-version-3-dot-0-1-released/>`__.
+  * `3.1.0 <https://blog.soebes.de/blog/2018/06/09/apache-maven-help-plugin-version-3-dot-1-0-released/>`__.
+
+* Invoker 2.0.0 → 3.1.0:
+
+  * `3.0.0 <https://blog.soebes.de/blog/2017/05/24/apache-maven-invoker-plugin-version-3-dot-0-0-released/>`__.
+  * `3.1.0 <https://blog.soebes.de/blog/2018/05/31/apache-maven-invoker-plugin-version-3-dot-1-0-released/>`__.
+
+* JAR `3.0.2 → 3.1.0 <https://blog.soebes.de/blog/2018/04/10/apache-maven-jar-plugin-version-3-dot-1-dot-0-released/>`__.
+
+* Project Info Reports `2.9 → 3.0.0 <https://blog.soebes.de/blog/2018/06/27/apache-maven-project-info-reports-plugin-3-dot-0-0-released/>`__.
+
+* Resources `3.0.1 → 3.1.0 <https://blog.soebes.de/blog/2018/05/01/apache-maven-resources-plugin-version-3-dot-1-0-released/>`__.
+
+* Shade `3.1.0 → 3.2.0 <https://blog.soebes.de/blog/2018/09/13/apache-maven-shade-plugin-version-3-dot-2-0-released/>`__.
+
+* Site `3.7 → 3.7.1 <https://blog.soebes.de/blog/2018/04/29/apache-maven-site-plugin-version-3-dot-7-1-released/>`__.
+
+* Surefire 2.18.1 → 2.22.0:
+
+  * `2.19 <https://blog.soebes.de/blog/2015/10/19/apache-maven-surefire-plugin-version-2-dot-19-released/>`__.
+  * `2.19.1 <https://blog.soebes.de/blog/2016/01/03/apache-maven-surefire-plugin-version-2-dot-19-dot-1-released/>`__.
+  * `2.20 <https://blog.soebes.de/blog/2017/04/12/apache-maven-surefire-plugin-version-2-dot-20-released/>`__.
+  * `2.21 <https://blog.soebes.de/blog/2018/03/06/apache-maven-surefire-plugin-version-2-dot-21-released/>`__.
+  * `2.22 <https://blog.soebes.de/blog/2018/06/16/apache-maven-surefire-plugin-version-2-dot-22-released/>`__.
+
+
+Version 4.0.0
+-------------
+
+This is a major upgrade from version 3, with breaking changes; projects will
+need to make changes to upgrade to this version.
+
+`This Wiki page <https://wiki.opendaylight.org/view/Neon_platform_upgrade>`_
+has detailed step-by-step migration instructions.
+
+ODL Parent 4 requires Maven 3.5.3 or later; this is needed in particular to
+enable SpotBugs support with current versions of the SpotBugs plugin.
+
+Known issues
+~~~~~~~~~~~~
+
+This release’s SpotBugs support doesn’t handle Guava 25.1 correctly, resulting
+in false-positives regarding null handling; see
+`ODLPARENT-161 <https://jira.opendaylight.org/browse/ODLPARENT-161>`_ for
+details. Until this is fixed, the corresponding warnings are disabled, which
+matches our existing FindBugs configuration (which suffers from the a variant
+of this, with the same consequences).
+
+We are planning on upgrading Akka during the 4.x cycle, even if it results in
+a technically breaking upgrade. This is currently blocked on an OSGi bug in
+Akka; see `Akka issue 25579 <https://github.com/akka/akka/issues/25579>`_ for
+details.
+
+Blueprint and OSGi service handling
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Previous releases used an OpenDaylight-specific directory for Blueprint XML
+files, ``org/opendaylight/blueprint``. It turned out this wasn’t useful, so
+version 4 uses the default directory, ``OSGI-INF/blueprint``.
+
+The Maven bundle plugin is now configured to omit the ``Import-Service`` and
+``Export-Service`` headers, since they are deprecated, unnecessary in
+OpenDaylight, and liable to cause issues.
+
+With previous releases of OpenDaylight, projects were encouraged to use Pax
+CDI API annotations to describe their Blueprint beans, services and injections;
+with version 4, Blueprint annotations should be used instead:
+
+* modules should depend on
+  ``org.apache.aries.blueprint:blueprint-maven-plugin-annotation``, with the
+  ``<optional>true</optional>`` flag, instead of
+  ``org.ops4j.pax.cdi:pax-cdi-api``;
+
+* ``@OsgiServiceProvider`` on bean definitions is replaced by ``@Service``;
+
+* ``@OsgiService`` at injection points is replaced by ``@Reference``;
+
+* ``@OsgiService`` on bean definitions, while technically wrong, can be seen in
+  the OpenDaylight codebase; this is replaced by ``@Service``;
+
+* service lists can be injected using ``@ReferenceList``.
+
+See `this Gerrit patch <https://git.opendaylight.org/gerrit/75699>`_ for an
+example.
+
+Compiler settings
+~~~~~~~~~~~~~~~~~
+
+Builds now warn about unchecked type uses (such as raw types where generics
+are available).
+
+JUnit and Mockito are always available as test dependencies and no longer need
+to be declared in POMs.
+
+New build profiles
+~~~~~~~~~~~~~~~~~~
+
+An OWASP profile is now available to run OWASP’s dependency checker; this will
+check all third-party dependencies against the NVD vulnerability database. To
+enable this, run Maven with ``-Powasp``.
+
+Build profile changes
+~~~~~~~~~~~~~~~~~~~~~
+
+``-Pq`` now skips Modernizer.
+
+New features
+~~~~~~~~~~~~
+
+``odl-akka-leveldb-0.10`` wraps LevelDB 0.10 for Akka.
+
+``odl-apache-commons-codec`` wraps Apache Commons Codec.
+
+``odl-apache-commons-lang3`` wraps Apache Commons Lang 3.
+
+``odl-apache-commons-net`` wraps Apache Commons Net.
+
+``odl-apache-commons-text`` wraps Apache Commons Text.
+
+``odl-apache-sshd`` wraps Apache SSHD.
+
+``odl-guava`` provides the default ODL version of Guava; it should be used
+instead of ``odl-guava-23`` or the new ``odl-guava-25``.
+
+``odl-jackson-2.9`` wraps Jackson 2.9.
+
+New FindBugs and SpotBugs settings
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+FindBugs and SpotBugs are configured with
+`the SLF4J extension <http://kengotoda.github.io/findbugs-slf4j/>`_ (version
+1.4.0 for FindBugs, 1.4.1 for SpotBugs). This will flag misused SLF4J calls, in
+particular message templates which don’t match the arguments, and invalid
+placeholders (*e.g.* ``%s`` instead of ``{}``).
+
+Deleted artifacts
+~~~~~~~~~~~~~~~~~
+
+``aggregator-parent`` was unusable outside ``odlparent`` and has been removed.
+Instead, the ``maven.deploy.skip`` and ``maven.install.skip`` properties are
+available to disable deploying and installing artifacts.
+
+Upstream version upgrades
+~~~~~~~~~~~~~~~~~~~~~~~~~
+
+This version upgrades the following third-party dependencies:
+
+* Aeron 1.7.0 → 1.9.3:
+
+  * `1.8.0 <https://github.com/real-logic/aeron/releases/tag/1.8.0>`_.
+  * `1.8.1 <https://github.com/real-logic/aeron/releases/tag/1.8.1>`_.
+  * `1.8.2 <https://github.com/real-logic/aeron/releases/tag/1.8.2>`_.
+  * `1.9.0 <https://github.com/real-logic/aeron/releases/tag/1.9.0>`_.
+  * `1.9.1 <https://github.com/real-logic/aeron/releases/tag/1.9.1>`_.
+  * `1.9.2 <https://github.com/real-logic/aeron/releases/tag/1.9.2>`_.
+  * `1.9.3 <https://github.com/real-logic/aeron/releases/tag/1.9.3>`_.
+
+* Agrona 0.9.12 → 0.9.21:
+
+  * `0.9.13 <https://github.com/real-logic/agrona/releases/tag/0.9.13>`_.
+  * `0.9.14 <https://github.com/real-logic/agrona/releases/tag/0.9.14>`_.
+  * `0.9.15 <https://github.com/real-logic/agrona/releases/tag/0.9.15>`_.
+  * `0.9.16 <https://github.com/real-logic/agrona/releases/tag/0.9.16>`_.
+  * `0.9.17 <https://github.com/real-logic/agrona/releases/tag/0.9.17>`_.
+  * `0.9.18 <https://github.com/real-logic/agrona/releases/tag/0.9.18>`_.
+  * `0.9.19 <https://github.com/real-logic/agrona/releases/tag/0.9.19>`_.
+  * `0.9.20 <https://github.com/real-logic/agrona/releases/tag/0.9.20>`_.
+  * `0.9.21 <https://github.com/real-logic/agrona/releases/tag/0.9.21>`_.
+
+* Akka 2.5.11 → 2.5.14:
+
+  * `2.5.12 <https://akka.io/blog/news/2018/04/13/akka-2.5.12-released>`_.
+  * `2.5.13 <https://akka.io/blog/news/2018/06/08/akka-2.5.13-released>`_.
+  * `2.5.14 <https://akka.io/blog/news/2018/07/13/akka-2.5.14-released>`_.
+
+* ASM 5.1 → 6.2.1 (synchronised with Karaf).
+
+* Bouncy Castle `1.59 → 1.60 <https://www.bouncycastle.org/releasenotes.html>`_.
+
+* Checkstyle `8.4 → 8.12 <http://checkstyle.sourceforge.net/releasenotes.html#Release_8.12>`_.
+
+* Commons Lang `3.7 → 3.8 <http://www.apache.org/dist/commons/lang/RELEASE-NOTES.txt>`_.
+
+* Commons Text 1.1 → 1.4:
+
+  * `1.2 <https://commons.apache.org/proper/commons-text/release-notes/RELEASE-NOTES-1.2.txt>`_.
+  * `1.3 <https://commons.apache.org/proper/commons-text/release-notes/RELEASE-NOTES-1.3.txt>`_.
+  * `1.4 <https://commons.apache.org/proper/commons-text/release-notes/RELEASE-NOTES-1.4.txt>`_.
+
+* Eclipse JDT annotations 2.1.150 → 2.2.0.
+
+* EclipseLink Moxy JAXB `2.7.1 → 2.7.3 <https://www.eclipse.org/eclipselink/releases/2.7.php>`_.
+
+* Enunciate core annotations
+  `2.10.1 → 2.11.1 <https://github.com/stoicflame/enunciate/releases>`_.
+
+* Felix Metatype 1.1.6 → 1.2.0 (synchronised with Karaf).
+
+* Google Truth `0.40 → 0.42 <https://github.com/google/truth/releases>`_.
+
+* Guava 23.6.1 → 25.1:
+
+  * `23.4 <https://github.com/google/guava/releases/tag/v23.4>`_.
+  * `23.5 <https://github.com/google/guava/releases/tag/v23.5>`_.
+  * `23.6 <https://github.com/google/guava/releases/tag/v23.6>`_.
+  * `24.0 <https://github.com/google/guava/releases/tag/v24.0>`_.
+  * `24.1 <https://github.com/google/guava/releases/tag/v24.1>`_.
+  * `25.0 <https://github.com/google/guava/releases/tag/v25.0>`_.
+  * `25.1 <https://github.com/google/guava/releases/tag/v25.1>`_.
+
+* Immutables `2.5.6 → 2.7.1 <https://github.com/immutables/immutables/blob/master/README.md#changelog>`_.
+
+* Jackson 2.8.9 → 2.9.6:
+
+  * `2.9 feature overview <https://medium.com/@cowtowncoder/jackson-2-9-features-b2a19029e9ff>`_.
+  * `2.9 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9>`_.
+  * `2.9.1 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.1>`_.
+  * `2.9.2 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.2>`_.
+  * `2.9.3 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.3>`_.
+  * `2.9.4 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.4>`_.
+  * `2.9.5 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.5>`_.
+  * `2.9.6 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.6>`_.
+
+* JaCoCo `0.8.1 → 0.8.2 <https://github.com/jacoco/jacoco/releases/tag/v0.8.2>`_.
+
+* Javassist 3.22.0 → 3.23.1. This provides compatibility with Java 9 and later,
+  and `fixes a file handle leak <https://github.com/jboss-javassist/javassist/issues/165>`_.
+
+* Jettison 1.3.8 → 1.4.0.
+
+* Jetty 9.3.21 → 9.4.11 (synchronised with Karaf):
+
+  * `9.4.0 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00097.html>`_.
+  * `9.4.1 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00100.html>`_.
+  * `9.4.2 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00101.html>`_.
+  * `9.4.3 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00102.html>`_.
+  * `9.4.4 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00105.html>`_.
+  * `9.4.5 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00107.html>`_.
+  * `9.4.6 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00109.html>`_.
+  * `9.4.7 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00111.html>`_.
+  * `9.4.8 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00114.html>`_.
+  * `9.4.9 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00117.html>`_.
+  * `9.4.10 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00119.html>`_.
+  * `9.4.11 <https://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00122.html>`_.
+
+* Jolokia OSGi `1.5.0 → 1.6.0 <https://jolokia.org/changes-report.html#a1.6.0>`_.
+
+* Karaf 4.1.5 → 4.2.1:
+
+  * `4.1.6 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12342748>`_.
+  * `4.2.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12342945>`_.
+
+* LMAX Disruptor 3.3.10 → 3.4.1:
+
+  * `3.4.0 <https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.0>`_.
+  * `3.4.1 <https://github.com/LMAX-Exchange/disruptor/releases/tag/3.4.1>`_.
+
+* META-INF services 1.7 → 1.8.
+
+* Mockito 1.10.19 → 2.20.1; see
+  `What’s new in Mockito 2 <https://github.com/mockito/mockito/wiki/What%27s-new-in-Mockito-2>`_
+  for upgrade instructions and
+  `the list of issues you might run into <https://asolntsev.github.io/en/2016/10/11/mockito-2.1/>`_.
+
+* Netty 4.1.22 → 4.1.28:
+
+  * `4.1.17 <http://netty.io/news/2017/11/08/4-0-53-Final-4-1-17-Final.html>`_.
+  * `4.1.18 <http://netty.io/news/2017/12/11/4-0-54-Final-4-1-18-Final.html>`_.
+  * `4.1.19 <http://netty.io/news/2017/12/18/4-1-19-Final.html>`_.
+  * `4.1.20 <http://netty.io/news/2018/01/22/4-0-55-Final-4-1-20-Final.html>`_.
+  * `4.1.21 <http://netty.io/news/2018/02/05/4-0-56-Final-4-1-21-Final.html>`_.
+  * `4.1.22 <http://netty.io/news/2018/02/21/4-1-22-Final.html>`_.
+  * `4.1.23 <http://netty.io/news/2018/04/04/4-1-23-Final.html>`_.
+  * `4.1.24 <http://netty.io/news/2018/04/19/4-1-24-Final.html>`_.
+  * `4.1.25 <http://netty.io/news/2018/05/14/4-1-25-Final.html>`_.
+  * `4.1.26 <http://netty.io/news/2018/07/10/4-1-26-Final.html>`_.
+  * `4.1.27 <http://netty.io/news/2018/07/11/4-1-27-Final.html>`_.
+  * `4.1.28 <http://netty.io/news/2018/07/27/4-1-28-Final.html>`_.
+
+* Pax Exam 4.11.0 → 4.12.0.
+
+* Pax URL 2.5.3 → 2.5.4, which only fixes
+  `a potential NullPointerException <https://ops4j1.jira.com/browse/PAXURL-346>`_.
+
+* PowerMock 1.6.4 → 1.7.4:
+
+  * `1.6.5 <https://github.com/powermock/powermock/releases/tag/powermock-1.6.5>`_.
+  * `1.6.6 <https://github.com/powermock/powermock/releases/tag/powermock-1.6.6>`_.
+  * `1.7.0 <https://github.com/powermock/powermock/releases/tag/powermock-1.7.0>`_.
+  * `1.7.1 <https://github.com/powermock/powermock/releases/tag/powermock-1.7.1>`_.
+  * `1.7.2 <https://github.com/powermock/powermock/releases/tag/powermock-1.7.2>`_.
+  * `1.7.3 <https://github.com/powermock/powermock/releases/tag/powermock-1.7.3>`_.
+  * `1.7.4 <https://github.com/powermock/powermock/releases/tag/powermock-1.7.4>`_.
+
+* Scala parser combinators 1.0.7 → 1.1.1:
+
+  * `1.1.0 <https://github.com/scala/scala-parser-combinators/releases/tag/v1.1.0>`_.
+  * `1.1.1 <https://github.com/scala/scala-parser-combinators/releases/tag/v1.1.1>`_.
+
+* SpotBugs `3.1.0 → 3.1.6 <https://github.com/spotbugs/spotbugs/blob/3.1.6/CHANGELOG.md>`_.
+
+* Threeten Extra `1.3.2 → 1.4 <https://github.com/ThreeTen/threeten-extra/releases>`_.
+
+* Typesafe SSL config 0.2.2 → 0.2.4:
+
+  * `0.2.3 <https://github.com/lightbend/ssl-config/releases/tag/v0.2.3>`_.
+  * `0.2.4 <https://github.com/lightbend/ssl-config/releases/tag/v0.2.4>`_.
+
+* Wagon HTTP
+  `2.10 → 3.1.0 <https://lists.apache.org/thread.html/96024c54db7680697cb066e22a37b0ed5b4498386714a8a9ae1ec9cd@%3Cannounce.maven.apache.org%3E>`_.
+
+* XMLUnit `1.6 → 2.6.2 <https://github.com/xmlunit/xmlunit/blob/master/RELEASE_NOTES.md>`_.
+
+Upstream version additions
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+The following upstream dependencies have been added to dependency management:
+
+* Apache SSHD 2.0.0, with EdDSA and Netty support (EdDSA is provided by ``net.i2p.crypto:eddsa``).
+
+* Blueprint annotations (``org.apache.aries.blueprint:blueprint-maven-plugin-annotation``).
+
+* Log4J2.
+
+* Pax Web 7.2.3 (synchronised with Karaf).
+
+Upstream version removals
+~~~~~~~~~~~~~~~~~~~~~~~~~
+
+The following upstream dependencies have been removed from dependency management:
+
+* Google Protobuf.
+
+* Our repackaging of Jersey Servlet.
+
+* JUnit’s ``junit-dep``, which has long been obsolete.
+
+* LevelDB (which is still available as features).
+
+* Pax CDI API — Blueprint annotations should be used instead.
+
+Plugin version upgrades
+~~~~~~~~~~~~~~~~~~~~~~~
+
+The following plugins have been upgraded:
+
+* Blueprint 1.4.0 → 1.10.0.
+
+* Build helper 1.12 → 3.0.0.
+
+* Bundle plugin 3.5.0 → 4.0.0.
+
+* Checkstyle
+  `2.17 → 3.0.0 <https://mail-archives.apache.org/mod_mbox/maven-announce/201801.mbox/%3Cop.zchs68akkdkhrr%40desktop-2khsk44.mshome.net%3E>`_.
+
+* Duplicate finder
+  `1.2.1 → 1.3.0 <https://github.com/basepom/duplicate-finder-maven-plugin/blob/master/CHANGES.md>`_.
+
+* Git commit id `2.2.4 → 2.2.5 <https://github.com/ktoso/maven-git-commit-id-plugin/releases/tag/v2.2.5>`_.
+
+* Jacoco Maven plugin `0.8.1 → 0.8.2 <https://github.com/jacoco/jacoco/releases/tag/v0.8.2>`_.
+
+* Javadoc `3.0.0 → 3.0.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12342283>`_.
+
+* PMD 3.8 → 3.10.0:
+
+  * `3.10.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12342689&styleName=Text&projectId=12317621>`_.
+
+* Sevntu `1.29.0 → 1.32.0 <http://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.32.0>`_.
+
+* SpotBugs 3.1.0-RC6 → 3.1.6 (see the SpotBugs changes above).
+
+Version 3.1.3
+-------------
+
+This version fixes the following issues:
+
+* `ODLPARENT-156 <https://jira.opendaylight.org/browse/ODLPARENT-156>`_:
+  ``xtend-maven-plugin``’s dependencies end up pulling in conflicting
+  dependencies. ODL Parent now constrains part of its dependency tree to avoid
+  this.
+
+This version adds ``odl-jackson-2.8`` to ``odlparent-artifacts``.
+
+Version 3.1.2
+-------------
+
+This version fixes the following issues:
+
+* `INFRAUTILS-41 <https://jira.opendaylight.org/browse/INFRAUTILS-41>`_:
+  ``jre.properties`` includes ``com.sun.management`` so that it can be
+  enabled if necessary. (This doesn’t add a dependency on
+  ``com.sun.management``, it allows bundles to use it if it is present.)
+
+* `ODLPARENT-136 <https://jira.opendaylight.org/browse/ODLPARENT-136>`_:
+  ``SingleFeatureTest`` pulls in ``org.osgi.compendium``.
+
+* `ODLPARENT-144 <https://jira.opendaylight.org/browse/ODLPARENT-144>`_:
+  ``org.apache.karaf.scr.management`` is whitelisted so that it no longer
+  affects ``SingleFeatureTest``.
+
+* `ODLPARENT-146 <https://jira.opendaylight.org/browse/ODLPARENT-146>`_:
+  null-related FindBugs checks which produce false-positives with Guava 23.6
+  and later are disabled, so that this really is fully backwards-compatible
+  with 3.0 and later.
+
+* `ODLPARENT-148 <https://jira.opendaylight.org/browse/ODLPARENT-148>`_:
+  ``SingleFeatureTest`` preserves ``target/SFT/karaf.log``.
+
+This version includes the following improvements:
+
+* ``custom.properties`` no longer includes OVSDB-specific configuration.
+
+* The ``odl-jersey-1`` feature includes the Jersey client.
+
+* Redundant bundle dependency declarations in ``SingleFeatureTest`` have been
+  removed (these are declarations which are also present in our base Karaf
+  distribution).
+
+* Build errors involving invalid feature or bundle URLs now indicate which
+  feature is at fault.
+
+* Obsolete Log4J overrides have been removed from ``SingleFeatureTest``.
+
+When building using JDK 9 or 10, the default settings have been changed as
+follows to avoid errors or extraneous warnings:
+
+* SFT is disabled (it needs Karaf 4.2 or later);
+
+* Javadocs are generated as HTML 4;
+
+* SpotBugs is disabled on JDK 10 or later;
+
+* FindBugs is disabled on JDK 9 or later.
+
+The following third-party dependencies have been upgraded:
+
+* `EclipseLink Moxy JAXB 2.6.2 → 2.7.1 <https://www.eclipse.org/eclipselink/releases/2.7.php>`_.
+
+* `Google Truth 0.36 → 0.40 <https://github.com/google/truth/releases>`_.
+
+* `Gson 2.8.2 → 2.8.5 <https://github.com/google/gson/blob/master/CHANGELOG.md>`_.
+
+* `Guava 23.6 → 23.6.1 <https://github.com/google/guava/compare/v23.6...v23.6.1>`_.
+  This addresses CVE-2018-10237 (that’s the only change in this release).
+
+* `Jacoco Maven plugin 0.8.0 → 0.8.1 <https://github.com/jacoco/jacoco/releases/tag/v0.8.1>`_.
+
+* JDT annotations 2.1.0 → 2.1.150.
+
+* `Scala 2.12.5 → 2.12.6 <https://github.com/scala/scala/releases/tag/v2.12.6>`_.
+
+* `Scala Parser Combinators 1.0.6 → 1.0.7 <https://github.com/scala/scala-parser-combinators/releases/tag/v1.0.7>`_.
+
+* `Sevntu 1.24.2 → 1.29.0 <https://sevntu-checkstyle.github.io/sevntu.checkstyle/#1.29.0>`_.
+
+* `Xtext and Xtend 2.13.0 → 2.14.0 <https://github.com/eclipse/xtext/blob/website-master/xtend-website/_posts/releasenotes/2018-05-23-version-2-14-0.md>`_.
+
+The following Maven plugin has been upgraded:
+
+* `Javadoc 3.0.0 → 3.0.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12342283>`_.
+
+Version 3.1.1
+-------------
+
+This version fixes the following issues:
+
+* `ODLPARENT-137 <https://jira.opendaylight.org/browse/ODLPARENT-137>`_:
+  restore the OpenDaylight prompt.
+
+* `ODLPARENT-146 <https://jira.opendaylight.org/browse/ODLPARENT-146>`_:
+  Guava 23.6 switched from @Nullable to @NullableDecl, which causes false
+  positives in FindBugs’ ``NP_NONNULL_PARAM_VIOLATION`` rule; we’re
+  disabling the rule for now.
+
 Version 3.1.0
 -------------