See `ODLPARENT-262 <https://jira.opendaylight.org/browse/ODLPARENT-262>`__ for more information.
* ``sporbugs-maven-plugin`` now runs with ``spotbugs.fork=false``. This setting improves build time by removing
the need to warm up a JVM for each SpotBugs analysis.
+* Apache Derby is now excluded from PAX JDBC features due to a vulnerability which is not fixed in a suitable
+ release. See `ODLPARENT-262 <https://jira.opendaylight.org/browse/ODLPARENT-306>`__ for more information.
Third-party dependencies
~~~~~~~~~~~~~~~~~~~~~~~~
-* Checkstyle 10.14.0 → 10.14.2, release notes:
+* Checkstyle 10.14.0 → 10.15.0, release notes:
* `10.14.1 <https://checkstyle.org/releasenotes.html#Release_10.14.1>`__
* `10.14.2 <https://checkstyle.org/releasenotes.html#Release_10.14.2>`__
+ * `10.15.0 <https://checkstyle.org/releasenotes.html#Release_10.15.0>`__
+
+* commons-io `2.15.1 → 2.16.0 <https://commons.apache.org/proper/commons-io/changes-report.html#a2.16.0>`__
* error_prone_annotations 2.25.0 → 2.26.1, release notes:
* `2.26.0 <https://github.com/google/error-prone/releases/tag/v2.26.0>`__
* `2.16.1 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.16.1>`__
* `2.16.2 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.16.2>`__
+* Jetty `9.4.53.v20231009 → 9.4.54.v20240208 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.54.v20240208>`__
+
* jdt-annotations `2.2.800 → 2.3.0 <https://github.com/eclipse-jdt/eclipse.jdt.core/pull/1716>`__
* Jersey `2.41 → 2.42 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.42>`__
+* Karaf `4.4.5 → 4.4.6 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12354057>`__
+
* Netty `4.1.107 → 4.1.108 <https://netty.io/news/2024/03/21/4-1-108-Final.html>`__
* Pax JDBC `1.5.6 → 1.5.7 <https://github.com/ops4j/org.ops4j.pax.jdbc/milestone/33?closed=1>`__
+* Woodstox `6.6.1 → 6.6.2 <https://github.com/FasterXML/woodstox/milestone/34?closed=1>`__
+
Plugin upgrades
~~~~~~~~~~~~~~~
* cyclonedx-maven-plugin `2.7.11 → 2.8.0 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.8.0>`__
* `8.0.0 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v8.0.0>`__
* `8.0.1 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v8.0.1>`__
+* Jacoco Maven plugin `0.8.11 → 0.8.12 <https://github.com/jacoco/jacoco/releases/tag/v0.8.12>`__
+
* maven-assembly-plugin 3.6.0 → 3.7.1, release notes:
* `3.7.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12353243>`__
* `3.7.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12354406>`__
* `3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12352107>`__
* `3.1.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12353026>`__
+* maven-invoker-plugin `3.6.0 → 3.6.1 <https://github.com/apache/maven-invoker-plugin/releases/tag/maven-invoker-plugin-3.6.1>`__
+
+* maven-jar-plugin `3.3.0 → 3.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317526&version=12352303>`__
+
+* maven-plugin-plugin 3.10.2 → 3.12.0, release notes:
+ * `3.11.0 <https://github.com/apache/maven-plugin-tools/releases/tag/maven-plugin-tools-3.11.0>`__
+ * `3.12.0 <https://github.com/apache/maven-plugin-tools/releases/tag/maven-plugin-tools-3.12.0>`__
+
* maven-remote-resources-plugin `3.1.0 → 3.2.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317825&version=12353591>`__
+* maven-source-plugin `3.3.0 → 3.3.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317924&version=12353471>`__
+
Version 13.0.11
---------------
This is a bug-fix upgrade from version 13.0.10.
Code Review / odlparent.git / blobdiff