Update NEWS for 13.1.0
[odlparent.git] / docs / NEWS.rst
index 34e234be6d250db5e24fa4dbf8a88dbf90ced8ab..cc9f54d10effdf5beb174c39dda2ddcba9c7adfa 100644 (file)
@@ -2,6 +2,218 @@
 ODL Parent release notes
 ========================
 
+Version 13.1.0
+--------------
+This is a bug-fix/feature upgrade from version 13.0.11.
+
+Improvements and new features
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+* ``SingleFeatureTest`` is now executed by a dedicated Maven plugin, leading to faster execution times and better
+  multi-threaded behaviour.
+  See `ODLPARENT-262 <https://jira.opendaylight.org/browse/ODLPARENT-262>`__ for more information.
+* ``sporbugs-maven-plugin`` now runs with ``spotbugs.fork=false``. This setting improves build time by removing
+  the need to warm up a JVM for each SpotBugs analysis.
+* Apache Derby is now excluded from PAX JDBC features due to a vulnerability which is not fixed in a suitable
+  release. See `ODLPARENT-262 <https://jira.opendaylight.org/browse/ODLPARENT-306>`__ for more information.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* Checkstyle 10.14.0 → 10.15.0, release notes:
+  * `10.14.1 <https://checkstyle.org/releasenotes.html#Release_10.14.1>`__
+  * `10.14.2 <https://checkstyle.org/releasenotes.html#Release_10.14.2>`__
+  * `10.15.0 <https://checkstyle.org/releasenotes.html#Release_10.15.0>`__
+
+* commons-io `2.15.1 → 2.16.0 <https://commons.apache.org/proper/commons-io/changes-report.html#a2.16.0>`__
+
+* error_prone_annotations 2.25.0 → 2.26.1, release notes:
+  * `2.26.0 <https://github.com/google/error-prone/releases/tag/v2.26.0>`__
+  * `2.26.1 <https://github.com/google/error-prone/releases/tag/v2.26.1>`__
+
+* Jackson 2.15.3 → 2.16.2, release notes:
+  * `2.16 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.16>`__
+  * `2.16.1 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.16.1>`__
+  * `2.16.2 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.16.2>`__
+
+* Jetty `9.4.53.v20231009 → 9.4.54.v20240208 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.54.v20240208>`__
+
+* jdt-annotations `2.2.800 → 2.3.0 <https://github.com/eclipse-jdt/eclipse.jdt.core/pull/1716>`__
+
+* Jersey `2.41 → 2.42 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.42>`__
+
+* Karaf `4.4.5 → 4.4.6 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12354057>`__
+
+* Netty `4.1.107 → 4.1.108 <https://netty.io/news/2024/03/21/4-1-108-Final.html>`__
+
+* Pax JDBC `1.5.6 → 1.5.7 <https://github.com/ops4j/org.ops4j.pax.jdbc/milestone/33?closed=1>`__
+
+* Woodstox `6.6.1 → 6.6.2 <https://github.com/FasterXML/woodstox/milestone/34?closed=1>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* cyclonedx-maven-plugin `2.7.11 → 2.8.0 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.8.0>`__
+
+* git-commit-id-maven-plugin 7.0.0 → 8.0.0, release notes:
+  * `8.0.0 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v8.0.0>`__
+  * `8.0.1 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v8.0.1>`__
+
+* Jacoco Maven plugin `0.8.11 → 0.8.12 <https://github.com/jacoco/jacoco/releases/tag/v0.8.12>`__
+
+* maven-assembly-plugin 3.6.0 → 3.7.1, release notes:
+  * `3.7.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12353243>`__
+  * `3.7.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12354406>`__
+
+* maven-compiler-plugin `2.12.1 → 2.13.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12354079>`__
+
+* maven-deploy-plugin 2.8.2 → 3.1.1, release notes:
+  * `3.0.0-M1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317228&version=12330476>`__
+  * `3.0.0-M2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317228&version=12344166>`__
+  * `3.0.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317228&version=12351654>`__
+  * `3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317228&version=12352181>`__
+  * `3.1.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317228&version=12352894>`__
+
+* maven-install-plugin 2.5.2 → 3.1.1, release notes:
+  * `3.0.0-M1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12334343>`__
+  * `3.0.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12344165>`__
+  * `3.0.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12352096>`__
+  * `3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12352107>`__
+  * `3.1.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12353026>`__
+
+* maven-invoker-plugin `3.6.0 → 3.6.1 <https://github.com/apache/maven-invoker-plugin/releases/tag/maven-invoker-plugin-3.6.1>`__
+
+* maven-jar-plugin `3.3.0 → 3.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317526&version=12352303>`__
+
+* maven-plugin-plugin 3.10.2 → 3.12.0, release notes:
+  * `3.11.0 <https://github.com/apache/maven-plugin-tools/releases/tag/maven-plugin-tools-3.11.0>`__
+  * `3.12.0 <https://github.com/apache/maven-plugin-tools/releases/tag/maven-plugin-tools-3.12.0>`__
+
+* maven-remote-resources-plugin `3.1.0 → 3.2.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317825&version=12353591>`__
+
+* maven-source-plugin `3.3.0 → 3.3.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317924&version=12353471>`__
+
+Version 13.0.11
+---------------
+This is a bug-fix upgrade from version 13.0.10.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* Checkstyle 10.12.6 → 10.14.0, release notes:
+  * `10.12.7 <https://checkstyle.org/releasenotes.html#Release_10.12.7>`__
+  * `10.13.0 <https://checkstyle.org/releasenotes.html#Release_10.13.0>`__
+  * `10.14.0 <https://checkstyle.org/releasenotes.html#Release_10.14.0>`__
+
+* AssertJ 3.24.2 → 3.25.1, release notes:
+  * `3.25.0 <https://github.com/assertj/assertj/releases/tag/assertj-build-3.25.0>`__
+  * `3.25.1 <https://github.com/assertj/assertj/releases/tag/assertj-build-3.25.1>`__
+  * `3.25.2 <https://github.com/assertj/assertj/releases/tag/assertj-build-3.25.2>`__
+  * `3.25.3 <https://github.com/assertj/assertj/releases/tag/assertj-build-3.25.3>`__
+
+* Dropwizard Metrics 4.2.23 → 4.2.25, release notes:
+  * `4.2.24 <https://github.com/dropwizard/metrics/releases/tag/v4.2.24>`__
+  * `4.2.25 <https://github.com/dropwizard/metrics/releases/tag/v4.2.25>`__
+
+* immutables.org `2.10.0 → 2.10.1 <https://github.com/immutables/immutables/releases/tag/2.10.1>`__
+
+* Jackson `2.15.3 → 2.15.4 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.15.4>`__
+
+* Jetty `9.4.52.v20230823 → 9.4.53.v20231009 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.53.v20231009>`__
+
+* JUnit `5.10.1 → 5.10.2 <https://junit.org/junit5/docs/snapshot/release-notes/#release-notes-5.10.2>`__
+
+* Karaf `4.4.4 → 4.4.5 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12353604>`__
+
+* Logback `1.2.12 → 1.2.13 <https://logback.qos.ch/news.html#1.2.13>`__
+
+* Mockito 5.8.0 → 5.11.0, release notes:
+  * `5.9.0 <https://github.com/mockito/mockito/releases/tag/v5.9.0>`__
+  * `5.10.0 <https://github.com/mockito/mockito/releases/tag/v5.10.0>`__
+  * `5.11.0 <https://github.com/mockito/mockito/releases/tag/v5.11.0>`__
+
+* Netty 4.1.104 → 4.1.107, release notes:
+  * `4.1.105 <https://netty.io/news/2024/01/16/4-1-105-Final.html>`__
+  * `4.1.106 <https://netty.io/news/2024/01/19/4-1-106-Final.html>`__
+  * `4.1.107 <https://netty.io/news/2024/02/13/4-1-107-Final.html>`__
+
+* Woodstox 6.5.1 → 6.6.1, release notes:
+  * `6.6.0 <https://github.com/FasterXML/woodstox/milestone/31?closed=1>`__
+  * `6.6.1 <https://github.com/FasterXML/woodstox/milestone/33?closed=1>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* asciidoctor-jdiagram `2.2.14 → 2.2.17 <https://github.com/asciidoctor/asciidoctorj-diagram/releases/tag/v2.2.17>`__
+
+* asciidoctor-maven-plugin 2.2.4 → 2.2.6, release notes:
+  * `2.2.5 <https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-2.2.5>`__
+  * `2.2.6 <https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-2.2.6>`__
+
+* cyclonedx-maven-plugin `2.7.10 → 2.7.11 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.11>`__
+
+* exec-maven-plugin `3.1.1 → 3.2.0 <https://github.com/mojohaus/exec-maven-plugin/releases/tag/exec-maven-plugin-3.2.0>`__
+
+* maven-shade-plugin `3.5.1 → 3.5.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317921&version=12352505>`__
+
+* maven-surefire-plugin `3.2.3 → 3.2.5 <https://github.com/apache/maven-surefire/releases/tag/surefire-3.2.5>`__
+
+* spotbugs-maven-plugin 4.8.2.0 → 4.8.3.1, release notes:
+  * `4.8.3.0 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.8.3.0>`__
+  * `4.8.3.1 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.8.3.1>`__
+
+Version 13.0.10
+---------------
+This is a bug-fix upgrade from version 13.0.9.
+
+Bug fixes
+~~~~~~~~~
+* Previous upgrade of ``commons-lang3`` caused duplicate packaging against. This has been fixed.
+
+Improvements
+~~~~~~~~~~~~
+* The SpotBugs upgrade to 4.8.2+ is more touching about ``CT_CONSTRUCTOR_THROW``. Fixing these is quite verbose
+  and flaky. This release globally disables this check.
+
+* Single Feature Test is now enabled for all Java versions <= 21.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* checker-qual 3.41.0 → 3.42.0
+
+* Dropwizard Metrics `4.2.22 → 4.2.23 <https://github.com/dropwizard/metrics/releases/tag/v4.2.23>`__
+
+* Javassist 3.29.2-GA → 3.30.2-GA, release notes:
+  * `3.30.0-GA <https://github.com/jboss-javassist/javassist/releases/tag/rel_3_30_0_ga>`__
+  * `3.30.1-GA <https://github.com/jboss-javassist/javassist/releases/tag/rel_3_30_1_ga>`__
+  * `3.30.2-GA <https://github.com/jboss-javassist/javassist/releases/tag/rel_3_30_2_ga>`__
+
+* Netty 4.1.101 → 4.1.104, release notes:
+  * `4.1.103 <https://netty.io/news/2023/12/13/4-1-103-Final.html>`__
+  * `4.1.104 <https://netty.io/news/2023/12/15/4-1-104-Final.html>`__
+
+* jdt-annotations 2.2.700 → 2.2.800
+
+* SpotBugs `4.8.2 → 4.8.3 <https://github.com/spotbugs/spotbugs/releases/tag/4.8.3>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* asciidoctor-jdiagram `2.2.13 → 2.2.14 <https://github.com/asciidoctor/asciidoctorj-diagram/releases/tag/v2.2.14>`__
+
+* maven-compiler-plugin 3.11.0 → 3.12.1, release notes:
+  * `3.12.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12353748>`__
+  * `3.12.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12354061>`__
+
+* maven-surefire-plugin `3.2.2 → 3.2.3 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12353823>`__
+
+Version 13.0.9
+--------------
+This is a bug-fix upgrade from version 13.0.8.
+
+Bug fixes
+~~~~~~~~~
+* The SpotBugs upgrade to 4.8.2 ends up emitting a lot of ``SE_PREVENT_EXT_OBJ_OVERWRITE`` violations, which cannot
+  be sanely fixed. This check is now globally disabled.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* Checkstyle `10.12.5 → 10.12.6 <https://checkstyle.org/releasenotes.html#Release_10.12.6>`__
+
 Version 13.0.8
 --------------
 This is a bug-fix upgrade from version 13.0.7.