Update NEWS for 13.1.0
[odlparent.git] / docs / NEWS.rst
index 8ec6930e72fcdcd8abe1809190966e8df898f0ef..cc9f54d10effdf5beb174c39dda2ddcba9c7adfa 100644 (file)
@@ -2,6 +2,510 @@
 ODL Parent release notes
 ========================
 
+Version 13.1.0
+--------------
+This is a bug-fix/feature upgrade from version 13.0.11.
+
+Improvements and new features
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+* ``SingleFeatureTest`` is now executed by a dedicated Maven plugin, leading to faster execution times and better
+  multi-threaded behaviour.
+  See `ODLPARENT-262 <https://jira.opendaylight.org/browse/ODLPARENT-262>`__ for more information.
+* ``sporbugs-maven-plugin`` now runs with ``spotbugs.fork=false``. This setting improves build time by removing
+  the need to warm up a JVM for each SpotBugs analysis.
+* Apache Derby is now excluded from PAX JDBC features due to a vulnerability which is not fixed in a suitable
+  release. See `ODLPARENT-262 <https://jira.opendaylight.org/browse/ODLPARENT-306>`__ for more information.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* Checkstyle 10.14.0 → 10.15.0, release notes:
+  * `10.14.1 <https://checkstyle.org/releasenotes.html#Release_10.14.1>`__
+  * `10.14.2 <https://checkstyle.org/releasenotes.html#Release_10.14.2>`__
+  * `10.15.0 <https://checkstyle.org/releasenotes.html#Release_10.15.0>`__
+
+* commons-io `2.15.1 → 2.16.0 <https://commons.apache.org/proper/commons-io/changes-report.html#a2.16.0>`__
+
+* error_prone_annotations 2.25.0 → 2.26.1, release notes:
+  * `2.26.0 <https://github.com/google/error-prone/releases/tag/v2.26.0>`__
+  * `2.26.1 <https://github.com/google/error-prone/releases/tag/v2.26.1>`__
+
+* Jackson 2.15.3 → 2.16.2, release notes:
+  * `2.16 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.16>`__
+  * `2.16.1 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.16.1>`__
+  * `2.16.2 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.16.2>`__
+
+* Jetty `9.4.53.v20231009 → 9.4.54.v20240208 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.54.v20240208>`__
+
+* jdt-annotations `2.2.800 → 2.3.0 <https://github.com/eclipse-jdt/eclipse.jdt.core/pull/1716>`__
+
+* Jersey `2.41 → 2.42 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.42>`__
+
+* Karaf `4.4.5 → 4.4.6 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12354057>`__
+
+* Netty `4.1.107 → 4.1.108 <https://netty.io/news/2024/03/21/4-1-108-Final.html>`__
+
+* Pax JDBC `1.5.6 → 1.5.7 <https://github.com/ops4j/org.ops4j.pax.jdbc/milestone/33?closed=1>`__
+
+* Woodstox `6.6.1 → 6.6.2 <https://github.com/FasterXML/woodstox/milestone/34?closed=1>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* cyclonedx-maven-plugin `2.7.11 → 2.8.0 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.8.0>`__
+
+* git-commit-id-maven-plugin 7.0.0 → 8.0.0, release notes:
+  * `8.0.0 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v8.0.0>`__
+  * `8.0.1 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v8.0.1>`__
+
+* Jacoco Maven plugin `0.8.11 → 0.8.12 <https://github.com/jacoco/jacoco/releases/tag/v0.8.12>`__
+
+* maven-assembly-plugin 3.6.0 → 3.7.1, release notes:
+  * `3.7.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12353243>`__
+  * `3.7.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317220&version=12354406>`__
+
+* maven-compiler-plugin `2.12.1 → 2.13.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12354079>`__
+
+* maven-deploy-plugin 2.8.2 → 3.1.1, release notes:
+  * `3.0.0-M1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317228&version=12330476>`__
+  * `3.0.0-M2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317228&version=12344166>`__
+  * `3.0.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317228&version=12351654>`__
+  * `3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317228&version=12352181>`__
+  * `3.1.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317228&version=12352894>`__
+
+* maven-install-plugin 2.5.2 → 3.1.1, release notes:
+  * `3.0.0-M1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12334343>`__
+  * `3.0.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12344165>`__
+  * `3.0.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12352096>`__
+  * `3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12352107>`__
+  * `3.1.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12353026>`__
+
+* maven-invoker-plugin `3.6.0 → 3.6.1 <https://github.com/apache/maven-invoker-plugin/releases/tag/maven-invoker-plugin-3.6.1>`__
+
+* maven-jar-plugin `3.3.0 → 3.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317526&version=12352303>`__
+
+* maven-plugin-plugin 3.10.2 → 3.12.0, release notes:
+  * `3.11.0 <https://github.com/apache/maven-plugin-tools/releases/tag/maven-plugin-tools-3.11.0>`__
+  * `3.12.0 <https://github.com/apache/maven-plugin-tools/releases/tag/maven-plugin-tools-3.12.0>`__
+
+* maven-remote-resources-plugin `3.1.0 → 3.2.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317825&version=12353591>`__
+
+* maven-source-plugin `3.3.0 → 3.3.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317924&version=12353471>`__
+
+Version 13.0.11
+---------------
+This is a bug-fix upgrade from version 13.0.10.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* Checkstyle 10.12.6 → 10.14.0, release notes:
+  * `10.12.7 <https://checkstyle.org/releasenotes.html#Release_10.12.7>`__
+  * `10.13.0 <https://checkstyle.org/releasenotes.html#Release_10.13.0>`__
+  * `10.14.0 <https://checkstyle.org/releasenotes.html#Release_10.14.0>`__
+
+* AssertJ 3.24.2 → 3.25.1, release notes:
+  * `3.25.0 <https://github.com/assertj/assertj/releases/tag/assertj-build-3.25.0>`__
+  * `3.25.1 <https://github.com/assertj/assertj/releases/tag/assertj-build-3.25.1>`__
+  * `3.25.2 <https://github.com/assertj/assertj/releases/tag/assertj-build-3.25.2>`__
+  * `3.25.3 <https://github.com/assertj/assertj/releases/tag/assertj-build-3.25.3>`__
+
+* Dropwizard Metrics 4.2.23 → 4.2.25, release notes:
+  * `4.2.24 <https://github.com/dropwizard/metrics/releases/tag/v4.2.24>`__
+  * `4.2.25 <https://github.com/dropwizard/metrics/releases/tag/v4.2.25>`__
+
+* immutables.org `2.10.0 → 2.10.1 <https://github.com/immutables/immutables/releases/tag/2.10.1>`__
+
+* Jackson `2.15.3 → 2.15.4 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.15.4>`__
+
+* Jetty `9.4.52.v20230823 → 9.4.53.v20231009 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.53.v20231009>`__
+
+* JUnit `5.10.1 → 5.10.2 <https://junit.org/junit5/docs/snapshot/release-notes/#release-notes-5.10.2>`__
+
+* Karaf `4.4.4 → 4.4.5 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12353604>`__
+
+* Logback `1.2.12 → 1.2.13 <https://logback.qos.ch/news.html#1.2.13>`__
+
+* Mockito 5.8.0 → 5.11.0, release notes:
+  * `5.9.0 <https://github.com/mockito/mockito/releases/tag/v5.9.0>`__
+  * `5.10.0 <https://github.com/mockito/mockito/releases/tag/v5.10.0>`__
+  * `5.11.0 <https://github.com/mockito/mockito/releases/tag/v5.11.0>`__
+
+* Netty 4.1.104 → 4.1.107, release notes:
+  * `4.1.105 <https://netty.io/news/2024/01/16/4-1-105-Final.html>`__
+  * `4.1.106 <https://netty.io/news/2024/01/19/4-1-106-Final.html>`__
+  * `4.1.107 <https://netty.io/news/2024/02/13/4-1-107-Final.html>`__
+
+* Woodstox 6.5.1 → 6.6.1, release notes:
+  * `6.6.0 <https://github.com/FasterXML/woodstox/milestone/31?closed=1>`__
+  * `6.6.1 <https://github.com/FasterXML/woodstox/milestone/33?closed=1>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* asciidoctor-jdiagram `2.2.14 → 2.2.17 <https://github.com/asciidoctor/asciidoctorj-diagram/releases/tag/v2.2.17>`__
+
+* asciidoctor-maven-plugin 2.2.4 → 2.2.6, release notes:
+  * `2.2.5 <https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-2.2.5>`__
+  * `2.2.6 <https://github.com/asciidoctor/asciidoctor-maven-plugin/releases/tag/asciidoctor-maven-plugin-2.2.6>`__
+
+* cyclonedx-maven-plugin `2.7.10 → 2.7.11 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.11>`__
+
+* exec-maven-plugin `3.1.1 → 3.2.0 <https://github.com/mojohaus/exec-maven-plugin/releases/tag/exec-maven-plugin-3.2.0>`__
+
+* maven-shade-plugin `3.5.1 → 3.5.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317921&version=12352505>`__
+
+* maven-surefire-plugin `3.2.3 → 3.2.5 <https://github.com/apache/maven-surefire/releases/tag/surefire-3.2.5>`__
+
+* spotbugs-maven-plugin 4.8.2.0 → 4.8.3.1, release notes:
+  * `4.8.3.0 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.8.3.0>`__
+  * `4.8.3.1 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.8.3.1>`__
+
+Version 13.0.10
+---------------
+This is a bug-fix upgrade from version 13.0.9.
+
+Bug fixes
+~~~~~~~~~
+* Previous upgrade of ``commons-lang3`` caused duplicate packaging against. This has been fixed.
+
+Improvements
+~~~~~~~~~~~~
+* The SpotBugs upgrade to 4.8.2+ is more touching about ``CT_CONSTRUCTOR_THROW``. Fixing these is quite verbose
+  and flaky. This release globally disables this check.
+
+* Single Feature Test is now enabled for all Java versions <= 21.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* checker-qual 3.41.0 → 3.42.0
+
+* Dropwizard Metrics `4.2.22 → 4.2.23 <https://github.com/dropwizard/metrics/releases/tag/v4.2.23>`__
+
+* Javassist 3.29.2-GA → 3.30.2-GA, release notes:
+  * `3.30.0-GA <https://github.com/jboss-javassist/javassist/releases/tag/rel_3_30_0_ga>`__
+  * `3.30.1-GA <https://github.com/jboss-javassist/javassist/releases/tag/rel_3_30_1_ga>`__
+  * `3.30.2-GA <https://github.com/jboss-javassist/javassist/releases/tag/rel_3_30_2_ga>`__
+
+* Netty 4.1.101 → 4.1.104, release notes:
+  * `4.1.103 <https://netty.io/news/2023/12/13/4-1-103-Final.html>`__
+  * `4.1.104 <https://netty.io/news/2023/12/15/4-1-104-Final.html>`__
+
+* jdt-annotations 2.2.700 → 2.2.800
+
+* SpotBugs `4.8.2 → 4.8.3 <https://github.com/spotbugs/spotbugs/releases/tag/4.8.3>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* asciidoctor-jdiagram `2.2.13 → 2.2.14 <https://github.com/asciidoctor/asciidoctorj-diagram/releases/tag/v2.2.14>`__
+
+* maven-compiler-plugin 3.11.0 → 3.12.1, release notes:
+  * `3.12.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12353748>`__
+  * `3.12.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317225&version=12354061>`__
+
+* maven-surefire-plugin `3.2.2 → 3.2.3 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12353823>`__
+
+Version 13.0.9
+--------------
+This is a bug-fix upgrade from version 13.0.8.
+
+Bug fixes
+~~~~~~~~~
+* The SpotBugs upgrade to 4.8.2 ends up emitting a lot of ``SE_PREVENT_EXT_OBJ_OVERWRITE`` violations, which cannot
+  be sanely fixed. This check is now globally disabled.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* Checkstyle `10.12.5 → 10.12.6 <https://checkstyle.org/releasenotes.html#Release_10.12.6>`__
+
+Version 13.0.8
+--------------
+This is a bug-fix upgrade from version 13.0.7.
+
+Improvements and new features
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+* ``single-feature-test`` now supports injection of test-only feature dependencies. This allows testing features
+  which require externally-provided dependencies to complete their wiring.
+  See `ODLPARENT-257 <https://jira.opendaylight.org/browse/ODLPARENT-257>`__ for more information.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* Bouncy Castle `1.76 → 1.77 <https://www.bouncycastle.org/releasenotes.html#r1rv77>`__
+
+* checker-qual 3.39.0 → 3.41.0
+
+* Checkstyle `10.12.4 → 10.12.5 <https://checkstyle.org/releasenotes.html#Release_10.12.5>`__
+
+* commons-io `2.15.0 → 2.15.1 <https://commons.apache.org/proper/commons-io/changes-report.html#a2.15.1>`__
+
+* commons-lang3 `3.13.0 → 3.14.0 <https://commons.apache.org/proper/commons-lang/changes-report.html#a3.14.0>`__
+
+* Dropwizard Metrics 4.2.20 → 4.2.22, release notes:
+  * `4.2.21 <https://github.com/dropwizard/metrics/releases/tag/v4.2.21>`__
+  * `4.2.22 <https://github.com/dropwizard/metrics/releases/tag/v4.2.22>`__
+
+* JUnit `5.10.0 → 5.10.1 <https://junit.org/junit5/docs/snapshot/release-notes/#release-notes-5.10.1>`__
+
+* Mockito 5.6.0 → 5.8.0, release notes:
+  * `5.7.0 <https://github.com/mockito/mockito/releases/tag/v5.7.0>`__
+  * `5.8.0 <https://github.com/mockito/mockito/releases/tag/v5.8.0>`__
+
+* Netty `4.1.100 → 4.1.101 <https://netty.io/news/2023/11/09/4-1-101-Final.html>`__
+
+* SpotBugs 4.7.3 → 4.8.2, release notes:
+  * `4.8.0 <https://github.com/spotbugs/spotbugs/releases/tag/4.8.0>`__
+  * `4.8.1 <https://github.com/spotbugs/spotbugs/releases/tag/4.8.1>`__
+  * `4.8.2 <https://github.com/spotbugs/spotbugs/releases/tag/4.8.2>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* builder-helper-maven-plugin `3.4.0 → 3.5.0 <https://github.com/mojohaus/build-helper-maven-plugin/releases/tag/build-helper-maven-plugin-3.5.0>`__
+
+* cyclonedx-maven-plugin `2.7.9 → 2.7.10 <https://github.com/CycloneDX/cyclonedx-maven-plugin/releases/tag/cyclonedx-maven-plugin-2.7.10>`__
+
+* exec-maven-plugin `3.1.0 → 3.1.1 <https://github.com/mojohaus/exec-maven-plugin/releases/tag/exec-maven-plugin-3.1.1>`__
+
+* maven-javadoc-plugin 3.6.0 → 3.6.3, release notes:
+  * `3.6.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12353815>`__
+  * `3.6.3 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12353857>`__
+
+* maven-plugin-plugin 3.8.2 → 3.10.1, release notes:
+  * `3.9.0 <https://issues.apache.org/jira/projects/MPLUGIN/versions/12353224>`__
+  * `3.10.1 <https://issues.apache.org/jira/projects/MPLUGIN/versions/12353716>`__
+  * `3.10.2 <https://issues.apache.org/jira/projects/MPLUGIN/versions/12353719>`__
+
+* maven-project-info-reports-plugin `3.4.5 → 3.5.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12353875>`__
+
+* maven-surefire-plugin `3.2.1 → 3.2.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12353764>`__
+
+* spotbugs-maven-plugin 4.7.3.6 → 4.8.2.0, release notes:
+  * `4.8.1.0 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.8.1.0>`__
+  * `4.8.2.0 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.8.2.0>`__
+
+* versions-maven-plugin `2.16.1 → 2.16.2 <https://github.com/mojohaus/versions/releases/tag/2.16.2>`__
+
+Version 13.0.7
+--------------
+This is a bug-fix upgrade from version 13.0.6.
+
+Bug fixes
+~~~~~~~~~
+The Dropwizard Metrics upgrade to 4.2.21 ends up making ``metics-graphite`` failing to load
+in Karaf. This has been rectified by reverting back to 4.2.20.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* commons-io 2.13.0 → 2.15.0, release notes:
+  * `2.14.0 <https://commons.apache.org/proper/commons-io/changes-report.html#a2.14.0>`__
+  * `2.15.0 <https://commons.apache.org/proper/commons-io/changes-report.html#a2.15.0>`__
+
+* commons-text `1.10.0 → 1.11.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318221&version=12352347>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* git-commit-id-maven-plugin `6.0.0 → 7.0.0 <https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v7.0.0>`__
+
+* maven-checkstyle-plugin `3.3.0 → 3.3.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317223&version=12352729>`__
+
+* maven-clean-plugin `3.3.1 → 3.3.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317224&version=12353735>`__
+
+* maven-dependency-plugin `3.6.0 → 3.6.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227&version=12353360>`__
+
+* maven-surefire-plugin `3.1.2 → 3.2.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12353730>`__
+
+* properties-maven-plugin `1.2.0 → 1.2.1 <https://github.com/mojohaus/properties-maven-plugin/releases/tag/1.2.1>`__
+
+Version 13.0.6
+--------------
+This is a bug-fix upgrade from version 13.0.5.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* checker-qual 3.38.0 → 3.39.0
+
+* Checkstyle `10.12.3 → 10.12.4 <https://checkstyle.org/releasenotes.html#Release_10.12.4>`__
+
+* Dropwizard Metrics `4.2.20 → 4.2.21 <https://github.com/dropwizard/metrics/releases/tag/v4.2.21>`__
+
+* Guava `32.1.2 → 32.1.3 <https://github.com/google/guava/releases/tag/v32.1.3>`__
+
+* immutables.org `2.9.3 → 2.10.0 <https://github.com/immutables/immutables/releases/tag/2.10.0>`__
+
+* Jackson `2.15.2 → 2.15.3 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.15.3>`__
+
+* Jersey `2.40 → 2.41 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.41>`__
+
+* Log4J `2.17.1 → 2.17.2 <https://logging.apache.org/log4j/2.x/release-notes/2.17.2.html>`__
+
+* Logback `1.2.11 → 1.2.12 <https://logback.qos.ch/news.html#1.2.12>`__
+
+* Mockito `5.5.0 → 5.6.0 <https://github.com/mockito/mockito/releases/tag/v5.6.0>`__
+
+* Netty `4.1.99 → 4.1.100 <https://netty.io/news/2023/10/10/4-1-100-Final.html>`__
+
+* stax2-api `4.2.1 → 4.2.2 <https://github.com/FasterXML/stax2-api/blob/master/release-notes/VERSION>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* bnd-maven-plugin `6.4.0 → 7.0.0 <https://github.com/bndtools/bnd/wiki/Changes-in-7.0.0>`__
+
+* Jacoco Maven plugin `0.8.10 → 0.8.11 <https://github.com/jacoco/jacoco/releases/tag/v0.8.11>`__
+
+Version 13.0.5
+--------------
+This is a bug-fix upgrade from version 13.0.4.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* Antlr `4.13.0 → 4.13.1 <https://github.com/antlr/antlr4/releases/tag/4.13.1>`__
+
+* checker-qual 3.37.0 → 3.38.0
+
+* Dropwizard Metrics `4.2.19 → 4.2.20 <https://github.com/dropwizard/metrics/releases/tag/v4.2.20>`__
+
+* Jetty 9.4.50.v20221201 → 9.4.52.v20230823, release notes:
+  * `9.4.51.v20230217 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.51.v20230217>`__
+  * `9.4.52.v20230823 <https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.52.v20230823>`__
+
+* Karaf `4.4.3 → 4.4.4 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311140&version=12352693>`__
+
+* Netty 4.1.97 → 4.1.99, release notes:
+  * `4.1.98 <https://netty.io/news/2023/09/21/4-1-98-Final.html>`__
+  * `4.1.99 <https://netty.io/news/2023/09/21/4-1-99-Final.html>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* asciidoctor-jdiagram `2.2.11 → 2.2.13 <https://github.com/asciidoctor/asciidoctorj-diagram/releases/tag/v2.2.13>`__
+
+* maven-enforcer-plugin `3.4.0 → 3.4.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317520&version=12353576>`__
+
+* maven-javadoc-plugin `3.5.0 → 3.6.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317529&version=12352956>`__
+
+* maven-share-plugin `3.5.0 → 3.5.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317921&version=12353341>`__
+
+* modernizer-maven-plugin `2.6.0 → 2.7.0 <https://github.com/gaul/modernizer-maven-plugin/releases/tag/modernizer-maven-plugin-2.7.0>`__
+
+* spotbugs-maven-plugin `4.7.3.5 → 4.7.3.6 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.3.6>`__
+
+* versions-maven-plugin `2.16.0 → 2.16.1 <https://github.com/mojohaus/versions/releases/tag/2.16.1>`__
+
+Version 13.0.4
+--------------
+This is a bug-fix upgrade from version 13.0.3.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* Bouncy Castle `1.75 → 1.76 <https://www.bouncycastle.org/releasenotes.html#r1rv76>`__
+
+* checker-qual 3.35.0 → 3.37.0
+
+* commons-lang3 `3.12.0 → 3.13.0 <https://commons.apache.org/proper/commons-lang/changes-report.html#a3.13.0>`__
+
+* Checkstyle 10.12.0 → 10.12.3, release notes:
+  * `10.12.1 <https://checkstyle.org/releasenotes.html#Release_10.12.1>`__
+  * `10.12.2 <https://checkstyle.org/releasenotes.html#Release_10.12.2>`__
+  * `10.12.3 <https://checkstyle.org/releasenotes.html#Release_10.12.3>`__
+
+* Guava 32.0.1 → 32.1.2, release notes:
+  * `32.1.0 <https://github.com/google/guava/releases/tag/v32.1.0>`__
+  * `32.1.1 <https://github.com/google/guava/releases/tag/v32.1.1>`__
+  * `32.1.2 <https://github.com/google/guava/releases/tag/v32.1.2>`__
+
+* JUnit `5.9.3 → 5.10.0 <https://junit.org/junit5/docs/snapshot/release-notes/#release-notes-5.10.0>`__
+
+* Mockito `5.4.0 → 5.5.0 <https://github.com/mockito/mockito/releases/tag/v5.5.0>`__
+
+* Netty 4.1.94 → 4.1.97, release notes:
+  * `4.1.95 <https://netty.io/news/2023/07/20/4-1-95-Final.html>`__
+  * `4.1.96 <https://netty.io/news/2023/07/27/4-1-96-Final.html>`__
+  * `4.1.97 <https://netty.io/news/2023/08/23/4-1-97-Final.html>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* asciidoctor-jdiagram 2.2.9 → 2.2.11, release notes:
+  * `2.2.10 <https://github.com/asciidoctor/asciidoctorj-diagram/releases/tag/v2.2.10>`__
+  * `2.2.11 <https://github.com/asciidoctor/asciidoctorj-diagram/releases/tag/v2.2.11>`__
+
+* depends-maven-plugin `1.4.0 → 1.5.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311206&version=12339645>`__
+
+* maven-enforcer-plugin `3.3.0 → 3.4.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317520&version=12353101>`__
+
+* maven-remote-resources-plugin `3.0.0 → 3.1.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317825&version=12352115>`__
+
+* metainf-services 1.9 → 1.11
+
+* properties-maven-plugin `1.1.0 → 1.2.0 <https://github.com/mojohaus/properties-maven-plugin/releases/tag/1.2.0>`__
+
+Version 13.0.3
+--------------
+This is a bug-fix upgrade from version 13.0.2.
+
+Bug fixes
+~~~~~~~~~
+* The upgrade of ``javax.inject`` to ``1.2.2.1`` is a silent switch to Jakarta EE and has been rolled back
+  to version ``1.0.20.2``.
+
+Version 13.0.2
+--------------
+This is a bug-fix upgrade from version 13.0.1.
+
+Third-party dependencies
+~~~~~~~~~~~~~~~~~~~~~~~~
+* Antlr `4.12.0 → 4.13.0 <https://github.com/antlr/antlr4/releases/tag/4.13.0>`__
+
+* Bouncy Castle 1.73 → 1.75, release notes:
+  * `1.74 <https://www.bouncycastle.org/releasenotes.html#r1rv74>`__
+  * `1.75 <https://www.bouncycastle.org/releasenotes.html#r1rv75>`__
+
+* checker-qual 3.34.0 → 3.35.0
+
+* commons-io `2.12.0 → 2.13.0, <https://commons.apache.org/proper/commons-io/changes-report.html#a2.13.0>`__
+
+* Dropwizard Metrics `4.2.18 → 4.2.19 <https://github.com/dropwizard/metrics/releases/tag/v4.2.19>`__
+
+* Guava `32.0.0 → 32.0.1 <https://github.com/google/guava/releases/tag/v32.0.1>`__
+
+* Jackson `2.15.1 → 2.15.2 <https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.15.2>`__
+
+* Jersey `2.39.1 → 2.40 <https://github.com/eclipse-ee4j/jersey/releases/tag/2.40>`__
+
+* javax.inject 1.0.20.0 → 1.2.2.1
+
+* Mockito `5.3.1 → 5.4.0 <https://github.com/mockito/mockito/releases/tag/v5.4.0>`__
+
+* Netty `4.1.93 → 4.1.94 <https://netty.io/news/2023/06/19/4-1-94-Final.html>`__
+
+Plugin upgrades
+~~~~~~~~~~~~~~~
+* asciidoctor-jdiagram `2.2.8 → 2.2.9 <https://github.com/asciidoctor/asciidoctorj-diagram/releases/tag/v2.2.9>`__
+
+* duplicate-finder-maven-plugin 1.5.1 → 2.0.1, release notes:
+  * `2.0.0 <https://github.com/basepom/duplicate-finder-maven-plugin/blob/main/CHANGES.md#200---2023-05-21>`__
+  * `2.0.1 <https://github.com/basepom/duplicate-finder-maven-plugin/blob/main/CHANGES.md#201---2023-05-28>`__
+
+* echo-maven-plugin `2.0.1 → 2.1.0 <https://github.com/Ekryd/echo-maven-plugin/releases/tag/echo-plugin-2.1.0>`__
+
+* maven-clean-plugin `3.2.0 → 3.3.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317224&version=12351541>`__
+
+* maven-invoker-plugin `3.5.1 → 3.6.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317525&version=12353076>`__
+
+* maven-project-info-reports-plugin 3.4.3 → 3.4.5, release notes:
+  * `3.4.4 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12353222>`__
+  * `3.4.5 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317821&version=12353297>`__
+
+* maven-release-plugin 2.5.3 → 3.0.1, release notes:
+  * `3.0.0-M1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317824&version=12331214>`__
+  * `3.0.0-M4 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317824&version=12348079>`__
+  * `3.0.0-M5 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317824&version=12346565>`__
+  * `3.0.0-M6 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317824&version=12351336>`__
+  * `3.0.0-M7 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317824&version=12351828>`__
+  * `3.0.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317824&version=12352981>`__
+  * `3.0.1 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317824&version=12353136>`__
+
+* maven-shade-plugin `3.4.1 → 3.5.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317921&version=12352951>`__
+
+* maven-surefire-plugin `3.1.0 → 3.1.2 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317927&version=12353294>`__
+
+* spotbugs-maven-plugin `4.7.3.4 → 4.7.3.5 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.3.5>`__
+
+* versions-maven-plugin `2.15.0 → 2.16.0 <https://github.com/mojohaus/versions/releases/tag/2.16.0>`__
+
 Version 13.0.1
 --------------
 This is a bug-fix upgrade from version 13.0.0.
@@ -336,7 +840,7 @@ Plugin upgrades
 
 * maven-remote-resources-plugin `1.7.0 → 3.0.0 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317825&version=12346864>`__
 
-* properties-maven-plugin 1.0.0 → 1.1.0
+* properties-maven-plugin `1.0.0 → 1.1.0 <https://github.com/mojohaus/properties-maven-plugin/releases/tag/properties-maven-plugin-1.1.0>`__
 
 * spotbugs-maven-plugin `4.7.2.2 → 4.7.3.0 <https://github.com/spotbugs/spotbugs-maven-plugin/releases/tag/spotbugs-maven-plugin-4.7.3.0>`__
 
@@ -1099,7 +1603,7 @@ Third-party dependencies
   * `8.41.0 <https://checkstyle.org/releasenotes.html#Release_8.41.0>`__
   * `8.41.1 <https://checkstyle.org/releasenotes.html#Release_8.41.1>`__
 
-* commons-lang3 `3.11 → 3.12 <https://commons.apache.org/proper/commons-lang/changes-report.html#a3.12>`__
+* commons-lang3 `3.11 → 3.12.0 <https://commons.apache.org/proper/commons-lang/changes-report.html#a3.12.0>`__
 
 * Dropwizard Metrics 4.1.12.1 → 4.1.19, release notes:
   * `4.1.13 <https://github.com/dropwizard/metrics/releases/tag/v4.1.13>`__