Bump version.maven3resolver from 1.9.27 to 2.0.24 by dependabot[bot] · Pull Request #63 · apache/maven-executor

dependabot · 2026-10-02T07:05:15Z

Bumps version.maven3resolver from 1.9.27 to 2.0.24.
Updates org.apache.maven.resolver:maven-resolver-api from 1.9.27 to 2.0.24

Release notes

Sourced from org.apache.maven.resolver:maven-resolver-api's releases.

2.0.24

🚀 New features and improvements

Fix PathConflictResolver OOM on dense dependency graphs (#2153) @gnodet

🐛 Bug Fixes

Fix flaky IpcClientForkedTest on Windows (#2166) @jiteshkhatri11

fix: synchronize IPC stream access (#2163) @efegokdemir

fix: propagate fatal errors from Jetty request content (#2161) @efegokdemir

Use structured logging in the IPC server (#2157) @efegokdemir

[MRESOLVER-2142] - Increase HTTP3 port allocation retries (#2150) @jiteshkhatri11

Honor system proxy credentials in Apache transport (#2148) @goutamadwant

📝 Documentation updates

docs: rewrite how-resolver-works.md to STE rules (#2046) @elharo

docs: refresh resolver misconception references (#2158) @efegokdemir

docs: clarify checksum trust boundaries (#2162) @efegokdemir

fix: correct config filename to .mvn/maven.config (#2152) @algomaster99

Use configuration key as link label (#2147) @kwin

📦 Dependency updates

Bump org.apache.maven:maven-parent from 49 to 50 (#2155) @dependabot[bot]

Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 (#2145) @dependabot[bot]

Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 (#2144) @dependabot[bot]

Bump dev.sigstore:sigstore-java from 2.2.0 to 2.3.0 (#2141) @dependabot[bot]

2.0.23

🚀 New features and improvements

Finish the repo key story (#2135) @cstamas

Fix: log only once the warning in DefRemoteRepoMan (#2100) @cstamas

Fix #2058: Add links to configuration page (#2060) @Jamison929611

Eliminate per-node HashSet allocation in PathConflictResolver (#2075) @gnodet

🐛 Bug Fixes

fix: accept locally cached artifacts via same-id fallback when tracking URL changes (#2133) @gnodet

Fix listener error swallowing (#1990), SyncContext double-close (#1992), and test flakiness (#1350) (#2108) @slachiewicz

[MRESOLVER-379] - Preserve relocated candidates from version ranges (#2114) @jjj-n

Create the local repository directory before resolving its real path (#2111) @slachiewicz

Optimize TrackingFileManager unit tests and fix potential lock leaks (#2094) (#2102) @slachiewicz

Validate the repository key used in checksum summary file names (#2099) @slachiewicz

fix: bound response reads and sanitize remote-derived strings (#2081) @gnodet

fix: earn trust labels through verification and bind tracking to URL (#2080) @gnodet

fix: bind credentials to origin and reject TLS downgrade redirects (#2085) @gnodet

... (truncated)

Commits

a9dc495 [maven-release-plugin] prepare release maven-resolver-2.0.24
75d5855 Fix flaky forked IPC client test (#2166)
ab99a6d docs: rewrite how-resolver-works.md to STE rules (#2046)
e372e8b Fix PathConflictResolver OOM on dense dependency graphs (#2153)
7a141f8 fix: synchronize IPC stream access (#2163)
ea75240 fix: propagate fatal errors from Jetty request content (#2161)
26b4de3 Use structured logging in the IPC server (#2157)
7c17f06 [MRESOLVER-2142] Increase HTTP3 port allocation retries (#2150)
1e41e1e Honor system proxy credentials in Apache transport (#2148)
2b510a5 docs: refresh resolver misconception references (#2158)
Additional commits viewable in compare view

Updates org.apache.maven.resolver:maven-resolver-spi from 1.9.27 to 2.0.24

Release notes

Sourced from org.apache.maven.resolver:maven-resolver-spi's releases.

2.0.24

🚀 New features and improvements

Fix PathConflictResolver OOM on dense dependency graphs (#2153) @gnodet

🐛 Bug Fixes

Fix flaky IpcClientForkedTest on Windows (#2166) @jiteshkhatri11

fix: synchronize IPC stream access (#2163) @efegokdemir

fix: propagate fatal errors from Jetty request content (#2161) @efegokdemir

Use structured logging in the IPC server (#2157) @efegokdemir

[MRESOLVER-2142] - Increase HTTP3 port allocation retries (#2150) @jiteshkhatri11

Honor system proxy credentials in Apache transport (#2148) @goutamadwant

📝 Documentation updates

docs: rewrite how-resolver-works.md to STE rules (#2046) @elharo

docs: refresh resolver misconception references (#2158) @efegokdemir

docs: clarify checksum trust boundaries (#2162) @efegokdemir

fix: correct config filename to .mvn/maven.config (#2152) @algomaster99

Use configuration key as link label (#2147) @kwin

📦 Dependency updates

Bump org.apache.maven:maven-parent from 49 to 50 (#2155) @dependabot[bot]

Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 (#2145) @dependabot[bot]

Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 (#2144) @dependabot[bot]

Bump dev.sigstore:sigstore-java from 2.2.0 to 2.3.0 (#2141) @dependabot[bot]

2.0.23

🚀 New features and improvements

Finish the repo key story (#2135) @cstamas

Fix: log only once the warning in DefRemoteRepoMan (#2100) @cstamas

Fix #2058: Add links to configuration page (#2060) @Jamison929611

Eliminate per-node HashSet allocation in PathConflictResolver (#2075) @gnodet

🐛 Bug Fixes

fix: accept locally cached artifacts via same-id fallback when tracking URL changes (#2133) @gnodet

Fix listener error swallowing (#1990), SyncContext double-close (#1992), and test flakiness (#1350) (#2108) @slachiewicz

[MRESOLVER-379] - Preserve relocated candidates from version ranges (#2114) @jjj-n

Create the local repository directory before resolving its real path (#2111) @slachiewicz

Optimize TrackingFileManager unit tests and fix potential lock leaks (#2094) (#2102) @slachiewicz

Validate the repository key used in checksum summary file names (#2099) @slachiewicz

fix: bound response reads and sanitize remote-derived strings (#2081) @gnodet

fix: earn trust labels through verification and bind tracking to URL (#2080) @gnodet

fix: bind credentials to origin and reject TLS downgrade redirects (#2085) @gnodet

... (truncated)

Commits

a9dc495 [maven-release-plugin] prepare release maven-resolver-2.0.24
75d5855 Fix flaky forked IPC client test (#2166)
ab99a6d docs: rewrite how-resolver-works.md to STE rules (#2046)
e372e8b Fix PathConflictResolver OOM on dense dependency graphs (#2153)
7a141f8 fix: synchronize IPC stream access (#2163)
ea75240 fix: propagate fatal errors from Jetty request content (#2161)
26b4de3 Use structured logging in the IPC server (#2157)
7c17f06 [MRESOLVER-2142] Increase HTTP3 port allocation retries (#2150)
1e41e1e Honor system proxy credentials in Apache transport (#2148)
2b510a5 docs: refresh resolver misconception references (#2158)
Additional commits viewable in compare view

Updates org.apache.maven.resolver:maven-resolver-util from 1.9.27 to 2.0.24

Release notes

Sourced from org.apache.maven.resolver:maven-resolver-util's releases.

2.0.24

🚀 New features and improvements

Fix PathConflictResolver OOM on dense dependency graphs (#2153) @gnodet

🐛 Bug Fixes

Fix flaky IpcClientForkedTest on Windows (#2166) @jiteshkhatri11

fix: synchronize IPC stream access (#2163) @efegokdemir

fix: propagate fatal errors from Jetty request content (#2161) @efegokdemir

Use structured logging in the IPC server (#2157) @efegokdemir

[MRESOLVER-2142] - Increase HTTP3 port allocation retries (#2150) @jiteshkhatri11

Honor system proxy credentials in Apache transport (#2148) @goutamadwant

📝 Documentation updates

docs: rewrite how-resolver-works.md to STE rules (#2046) @elharo

docs: refresh resolver misconception references (#2158) @efegokdemir

docs: clarify checksum trust boundaries (#2162) @efegokdemir

fix: correct config filename to .mvn/maven.config (#2152) @algomaster99

Use configuration key as link label (#2147) @kwin

📦 Dependency updates

Bump org.apache.maven:maven-parent from 49 to 50 (#2155) @dependabot[bot]

Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 (#2145) @dependabot[bot]

Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 (#2144) @dependabot[bot]

Bump dev.sigstore:sigstore-java from 2.2.0 to 2.3.0 (#2141) @dependabot[bot]

2.0.23

🚀 New features and improvements

Finish the repo key story (#2135) @cstamas

Fix: log only once the warning in DefRemoteRepoMan (#2100) @cstamas

Fix #2058: Add links to configuration page (#2060) @Jamison929611

Eliminate per-node HashSet allocation in PathConflictResolver (#2075) @gnodet

🐛 Bug Fixes

fix: accept locally cached artifacts via same-id fallback when tracking URL changes (#2133) @gnodet

Fix listener error swallowing (#1990), SyncContext double-close (#1992), and test flakiness (#1350) (#2108) @slachiewicz

[MRESOLVER-379] - Preserve relocated candidates from version ranges (#2114) @jjj-n

Create the local repository directory before resolving its real path (#2111) @slachiewicz

Optimize TrackingFileManager unit tests and fix potential lock leaks (#2094) (#2102) @slachiewicz

Validate the repository key used in checksum summary file names (#2099) @slachiewicz

fix: bound response reads and sanitize remote-derived strings (#2081) @gnodet

fix: earn trust labels through verification and bind tracking to URL (#2080) @gnodet

fix: bind credentials to origin and reject TLS downgrade redirects (#2085) @gnodet

... (truncated)

Commits

a9dc495 [maven-release-plugin] prepare release maven-resolver-2.0.24
75d5855 Fix flaky forked IPC client test (#2166)
ab99a6d docs: rewrite how-resolver-works.md to STE rules (#2046)
e372e8b Fix PathConflictResolver OOM on dense dependency graphs (#2153)
7a141f8 fix: synchronize IPC stream access (#2163)
ea75240 fix: propagate fatal errors from Jetty request content (#2161)
26b4de3 Use structured logging in the IPC server (#2157)
7c17f06 [MRESOLVER-2142] Increase HTTP3 port allocation retries (#2150)
1e41e1e Honor system proxy credentials in Apache transport (#2148)
2b510a5 docs: refresh resolver misconception references (#2158)
Additional commits viewable in compare view

slachiewicz · 2026-10-06T18:37:48Z

@dependabot rebase

Bumps `version.maven3resolver` from 1.9.27 to 2.0.24. Updates `org.apache.maven.resolver:maven-resolver-api` from 1.9.27 to 2.0.24 - [Release notes](https://github.com/apache/maven-resolver/releases) - [Commits](apache/maven-resolver@maven-resolver-1.9.27...maven-resolver-2.0.24) Updates `org.apache.maven.resolver:maven-resolver-spi` from 1.9.27 to 2.0.24 - [Release notes](https://github.com/apache/maven-resolver/releases) - [Commits](apache/maven-resolver@maven-resolver-1.9.27...maven-resolver-2.0.24) Updates `org.apache.maven.resolver:maven-resolver-util` from 1.9.27 to 2.0.24 - [Release notes](https://github.com/apache/maven-resolver/releases) - [Commits](apache/maven-resolver@maven-resolver-1.9.27...maven-resolver-2.0.24) --- updated-dependencies: - dependency-name: org.apache.maven.resolver:maven-resolver-api dependency-version: 2.0.24 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.apache.maven.resolver:maven-resolver-spi dependency-version: 2.0.24 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.apache.maven.resolver:maven-resolver-util dependency-version: 2.0.24 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 2, 2026

dependabot Bot mentioned this pull request Oct 2, 2026

Bump version.maven3resolver from 1.9.27 to 2.0.23 #43

Closed

slachiewicz mentioned this pull request Oct 5, 2026

Remove JUL handlers Maven installed when closing the embedded executor #67

Closed

dependabot Bot force-pushed the dependabot/maven/version.maven3resolver-2.0.24 branch from ad7daf6 to 165a542 Compare October 6, 2026 18:43

Navigation Menu

Repository navigation

Bump version.maven3resolver from 1.9.27 to 2.0.24 - #63

Bump version.maven3resolver from 1.9.27 to 2.0.24#63
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/version.maven3resolver-2.0.24

dependabot Bot commented on behalf of github Oct 2, 2026 •

edited

Loading

Uh oh!

slachiewicz commented Oct 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.0.24

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

📦 Dependency updates

2.0.23

🚀 New features and improvements

🐛 Bug Fixes

2.0.24

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

📦 Dependency updates

2.0.23

🚀 New features and improvements

🐛 Bug Fixes

2.0.24

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

📦 Dependency updates

2.0.23

🚀 New features and improvements

🐛 Bug Fixes

Uh oh!

slachiewicz commented Oct 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 2, 2026 •

edited

Loading