Bump org.apache.maven.shared:maven-shared-utils from 3.4.2 to 3.5.0

[dependabot]

Bumps org.apache.maven.shared:maven-shared-utils from 3.4.2 to 3.5.0.

Release notes

Sourced from org.apache.maven.shared:maven-shared-utils's releases.

3.5.0

Maven Shared Utils 3.5.0 is the first release since 3.4.2 (May 2023). The baseline is unchanged: Java 8 and Maven 3.

Most of the work deprecates utilities that now have JDK or Apache Commons equivalents, and fixes bugs in process handling, StringUtils, PathTool and Xpp3Dom.

Runtime dependency changes:

• commons-io 2.11.0 → 2.22.0
• jansi (optional) 2.4.0 → 2.4.3
• The provided-scope jsr305 dependency is gone. slf4j-api stays at 1.7.36.

🚨 Removed

• Commandline and Shell no longer implement Cloneable. Their clone() methods always threw, so only code that references them is affected (#365) @​elharo

⚠️ Deprecated

• StringUtils.replace and StringUtils.contains (#427) @​slachiewicz
• The logging package, in favour of MessageBuilderFactory (#423) @​slachiewicz
• StringUtils.concatenate, in favour of String.join (#361) @​elharo
• StringUtils.clean(), in favour of StringUtils.trim() (#356) @​HarshMehta112
• PathTool (#355) @​elharo
• StringUtils.split (#350) @​elharo
• The remaining shared XML classes, including Xpp3Dom (MSHARED-1274, #162, #171) @​elharo
• Add missing @Deprecated annotations (#163) @​elharo
• FileUtils.forceMkdir and contentEquals, which Commons IO provides (MSHARED-1271, #155, #156) @​elharo
• Os, unmaintained for over a decade (MSHARED-1215, #157) @​elharo
• FileUtils.copyFile and FilterWrapper, in favour of org.apache.maven.shared.filtering (MSHARED-1260, #147) @​elharo
• WriterFactory (MSHARED-1254, #146) and ReaderFactory (MSHARED-1253, #145) @​elharo

🐛 Bug fixes

Process handling:

• Close process streams after exit, to work around the JDK-4311711 hang (#412) @​elharo
• CommandLineUtils: wait on every pumper in a try/finally (#399) @​elharo
• AbstractStreamHandler.setDone: call notifyAll to wake waiting threads (#405) @​elharo
• StreamPollFeeder: declare done and exception as volatile (#387) @​elharo
• Pass streamCharset to the stdout and stderr pumpers (#432) @​slachiewicz
• CmdShell: quote items that cmd.exe would otherwise interpret (#434) @​slachiewicz

XML:

• Xpp3DomBuilder.createXmlReader: stop changing system properties, which was not thread-safe (#393) @​elharo
• Xpp3Dom.removeChild(int): fix childMap corruption with duplicate names (#395) @​elharo
• Xpp3Dom.getValue(): honour the @NonNull contract (#389) @​elharo
• Xpp3DomWriter: reject a null DOM with a named NullPointerException (#426) @​slachiewicz
• PrettyPrintXMLWriter: handle a null lineIndent in the constructors (#382) @​elharo

Strings, paths and files:

... (truncated)

Commits

• fbee44d [maven-release-plugin] prepare release maven-shared-utils-3.5.0
• 891953d fix(test): fix varargs warnings in StringUtilsTest (#437)
• ee43062 Add tag-template to release-drafter.yml
• 517e861 CmdShell: quote items that cmd.exe would otherwise interpret
• e7e5849 Update CMD Shell docs to not mentiuon individual Windows versions. (#435)
• 99c724c Pass streamCharset to the stdout and stderr pumpers
• 23ddeee Copy a symbolic link even when its target does not exist
• 1515447 Xpp3DomBuilder.createXmlReader: remove thread-unsafe system property manipula...
• 2e1fffb Xpp3Dom.removeChild(int): fix childMap corruption with duplicate names
• 5e65e7c Drop the jspecify nullness annotations
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)