Repository navigation
Bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0 - #375
Conversation
Bumps [org.apache.maven.plugins:maven-deploy-plugin](https://github.com/apache/maven-deploy-plugin) from 3.1.4 to 3.2.0. - [Release notes](https://github.com/apache/maven-deploy-plugin/releases) - [Commits](apache/maven-deploy-plugin@maven-deploy-plugin-3.1.4...maven-deploy-plugin-3.2.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-deploy-plugin dependency-version: 3.2.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Code Coverage Report
|
deweyjose
left a comment
deweyjose
left a comment
There was a problem hiding this comment.
Summary
Dependabot minor bump of org.apache.maven.plugins:maven-deploy-plugin 3.1.4 → 3.2.0, a single line in graphqlcodegen-maven-plugin/pom.xml pluginManagement (graphqlcodegen-maven-plugin/pom.xml:432).
Build result
Ran locally against the PR head (18d39c3) — CI does not run on fork PRs, so results were reproduced directly:
./mvnw -B -ntp verify -pl graphqlcodegen-maven-plugin→ BUILD SUCCESS; Tests run: 68, Failures: 0, Errors: 0, Skipped: 2../mvnw -B -ntp spotless:check -pl graphqlcodegen-maven-plugin→ BUILD SUCCESS (29 files clean).
Wiring completeness
N/A — no code change, no new/changed option, no CodeGenConfigBuilder/constructor change.
Backwards compatibility
Not breaking. maven-deploy-plugin is a build/release-time plugin used only during deploy; it is not on the generation path (not graphql-dgs-codegen-core, kotlinpoet, or graphql-java), does not affect generated output, and is not a runtime transitive consumers depend on. No @Parameter, default, goal name, phase, or Java/Maven minimum is touched. Dependabot metadata: update-type: version-update:semver-minor, dependency-type: direct:development.
Risks
Minimal. Release-tooling-only change (affects publish.yaml deploy step, which is release-scoped to the plugin module). 3.2.0 is a routine minor release (reactor-scan perf fix, security-audit backports, Maven 4 build support).
Verdict
APPROVE — meets all Dependabot auto-merge criteria (dependabot author, minor bump, off generation path, local verify green, pom-metadata-only, no breaking-change label). Merging.
Generated by Claude Code
1 participant
Bumps org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0.
Release notes
Sourced from org.apache.maven.plugins:maven-deploy-plugin's releases.
... (truncated)
Commits
7aab9fb[maven-release-plugin] prepare release maven-deploy-plugin-3.2.01f3eef5Backport security audit fixes to 3.x (f004-f008, f010, f012)307f328Simplify remote repository creation7b1bbc4Cache projectsWithDeployExecution to fix O(N²) reactor scana9177c6Clarify deploy without editing this projects POM7c40513Restore the plain form of the ASF licence header5969234Update Release Drafter configuration to use custom tag template and remove un...df7b3faBump apache/maven-gh-actions-shared/.github/workflows/release-drafter.ymlb4e8aedwork around Maven 4 CLI lack of interpolationd634bb4enable build with Maven 4Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)