Repository navigation
Bump org.apache.maven:maven-plugin-api from 3.9.16 to 3.10.0 - #377
Conversation
Bumps [org.apache.maven:maven-plugin-api](https://github.com/apache/maven) from 3.9.16 to 3.10.0. - [Release notes](https://github.com/apache/maven/releases) - [Commits](apache/maven@maven-3.9.16...maven-3.10.0) --- updated-dependencies: - dependency-name: org.apache.maven:maven-plugin-api dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Code Coverage Report
|
deweyjose
left a comment
deweyjose
left a comment
There was a problem hiding this comment.
Summary
Dependabot bump of org.apache.maven:maven-plugin-api from 3.9.16 → 3.10.0. Single-line change to the maven-plugin-api.version property in graphqlcodegen-maven-plugin/pom.xml:46; no source, no other dependencies. This restores lock-step with maven-core, already at 3.10.0 on main (#374).
Build result
Ran locally against the PR head (20e1793):
mvn -B -ntp verify -pl graphqlcodegen-maven-plugin→ BUILD SUCCESS- Tests: 68 run, 0 failures, 0 errors, 2 skipped
spotless:check(bound inverify) → clean, 29 files- PR CI:
build,build (test),build (spotless),e2eall success
(Local run used system Maven 3.9.11 because the wrapper's pinned 3.9.6 download was rate-limited (HTTP 429); both are 3.9.x and immaterial for a dependency-metadata bump.)
Wiring completeness
N/A — no new @Parameter/option; dependency-metadata change only.
Backwards compatibility
Not breaking.
maven-plugin-apiisprovidedscope (pom.xml:149) — supplied by the Maven runtime, never shipped to consumers, so not a runtime transitive they rely on (gate f ✗).- Not a generation-path dependency (not dgs-codegen-core / kotlinpoet / graphql-java), so generated output is unaffected (gate e ✗).
- No
@Parameter, default, goal, phase, orjava.versionchange (gates a–d ✗). No<prerequisites>/requireMavenVersiondeclared, andmaven-coreis already3.10.0onmain, so this introduces no new minimum-Maven implication beyond what's already accepted.
Risks
Minimal. 3.10.x API is a superset of 3.9.x for the long-stable surface this plugin uses; no plugin code changed.
Verdict
APPROVE — meets all Dependabot auto-merge conditions (dependabot author, minor bump, non-generation-path, pom-only, CI + local build green, not breaking). Merging.
Generated by Claude Code
1 participant
Bumps org.apache.maven:maven-plugin-api from 3.9.16 to 3.10.0.
Release notes
Sourced from org.apache.maven:maven-plugin-api's releases.
... (truncated)
Commits
c43a36b[maven-release-plugin] prepare release maven-3.10.0095eb17Fix wrong links.bec033eUse staged Maven Resolver 2.0.24b39f8a7deps: Update to Maven Resolver 2.0.24 (#13271)ae59501Issue #13265: let a settings server declare the repository origins its creden...6ab2433[3.10.x] maintenance: Align use of profiles (#13274)f68413cDo not depend on maven-resolver-supplier-mvn3 (#13266)3a0026c[Backport maven-3.10.x] Fix #11397: treat reactor BOM imports as ProjectSorte...82a0f20docs: document plugin.xml V4 vs V3 [Backport maven-3.10.x]0fb1c8b[MNG-6797] Remember if Maven model problems were encountered. (#298)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)