Skip to content

build(deps-dev): bump org.codehaus.mojo:versions-maven-plugin from 2.22.0 to 2.23.0 - #2016

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/org.codehaus.mojo-versions-maven-plugin-2.23.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/org.codehaus.mojo-versions-maven-plugin-2.23.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps org.codehaus.mojo:versions-maven-plugin from 2.22.0 to 2.23.0.

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.23.0

Versions Maven Plugin 2.23.0 makes the property goals more reliable on multi-module projects and adds a few options people have asked for over the years. It still runs on Java 8 and Maven 3.6.3 or later.

Property updates

  • update-property and update-properties now update a property that is defined in a reactor parent POM, rather than leaving it untouched (#997).
  • A property shared by a plugin and an excluded dependency is no longer updated behind the exclude's back (#1199).
  • The property goals look up all properties in parallel, which shortens runs on POMs with many version properties (#1157).
  • A dependency whose type or classifier is itself a property, such as ${native.classifier}, no longer breaks the property goals on Maven 3.10 and 4 (#1409).
  • lock-snapshots and unlock-snapshots now rewrite snapshot versions held in properties, where that is safe (#1269).

Other fixes and additions

  • versions:set with selected projects (-pl) updates the modules that inherit the version again, on Maven 3 and Maven 4 (#1338, #1339, #1357).
  • Includes and excludes now filter the candidate versions too, so an excluded version is never proposed as an update (#1378).
  • display-dependency-updates -Dversions.showNewestPerSegment lists the newest incremental, minor and major version, for example 1.0.3 -> 1.0.9, 1.3.9, 4.0.6 (#1043).
  • parent-updates-report supports formats, including XML (#975), and the XML property updates report now fills in the current version (#976).
  • The plugin update reports share their lookup with display-plugin-updates and include plugins declared only in <reporting> (#1250).

Thanks to @​wilx and @​adityaanikam for their contributions to this release.

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 701cf76 [maven-release-plugin] prepare release 2.23.0
  • 05854d0 Mark the API added since 2.22.0 as @​since 2.23.0
  • a8fac27 Prepare 2.23.0
  • 58a2ea5 Resolve property versions in parallel
  • 4a89885 Update a shared parent POM from one module at a time
  • 2230fbe Update properties defined in a reactor parent POM
  • b495844 Honor excludes of modules that inherit an update-properties property
  • 3330666 Show the newest version of each segment in display-dependency-updates
  • fe0be9a Rewrite timestamped and SNAPSHOT versions held in properties in unlock-snapsh...
  • bfb8f3a Support the xml format in parent-updates-report
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) from 2.22.0 to 2.23.0.
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants