Skip to content

WIP: RAT-530: Prepare for a 0.18 release#601

Draft
ottlinger wants to merge 34 commits intomasterfrom
feature/RAT-530
Draft

WIP: RAT-530: Prepare for a 0.18 release#601
ottlinger wants to merge 34 commits intomasterfrom
feature/RAT-530

Conversation

@ottlinger
Copy link
Contributor

@ottlinger ottlinger commented Dec 27, 2025 •
edited
Loading

Replace current 1.0.0 SNAPSHOT with 0.18 - adapt changelog and pom and docs,
see https://issues.apache.org/jira/browse/RAT-530 for details

✅ 20260310 Solved with Maven 3.9.13: Update 20260203

[11:06 PM]cstamas Heads up: Maven 3.9.12 contains a change that causes an issue when releasing on RAO, that manifests in opening multiple staging repositories (instead to have all the artifacts land in one). Circumvention for now is to set this user property:-Daether.connector.basic.parallelPut=false

✅ Adapt download page

  • link to KEYS etc and artifacts via downloads.apache.org instead of CDN - see mail from 2026-01-25

@ottlinger ottlinger self-assigned this Dec 27, 2025
ottlinger and others added 8 commits December 27, 2025 12:49
@ottlinger
RAT-530: prepare site for 018
b0a5fb8
@ottlinger
RAT-530: Adapt changelog for 0.18
5fbf261
@ottlinger
RAT-530: Prepare for a 0.18 release
b921c76
@ottlinger
Merge branch 'master' into feature/RAT-530
fbdc26a
@dependabot @ottlinger
Bump org.apache:apache from 35 to 36
4cf6ddc 
Bumps [org.apache:apache](https://github.com/apache/maven-apache-parent) from 35 to 36.
- [Release notes](https://github.com/apache/maven-apache-parent/releases)
- [Commits](https://github.com/apache/maven-apache-parent/commits)

---
updated-dependencies:
- dependency-name: org.apache:apache
  dependency-version: '36'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@ottlinger
RAT-498: Raise minimal Maven version to be compliant with ASF parent …
1222485 
…- 3.9
@ottlinger
RAT-293: Add more logging to sonarcloud problems
b24ed88
@ottlinger
RAT-440: Add changelog entry about doxia/xhtml upgrade
13ffd24
@rschmitt
Copy link
Contributor

rschmitt commented Jan 28, 2026

Please include #612 in any future 0.18 release. Apache HttpComponents still supports building (i.e. actually running Maven itself) on Java 8, so upgrading to 1.0.0 will be a little more complicated.

@sonarqubecloud
Copy link

sonarqubecloud bot commented Jan 29, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@ottlinger
Copy link
Contributor Author

ottlinger commented Jan 31, 2026

@dependabot rebase

ottlinger and others added 14 commits March 10, 2026 17:31
@ottlinger
RAT-293: Try adding sonar.org manually
ecb7acb
@ottlinger
RAT-293, INFRA-27608: Switch to org level repo secret
fab2ea9
@dependabot @ottlinger
Bump org.apache.maven.plugins:maven-compiler-plugin
42e05d7 
Bumps [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.14.1 to 3.15.0.
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.15.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@ottlinger
INFRA-27608, RAT-293: Add debug step for sonarcloud secret
91bf690
@ottlinger
INFRA-27608, RAT-293: Tweak branch configuration to see if secrets ar…
a4a06cd 
…e visible on PRs
@ottlinger
INFRA-27608, RAT-293: Document that secrets are not visible if branch…
18862c2 
…es are configured
@ottlinger
RAT-293: Reduce log noise in sonarcloud build step
e9a71d5
@ottlinger
RAT-293: Do not run SonarCloud scan if triggered by dependabot
9696f35
@ottlinger
RAT-293: Do not run SonarCloud scan if triggered by dependabot
93771f4
@ottlinger
RAT-293: Remove debugging output
ee5bbab
@ottlinger
RAT-293: Try to fix the master sonarcloud build
8143f45
@dependabot @ottlinger
Bump com.gradle:develocity-maven-extension from 2.3.2 to 2.3.3
897ef77 
Bumps com.gradle:develocity-maven-extension from 2.3.2 to 2.3.3.

---
updated-dependencies:
- dependency-name: com.gradle:develocity-maven-extension
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ottlinger
Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
6f6ba0d 
Bumps org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1.

---
updated-dependencies:
- dependency-name: org.apache.maven.plugin-testing:maven-plugin-testing-harness
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ottlinger
Bump org.apache.maven.plugins:maven-dependency-plugin
f619167 
Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.9.0 to 3.10.0.
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.9.0...maven-dependency-plugin-3.10.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot bot and others added 8 commits March 10, 2026 17:31
@dependabot @ottlinger
Bump com.gradle:develocity-maven-extension from 2.3.3 to 2.3.4
7006552 
Bumps com.gradle:develocity-maven-extension from 2.3.3 to 2.3.4.

---
updated-dependencies:
- dependency-name: com.gradle:develocity-maven-extension
  dependency-version: 2.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ottlinger
Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5
a04c6e5 
Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.5.4 to 3.5.5.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.5)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ottlinger
Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.4 to 3.5.5
13d55eb 
Bumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) from 3.5.4 to 3.5.5.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.5)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ottlinger
Bump actions/upload-artifact from 6 to 7
a9902a6 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ottlinger
Bump org.mockito:mockito-bom from 5.21.0 to 5.22.0
709cbac 
Bumps [org.mockito:mockito-bom](https://github.com/mockito/mockito) from 5.21.0 to 5.22.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.21.0...v5.22.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-bom
  dependency-version: 5.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ottlinger
Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0
0a0d825 
Bumps [org.apache.maven.plugins:maven-resources-plugin](https://github.com/apache/maven-resources-plugin) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/apache/maven-resources-plugin/releases)
- [Commits](apache/maven-resources-plugin@v3.4.0...maven-resources-plugin-3.5.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-resources-plugin
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ottlinger
Bump mavenVersion from 3.9.12 to 3.9.13
b8bdabf 
Bumps `mavenVersion` from 3.9.12 to 3.9.13.

Updates `org.apache.maven:maven-plugin-api` from 3.9.12 to 3.9.13
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.9.12...maven-3.9.13)

Updates `org.apache.maven:maven-artifact` from 3.9.12 to 3.9.13

Updates `org.apache.maven:maven-model` from 3.9.12 to 3.9.13

Updates `org.apache.maven:maven-core` from 3.9.12 to 3.9.13

Updates `org.apache.maven:maven-settings` from 3.9.12 to 3.9.13

Updates `org.apache.maven:maven-compat` from 3.9.12 to 3.9.13
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.9.12...maven-3.9.13)

---
updated-dependencies:
- dependency-name: org.apache.maven:maven-plugin-api
  dependency-version: 3.9.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven:maven-artifact
  dependency-version: 3.9.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven:maven-model
  dependency-version: 3.9.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven:maven-core
  dependency-version: 3.9.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven:maven-settings
  dependency-version: 3.9.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven:maven-compat
  dependency-version: 3.9.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@ottlinger
RAT-530: Adapt download page to current regulations, checksums from d…
5a3cd59 
…ownloads.a.o
@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 10, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@ottlinger ottlinger

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ottlinger @rschmitt