From ab18e736e033545a6bc2f29918f6685335abf1b3 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Sat, 27 Dec 2025 12:45:01 +0100 Subject: [PATCH 01/32] RAT-530: Switch to 0.18 SNAPSHOT --- apache-rat-core/pom.xml | 2 +- apache-rat-plugin/pom.xml | 2 +- apache-rat-tasks/pom.xml | 2 +- apache-rat-testdata/pom.xml | 2 +- apache-rat-tools/pom.xml | 2 +- apache-rat/pom.xml | 2 +- pom.xml | 4 ++-- 7 files changed, 8 insertions(+), 8 deletions(-) diff --git a/apache-rat-core/pom.xml b/apache-rat-core/pom.xml index 4819f23bc..ae9cd0434 100644 --- a/apache-rat-core/pom.xml +++ b/apache-rat-core/pom.xml @@ -20,7 +20,7 @@ org.apache.rat apache-rat-project - 1.0.0-SNAPSHOT + 0.18-SNAPSHOT apache-rat-core jar diff --git a/apache-rat-plugin/pom.xml b/apache-rat-plugin/pom.xml index e10aa8e07..bad9c73a4 100644 --- a/apache-rat-plugin/pom.xml +++ b/apache-rat-plugin/pom.xml @@ -20,7 +20,7 @@ apache-rat-project org.apache.rat - 1.0.0-SNAPSHOT + 0.18-SNAPSHOT apache-rat-plugin maven-plugin diff --git a/apache-rat-tasks/pom.xml b/apache-rat-tasks/pom.xml index 35d003544..b04515038 100644 --- a/apache-rat-tasks/pom.xml +++ b/apache-rat-tasks/pom.xml @@ -20,7 +20,7 @@ org.apache.rat apache-rat-project - 1.0.0-SNAPSHOT + 0.18-SNAPSHOT apache-rat-tasks jar diff --git a/apache-rat-testdata/pom.xml b/apache-rat-testdata/pom.xml index 63f4040c7..1be67fc50 100644 --- a/apache-rat-testdata/pom.xml +++ b/apache-rat-testdata/pom.xml @@ -20,7 +20,7 @@ org.apache.rat apache-rat-project - 1.0.0-SNAPSHOT + 0.18-SNAPSHOT apache-rat-testdata Apache Creadur RAT::Testdata diff --git a/apache-rat-tools/pom.xml b/apache-rat-tools/pom.xml index 728694d89..5d440b463 100644 --- a/apache-rat-tools/pom.xml +++ b/apache-rat-tools/pom.xml @@ -20,7 +20,7 @@ org.apache.rat apache-rat-project - 1.0.0-SNAPSHOT + 0.18-SNAPSHOT apache-rat-tools jar diff --git a/apache-rat/pom.xml b/apache-rat/pom.xml index bcf8b1e23..ee662434e 100644 --- a/apache-rat/pom.xml +++ b/apache-rat/pom.xml @@ -20,7 +20,7 @@ org.apache.rat apache-rat-project - 1.0.0-SNAPSHOT + 0.18-SNAPSHOT apache-rat jar diff --git a/pom.xml b/pom.xml index b1c01a55e..a2a343fe7 100644 --- a/pom.xml +++ b/pom.xml @@ -24,7 +24,7 @@ org.apache.rat apache-rat-project - 1.0.0-SNAPSHOT + 0.18-SNAPSHOT pom Apache Creadur RAT https://creadur.apache.org/rat/ @@ -69,7 +69,7 @@ agnostic home for software distribution comprehension and audit tools. 0.17 - 1.0.0-SNAPSHOT + 0.18-SNAPSHOT From 05756629810efb381f10245e59a65f011679e669 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Sat, 27 Dec 2025 12:45:06 +0100 Subject: [PATCH 02/32] RAT-530: Switch to 0.18 SNAPSHOT --- apache-rat-core/pom.xml.versionsBackup | 261 +++++ apache-rat-plugin/pom.xml.versionsBackup | 473 +++++++++ apache-rat-tasks/pom.xml.versionsBackup | 325 ++++++ apache-rat-testdata/pom.xml.versionsBackup | 47 + apache-rat-tools/pom.xml.versionsBackup | 148 +++ apache-rat/pom.xml.versionsBackup | 413 ++++++++ pom.xml.versionsBackup | 1092 ++++++++++++++++++++ 7 files changed, 2759 insertions(+) create mode 100644 apache-rat-core/pom.xml.versionsBackup create mode 100644 apache-rat-plugin/pom.xml.versionsBackup create mode 100644 apache-rat-tasks/pom.xml.versionsBackup create mode 100644 apache-rat-testdata/pom.xml.versionsBackup create mode 100644 apache-rat-tools/pom.xml.versionsBackup create mode 100644 apache-rat/pom.xml.versionsBackup create mode 100644 pom.xml.versionsBackup diff --git a/apache-rat-core/pom.xml.versionsBackup b/apache-rat-core/pom.xml.versionsBackup new file mode 100644 index 000000000..4819f23bc --- /dev/null +++ b/apache-rat-core/pom.xml.versionsBackup @@ -0,0 +1,261 @@ + + + + 4.0.0 + + org.apache.rat + apache-rat-project + 1.0.0-SNAPSHOT + + apache-rat-core + jar + Apache Creadur RAT::Core + The core functionality of RAT that is used by all clients. + + + + false + src/main/resources + + + true + src/main/filtered-resources + + + + + + org.apache.rat + apache-rat-plugin + + + + **/default.xml + **/example-configuration.xml + + **/ReporterOptionsProvider.java + **/GPLLicenseTest.java + + src/test/resources/** + src/it/resources/ReportTest/** + + + + + + + + org.apache.maven.plugins + maven-jar-plugin + + + + test-jar + + + + + + org.apache.maven.plugins + maven-checkstyle-plugin + + true + true + true + warning + true + ../src/conf/checkstyle.xml + ../src/conf/checkstyle-suppressions.xml + + + + + check + + compile + + + + + com.github.spotbugs + spotbugs-maven-plugin + + spotbugs-ignore.xml + + + + org.codehaus.mojo + build-helper-maven-plugin + + + add-integration-test-source + generate-test-sources + + add-test-source + + + + src/it/java + + + + + add-integration-test-resources + generate-test-resources + + add-test-resource + + + + + src/it/resources + + notes.md + + + + + + + + + maven-resources-plugin + + + copy-release-notes + generate-resources + + copy-resources + + + ${project.build.outputDirectory}/META-INF + true + + + ${project.basedir}/.. + + RELEASE_NOTES.txt + + + + + + + copy-example-data + generate-resources + + copy-resources + + + ${project.build.testOutputDirectory}/examples + true + + + ../apache-rat-testdata/src/main/resources/examples + + + + + + + + + + + org.apache.rat + apache-rat-testdata + test + + + org.apache.commons + commons-collections4 + + + org.apache.commons + commons-lang3 + + + commons-io + commons-io + + + org.apache.commons + commons-compress + + + + org.tukaani + xz + + + + + org.apache.commons + commons-text + + + org.junit.jupiter + junit-jupiter-api + test + + + org.junit.vintage + junit-vintage-engine + test + + + org.junit.jupiter + junit-jupiter-params + test + + + commons-cli + commons-cli + + + org.mockito + mockito-core + test + + + org.assertj + assertj-core + test + + + org.apache.tika + tika-core + + + org.apache.tika + tika-parser-text-module + + + + + org.codehaus.groovy + groovy-all + test + + + com.google.jimfs + jimfs + test + + + diff --git a/apache-rat-plugin/pom.xml.versionsBackup b/apache-rat-plugin/pom.xml.versionsBackup new file mode 100644 index 000000000..e10aa8e07 --- /dev/null +++ b/apache-rat-plugin/pom.xml.versionsBackup @@ -0,0 +1,473 @@ + + + + 4.0.0 + + apache-rat-project + org.apache.rat + 1.0.0-SNAPSHOT + + apache-rat-plugin + maven-plugin + Apache Creadur RAT::Plugin4Maven + A plugin for Apache Maven that runs Apache RAT + to audit the source to be distributed. + 2007 + + ${mavenMinVersion} + + + ${project.version} + 2.0.0 + + + + + false + src/main/resources + + + true + src/main/filtered-resources + + + + + src/test/filtered-resources + true + + + + + + org.apache.maven.plugins + maven-plugin-plugin + + true + apache-rat + + org.apache.rat.plugin + + + + mojo-descriptor + + descriptor + + + + + help-goal + + helpmojo + + + + + + org.apache.rat + apache-rat-plugin + + + + bin/**/* + .externalToolBuilders/**/* + + src/it/** + src/it/**/src.apt + src/test/resources/unit/** + **/*.iml + + src/site/apt/*.txt + + src/it/CustomLicense/src/**/ + + **/.bzrignore + invoker_target/** + src/test/resources/XmlOutputExamples/**/* + + + + + + org.eclipse.m2e + lifecycle-mapping + 1.0.0 + + + + + + org.apache.maven.plugins + maven-plugin-plugin + [3.3,) + + descriptor + helpmojo + + + + + + + + + org.codehaus.mojo + exec-maven-plugin + [3.5.0,) + + java + + + + + + + + + + + + + + + maven-resources-plugin + + + copy-release-notes + generate-resources + + copy-resources + + + ${project.build.outputDirectory}/META-INF + true + + + ${project.basedir}/.. + + RELEASE_NOTES.txt + + + + + + + + + org.codehaus.mojo + exec-maven-plugin + + + Create BaseRatMojo + + java + + generate-sources + + org.apache.rat.tools.MavenGenerator + test + + org.apache.rat.plugin + BaseRatMojo + ${project.build.sourceDirectory} + + + + + Initial site generation + pre-site + + java + + + org.apache.rat.documentation.Exporter + test + + ${project.basedir}/src/templates + ${project.basedir}/src/site + + + + + + + en_US + + + + + org.apache.maven.plugins + maven-plugin-report-plugin + + + org.apache.maven.plugins + maven-invoker-plugin + + ${project.build.directory}/invoker_target + ${project.build.directory}/local-repo + true + src/it/settings.xml + verify + + + + integration-test + + install + run + + + + + + maven-clean-plugin + + + + invoker_target + false + + + src/main/java/org/apache/rat/plugin/ + + BaseRatMojo.java + + false + + + + + + org.apache.maven.plugins + maven-checkstyle-plugin + + true + true + true + warning + true + ../src/conf/checkstyle.xml + ../src/conf/checkstyle-suppressions.xml + + + + + check + + compile + + + + + + + + commons-cli + commons-cli + + + org.apache.rat + apache-rat-core + + + + org.apache.rat + apache-rat-tools + test + + + org.apache.rat + apache-rat-core + test-jar + tests + test + + + org.mockito + mockito-core + test + + + org.junit.jupiter + junit-jupiter-api + test + + + org.junit.vintage + junit-vintage-engine + test + + + org.junit.jupiter + junit-jupiter-params + test + + + org.apache.maven.plugin-tools + maven-plugin-annotations + provided + + + org.apache.maven + maven-artifact + ${mavenVersion} + provided + + + org.apache.maven + maven-model + ${mavenVersion} + provided + + + org.apache.maven + maven-plugin-api + provided + + + org.apache.maven + maven-core + ${mavenVersion} + provided + + + org.apache.maven + maven-settings + ${mavenVersion} + test + + + org.apache.maven + maven-compat + ${mavenVersion} + test + + + org.apache.maven.doxia + doxia-core + ${doxiaVersion} + + + org.codehaus.plexus + plexus-container-default + + + xerces + xercesImpl + + + + + org.apache.maven.doxia + doxia-site-model + ${doxiaVersion} + + + org.apache.maven.doxia + doxia-module-xhtml5 + ${doxiaVersion} + + + org.apache.maven.doxia + doxia-sink-api + ${doxiaVersion} + + + org.apache.maven.doxia + doxia-integration-tools + ${doxiaVersion} + + + org.codehaus.plexus + plexus-container-default + + + + + org.apache.maven.doxia + doxia-site-renderer + ${doxiaVersion} + + + org.codehaus.plexus + plexus-container-default + + + + + org.apache.maven.reporting + maven-reporting-api + 4.0.0 + + + org.apache.maven.shared + maven-shared-utils + 3.4.2 + + + org.apache.maven.plugin-testing + maven-plugin-testing-harness + test + + + org.codehaus.plexus + plexus-testing + 2.0.2 + + + + org.junit.jupiter + junit-jupiter-api + + + + + org.assertj + assertj-core + test + + + org.codehaus.plexus + plexus-utils + 3.6.0 + + + org.apache.commons + commons-lang3 + + + + + + org.apache.maven.plugins + maven-javadoc-plugin + + + org.apache.maven.plugins + maven-plugin-plugin + ${mavenPluginPluginVersion} + + + org.apache.maven.plugins + maven-plugin-report-plugin + ${mavenPluginPluginVersion} + + + + diff --git a/apache-rat-tasks/pom.xml.versionsBackup b/apache-rat-tasks/pom.xml.versionsBackup new file mode 100644 index 000000000..35d003544 --- /dev/null +++ b/apache-rat-tasks/pom.xml.versionsBackup @@ -0,0 +1,325 @@ + + + + 4.0.0 + + org.apache.rat + apache-rat-project + 1.0.0-SNAPSHOT + + apache-rat-tasks + jar + Apache Creadur RAT::Tasks4Ant + + A plugin for Apache Ant that runs Apache RAT + to audit the source to be distributed. + + + + org.apache.rat + apache-rat-core + ${project.version} + + + org.apache.rat + apache-rat-tools + + + org.apache.rat + apache-rat-core + test-jar + tests + test + + + org.assertj + assertj-core + test + + + org.apache.ant + ant + + + org.apache.ant + ant-antunit + test + + + org.apache.ant + ant-testutil + test + + + org.junit.jupiter + junit-jupiter-api + test + + + org.junit.jupiter + junit-jupiter-engine + test + + + org.junit.jupiter + junit-jupiter-params + test + + + + + + false + src/main/resources + + + true + src/main/filtered-resources + + + + + org.apache.maven.plugins + maven-dependency-plugin + + + generate-test-resources + + copy-dependencies + + + true + ant-antunit + ${project.build.directory}/dependencies + + + + + + maven-resources-plugin + + + copy-release-notes + generate-resources + + copy-resources + + + ${project.build.outputDirectory}/META-INF + true + + + ${project.basedir}/.. + + RELEASE_NOTES.txt + + + + + + + + + org.codehaus.mojo + exec-maven-plugin + + + Create BaseAntTask + + java + + generate-sources + + test + org.apache.rat.tools.AntGenerator + + org.apache.rat.anttasks + BaseAntTask + ${project.build.sourceDirectory} + + + + + Initial site generation + pre-site + + java + + + org.apache.rat.documentation.Exporter + test + + ${project.basedir}/src/templates + ${project.basedir}/src/site + + + + + Ant documentation generation + pre-site + + java + + + org.apache.rat.tools.AntDocumentation + test + + ${project.basedir}/src/site/apt/ + + + + + + + org.apache.maven.plugins + maven-antrun-plugin + + + test + + run + + + ${skipTests} + + + + + + + + + + + + + + + + + + + + + + org.apache.maven.plugins + maven-checkstyle-plugin + + true + true + true + warning + true + ../src/conf/checkstyle.xml + ../src/conf/checkstyle-suppressions.xml + + + + + check + + compile + + + + + com.github.spotbugs + spotbugs-maven-plugin + + ../src/conf/spotbugs-exclude.xml + + + + maven-clean-plugin + + + + src/main/java/org/apache/rat/anttasks + + BaseAntTask.java + + + + + + + + + + org.apache.rat + apache-rat-plugin + + + + bin/**/* + .externalToolBuilders/**/* + + src/test/resources/ + src/site/apt/*.txt + + + + + org.eclipse.m2e + lifecycle-mapping + 1.0.0 + + + + + + org.apache.maven.plugins + maven-dependency-plugin + [2.0,) + + copy-dependencies + + + + + + + + + org.codehaus.mojo + exec-maven-plugin + [3.5.0,) + + java + + + + + + + + + + + + + + + + + org.apache.maven.plugins + maven-javadoc-plugin + + + + diff --git a/apache-rat-testdata/pom.xml.versionsBackup b/apache-rat-testdata/pom.xml.versionsBackup new file mode 100644 index 000000000..63f4040c7 --- /dev/null +++ b/apache-rat-testdata/pom.xml.versionsBackup @@ -0,0 +1,47 @@ + + + + 4.0.0 + + org.apache.rat + apache-rat-project + 1.0.0-SNAPSHOT + + apache-rat-testdata + Apache Creadur RAT::Testdata + + ${javaVersion} + ${javaVersion} + UTF-8 + + + + + + org.apache.rat + apache-rat-plugin + + + /src/main/resources/examples/** + + + + + + + diff --git a/apache-rat-tools/pom.xml.versionsBackup b/apache-rat-tools/pom.xml.versionsBackup new file mode 100644 index 000000000..728694d89 --- /dev/null +++ b/apache-rat-tools/pom.xml.versionsBackup @@ -0,0 +1,148 @@ + + + + 4.0.0 + + org.apache.rat + apache-rat-project + 1.0.0-SNAPSHOT + + apache-rat-tools + jar + Apache Creadur RAT::Tools + Tools to manage and report on RAT + + + + false + src/main/resources + + + true + src/main/filtered-resources + + + + + + org.apache.rat + apache-rat-plugin + + + + bin/**/* + .externalToolBuilders/**/* + + src/main/resources/Args.tpl + + src/test/resources/** + + src/main/resources/org/apache/rat/tools/ExampleGeneratorResources/** + + + + + + + + org.apache.maven.plugins + maven-checkstyle-plugin + + true + true + true + warning + true + ../src/conf/checkstyle.xml + ../src/conf/checkstyle-suppressions.xml + + + + + check + + compile + + + + + com.github.spotbugs + spotbugs-maven-plugin + + spotbugs-ignore.xml + + + + + + + org.apache.rat + apache-rat-core + + + org.apache.velocity + velocity-engine-core + + + org.apache.velocity.tools + velocity-tools-generic + + + org.apache.rat + apache-rat-core + ${project.version} + test-jar + tests + test + + + commons-cli + commons-cli + + + org.apache.commons + commons-csv + + + org.apache.commons + commons-compress + + + + org.tukaani + xz + + + + + org.junit.jupiter + junit-jupiter-api + test + + + org.junit.jupiter + junit-jupiter-params + test + + + org.assertj + assertj-core + test + + + diff --git a/apache-rat/pom.xml.versionsBackup b/apache-rat/pom.xml.versionsBackup new file mode 100644 index 000000000..bcf8b1e23 --- /dev/null +++ b/apache-rat/pom.xml.versionsBackup @@ -0,0 +1,413 @@ + + + + 4.0.0 + + org.apache.rat + apache-rat-project + 1.0.0-SNAPSHOT + + apache-rat + jar + Apache Creadur RAT::Packaging + + This library provides upwards compatibility for projects, + which are based on Apache RAT versions up to 0.5: Basically, it + provides a JAR file, which is the combination of + rat-core, rat-tasks, and its dependencies. + + + + org.apache.rat + apache-rat-core + + + org.apache.rat + apache-rat-tasks + + + org.apache.rat + apache-rat-testdata + test + + + + + + org.apache.maven.plugins + maven-source-plugin + + false + + true + + + + maven-resources-plugin + + + copy-generation-keywords + pre-site + + copy-resources + + + ${basedir}/src/site/apt + true + + + + ${project.build.outputDirectory}/org/apache/rat + + generation-keywords.txt + + + + + + + copy-release-notes + generate-resources + + copy-resources + + + ${project.build.outputDirectory}/META-INF + true + + + ${project.basedir}/.. + + RELEASE_NOTES.txt + + + + + + + copy-example-data + generate-resources + + copy-resources + + + ${project.build.testOutputDirectory}/examples + true + + + ../apache-rat-testdata/src/main/resources/examples + + + + + + + + org.apache.maven.plugins + maven-dependency-plugin + + + unpack dependencies + prepare-package + + unpack-dependencies + + + runtime + ${project.build.outputDirectory} + true + META-INF/** + + + + + + org.apache.maven.plugins + maven-jar-plugin + + + META-INF/maven + + + + org.apache.rat.Report + rat + Apache Creadur RAT + apache.org + ${project.version} + apache.org + Apache Creadur RAT + Apache Software Foundation + ${project.version} + + + + + + org.codehaus.mojo + animal-sniffer-maven-plugin + + + + check-java-1.8-compat + + true + + + + + + org.apache.maven.plugins + maven-site-plugin + + + org.apache.maven.doxia + doxia-module-markdown + 2.0.0 + + + ${project.groupId} + apache-rat-tools + ${project.parent.version} + + + ${project.groupId} + apache-rat-core + ${project.parent.version} + + + + + org.codehaus.mojo + exec-maven-plugin + + + Initial site generation + pre-site + + java + + + org.apache.rat.documentation.Exporter + test + + ${project.basedir}/src/templates + ${project.basedir}/src/site + + + + + Naming help generation + pre-site + + exec + + + java + ${project.basedir}/src/site/apt/name_xref.txt + + -cp + target/apache-rat-${project.version}.jar + org.apache.rat.tools.Naming + --maven + --ant + --cli + + + + + default_output_generation + pre-site + + exec + + + java + + -cp + target/apache-rat-${project.version}.jar + org.apache.rat.Report + --counter-max + UNAPPROVED:2 + --output-file + ${project.basedir}/src/site/examples/default-output.txt + ${project.build.testOutputDirectory}/examples/exampleData + + + + + xml_output_generation + pre-site + + exec + + + java + + -cp + target/apache-rat-${project.version}.jar + org.apache.rat.Report + --counter-max + UNAPPROVED:2 + --output-file + ${project.basedir}/src/site/examples/rat-report.txt + --output-style + xml + ${project.build.testOutputDirectory}/examples/exampleData + + + + + unapproved_licenses_generation + pre-site + + exec + + + java + + -cp + target/apache-rat-${project.version}.jar + org.apache.rat.Report + --counter-max + UNAPPROVED:2 + --output-file + ${project.basedir}/src/site/examples/unapproved-licenses.txt + --output-style + unapproved-licenses + ${project.build.testOutputDirectory}/examples/exampleData + + + + + XSD generation + pre-site + + exec + + + java + ${project.basedir}/target/site/rat.xsd + + -cp + target/apache-rat-${project.version}.jar + org.apache.rat.tools.xsd.XsdGenerator + + + + + + + en_US + + + + + maven-clean-plugin + + + + src/site/apt/ + + *.txt + + false + + + src/site/examples/ + + *.txt + + false + + + + + + + + + org.apache.rat + apache-rat-plugin + + + + src/site/examples/** + src/site/apt/*.txt + + + + + org.eclipse.m2e + lifecycle-mapping + 1.0.0 + + + + + + org.apache.maven.plugins + maven-dependency-plugin + [2.0,) + + unpack-dependencies + + + + + + + + + + + + org.codehaus.mojo + exec-maven-plugin + + + + + + + apache-release + + + + org.apache.maven.plugins + maven-assembly-plugin + + ${basedir}/src/main/assembly/ + gnu + + + + make-assembly + package + + + single + + + + + + + + + diff --git a/pom.xml.versionsBackup b/pom.xml.versionsBackup new file mode 100644 index 000000000..9e7d4d9f0 --- /dev/null +++ b/pom.xml.versionsBackup @@ -0,0 +1,1092 @@ + + + + 4.0.0 + + org.apache + apache + 35 + + org.apache.rat + apache-rat-project + 1.0.0-SNAPSHOT + pom + Apache Creadur RAT + https://creadur.apache.org/rat/ + +Apache RAT is a release audit tool. It improves accuracy and efficiency when checking +releases. It is heuristic in nature: making guesses about possible problems. It +will produce false positives and cannot find every possible issue with a release. +Its reports require interpretation. + +In response to demands from project quality tool developers, RAT is available as a +library suitable for inclusion in tools. This POM describes that library. +Note that binary compatibility is not guaranteed between 0.x releases. + +Apache RAT is developed by the Apache Creadur project, a language and build +agnostic home for software distribution comprehension and audit tools. + + 2006 + + UTF-8 + + + a + 1.10.15 + 4.0.0-M1 + 17 + 3.2.3 + 5.21.0 + ${javaVersion} + ${javaVersion} + + 3.2.5 + 3.9.12 + RAT + 2.4.1 + 3.1 + + 3.4.0 + 3.15.2 + 3.0.0-M3 + 3.12.0 + 3.28.0 + + + 0.17 + 0.18.0-SNAPSHOT + + + + + staging + + invalid:url + + + + + + + org.apache.maven.skins + maven-fluido-skin + 2.1.0 + + + org.apache.rat + apache-rat-core + ${project.version} + + + org.apache.rat + apache-rat-testdata + ${project.version} + + + org.apache.rat + apache-rat-core + ${project.version} + test-jar + tests + + + org.apache.rat + apache-rat-tasks + ${project.version} + + + org.apache.rat + apache-rat-tools + ${project.version} + + + org.apache.rat + apache-rat-plugin + ${project.version} + + + commons-cli + commons-cli + 1.8.0 + + + org.apache.commons + commons-collections4 + 4.5.0 + + + commons-io + commons-io + 2.21.0 + + + org.apache.commons + commons-lang3 + 3.20.0 + + + org.apache.commons + commons-compress + 1.28.0 + + + org.apache.commons + commons-text + 1.15.0 + + + org.apache.commons + commons-csv + 1.14.1 + + + org.assertj + assertj-bom + ${assertj.version} + pom + import + + + org.junit + junit-bom + 6.1.0-M1 + pom + import + + + org.mockito + mockito-bom + ${mockito.version} + pom + import + + + org.hamcrest + hamcrest-library + 3.0 + test + + + org.apache.ant + ant + ${ant.version} + provided + + + org.apache.ant + ant-antunit + 1.4.1 + test + + + org.apache.ant + ant-testutil + ${ant.version} + test + + + org.apache.maven.plugin-tools + maven-plugin-annotations + ${mavenPluginPluginVersion} + provided + + + org.apache.maven.plugin-testing + maven-plugin-testing-harness + ${mavenPluginTestingVersion} + test + + + org.apache.maven + maven-plugin-api + ${mavenVersion} + provided + + + org.assertj + assertj-core + ${assertj.version} + test + + + org.apache.tika + tika-core + ${tika.version} + + + org.apache.tika + tika-parser-text-module + ${tika.version} + + + org.apache.velocity + velocity-engine-core + ${velocity.core.version} + + + org.apache.velocity.tools + velocity-tools-generic + ${velocity.tools.version} + + + org.codehaus.groovy + groovy-all + + 2.4.21 + test + + + com.google.jimfs + jimfs + 1.3.1 + test + + + + + + + + + org.apache.maven.plugins + maven-changes-plugin + ${mavenChangesVersion} + + ${basedir}/src/changes/changes.xml + Fix Version,Key,Component,Summary,Type,Resolution,Status + + Fix Version DESC,Type,Key DESC + Fixed + Resolved,Closed + + Bug,New Feature,Task,Improvement,Wish,Test + + ${commons.changes.onlyCurrentVersion} + ${commons.changes.maxEntries} + ${commons.changes.runOnlyAtExecutionRoot} + + + + + changes + jira-changes + github-changes + + + + + + + + org.codehaus.mojo + taglist-maven-plugin + 3.2.2 + + + + + Todo Work + + + todo + ignoreCase + + + fixme + ignoreCase + + + + + Refactor Work + + + refactor + ignoreCase + + + + + Review Work + + + review + ignoreCase + + + + + Deprecated items + + + @deprecated + ignoreCase + + + + + + + + + org.apache.maven.plugins + maven-checkstyle-plugin + + true + true + true + warning + true + src/conf/checkstyle.xml + src/conf/checkstyle-suppressions.xml + + + + org.apache.maven.plugins + maven-javadoc-plugin + ${mavenJavadocPluginVersion} + + + + TODO + X + To do: + + + true + none + + + + non-aggregate + + + + javadoc + + + + aggregate + + + + aggregate + + + + + + org.apache.maven.plugins + maven-jxr-plugin + 3.6.0 + + + + jxr-no-fork + test-jxr-no-fork + + + + + + org.apache.maven.plugins + maven-pmd-plugin + ${mavenPmdPluginVersion} + + + + pmd + + + + + + org.apache.maven.plugins + maven-project-info-reports-plugin + 3.9.0 + + + + dependencies + team + mailing-lists + issue-management + ci-management + + scm + + + + + + org.apache.rat + apache-rat-plugin + + + com.github.spotbugs + spotbugs-maven-plugin + + + + + clean install + + + + + org.codehaus.mojo + animal-sniffer-maven-plugin + 1.26 + + + + + + + + + org.apache.maven.plugins + maven-checkstyle-plugin + 3.6.0 + + + com.github.spotbugs + spotbugs-maven-plugin + 4.9.8.2 + + 46 + true + + org.apache.rat.- + + ${project.basedir}/spotbugs-ignore.xml + + + com.h3xstream.findsecbugs + findsecbugs-plugin + 1.14.0 + + + + + + + check + + + + + + org.apache.maven.plugins + maven-antrun-plugin + 3.2.0 + + + org.apache.ant + ant + ${ant.version} + + + + + org.apache.maven.plugins + maven-compiler-plugin + 3.14.1 + + ${javaVersion} + ${javaVersion} + ${javaVersion} + + + + org.apache.maven.plugins + maven-javadoc-plugin + ${mavenJavadocPluginVersion} + + + org.apache.maven.plugins + maven-dependency-plugin + 3.9.0 + + + org.apache.maven.plugins + maven-invoker-plugin + 3.9.1 + + + org.apache.maven.plugins + maven-pmd-plugin + ${mavenPmdPluginVersion} + + ${javaVersion} + + + + org.apache.maven.plugins + maven-plugin-plugin + ${mavenPluginPluginVersion} + + + org.apache.maven.plugins + maven-plugin-report-plugin + ${mavenPluginPluginVersion} + + + org.apache.maven.plugins + maven-site-plugin + 3.21.0 + + + org.apache.rat + apache-rat-plugin + + 0.17 + + ECLIPSE + IDEA + MAC + + .asf.yaml + src/site/apt/naming_help.txt + **/iso-8859-1.html + **/velocity.log + + src/site/javadocFont/resources/fonts/dejavu.css + + bin/**/* + .externalToolBuilders/**/* + + + + + org.apache.maven.plugins + maven-remote-resources-plugin + 3.3.0 + + + org.apache.maven.plugins + maven-release-plugin + 3.3.1 + + + true + forked-path + + + + org.apache.maven.plugins + maven-resources-plugin + 3.4.0 + + ISO-8859-1 + false + + + + org.apache.maven.plugins + maven-failsafe-plugin + 3.5.4 + + + org.apache.maven.plugins + maven-surefire-plugin + 3.5.4 + + 1 + -Dfile.encoding=ISO-8859-1 + + + + + org.eclipse.m2e + lifecycle-mapping + 1.0.0 + + + + + + org.apache.rat + + apache-rat-plugin + + [0.17,) + + check + + + + + + + + + + + + org.codehaus.mojo + exec-maven-plugin + 3.6.3 + + + org.codehaus.mojo + build-helper-maven-plugin + 3.6.1 + + + org.codehaus.mojo + maven-clean-plugin + 3.4.1 + + + + + + maven-clean-plugin + + + + ${project.basedir}/src/site/apt + + **/*.txt + + false + + + + + + org.apache.maven.plugins + maven-checkstyle-plugin + + src/conf/checkstyle.xml + src/conf/checkstyle-suppressions.xml + + + + com.github.spotbugs + spotbugs-maven-plugin + + + org.apache.maven.plugins + maven-antrun-plugin + + + pre-site + copy-site-resources + + run + + + + + + + + + + + org.apache.maven.plugins + maven-enforcer-plugin + + + enforce-no-package-cycles + + enforce + + test + + true + + + + + + + + enforce-bytecode-version + + enforce + + + + + ${javaVersion} + + + ${mavenMinVersion} + + + true + + + + + + org.codehaus.mojo + extra-enforcer-rules + 1.11.0 + + + org.apache.ws.commons.axiom + no-package-cycles-enforcer-rule + 1.2.22 + + + + + org.apache.rat + apache-rat-plugin + + + + check + + + + + + org.codehaus.mojo + animal-sniffer-maven-plugin + + + + + org.apache.maven.wagon + wagon-ssh + 3.5.3 + + + + + JIRA + https://issues.apache.org/jira/browse/RAT + + + Jenkins + https://ci-builds.apache.org/job/Creadur/job/Creadur-Rat/ + + + + RAT Development (Apache Creadur project) + dev-subscribe@creadur.apache.org + dev-unsubscribe@creadur.apache.org + dev@creadur.apache.org + https://mail-archives.apache.org/mod_mbox/creadur-dev/ + + + RAT Commits (Apache Creadur project) + commits-subscribe@creadur.apache.org + commits-unsubscribe@creadur.apache.org + https://mail-archives.apache.org/mod_mbox/creadur-commits/ + + + + + bodewig + Stefan Bodewig + bodewig@apache.org + + Emeritus + + + + rdonkin + Robert Burrell Donkin + rdonkin@apache.org + + PMC + + + + jochen + Jochen Wiedmann + jochen@apache.org + + Emeritus + + + + gmcdonald + Gavin + gmcdonald@apache.org + + PMC + + + + brianf + Brian Fox + brianf@apache.org + + PMC + + + + dennisl + Dennis Lundberg + dennisl@apache.org + + Emeritus + + + + rgardler + Ross Gardler + rgardler@apache.org + + PMC + + + + crossley + David Crossley + crossley@apache.org + + Emeritus + + + + dblevins + David Blevins + dblevins@apache.org + + PMC + + + + pottlinger + Philipp Ottlinger + pottlinger@apache.org + + PMC chair + + + + claudenw + Claude Warren + claude@apache.org + + PMC + + + + jbonofre + Jean-Baptiste Onofré + jbonofre@apache.org + + PMC + + + + + + Lars Trieloff + lars@trieloff.net + + + Jukka Zitting + jukka@apache.org + + + Todd Volkert + tvolkert+apache@gmail.com + + + Henri Yandell + bayard@apache.org + + + Guillaume Nodet + gnodet@apache.org + + + Karl Pauls + pauls@apache.org + + + Matthieu Riou + mriou@apache.org + + + Garrett Rooney + rooneg@apache.org + + + Paul Merlin + paulmerlin@apache.org + + + Niels Basjes + nielsbasjes@apache.org + + + Bernd Bohmann + bommel@apache.org + + + + scm:git:https://gitbox.apache.org/repos/asf/creadur-rat.git + scm:git:https://gitbox.apache.org/repos/asf/creadur-rat.git + https://gitbox.apache.org/repos/asf?p=creadur-rat.git + HEAD + + + apache-rat-core + apache-rat-plugin + apache-rat-tasks + apache-rat + apache-rat-tools + apache-rat-testdata + + + + Apache License, Version 2 + https://www.apache.org/licenses/LICENSE-2.0.txt + repo + An OSI approved open source license. + + + + Apache Software Foundation + https://www.apache.org + + + + maven.compiler.release + + [9,) + + + + 17 + + + + apache-release + + + + + maven-assembly-plugin + + + source-release-assembly + package + + single + + + true + + + + + + + + + + release-notes + + + + org.apache.maven.plugins + maven-changes-plugin + ${mavenChangesVersion} + + + src/changes + true + . + RELEASE-NOTES.txt + + ${mavenChangesVersion} + + + + + create-release-notes + generate-resources + + announcement-generate + + + + + + + + + + From d7395d22fce98ccbb1ca2b9e7b81c05d00c8a134 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Sat, 27 Dec 2025 12:45:25 +0100 Subject: [PATCH 03/32] Revert "RAT-530: Switch to 0.18 SNAPSHOT" This reverts commit 05756629810efb381f10245e59a65f011679e669. --- apache-rat-core/pom.xml.versionsBackup | 261 ----- apache-rat-plugin/pom.xml.versionsBackup | 473 --------- apache-rat-tasks/pom.xml.versionsBackup | 325 ------ apache-rat-testdata/pom.xml.versionsBackup | 47 - apache-rat-tools/pom.xml.versionsBackup | 148 --- apache-rat/pom.xml.versionsBackup | 413 -------- pom.xml.versionsBackup | 1092 -------------------- 7 files changed, 2759 deletions(-) delete mode 100644 apache-rat-core/pom.xml.versionsBackup delete mode 100644 apache-rat-plugin/pom.xml.versionsBackup delete mode 100644 apache-rat-tasks/pom.xml.versionsBackup delete mode 100644 apache-rat-testdata/pom.xml.versionsBackup delete mode 100644 apache-rat-tools/pom.xml.versionsBackup delete mode 100644 apache-rat/pom.xml.versionsBackup delete mode 100644 pom.xml.versionsBackup diff --git a/apache-rat-core/pom.xml.versionsBackup b/apache-rat-core/pom.xml.versionsBackup deleted file mode 100644 index 4819f23bc..000000000 --- a/apache-rat-core/pom.xml.versionsBackup +++ /dev/null @@ -1,261 +0,0 @@ - - - - 4.0.0 - - org.apache.rat - apache-rat-project - 1.0.0-SNAPSHOT - - apache-rat-core - jar - Apache Creadur RAT::Core - The core functionality of RAT that is used by all clients. - - - - false - src/main/resources - - - true - src/main/filtered-resources - - - - - - org.apache.rat - apache-rat-plugin - - - - **/default.xml - **/example-configuration.xml - - **/ReporterOptionsProvider.java - **/GPLLicenseTest.java - - src/test/resources/** - src/it/resources/ReportTest/** - - - - - - - - org.apache.maven.plugins - maven-jar-plugin - - - - test-jar - - - - - - org.apache.maven.plugins - maven-checkstyle-plugin - - true - true - true - warning - true - ../src/conf/checkstyle.xml - ../src/conf/checkstyle-suppressions.xml - - - - - check - - compile - - - - - com.github.spotbugs - spotbugs-maven-plugin - - spotbugs-ignore.xml - - - - org.codehaus.mojo - build-helper-maven-plugin - - - add-integration-test-source - generate-test-sources - - add-test-source - - - - src/it/java - - - - - add-integration-test-resources - generate-test-resources - - add-test-resource - - - - - src/it/resources - - notes.md - - - - - - - - - maven-resources-plugin - - - copy-release-notes - generate-resources - - copy-resources - - - ${project.build.outputDirectory}/META-INF - true - - - ${project.basedir}/.. - - RELEASE_NOTES.txt - - - - - - - copy-example-data - generate-resources - - copy-resources - - - ${project.build.testOutputDirectory}/examples - true - - - ../apache-rat-testdata/src/main/resources/examples - - - - - - - - - - - org.apache.rat - apache-rat-testdata - test - - - org.apache.commons - commons-collections4 - - - org.apache.commons - commons-lang3 - - - commons-io - commons-io - - - org.apache.commons - commons-compress - - - - org.tukaani - xz - - - - - org.apache.commons - commons-text - - - org.junit.jupiter - junit-jupiter-api - test - - - org.junit.vintage - junit-vintage-engine - test - - - org.junit.jupiter - junit-jupiter-params - test - - - commons-cli - commons-cli - - - org.mockito - mockito-core - test - - - org.assertj - assertj-core - test - - - org.apache.tika - tika-core - - - org.apache.tika - tika-parser-text-module - - - - - org.codehaus.groovy - groovy-all - test - - - com.google.jimfs - jimfs - test - - - diff --git a/apache-rat-plugin/pom.xml.versionsBackup b/apache-rat-plugin/pom.xml.versionsBackup deleted file mode 100644 index e10aa8e07..000000000 --- a/apache-rat-plugin/pom.xml.versionsBackup +++ /dev/null @@ -1,473 +0,0 @@ - - - - 4.0.0 - - apache-rat-project - org.apache.rat - 1.0.0-SNAPSHOT - - apache-rat-plugin - maven-plugin - Apache Creadur RAT::Plugin4Maven - A plugin for Apache Maven that runs Apache RAT - to audit the source to be distributed. - 2007 - - ${mavenMinVersion} - - - ${project.version} - 2.0.0 - - - - - false - src/main/resources - - - true - src/main/filtered-resources - - - - - src/test/filtered-resources - true - - - - - - org.apache.maven.plugins - maven-plugin-plugin - - true - apache-rat - - org.apache.rat.plugin - - - - mojo-descriptor - - descriptor - - - - - help-goal - - helpmojo - - - - - - org.apache.rat - apache-rat-plugin - - - - bin/**/* - .externalToolBuilders/**/* - - src/it/** - src/it/**/src.apt - src/test/resources/unit/** - **/*.iml - - src/site/apt/*.txt - - src/it/CustomLicense/src/**/ - - **/.bzrignore - invoker_target/** - src/test/resources/XmlOutputExamples/**/* - - - - - - org.eclipse.m2e - lifecycle-mapping - 1.0.0 - - - - - - org.apache.maven.plugins - maven-plugin-plugin - [3.3,) - - descriptor - helpmojo - - - - - - - - - org.codehaus.mojo - exec-maven-plugin - [3.5.0,) - - java - - - - - - - - - - - - - - - maven-resources-plugin - - - copy-release-notes - generate-resources - - copy-resources - - - ${project.build.outputDirectory}/META-INF - true - - - ${project.basedir}/.. - - RELEASE_NOTES.txt - - - - - - - - - org.codehaus.mojo - exec-maven-plugin - - - Create BaseRatMojo - - java - - generate-sources - - org.apache.rat.tools.MavenGenerator - test - - org.apache.rat.plugin - BaseRatMojo - ${project.build.sourceDirectory} - - - - - Initial site generation - pre-site - - java - - - org.apache.rat.documentation.Exporter - test - - ${project.basedir}/src/templates - ${project.basedir}/src/site - - - - - - - en_US - - - - - org.apache.maven.plugins - maven-plugin-report-plugin - - - org.apache.maven.plugins - maven-invoker-plugin - - ${project.build.directory}/invoker_target - ${project.build.directory}/local-repo - true - src/it/settings.xml - verify - - - - integration-test - - install - run - - - - - - maven-clean-plugin - - - - invoker_target - false - - - src/main/java/org/apache/rat/plugin/ - - BaseRatMojo.java - - false - - - - - - org.apache.maven.plugins - maven-checkstyle-plugin - - true - true - true - warning - true - ../src/conf/checkstyle.xml - ../src/conf/checkstyle-suppressions.xml - - - - - check - - compile - - - - - - - - commons-cli - commons-cli - - - org.apache.rat - apache-rat-core - - - - org.apache.rat - apache-rat-tools - test - - - org.apache.rat - apache-rat-core - test-jar - tests - test - - - org.mockito - mockito-core - test - - - org.junit.jupiter - junit-jupiter-api - test - - - org.junit.vintage - junit-vintage-engine - test - - - org.junit.jupiter - junit-jupiter-params - test - - - org.apache.maven.plugin-tools - maven-plugin-annotations - provided - - - org.apache.maven - maven-artifact - ${mavenVersion} - provided - - - org.apache.maven - maven-model - ${mavenVersion} - provided - - - org.apache.maven - maven-plugin-api - provided - - - org.apache.maven - maven-core - ${mavenVersion} - provided - - - org.apache.maven - maven-settings - ${mavenVersion} - test - - - org.apache.maven - maven-compat - ${mavenVersion} - test - - - org.apache.maven.doxia - doxia-core - ${doxiaVersion} - - - org.codehaus.plexus - plexus-container-default - - - xerces - xercesImpl - - - - - org.apache.maven.doxia - doxia-site-model - ${doxiaVersion} - - - org.apache.maven.doxia - doxia-module-xhtml5 - ${doxiaVersion} - - - org.apache.maven.doxia - doxia-sink-api - ${doxiaVersion} - - - org.apache.maven.doxia - doxia-integration-tools - ${doxiaVersion} - - - org.codehaus.plexus - plexus-container-default - - - - - org.apache.maven.doxia - doxia-site-renderer - ${doxiaVersion} - - - org.codehaus.plexus - plexus-container-default - - - - - org.apache.maven.reporting - maven-reporting-api - 4.0.0 - - - org.apache.maven.shared - maven-shared-utils - 3.4.2 - - - org.apache.maven.plugin-testing - maven-plugin-testing-harness - test - - - org.codehaus.plexus - plexus-testing - 2.0.2 - - - - org.junit.jupiter - junit-jupiter-api - - - - - org.assertj - assertj-core - test - - - org.codehaus.plexus - plexus-utils - 3.6.0 - - - org.apache.commons - commons-lang3 - - - - - - org.apache.maven.plugins - maven-javadoc-plugin - - - org.apache.maven.plugins - maven-plugin-plugin - ${mavenPluginPluginVersion} - - - org.apache.maven.plugins - maven-plugin-report-plugin - ${mavenPluginPluginVersion} - - - - diff --git a/apache-rat-tasks/pom.xml.versionsBackup b/apache-rat-tasks/pom.xml.versionsBackup deleted file mode 100644 index 35d003544..000000000 --- a/apache-rat-tasks/pom.xml.versionsBackup +++ /dev/null @@ -1,325 +0,0 @@ - - - - 4.0.0 - - org.apache.rat - apache-rat-project - 1.0.0-SNAPSHOT - - apache-rat-tasks - jar - Apache Creadur RAT::Tasks4Ant - - A plugin for Apache Ant that runs Apache RAT - to audit the source to be distributed. - - - - org.apache.rat - apache-rat-core - ${project.version} - - - org.apache.rat - apache-rat-tools - - - org.apache.rat - apache-rat-core - test-jar - tests - test - - - org.assertj - assertj-core - test - - - org.apache.ant - ant - - - org.apache.ant - ant-antunit - test - - - org.apache.ant - ant-testutil - test - - - org.junit.jupiter - junit-jupiter-api - test - - - org.junit.jupiter - junit-jupiter-engine - test - - - org.junit.jupiter - junit-jupiter-params - test - - - - - - false - src/main/resources - - - true - src/main/filtered-resources - - - - - org.apache.maven.plugins - maven-dependency-plugin - - - generate-test-resources - - copy-dependencies - - - true - ant-antunit - ${project.build.directory}/dependencies - - - - - - maven-resources-plugin - - - copy-release-notes - generate-resources - - copy-resources - - - ${project.build.outputDirectory}/META-INF - true - - - ${project.basedir}/.. - - RELEASE_NOTES.txt - - - - - - - - - org.codehaus.mojo - exec-maven-plugin - - - Create BaseAntTask - - java - - generate-sources - - test - org.apache.rat.tools.AntGenerator - - org.apache.rat.anttasks - BaseAntTask - ${project.build.sourceDirectory} - - - - - Initial site generation - pre-site - - java - - - org.apache.rat.documentation.Exporter - test - - ${project.basedir}/src/templates - ${project.basedir}/src/site - - - - - Ant documentation generation - pre-site - - java - - - org.apache.rat.tools.AntDocumentation - test - - ${project.basedir}/src/site/apt/ - - - - - - - org.apache.maven.plugins - maven-antrun-plugin - - - test - - run - - - ${skipTests} - - - - - - - - - - - - - - - - - - - - - - org.apache.maven.plugins - maven-checkstyle-plugin - - true - true - true - warning - true - ../src/conf/checkstyle.xml - ../src/conf/checkstyle-suppressions.xml - - - - - check - - compile - - - - - com.github.spotbugs - spotbugs-maven-plugin - - ../src/conf/spotbugs-exclude.xml - - - - maven-clean-plugin - - - - src/main/java/org/apache/rat/anttasks - - BaseAntTask.java - - - - - - - - - - org.apache.rat - apache-rat-plugin - - - - bin/**/* - .externalToolBuilders/**/* - - src/test/resources/ - src/site/apt/*.txt - - - - - org.eclipse.m2e - lifecycle-mapping - 1.0.0 - - - - - - org.apache.maven.plugins - maven-dependency-plugin - [2.0,) - - copy-dependencies - - - - - - - - - org.codehaus.mojo - exec-maven-plugin - [3.5.0,) - - java - - - - - - - - - - - - - - - - - org.apache.maven.plugins - maven-javadoc-plugin - - - - diff --git a/apache-rat-testdata/pom.xml.versionsBackup b/apache-rat-testdata/pom.xml.versionsBackup deleted file mode 100644 index 63f4040c7..000000000 --- a/apache-rat-testdata/pom.xml.versionsBackup +++ /dev/null @@ -1,47 +0,0 @@ - - - - 4.0.0 - - org.apache.rat - apache-rat-project - 1.0.0-SNAPSHOT - - apache-rat-testdata - Apache Creadur RAT::Testdata - - ${javaVersion} - ${javaVersion} - UTF-8 - - - - - - org.apache.rat - apache-rat-plugin - - - /src/main/resources/examples/** - - - - - - - diff --git a/apache-rat-tools/pom.xml.versionsBackup b/apache-rat-tools/pom.xml.versionsBackup deleted file mode 100644 index 728694d89..000000000 --- a/apache-rat-tools/pom.xml.versionsBackup +++ /dev/null @@ -1,148 +0,0 @@ - - - - 4.0.0 - - org.apache.rat - apache-rat-project - 1.0.0-SNAPSHOT - - apache-rat-tools - jar - Apache Creadur RAT::Tools - Tools to manage and report on RAT - - - - false - src/main/resources - - - true - src/main/filtered-resources - - - - - - org.apache.rat - apache-rat-plugin - - - - bin/**/* - .externalToolBuilders/**/* - - src/main/resources/Args.tpl - - src/test/resources/** - - src/main/resources/org/apache/rat/tools/ExampleGeneratorResources/** - - - - - - - - org.apache.maven.plugins - maven-checkstyle-plugin - - true - true - true - warning - true - ../src/conf/checkstyle.xml - ../src/conf/checkstyle-suppressions.xml - - - - - check - - compile - - - - - com.github.spotbugs - spotbugs-maven-plugin - - spotbugs-ignore.xml - - - - - - - org.apache.rat - apache-rat-core - - - org.apache.velocity - velocity-engine-core - - - org.apache.velocity.tools - velocity-tools-generic - - - org.apache.rat - apache-rat-core - ${project.version} - test-jar - tests - test - - - commons-cli - commons-cli - - - org.apache.commons - commons-csv - - - org.apache.commons - commons-compress - - - - org.tukaani - xz - - - - - org.junit.jupiter - junit-jupiter-api - test - - - org.junit.jupiter - junit-jupiter-params - test - - - org.assertj - assertj-core - test - - - diff --git a/apache-rat/pom.xml.versionsBackup b/apache-rat/pom.xml.versionsBackup deleted file mode 100644 index bcf8b1e23..000000000 --- a/apache-rat/pom.xml.versionsBackup +++ /dev/null @@ -1,413 +0,0 @@ - - - - 4.0.0 - - org.apache.rat - apache-rat-project - 1.0.0-SNAPSHOT - - apache-rat - jar - Apache Creadur RAT::Packaging - - This library provides upwards compatibility for projects, - which are based on Apache RAT versions up to 0.5: Basically, it - provides a JAR file, which is the combination of - rat-core, rat-tasks, and its dependencies. - - - - org.apache.rat - apache-rat-core - - - org.apache.rat - apache-rat-tasks - - - org.apache.rat - apache-rat-testdata - test - - - - - - org.apache.maven.plugins - maven-source-plugin - - false - - true - - - - maven-resources-plugin - - - copy-generation-keywords - pre-site - - copy-resources - - - ${basedir}/src/site/apt - true - - - - ${project.build.outputDirectory}/org/apache/rat - - generation-keywords.txt - - - - - - - copy-release-notes - generate-resources - - copy-resources - - - ${project.build.outputDirectory}/META-INF - true - - - ${project.basedir}/.. - - RELEASE_NOTES.txt - - - - - - - copy-example-data - generate-resources - - copy-resources - - - ${project.build.testOutputDirectory}/examples - true - - - ../apache-rat-testdata/src/main/resources/examples - - - - - - - - org.apache.maven.plugins - maven-dependency-plugin - - - unpack dependencies - prepare-package - - unpack-dependencies - - - runtime - ${project.build.outputDirectory} - true - META-INF/** - - - - - - org.apache.maven.plugins - maven-jar-plugin - - - META-INF/maven - - - - org.apache.rat.Report - rat - Apache Creadur RAT - apache.org - ${project.version} - apache.org - Apache Creadur RAT - Apache Software Foundation - ${project.version} - - - - - - org.codehaus.mojo - animal-sniffer-maven-plugin - - - - check-java-1.8-compat - - true - - - - - - org.apache.maven.plugins - maven-site-plugin - - - org.apache.maven.doxia - doxia-module-markdown - 2.0.0 - - - ${project.groupId} - apache-rat-tools - ${project.parent.version} - - - ${project.groupId} - apache-rat-core - ${project.parent.version} - - - - - org.codehaus.mojo - exec-maven-plugin - - - Initial site generation - pre-site - - java - - - org.apache.rat.documentation.Exporter - test - - ${project.basedir}/src/templates - ${project.basedir}/src/site - - - - - Naming help generation - pre-site - - exec - - - java - ${project.basedir}/src/site/apt/name_xref.txt - - -cp - target/apache-rat-${project.version}.jar - org.apache.rat.tools.Naming - --maven - --ant - --cli - - - - - default_output_generation - pre-site - - exec - - - java - - -cp - target/apache-rat-${project.version}.jar - org.apache.rat.Report - --counter-max - UNAPPROVED:2 - --output-file - ${project.basedir}/src/site/examples/default-output.txt - ${project.build.testOutputDirectory}/examples/exampleData - - - - - xml_output_generation - pre-site - - exec - - - java - - -cp - target/apache-rat-${project.version}.jar - org.apache.rat.Report - --counter-max - UNAPPROVED:2 - --output-file - ${project.basedir}/src/site/examples/rat-report.txt - --output-style - xml - ${project.build.testOutputDirectory}/examples/exampleData - - - - - unapproved_licenses_generation - pre-site - - exec - - - java - - -cp - target/apache-rat-${project.version}.jar - org.apache.rat.Report - --counter-max - UNAPPROVED:2 - --output-file - ${project.basedir}/src/site/examples/unapproved-licenses.txt - --output-style - unapproved-licenses - ${project.build.testOutputDirectory}/examples/exampleData - - - - - XSD generation - pre-site - - exec - - - java - ${project.basedir}/target/site/rat.xsd - - -cp - target/apache-rat-${project.version}.jar - org.apache.rat.tools.xsd.XsdGenerator - - - - - - - en_US - - - - - maven-clean-plugin - - - - src/site/apt/ - - *.txt - - false - - - src/site/examples/ - - *.txt - - false - - - - - - - - - org.apache.rat - apache-rat-plugin - - - - src/site/examples/** - src/site/apt/*.txt - - - - - org.eclipse.m2e - lifecycle-mapping - 1.0.0 - - - - - - org.apache.maven.plugins - maven-dependency-plugin - [2.0,) - - unpack-dependencies - - - - - - - - - - - - org.codehaus.mojo - exec-maven-plugin - - - - - - - apache-release - - - - org.apache.maven.plugins - maven-assembly-plugin - - ${basedir}/src/main/assembly/ - gnu - - - - make-assembly - package - - - single - - - - - - - - - diff --git a/pom.xml.versionsBackup b/pom.xml.versionsBackup deleted file mode 100644 index 9e7d4d9f0..000000000 --- a/pom.xml.versionsBackup +++ /dev/null @@ -1,1092 +0,0 @@ - - - - 4.0.0 - - org.apache - apache - 35 - - org.apache.rat - apache-rat-project - 1.0.0-SNAPSHOT - pom - Apache Creadur RAT - https://creadur.apache.org/rat/ - -Apache RAT is a release audit tool. It improves accuracy and efficiency when checking -releases. It is heuristic in nature: making guesses about possible problems. It -will produce false positives and cannot find every possible issue with a release. -Its reports require interpretation. - -In response to demands from project quality tool developers, RAT is available as a -library suitable for inclusion in tools. This POM describes that library. -Note that binary compatibility is not guaranteed between 0.x releases. - -Apache RAT is developed by the Apache Creadur project, a language and build -agnostic home for software distribution comprehension and audit tools. - - 2006 - - UTF-8 - - - a - 1.10.15 - 4.0.0-M1 - 17 - 3.2.3 - 5.21.0 - ${javaVersion} - ${javaVersion} - - 3.2.5 - 3.9.12 - RAT - 2.4.1 - 3.1 - - 3.4.0 - 3.15.2 - 3.0.0-M3 - 3.12.0 - 3.28.0 - - - 0.17 - 0.18.0-SNAPSHOT - - - - - staging - - invalid:url - - - - - - - org.apache.maven.skins - maven-fluido-skin - 2.1.0 - - - org.apache.rat - apache-rat-core - ${project.version} - - - org.apache.rat - apache-rat-testdata - ${project.version} - - - org.apache.rat - apache-rat-core - ${project.version} - test-jar - tests - - - org.apache.rat - apache-rat-tasks - ${project.version} - - - org.apache.rat - apache-rat-tools - ${project.version} - - - org.apache.rat - apache-rat-plugin - ${project.version} - - - commons-cli - commons-cli - 1.8.0 - - - org.apache.commons - commons-collections4 - 4.5.0 - - - commons-io - commons-io - 2.21.0 - - - org.apache.commons - commons-lang3 - 3.20.0 - - - org.apache.commons - commons-compress - 1.28.0 - - - org.apache.commons - commons-text - 1.15.0 - - - org.apache.commons - commons-csv - 1.14.1 - - - org.assertj - assertj-bom - ${assertj.version} - pom - import - - - org.junit - junit-bom - 6.1.0-M1 - pom - import - - - org.mockito - mockito-bom - ${mockito.version} - pom - import - - - org.hamcrest - hamcrest-library - 3.0 - test - - - org.apache.ant - ant - ${ant.version} - provided - - - org.apache.ant - ant-antunit - 1.4.1 - test - - - org.apache.ant - ant-testutil - ${ant.version} - test - - - org.apache.maven.plugin-tools - maven-plugin-annotations - ${mavenPluginPluginVersion} - provided - - - org.apache.maven.plugin-testing - maven-plugin-testing-harness - ${mavenPluginTestingVersion} - test - - - org.apache.maven - maven-plugin-api - ${mavenVersion} - provided - - - org.assertj - assertj-core - ${assertj.version} - test - - - org.apache.tika - tika-core - ${tika.version} - - - org.apache.tika - tika-parser-text-module - ${tika.version} - - - org.apache.velocity - velocity-engine-core - ${velocity.core.version} - - - org.apache.velocity.tools - velocity-tools-generic - ${velocity.tools.version} - - - org.codehaus.groovy - groovy-all - - 2.4.21 - test - - - com.google.jimfs - jimfs - 1.3.1 - test - - - - - - - - - org.apache.maven.plugins - maven-changes-plugin - ${mavenChangesVersion} - - ${basedir}/src/changes/changes.xml - Fix Version,Key,Component,Summary,Type,Resolution,Status - - Fix Version DESC,Type,Key DESC - Fixed - Resolved,Closed - - Bug,New Feature,Task,Improvement,Wish,Test - - ${commons.changes.onlyCurrentVersion} - ${commons.changes.maxEntries} - ${commons.changes.runOnlyAtExecutionRoot} - - - - - changes - jira-changes - github-changes - - - - - - - - org.codehaus.mojo - taglist-maven-plugin - 3.2.2 - - - - - Todo Work - - - todo - ignoreCase - - - fixme - ignoreCase - - - - - Refactor Work - - - refactor - ignoreCase - - - - - Review Work - - - review - ignoreCase - - - - - Deprecated items - - - @deprecated - ignoreCase - - - - - - - - - org.apache.maven.plugins - maven-checkstyle-plugin - - true - true - true - warning - true - src/conf/checkstyle.xml - src/conf/checkstyle-suppressions.xml - - - - org.apache.maven.plugins - maven-javadoc-plugin - ${mavenJavadocPluginVersion} - - - - TODO - X - To do: - - - true - none - - - - non-aggregate - - - - javadoc - - - - aggregate - - - - aggregate - - - - - - org.apache.maven.plugins - maven-jxr-plugin - 3.6.0 - - - - jxr-no-fork - test-jxr-no-fork - - - - - - org.apache.maven.plugins - maven-pmd-plugin - ${mavenPmdPluginVersion} - - - - pmd - - - - - - org.apache.maven.plugins - maven-project-info-reports-plugin - 3.9.0 - - - - dependencies - team - mailing-lists - issue-management - ci-management - - scm - - - - - - org.apache.rat - apache-rat-plugin - - - com.github.spotbugs - spotbugs-maven-plugin - - - - - clean install - - - - - org.codehaus.mojo - animal-sniffer-maven-plugin - 1.26 - - - - - - - - - org.apache.maven.plugins - maven-checkstyle-plugin - 3.6.0 - - - com.github.spotbugs - spotbugs-maven-plugin - 4.9.8.2 - - 46 - true - - org.apache.rat.- - - ${project.basedir}/spotbugs-ignore.xml - - - com.h3xstream.findsecbugs - findsecbugs-plugin - 1.14.0 - - - - - - - check - - - - - - org.apache.maven.plugins - maven-antrun-plugin - 3.2.0 - - - org.apache.ant - ant - ${ant.version} - - - - - org.apache.maven.plugins - maven-compiler-plugin - 3.14.1 - - ${javaVersion} - ${javaVersion} - ${javaVersion} - - - - org.apache.maven.plugins - maven-javadoc-plugin - ${mavenJavadocPluginVersion} - - - org.apache.maven.plugins - maven-dependency-plugin - 3.9.0 - - - org.apache.maven.plugins - maven-invoker-plugin - 3.9.1 - - - org.apache.maven.plugins - maven-pmd-plugin - ${mavenPmdPluginVersion} - - ${javaVersion} - - - - org.apache.maven.plugins - maven-plugin-plugin - ${mavenPluginPluginVersion} - - - org.apache.maven.plugins - maven-plugin-report-plugin - ${mavenPluginPluginVersion} - - - org.apache.maven.plugins - maven-site-plugin - 3.21.0 - - - org.apache.rat - apache-rat-plugin - - 0.17 - - ECLIPSE - IDEA - MAC - - .asf.yaml - src/site/apt/naming_help.txt - **/iso-8859-1.html - **/velocity.log - - src/site/javadocFont/resources/fonts/dejavu.css - - bin/**/* - .externalToolBuilders/**/* - - - - - org.apache.maven.plugins - maven-remote-resources-plugin - 3.3.0 - - - org.apache.maven.plugins - maven-release-plugin - 3.3.1 - - - true - forked-path - - - - org.apache.maven.plugins - maven-resources-plugin - 3.4.0 - - ISO-8859-1 - false - - - - org.apache.maven.plugins - maven-failsafe-plugin - 3.5.4 - - - org.apache.maven.plugins - maven-surefire-plugin - 3.5.4 - - 1 - -Dfile.encoding=ISO-8859-1 - - - - - org.eclipse.m2e - lifecycle-mapping - 1.0.0 - - - - - - org.apache.rat - - apache-rat-plugin - - [0.17,) - - check - - - - - - - - - - - - org.codehaus.mojo - exec-maven-plugin - 3.6.3 - - - org.codehaus.mojo - build-helper-maven-plugin - 3.6.1 - - - org.codehaus.mojo - maven-clean-plugin - 3.4.1 - - - - - - maven-clean-plugin - - - - ${project.basedir}/src/site/apt - - **/*.txt - - false - - - - - - org.apache.maven.plugins - maven-checkstyle-plugin - - src/conf/checkstyle.xml - src/conf/checkstyle-suppressions.xml - - - - com.github.spotbugs - spotbugs-maven-plugin - - - org.apache.maven.plugins - maven-antrun-plugin - - - pre-site - copy-site-resources - - run - - - - - - - - - - - org.apache.maven.plugins - maven-enforcer-plugin - - - enforce-no-package-cycles - - enforce - - test - - true - - - - - - - - enforce-bytecode-version - - enforce - - - - - ${javaVersion} - - - ${mavenMinVersion} - - - true - - - - - - org.codehaus.mojo - extra-enforcer-rules - 1.11.0 - - - org.apache.ws.commons.axiom - no-package-cycles-enforcer-rule - 1.2.22 - - - - - org.apache.rat - apache-rat-plugin - - - - check - - - - - - org.codehaus.mojo - animal-sniffer-maven-plugin - - - - - org.apache.maven.wagon - wagon-ssh - 3.5.3 - - - - - JIRA - https://issues.apache.org/jira/browse/RAT - - - Jenkins - https://ci-builds.apache.org/job/Creadur/job/Creadur-Rat/ - - - - RAT Development (Apache Creadur project) - dev-subscribe@creadur.apache.org - dev-unsubscribe@creadur.apache.org - dev@creadur.apache.org - https://mail-archives.apache.org/mod_mbox/creadur-dev/ - - - RAT Commits (Apache Creadur project) - commits-subscribe@creadur.apache.org - commits-unsubscribe@creadur.apache.org - https://mail-archives.apache.org/mod_mbox/creadur-commits/ - - - - - bodewig - Stefan Bodewig - bodewig@apache.org - - Emeritus - - - - rdonkin - Robert Burrell Donkin - rdonkin@apache.org - - PMC - - - - jochen - Jochen Wiedmann - jochen@apache.org - - Emeritus - - - - gmcdonald - Gavin - gmcdonald@apache.org - - PMC - - - - brianf - Brian Fox - brianf@apache.org - - PMC - - - - dennisl - Dennis Lundberg - dennisl@apache.org - - Emeritus - - - - rgardler - Ross Gardler - rgardler@apache.org - - PMC - - - - crossley - David Crossley - crossley@apache.org - - Emeritus - - - - dblevins - David Blevins - dblevins@apache.org - - PMC - - - - pottlinger - Philipp Ottlinger - pottlinger@apache.org - - PMC chair - - - - claudenw - Claude Warren - claude@apache.org - - PMC - - - - jbonofre - Jean-Baptiste Onofré - jbonofre@apache.org - - PMC - - - - - - Lars Trieloff - lars@trieloff.net - - - Jukka Zitting - jukka@apache.org - - - Todd Volkert - tvolkert+apache@gmail.com - - - Henri Yandell - bayard@apache.org - - - Guillaume Nodet - gnodet@apache.org - - - Karl Pauls - pauls@apache.org - - - Matthieu Riou - mriou@apache.org - - - Garrett Rooney - rooneg@apache.org - - - Paul Merlin - paulmerlin@apache.org - - - Niels Basjes - nielsbasjes@apache.org - - - Bernd Bohmann - bommel@apache.org - - - - scm:git:https://gitbox.apache.org/repos/asf/creadur-rat.git - scm:git:https://gitbox.apache.org/repos/asf/creadur-rat.git - https://gitbox.apache.org/repos/asf?p=creadur-rat.git - HEAD - - - apache-rat-core - apache-rat-plugin - apache-rat-tasks - apache-rat - apache-rat-tools - apache-rat-testdata - - - - Apache License, Version 2 - https://www.apache.org/licenses/LICENSE-2.0.txt - repo - An OSI approved open source license. - - - - Apache Software Foundation - https://www.apache.org - - - - maven.compiler.release - - [9,) - - - - 17 - - - - apache-release - - - - - maven-assembly-plugin - - - source-release-assembly - package - - single - - - true - - - - - - - - - - release-notes - - - - org.apache.maven.plugins - maven-changes-plugin - ${mavenChangesVersion} - - - src/changes - true - . - RELEASE-NOTES.txt - - ${mavenChangesVersion} - - - - - create-release-notes - generate-resources - - announcement-generate - - - - - - - - - - From b0a5fb8cb10dbbdc64d39422ec7aabd892c322f4 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Sat, 27 Dec 2025 12:49:46 +0100 Subject: [PATCH 04/32] RAT-530: prepare site for 018 --- .buildtools/generateStagingSiteInWebpageRepo | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.buildtools/generateStagingSiteInWebpageRepo b/.buildtools/generateStagingSiteInWebpageRepo index cab0d515f..d58d2d9d6 100755 --- a/.buildtools/generateStagingSiteInWebpageRepo +++ b/.buildtools/generateStagingSiteInWebpageRepo @@ -19,7 +19,7 @@ ./mvnw -B package site site:stage # DEVHINT: with trailing slash please! -targetDirectory=../creadur-site/rat100/ +targetDirectory=../creadur-site/rat018/ echo "Copying site resources into asf-site repo under $targetDirectory" cp -rvf target/staging/* $targetDirectory > /dev/null From 5fbf261dcb1d8e976b2bf2f809c0a50f6110b77a Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Tue, 30 Dec 2025 11:13:14 +0100 Subject: [PATCH 05/32] RAT-530: Adapt changelog for 0.18 --- src/changes/changes.xml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/changes/changes.xml b/src/changes/changes.xml index e8ed0a064..ae536f656 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -61,13 +61,13 @@ in order to be properly linked in site reports. Apache Creadur RAT developers - - + Due to the switch to Java17 language level we use UTF-8 as default charset to process configuration and exclusion configuration files within RAT. From b921c769bc63f4deb5ca9a4e82c93cb8ee562ba7 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Tue, 30 Dec 2025 11:14:18 +0100 Subject: [PATCH 06/32] RAT-530: Prepare for a 0.18 release --- pom.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pom.xml b/pom.xml index a2a343fe7..09668d3f6 100644 --- a/pom.xml +++ b/pom.xml @@ -68,8 +68,8 @@ agnostic home for software distribution comprehension and audit tools. 3.28.0 - 0.17 - 0.18-SNAPSHOT + 0.18 + 1.0.0-SNAPSHOT From 4cf6ddc275c3d4d59827d174aba5a73971e472bc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 7 Jan 2026 00:01:05 +0000 Subject: [PATCH 07/32] Bump org.apache:apache from 35 to 36 Bumps [org.apache:apache](https://github.com/apache/maven-apache-parent) from 35 to 36. - [Release notes](https://github.com/apache/maven-apache-parent/releases) - [Commits](https://github.com/apache/maven-apache-parent/commits) --- updated-dependencies: - dependency-name: org.apache:apache dependency-version: '36' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index a86f97d7e..2182eed15 100644 --- a/pom.xml +++ b/pom.xml @@ -20,7 +20,7 @@ org.apache apache - 35 + 36 org.apache.rat apache-rat-project From 122248520296b75bd285e67a2955419944f28755 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Wed, 7 Jan 2026 09:59:04 +0100 Subject: [PATCH 08/32] RAT-498: Raise minimal Maven version to be compliant with ASF parent - 3.9 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 2182eed15..c6644807b 100644 --- a/pom.xml +++ b/pom.xml @@ -57,7 +57,7 @@ agnostic home for software distribution comprehension and audit tools. ${javaVersion} ${javaVersion} - 3.2.5 + 3.9 3.9.12 RAT 2.4.1 From b24ed8865d0b7d5d1c5ebcd7199a296430c4fd53 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Wed, 7 Jan 2026 14:19:42 +0100 Subject: [PATCH 09/32] RAT-293: Add more logging to sonarcloud problems --- .github/workflows/sonarcloud.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index 5c46a30c1..adb5e9e62 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -33,4 +33,4 @@ jobs: - name: Build and analyze at ASF-sonarcloud env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} - run: ./mvnw -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=apache_creadur-rat -Dsonar.token=${SONAR_TOKEN} + run: ./mvnw -X -e verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=apache_creadur-rat -Dsonar.token=${SONAR_TOKEN} From 13ffd24b899f75f339d7d8d7d3464140fc8d822b Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Sun, 25 Jan 2026 16:57:33 +0100 Subject: [PATCH 10/32] RAT-440: Add changelog entry about doxia/xhtml upgrade --- src/changes/changes.xml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/changes/changes.xml b/src/changes/changes.xml index 672c118e2..147fd9573 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -68,6 +68,9 @@ in order to be properly linked in site reports. --> + + Upgrade to doxia 2.0.0 and generate XHTML5 reports during RAT runs (fixes multiple CVEs implicitly). + Fix NPE that license families is null if licenses are defined manually, reported by huangxiaoping from Hudi. From ecb7acbb121af394d5c759737b0f85428c1a6830 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Thu, 29 Jan 2026 11:39:13 +0100 Subject: [PATCH 11/32] RAT-293: Try adding sonar.org manually --- .github/workflows/sonarcloud.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index adb5e9e62..a41997877 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -33,4 +33,4 @@ jobs: - name: Build and analyze at ASF-sonarcloud env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} - run: ./mvnw -X -e verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=apache_creadur-rat -Dsonar.token=${SONAR_TOKEN} + run: ./mvnw -X -e verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=apache_creadur-rat -Dsonar.organization=apache -Dsonar.token=${SONAR_TOKEN} From fab2ea96b60218afba7ce56bff512d5b7ae13d0e Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Sat, 31 Jan 2026 22:44:45 +0100 Subject: [PATCH 12/32] RAT-293, INFRA-27608: Switch to org level repo secret --- .github/workflows/sonarcloud.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index a41997877..bf45b93db 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -32,5 +32,5 @@ jobs: restore-keys: ${{ runner.os }}-m2 - name: Build and analyze at ASF-sonarcloud env: - SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} + SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }} run: ./mvnw -X -e verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=apache_creadur-rat -Dsonar.organization=apache -Dsonar.token=${SONAR_TOKEN} From 42e05d72a7af32ab80f93f0acbfdd2b1428c5ced Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Feb 2026 00:34:28 +0000 Subject: [PATCH 13/32] Bump org.apache.maven.plugins:maven-compiler-plugin Bumps [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.14.1 to 3.15.0. - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](https://github.com/apache/maven-compiler-plugin/compare/maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.15.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.15.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 47e68d185..42fcfeb9d 100644 --- a/pom.xml +++ b/pom.xml @@ -570,7 +570,7 @@ agnostic home for software distribution comprehension and audit tools. org.apache.maven.plugins maven-compiler-plugin - 3.14.1 + 3.15.0 ${javaVersion} ${javaVersion} From 91bf69080f19f593f26e6d9b2580b31c7624c04a Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Mon, 2 Feb 2026 16:20:50 +0100 Subject: [PATCH 14/32] INFRA-27608, RAT-293: Add debug step for sonarcloud secret --- .github/workflows/sonarcloud.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index bf45b93db..6760ed624 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -30,6 +30,14 @@ jobs: path: ~/.m2 key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }} restore-keys: ${{ runner.os }}-m2 + - name: Debug Secret + run: | + if [ -z "${{ secrets.SONARCLOUD_TOKEN }}" ]; then + echo "SECRET IS EMPTY" + exit 1 + else + echo "SECRET IS DEFINED" + fi - name: Build and analyze at ASF-sonarcloud env: SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }} From a4a06cdd776d3c550fc1f909f210147df2a41dc7 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Mon, 2 Feb 2026 16:55:34 +0100 Subject: [PATCH 15/32] INFRA-27608, RAT-293: Tweak branch configuration to see if secrets are visible on PRs --- .github/workflows/sonarcloud.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index 6760ed624..e68e24d1f 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -1,8 +1,8 @@ name: SonarQube on: push: - branches: - - master +# branches: +# - master pull_request: types: [opened, synchronize, reopened] jobs: From 18862c28f37df2c0b5382e66c7a14e29f9fc0203 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Mon, 2 Feb 2026 16:58:20 +0100 Subject: [PATCH 16/32] INFRA-27608, RAT-293: Document that secrets are not visible if branches are configured --- .github/workflows/sonarcloud.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index e68e24d1f..f3a74391c 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -1,6 +1,7 @@ name: SonarQube on: push: +# RAT-293: Do not add any branches here as secrets are not visible in branches except master: # branches: # - master pull_request: @@ -30,7 +31,7 @@ jobs: path: ~/.m2 key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }} restore-keys: ${{ runner.os }}-m2 - - name: Debug Secret + - name: Debug Globally Configured Secret run: | if [ -z "${{ secrets.SONARCLOUD_TOKEN }}" ]; then echo "SECRET IS EMPTY" From e9a71d53133feeb69270c78c1438fc6c88de196f Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Mon, 2 Feb 2026 17:47:59 +0100 Subject: [PATCH 17/32] RAT-293: Reduce log noise in sonarcloud build step --- .github/workflows/sonarcloud.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index f3a74391c..9a2eb6b5c 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -42,4 +42,4 @@ jobs: - name: Build and analyze at ASF-sonarcloud env: SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }} - run: ./mvnw -X -e verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=apache_creadur-rat -Dsonar.organization=apache -Dsonar.token=${SONAR_TOKEN} + run: ./mvnw verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=apache_creadur-rat -Dsonar.organization=apache -Dsonar.token=${SONAR_TOKEN} From 9696f35b0370e203f20a22da8e3deb53ba77576e Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Mon, 2 Feb 2026 22:42:48 +0100 Subject: [PATCH 18/32] RAT-293: Do not run SonarCloud scan if triggered by dependabot --- .github/workflows/sonarcloud.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index 9a2eb6b5c..76efed213 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -1,13 +1,14 @@ name: SonarQube on: push: -# RAT-293: Do not add any branches here as secrets are not visible in branches except master: -# branches: -# - master +# RAT-293: Global secrets are not visible on dependabot runs thus block if triggered by Dependabot + branches: + - master pull_request: types: [opened, synchronize, reopened] jobs: build: + if: github.actor != 'dependabot[bot] name: Build and analyze runs-on: ubuntu-latest steps: From 93771f45c0da9340a860dbeb74ac5a9d70f845de Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Mon, 2 Feb 2026 22:43:56 +0100 Subject: [PATCH 19/32] RAT-293: Do not run SonarCloud scan if triggered by dependabot --- .github/workflows/sonarcloud.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index 76efed213..f1f1e50d5 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -8,7 +8,7 @@ on: types: [opened, synchronize, reopened] jobs: build: - if: github.actor != 'dependabot[bot] + if: github.actor != 'dependabot[bot]' name: Build and analyze runs-on: ubuntu-latest steps: From ee5bbab2daa5fccbd8df10b3ff5ccfeaf297f02b Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Mon, 2 Feb 2026 23:26:29 +0100 Subject: [PATCH 20/32] RAT-293: Remove debugging output --- .github/workflows/sonarcloud.yml | 8 -------- 1 file changed, 8 deletions(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index f1f1e50d5..9e96845fe 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -32,14 +32,6 @@ jobs: path: ~/.m2 key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }} restore-keys: ${{ runner.os }}-m2 - - name: Debug Globally Configured Secret - run: | - if [ -z "${{ secrets.SONARCLOUD_TOKEN }}" ]; then - echo "SECRET IS EMPTY" - exit 1 - else - echo "SECRET IS DEFINED" - fi - name: Build and analyze at ASF-sonarcloud env: SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }} From 8143f45988a2c6a994d3b3559371e5695ea9e03b Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Tue, 3 Feb 2026 09:54:51 +0100 Subject: [PATCH 21/32] RAT-293: Try to fix the master sonarcloud build --- .../src/test/java/org/apache/rat/OptionCollectionTest.java | 1 - .../src/test/java/org/apache/rat/ReporterOptionsTest.java | 1 - .../org/apache/rat/config/exclusion/ExclusionUtilsTest.java | 1 - .../src/test/java/org/apache/rat/mp/OptionMojoTest.java | 1 - .../test/java/org/apache/rat/anttasks/ReportOptionTest.java | 3 --- 5 files changed, 7 deletions(-) diff --git a/apache-rat-core/src/test/java/org/apache/rat/OptionCollectionTest.java b/apache-rat-core/src/test/java/org/apache/rat/OptionCollectionTest.java index 4011ce5e2..eb1805c50 100644 --- a/apache-rat-core/src/test/java/org/apache/rat/OptionCollectionTest.java +++ b/apache-rat-core/src/test/java/org/apache/rat/OptionCollectionTest.java @@ -44,7 +44,6 @@ import org.apache.rat.utils.DefaultLog; import org.apache.rat.utils.Log; import org.junit.jupiter.api.AfterAll; -import org.junit.jupiter.api.AfterEach; import org.junit.jupiter.api.Test; import org.junit.jupiter.api.io.CleanupMode; import org.junit.jupiter.api.io.TempDir; diff --git a/apache-rat-core/src/test/java/org/apache/rat/ReporterOptionsTest.java b/apache-rat-core/src/test/java/org/apache/rat/ReporterOptionsTest.java index 8af8b6867..ccb82f3c6 100644 --- a/apache-rat-core/src/test/java/org/apache/rat/ReporterOptionsTest.java +++ b/apache-rat-core/src/test/java/org/apache/rat/ReporterOptionsTest.java @@ -32,7 +32,6 @@ import org.apache.rat.utils.DefaultLog; import org.apache.rat.utils.Log; import org.junit.jupiter.api.AfterAll; -import org.junit.jupiter.api.AfterEach; import org.junit.jupiter.api.BeforeEach; import org.junit.jupiter.api.Test; import org.junit.jupiter.api.io.CleanupMode; diff --git a/apache-rat-core/src/test/java/org/apache/rat/config/exclusion/ExclusionUtilsTest.java b/apache-rat-core/src/test/java/org/apache/rat/config/exclusion/ExclusionUtilsTest.java index 48a2897ed..4f3746f2f 100644 --- a/apache-rat-core/src/test/java/org/apache/rat/config/exclusion/ExclusionUtilsTest.java +++ b/apache-rat-core/src/test/java/org/apache/rat/config/exclusion/ExclusionUtilsTest.java @@ -20,7 +20,6 @@ import org.apache.rat.ConfigurationException; import org.apache.rat.utils.ExtendedIterator; -import org.junit.jupiter.api.AfterEach; import org.junit.jupiter.api.Test; import org.junit.jupiter.api.io.CleanupMode; import org.junit.jupiter.api.io.TempDir; diff --git a/apache-rat-plugin/src/test/java/org/apache/rat/mp/OptionMojoTest.java b/apache-rat-plugin/src/test/java/org/apache/rat/mp/OptionMojoTest.java index 68c2864bd..7b9e27e41 100644 --- a/apache-rat-plugin/src/test/java/org/apache/rat/mp/OptionMojoTest.java +++ b/apache-rat-plugin/src/test/java/org/apache/rat/mp/OptionMojoTest.java @@ -32,7 +32,6 @@ import org.apache.rat.utils.DefaultLog; import org.codehaus.plexus.component.configurator.ComponentConfigurationException; import org.junit.jupiter.api.AfterAll; -import org.junit.jupiter.api.AfterEach; import org.junit.jupiter.api.Assertions; import org.junit.jupiter.api.BeforeAll; import org.junit.jupiter.api.io.CleanupMode; diff --git a/apache-rat-tasks/src/test/java/org/apache/rat/anttasks/ReportOptionTest.java b/apache-rat-tasks/src/test/java/org/apache/rat/anttasks/ReportOptionTest.java index b438f9344..9f66bc74d 100644 --- a/apache-rat-tasks/src/test/java/org/apache/rat/anttasks/ReportOptionTest.java +++ b/apache-rat-tasks/src/test/java/org/apache/rat/anttasks/ReportOptionTest.java @@ -35,9 +35,6 @@ import org.apache.rat.utils.DefaultLog; import org.apache.rat.utils.Log; import org.junit.jupiter.api.AfterAll; -import org.junit.jupiter.api.condition.EnabledIf; -import org.junit.jupiter.api.condition.EnabledOnOs; -import org.junit.jupiter.api.condition.OS; import org.junit.jupiter.api.io.CleanupMode; import org.junit.jupiter.api.io.TempDir; import org.junit.jupiter.params.ParameterizedTest; From 897ef7797f6177e66cb82e0c2859c9e37d4e70a4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Feb 2026 23:52:19 +0000 Subject: [PATCH 22/32] Bump com.gradle:develocity-maven-extension from 2.3.2 to 2.3.3 Bumps com.gradle:develocity-maven-extension from 2.3.2 to 2.3.3. --- updated-dependencies: - dependency-name: com.gradle:develocity-maven-extension dependency-version: 2.3.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .mvn/extensions.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.mvn/extensions.xml b/.mvn/extensions.xml index b5501577c..af51b1152 100644 --- a/.mvn/extensions.xml +++ b/.mvn/extensions.xml @@ -3,7 +3,7 @@ com.gradle develocity-maven-extension - 2.3.2 + 2.3.3 com.gradle From 6f6ba0d7d8ab3502b2e2ab97507e17764653f328 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Feb 2026 00:33:50 +0000 Subject: [PATCH 23/32] Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness Bumps org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1. --- updated-dependencies: - dependency-name: org.apache.maven.plugin-testing:maven-plugin-testing-harness dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 42fcfeb9d..900d08526 100644 --- a/pom.xml +++ b/pom.xml @@ -63,7 +63,7 @@ agnostic home for software distribution comprehension and audit tools. 2.4.1 3.1 - 3.5.0 + 3.5.1 3.15.2 3.0.0-M3 3.12.0 From f619167dc816ffa2a1797f16dbd61720488713bb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Feb 2026 00:32:59 +0000 Subject: [PATCH 24/32] Bump org.apache.maven.plugins:maven-dependency-plugin Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.9.0 to 3.10.0. - [Release notes](https://github.com/apache/maven-dependency-plugin/releases) - [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.9.0...maven-dependency-plugin-3.10.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-dependency-plugin dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 900d08526..4e4d8faf1 100644 --- a/pom.xml +++ b/pom.xml @@ -585,7 +585,7 @@ agnostic home for software distribution comprehension and audit tools. org.apache.maven.plugins maven-dependency-plugin - 3.9.0 + 3.10.0 org.apache.maven.plugins From 7006552622539ca46ee7354a2bf925fb17b00c9f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Feb 2026 00:33:27 +0000 Subject: [PATCH 25/32] Bump com.gradle:develocity-maven-extension from 2.3.3 to 2.3.4 Bumps com.gradle:develocity-maven-extension from 2.3.3 to 2.3.4. --- updated-dependencies: - dependency-name: com.gradle:develocity-maven-extension dependency-version: 2.3.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .mvn/extensions.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.mvn/extensions.xml b/.mvn/extensions.xml index af51b1152..15bcd7fb1 100644 --- a/.mvn/extensions.xml +++ b/.mvn/extensions.xml @@ -3,7 +3,7 @@ com.gradle develocity-maven-extension - 2.3.3 + 2.3.4 com.gradle From a04c6e5b65985db411059b56c93aeec983594cbf Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 23 Feb 2026 00:34:44 +0000 Subject: [PATCH 26/32] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5 Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.5.4 to 3.5.5. - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.4...surefire-3.5.5) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.5.5 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 4e4d8faf1..ce8901ee6 100644 --- a/pom.xml +++ b/pom.xml @@ -672,7 +672,7 @@ agnostic home for software distribution comprehension and audit tools. org.apache.maven.plugins maven-surefire-plugin - 3.5.4 + 3.5.5 1 From 13d55eba078a5723d5ed54ab3af2ff8b788ee1a8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 23 Feb 2026 00:34:57 +0000 Subject: [PATCH 27/32] Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.4 to 3.5.5 Bumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) from 3.5.4 to 3.5.5. - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.4...surefire-3.5.5) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-failsafe-plugin dependency-version: 3.5.5 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index ce8901ee6..49df90cc7 100644 --- a/pom.xml +++ b/pom.xml @@ -667,7 +667,7 @@ agnostic home for software distribution comprehension and audit tools. org.apache.maven.plugins maven-failsafe-plugin - 3.5.4 + 3.5.5 org.apache.maven.plugins From a9902a6a401dc4e248f73ebaaf6262b37b1b3fbb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 27 Feb 2026 00:32:14 +0000 Subject: [PATCH 28/32] Bump actions/upload-artifact from 6 to 7 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/maven.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 8dd4f3f83..5f0d5e521 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -63,7 +63,7 @@ jobs: run: ./mvnw -e -B -V -ntp clean install - name: Archive integration failure - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 if: failure() with: name: reporting-integration-test-failure-logs-${{ matrix.os }}-JDK${{ matrix.java }}-PR${{ github.run_id }} @@ -72,7 +72,7 @@ jobs: apache-rat-core/target/test-classes/ReportTest/** - name: Archive test failure - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 if: failure() with: name: test-failure-logs-${{ matrix.os }}-JDK${{ matrix.java }}-PR${{ github.run_id }} From 709cbac5ef9401f8783d6313159f8c8c399604ce Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Mar 2026 00:32:00 +0000 Subject: [PATCH 29/32] Bump org.mockito:mockito-bom from 5.21.0 to 5.22.0 Bumps [org.mockito:mockito-bom](https://github.com/mockito/mockito) from 5.21.0 to 5.22.0. - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](https://github.com/mockito/mockito/compare/v5.21.0...v5.22.0) --- updated-dependencies: - dependency-name: org.mockito:mockito-bom dependency-version: 5.22.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 49df90cc7..912806591 100644 --- a/pom.xml +++ b/pom.xml @@ -53,7 +53,7 @@ agnostic home for software distribution comprehension and audit tools. 4.0.0-M1 17 3.2.3 - 5.21.0 + 5.22.0 ${javaVersion} ${javaVersion} From 0a0d8257578fe53c3d3c0a73931b581d093021de Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 6 Mar 2026 00:33:09 +0000 Subject: [PATCH 30/32] Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0 Bumps [org.apache.maven.plugins:maven-resources-plugin](https://github.com/apache/maven-resources-plugin) from 3.4.0 to 3.5.0. - [Release notes](https://github.com/apache/maven-resources-plugin/releases) - [Commits](https://github.com/apache/maven-resources-plugin/compare/v3.4.0...maven-resources-plugin-3.5.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-resources-plugin dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 912806591..25fa00222 100644 --- a/pom.xml +++ b/pom.xml @@ -658,7 +658,7 @@ agnostic home for software distribution comprehension and audit tools. org.apache.maven.plugins maven-resources-plugin - 3.4.0 + 3.5.0 ISO-8859-1 false From b8bdabf0fec34d97ac3ff5ce14f7a07f6f7670fc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Mar 2026 00:32:32 +0000 Subject: [PATCH 31/32] Bump mavenVersion from 3.9.12 to 3.9.13 Bumps `mavenVersion` from 3.9.12 to 3.9.13. Updates `org.apache.maven:maven-plugin-api` from 3.9.12 to 3.9.13 - [Release notes](https://github.com/apache/maven/releases) - [Commits](https://github.com/apache/maven/compare/maven-3.9.12...maven-3.9.13) Updates `org.apache.maven:maven-artifact` from 3.9.12 to 3.9.13 Updates `org.apache.maven:maven-model` from 3.9.12 to 3.9.13 Updates `org.apache.maven:maven-core` from 3.9.12 to 3.9.13 Updates `org.apache.maven:maven-settings` from 3.9.12 to 3.9.13 Updates `org.apache.maven:maven-compat` from 3.9.12 to 3.9.13 - [Release notes](https://github.com/apache/maven/releases) - [Commits](https://github.com/apache/maven/compare/maven-3.9.12...maven-3.9.13) --- updated-dependencies: - dependency-name: org.apache.maven:maven-plugin-api dependency-version: 3.9.13 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.apache.maven:maven-artifact dependency-version: 3.9.13 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.apache.maven:maven-model dependency-version: 3.9.13 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.apache.maven:maven-core dependency-version: 3.9.13 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.apache.maven:maven-settings dependency-version: 3.9.13 dependency-type: direct:development update-type: version-update:semver-patch - dependency-name: org.apache.maven:maven-compat dependency-version: 3.9.13 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 25fa00222..a74521763 100644 --- a/pom.xml +++ b/pom.xml @@ -58,7 +58,7 @@ agnostic home for software distribution comprehension and audit tools. ${javaVersion} 3.9 - 3.9.12 + 3.9.13 RAT 2.4.1 3.1 From 5a3cd59ed945fb707aa3fd081f68adf2bbdfd656 Mon Sep 17 00:00:00 2001 From: "P. Ottlinger" Date: Tue, 10 Mar 2026 18:12:22 +0100 Subject: [PATCH 32/32] RAT-530: Adapt download page to current regulations, checksums from downloads.a.o --- src/site/xdoc/download_rat.xml.vm | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/src/site/xdoc/download_rat.xml.vm b/src/site/xdoc/download_rat.xml.vm index 69d01ae1b..f87ab7bc8 100644 --- a/src/site/xdoc/download_rat.xml.vm +++ b/src/site/xdoc/download_rat.xml.vm @@ -56,7 +56,7 @@ limitations under the License.

- The KEYS + The KEYS file links to the code signing keys used to sign the product. The PGP link downloads the OpenPGP compatible signature from our main site. The @@ -72,10 +72,10 @@ limitations under the License. apache-rat-${previousRatVersion}-bin.tar.bz2 - sha512 + sha512 - pgp + pgp @@ -83,10 +83,10 @@ limitations under the License. apache-rat-${previousRatVersion}-bin.tar.gz - sha512 + sha512 - pgp + pgp @@ -94,10 +94,10 @@ limitations under the License. apache-rat-${previousRatVersion}-bin.zip - sha512 + sha512 - pgp + pgp @@ -109,10 +109,10 @@ limitations under the License. apache-rat-${previousRatVersion}-src.tar.bz2 - sha512 + sha512 - pgp + pgp @@ -120,10 +120,10 @@ limitations under the License. apache-rat-${previousRatVersion}-src.tar.gz - sha512 + sha512 - pgp + pgp @@ -131,10 +131,10 @@ limitations under the License. apache-rat-${previousRatVersion}-src.zip - sha512 + sha512 - pgp + pgp