Bump org.apache.maven.plugins:maven-pmd-plugin from 3.12.0 to 3.28.0 #12543
Conversation
Bumps [org.apache.maven.plugins:maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) from 3.12.0 to 3.28.0. - [Release notes](https://github.com/apache/maven-pmd-plugin/releases) - [Commits](apache/maven-pmd-plugin@maven-pmd-plugin-3.12.0...maven-pmd-plugin-3.28.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-pmd-plugin dependency-version: 3.28.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
@blueorangutan package |
|
@DaanHoogland a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress. |
|
Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 16616 |
|
@blueorangutan test |
|
@DaanHoogland a [SL] Trillian-Jenkins test job (ol8 mgmt + kvm-ol8) has been kicked to run smoke tests |
|
[SF] Trillian test result (tid-15334)
|
|
checking persistency |
|
@DaanHoogland a [SL] Trillian-Jenkins test job (ol8 mgmt + kvm-ol8) has been kicked to run smoke tests |
|
[SF] Trillian test result (tid-15343)
|
There was a problem hiding this comment.
Pull request overview
Bumps the Maven PMD plugin version used by the build from 3.12.0 to 3.28.0.
Changes:
- Update
cs.pmd-plugin.versionproperty to3.28.0.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| <cs.spotbugs-maven-plugin.version>3.1.12.2</cs.spotbugs-maven-plugin.version> | ||
| <cs.jar-plugin.version>3.2.0</cs.jar-plugin.version> | ||
| <cs.pmd-plugin.version>3.12.0</cs.pmd-plugin.version> | ||
| <cs.pmd-plugin.version>3.28.0</cs.pmd-plugin.version> |
There was a problem hiding this comment.
Updating maven-pmd-plugin to 3.28.0 upgrades the underlying PMD engine (per upstream release notes, PMD 7.x). Our configured ruleset cloud-pmd.xml (from org.apache.cloudstack:checkstyle) references legacy rule paths like rulesets/java/basic.xml (see tools/checkstyle/src/main/resources/cloud-pmd.xml:34), which are not compatible with PMD 7 rule category layouts. This will likely cause mvn pmd:check / cpd-check to fail because the referenced rulesets can’t be resolved. Please either update cloud-pmd.xml to PMD 7-compatible rule references (category-based rulesets), or keep/pin the plugin/PMD version to one that supports the current ruleset.
| <cs.pmd-plugin.version>3.28.0</cs.pmd-plugin.version> | |
| <cs.pmd-plugin.version>3.21.0</cs.pmd-plugin.version> |
2 participants
Bumps org.apache.maven.plugins:maven-pmd-plugin from 3.12.0 to 3.28.0.
Release notes
Sourced from org.apache.maven.plugins:maven-pmd-plugin's releases.
... (truncated)
Commits
f152a3a[maven-release-plugin] prepare release maven-pmd-plugin-3.28.00678fd1Update historical PMD version in docs41d5069Bump org.apache.commons:commons-lang3 from 3.8.1 to 3.18.0 in ITs (#648)3ef805bBump pmdVersion from 7.16.0 to 7.17.0592d703Add hacktoberfest label to projectced9373Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 (#658)3cf5bc1Bump org.codehaus.plexus:plexus-resources from 1.3.0 to 1.3.1 (#654)9077c3bBump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#655)12ed57afeat: enable prevent branch protection rules (#653)fff2b95Bump pmdVersion from 7.15.0 to 7.16.0 (#652)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)