[Git][java-team/commons-parent][master] 9 commits: New upstream version 56

Pierre Gruet (@pgt) gitlab at salsa.debian.org
Sat Jan 7 08:14:15 GMT 2023



Pierre Gruet pushed to branch master at Debian Java Maintainers / commons-parent


Commits:
251534cc by Pierre Gruet at 2023-01-07T07:14:17+01:00
New upstream version 56
- - - - -
279780f9 by Pierre Gruet at 2023-01-07T07:14:18+01:00
Update upstream source from tag 'upstream/56'

Update to upstream version '56'
with Debian dir 6ab7f7f0809032334f12a731b7bc86ffbdd253e8
- - - - -
e25d2a81 by Pierre Gruet at 2023-01-07T07:15:52+01:00
Ignoring junit-bom dependency

- - - - -
3b7f5e75 by Pierre Gruet at 2023-01-07T07:16:34+01:00
Updating changelog

- - - - -
ec384ee2 by Pierre Gruet at 2023-01-07T07:17:09+01:00
Use secure URI in Homepage field.

Changes-By: lintian-brush
Fixes: lintian: homepage-field-uses-insecure-uri
See-also: https://lintian.debian.org/tags/homepage-field-uses-insecure-uri.html

- - - - -
3eaf8f6d by Pierre Gruet at 2023-01-07T07:17:14+01:00
Set upstream metadata fields: Bug-Database, Repository, Repository-Browse..

Changes-By: lintian-brush
Fixes: lintian: upstream-metadata-file-is-missing
See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html
Fixes: lintian: upstream-metadata-missing-repository
See-also: https://lintian.debian.org/tags/upstream-metadata-missing-repository.html

- - - - -
bf0b2fc1 by Pierre Gruet at 2023-01-07T07:19:21+01:00
Removing unneeded versioned B-D

- - - - -
f53af47a by Pierre Gruet at 2023-01-07T07:35:09+01:00
Providing a Lintian override for this package with no jar

- - - - -
ff23ab5c by Pierre Gruet at 2023-01-07T07:36:00+01:00
Upload to unstable

- - - - -


12 changed files:

- .github/workflows/maven.yml
- .github/workflows/scorecards-analysis.yml
- README.md
- RELEASE-NOTES.txt
- debian/changelog
- debian/control
- + debian/libcommons-parent-java.lintian-overrides
- debian/maven.ignoreRules
- + debian/upstream/metadata
- pom.xml
- src/changes/changes.xml
- src/site/site.xml


Changes:

=====================================
.github/workflows/maven.yml
=====================================
@@ -34,17 +34,17 @@ jobs:
 #            experimental: true        
         
     steps:
-    - uses: actions/checkout at 93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
+    - uses: actions/checkout at 755da8c3cf115ac066823e79a1e1788f8940201b
       with:
         persist-credentials: false
-    - uses: actions/cache at v3.0.11
+    - uses: actions/cache at v3.2.2
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
         restore-keys: |
           ${{ runner.os }}-maven-
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java at v3.6.0
+      uses: actions/setup-java at v3.9.0
       with:
         distribution: 'temurin'
         java-version: ${{ matrix.java }}


=====================================
.github/workflows/scorecards-analysis.yml
=====================================
@@ -40,12 +40,12 @@ jobs:
     steps:
 
       - name: "Checkout code"
-        uses: actions/checkout at 93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8   # 3.1.0
+        uses: actions/checkout at 755da8c3cf115ac066823e79a1e1788f8940201b   # 3.2.0
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action at 99c53751e09b9529366343771cc321ec74e9bd3d    # 2.0.6
+        uses: ossf/scorecard-action at e38b1902ae4f44df626f11ba0734b14fb91f8f86    # 2.1.2
         with:
           results_file: results.sarif
           results_format: sarif
@@ -64,6 +64,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif at b2a92eb56d8cb930006a1c6ed86b0782dd8a4297    # 2.1.35
+        uses: github/codeql-action/upload-sarif at 959cbb7472c4d4ad70cdfe6f4976053fe48ab394    # 2.1.37
         with:
           sarif_file: results.sarif


=====================================
README.md
=====================================
@@ -66,7 +66,7 @@ Alternatively you can pull it from the central Maven repositories:
 <dependency>
   <groupId>org.apache.commons</groupId>
   <artifactId>commons-parent</artifactId>
-  <version>55</version>
+  <version>56</version>
 </dependency>
 ```
 


=====================================
RELEASE-NOTES.txt
=====================================
@@ -1,3 +1,32 @@
+              Apache Commons Parent 56
+                  RELEASE NOTES
+
+The Apache Commons Parent team is pleased to announce the release of Apache Commons Parent 56.
+
+The Apache Commons Parent POM provides common settings for all Apache Commons components.
+
+Version 56: Maintenance and update dependencies
+
+Changes in this version include:
+
+Fixed Bugs:
+o                   Add Privacy link to site.xml
+
+Changes:
+o                   Bump apache from 28 to 29 #182. Thanks to Dependabot..
+o                   Bump versions-maven-plugin from 2.13.0 to 2.14.2 #181, #187, #191. Thanks to Dependabot.
+o                   Bump wagon-ssh from 3.5.2 to 3.5.3 #190. Thanks to Dependabot.
+
+
+Historical list of changes: https://commons.apache.org/proper/commons-parent/changes-report.html
+
+For complete information on Apache Commons Parent, including instructions on how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Apache Commons Parent website:
+
+https://commons.apache.org/proper/commons-parent/
+
+-----------------------------------------------------------------------------
+
               Apache Commons Parent 55
                   RELEASE NOTES
 


=====================================
debian/changelog
=====================================
@@ -1,3 +1,16 @@
+commons-parent (56-1) unstable; urgency=medium
+
+  * Team upload
+  * New upstream version 56
+  * Ignoring junit-bom dependency, thanks to Jérôme Charaoui
+    (Closes: #1028024)
+  * Removing unneeded versioned build-dependencies
+  * Use secure URI in Homepage field.
+  * Set upstream metadata fields: Bug-Database, Repository, Repository-Browse.
+  * Adding a Lintian override for this Java package providing no jar
+
+ -- Pierre Gruet <pgt at debian.org>  Sat, 07 Jan 2023 07:35:14 +0100
+
 commons-parent (55-1) unstable; urgency=medium
 
   * New upstream release


=====================================
debian/control
=====================================
@@ -8,16 +8,16 @@ Uploaders:
 Build-Depends:
  debhelper-compat (= 13),
  default-jdk,
- libapache-pom-java (>= 9),
- maven-repo-helper (>= 1.7)
+ libapache-pom-java,
+ maven-repo-helper
 Standards-Version: 4.6.2
 Vcs-Git: https://salsa.debian.org/java-team/commons-parent.git
 Vcs-Browser: https://salsa.debian.org/java-team/commons-parent
-Homepage: http://commons.apache.org
+Homepage: https://commons.apache.org
 
 Package: libcommons-parent-java
 Architecture: all
-Depends: ${misc:Depends}, libapache-pom-java (>= 9)
+Depends: ${misc:Depends}, libapache-pom-java
 Description: Maven metadata for Apache Commons project
  This package contains the Maven metadata shared between all components of
  the Apache Commons project.


=====================================
debian/libcommons-parent-java.lintian-overrides
=====================================
@@ -0,0 +1,3 @@
+# The purpose of this -java package is only to provide basis Maven
+# coordinates.
+javalib-but-no-public-jars


=====================================
debian/maven.ignoreRules
=====================================
@@ -42,3 +42,4 @@ com.github.spotbugs spotbugs-maven-plugin
 org.jacoco jacoco-maven-plugin
 org.spdx spdx-maven-plugin
 org.apache.maven.wagon wagon-ssh
+org.junit junit-bom


=====================================
debian/upstream/metadata
=====================================
@@ -0,0 +1,4 @@
+---
+Bug-Database: https://issues.apache.org/jira/browse/COMMONSSITE
+Repository: http://gitbox.apache.org/repos/asf/commons-parent.git
+Repository-Browse: https://gitbox.apache.org/repos/asf?p=commons-parent.git


=====================================
pom.xml
=====================================
@@ -23,11 +23,11 @@
   <parent>
     <groupId>org.apache</groupId>
     <artifactId>apache</artifactId>
-    <version>28</version>
+    <version>29</version>
   </parent>
   <groupId>org.apache.commons</groupId>
   <artifactId>commons-parent</artifactId>
-  <version>55</version>
+  <version>56</version>
   <packaging>pom</packaging>
   <name>Apache Commons Parent</name>
   <description>The Apache Commons Parent POM provides common settings for all Apache Commons components.</description>
@@ -89,12 +89,12 @@
     <minimalMavenBuildVersion>3.3.9</minimalMavenBuildVersion>
     <!-- configuration bits for cutting a release candidate, must be overridden by components -->
     <!-- TODO How can we make project.build.outputTimestamp and changes.xml's release data the same? -->
-    <project.build.outputTimestamp>2022-12-07T19:24:41Z</project.build.outputTimestamp>
+    <project.build.outputTimestamp>2022-12-30T16:12:53Z</project.build.outputTimestamp>
     <commons.release.version>${project.version}</commons.release.version>
     <commons.rc.version>RC1</commons.rc.version>
     <commons.jira.id>COMMONSSITE</commons.jira.id>
     <!-- Commons Release Plugin -->
-    <commons.bc.version>54</commons.bc.version>
+    <commons.bc.version>55</commons.bc.version>
     <commons.release.isDistModule>true</commons.release.isDistModule>
     <commons.releaseManagerName>Gary Gregory</commons.releaseManagerName>    
     <commons.releaseManagerKey>86fdc7e2a11262cb</commons.releaseManagerKey>
@@ -196,7 +196,7 @@
     <commons.spotbugs.impl.version>4.7.3</commons.spotbugs.impl.version>
     <commons.surefire-report.version>3.0.0-M7</commons.surefire-report.version>
     <commons.surefire.version>3.0.0-M7</commons.surefire.version>
-    <commons.wagon-ssh.version>3.5.2</commons.wagon-ssh.version>
+    <commons.wagon-ssh.version>3.5.3</commons.wagon-ssh.version>
 
     <!-- Default values for the download-page generation by commons-build-plugin -->
     <commons.release.name>${project.artifactId}-${commons.release.version}</commons.release.name>
@@ -682,7 +682,7 @@
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>versions-maven-plugin</artifactId>
           <!-- Version 2.2 causes an NPE with Maven 3.3.9 -->
-          <version>2.13.0</version>
+          <version>2.14.2</version>
         </plugin>
         <plugin>
           <groupId>org.jacoco</groupId>


=====================================
src/changes/changes.xml
=====================================
@@ -60,8 +60,15 @@ The <action> type attribute can be add,update,fix,remove.
      -->
 
     <body>
-        <release version="55" date="2022-12-07" description="Version 55: Maintenance and update dependencies">
+        <release version="56" date="2022-12-30" description="Version 56: Maintenance and update dependencies">
            <!-- FIX -->
+           <action type="fix" dev="sebb">Add Privacy link to site.xml</action>
+           <!-- UPDATE -->
+           <action type="update" dev="ggregory" due-to="Dependabot">Bump apache from 28 to 29 #182.</action>
+           <action type="update" dev="ggregory" due-to="Dependabot">Bump versions-maven-plugin from 2.13.0 to 2.14.2 #181, #187, #191.</action>
+           <action type="update" dev="ggregory" due-to="Dependabot">Bump wagon-ssh from 3.5.2 to 3.5.3 #190.</action>
+        </release>
+        <release version="55" date="2022-12-07" description="Version 55: Maintenance and update dependencies">
            <action type="update" dev="ggregory" due-to="Gary Gregory">Make CycloneDX work better with multi-module projects.</action>
            <action type="update" dev="ggregory" due-to="Gary Gregory">New interface methods must be default methods to maintain BC.</action>
            <!--  ADD -->


=====================================
src/site/site.xml
=====================================
@@ -82,24 +82,27 @@
 
     <!-- Should agree with commons-site -->
     <menu name="General Information" inherit="bottom">
-      <item name="Security"              href="https://commons.apache.org/security.html"/>
-      <item name="Volunteering"          href="https://commons.apache.org/volunteering.html" />
-      <item name="Contributing Patches"  href="https://commons.apache.org/patches.html" />
-      <item name="Building Components"   href="https://commons.apache.org/building.html" />
-      <item name="Commons Parent Pom"    href="https://commons.apache.org/commons-parent-pom.html" />
-      <item name="Commons Build Plugin"  href="https://commons.apache.org/build-plugin/index.html" />
-      <item name="Releasing Components"  href="https://commons.apache.org/releases/index.html" />
-      <item name="Wiki"                  href="https://cwiki.apache.org/confluence/display/commons/FrontPage" />
+      <item name="Security"               href="https://commons.apache.org/security.html"/>
+      <item name="Volunteering"           href="https://commons.apache.org/volunteering.html" />
+      <item name="Contributing Patches"   href="https://commons.apache.org/patches.html" />
+      <item name="Building Components"    href="https://commons.apache.org/building.html" />
+      <item name="Commons Parent POM"     href="https://commons.apache.org/commons-parent-pom.html" />
+      <item name="Commons Build Plugin"   href="https://commons.apache.org/build-plugin/index.html" />
+      <item name="Commons Release Plugin" href="/release-plugin/index.html" />
+      <item name="Site Publication"       href="/site-publish.html" />
+      <item name="Releasing Components"   href="https://commons.apache.org/releases/index.html" />
+      <item name="Wiki"                   href="https://cwiki.apache.org/confluence/display/commons/FrontPage" />
     </menu>
 
     <!-- Should agree with commons-site -->
     <menu name="ASF" inherit="bottom">
-      <item name="How the ASF works"     href="https://www.apache.org/foundation/how-it-works.html" />
-      <item name="Get Involved"          href="https://www.apache.org/foundation/getinvolved.html" />
-      <item name="Developer Resources"   href="https://www.apache.org/dev/" />
-      <item name="Code of Conduct"       href="https://www.apache.org/foundation/policies/conduct.html" />
-      <item name="Sponsorship"           href="https://www.apache.org/foundation/sponsorship.html" />
-      <item name="Thanks"                href="https://www.apache.org/foundation/thanks.html" />
+      <item name="How the ASF works"      href="https://www.apache.org/foundation/how-it-works.html" />
+      <item name="Get Involved"           href="https://www.apache.org/foundation/getinvolved.html" />
+      <item name="Developer Resources"    href="https://www.apache.org/dev/" />
+      <item name="Code of Conduct"        href="https://www.apache.org/foundation/policies/conduct.html" />
+      <item name="Privacy"                href="https://privacy.apache.org/policies/privacy-policy-public.html" />
+      <item name="Sponsorship"            href="https://www.apache.org/foundation/sponsorship.html" />
+      <item name="Thanks"                 href="https://www.apache.org/foundation/thanks.html" />
     </menu>
   </body>
 



View it on GitLab: https://salsa.debian.org/java-team/commons-parent/-/compare/f5985a6353523a182a558128c349130188398ebe...ff23ab5caca7ab9e7a8bc147cf6740ec634058cb

-- 
View it on GitLab: https://salsa.debian.org/java-team/commons-parent/-/compare/f5985a6353523a182a558128c349130188398ebe...ff23ab5caca7ab9e7a8bc147cf6740ec634058cb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-commits/attachments/20230107/044363d5/attachment.htm>


More information about the pkg-java-commits mailing list