Bump maven-invoker-plugin from 3.4.0 to 3.5.0 in /value
Bumps [maven-invoker-plugin](https://github.com/apache/maven-invoker-plugin) from 3.4.0 to 3.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/maven-invoker-plugin/releases">maven-invoker-plugin's releases</a>.</em></p> <blockquote> <h2>3.5.0</h2> <p><a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317525&version=12352645">Release Notes</a></p> <h2>📦 Dependency updates</h2> <ul> <li><a href="https://issues.apache.org/jira/browse/MINVOKER-326">[MINVOKER-326]</a> - Bump doxia-sink-api from 1.11.1 to 1.12.0 (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/pull/166">#166</a>) <a href="https://github.com/dependabot"><code>@​dependabot</code></a></li> <li><a href="https://issues.apache.org/jira/browse/MINVOKER-325">[MINVOKER-325]</a> - Bump groovy-bom from 4.0.6 to 4.0.9 (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/pull/176">#176</a>) <a href="https://github.com/dependabot"><code>@​dependabot</code></a></li> <li><a href="https://issues.apache.org/jira/browse/MINVOKER-322">[MINVOKER-322]</a> - Bump assertj-core from 3.23.1 to 3.24.2 (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/pull/168">#168</a>) <a href="https://github.com/dependabot"><code>@​dependabot</code></a></li> <li>Bump mockito-core from 4.9.0 to 4.10.0 (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/pull/158">#158</a>) <a href="https://github.com/dependabot"><code>@​dependabot</code></a></li> <li><a href="https://issues.apache.org/jira/browse/MINVOKER-327">[MINVOKER-327]</a> Upgrade to parent 39 (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/pull/157">#167</a>]</li> </ul> <h2>👻 Maintenance</h2> <ul> <li><a href="https://issues.apache.org/jira/browse/MINVOKER-324">[MINVOKER-324]</a> - Fix Temporary File Information Disclosure Vulnerability (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/pull/152">#152</a>) <a href="https://github.com/JLLeitschuh"><code>@​JLLeitschuh</code></a></li> <li><a href="https://issues.apache.org/jira/browse/MINVOKER-313">[MINVOKER-313]</a> - Get rid of maven-artifact-transfer - InstallMojo refactor (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/pull/174">#174</a>) <a href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/maven-invoker-plugin/commit/56ae7e22b99f83d869803ed610969be8399b2c15"><code>56ae7e2</code></a> [maven-release-plugin] prepare release maven-invoker-plugin-3.5.0</li> <li><a href="https://github.com/apache/maven-invoker-plugin/commit/bd4cd8b7cc04dd3297235ed7490e5a4858940258"><code>bd4cd8b</code></a> [MINVOKER-326] Bump doxia-sink-api from 1.11.1 to 1.12.0 (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/issues/166">#166</a>)</li> <li><a href="https://github.com/apache/maven-invoker-plugin/commit/7c884d2025258fb629159e2922d4eda4264d20e3"><code>7c884d2</code></a> [MINVOKER-325] Bump groovy-bom from 4.0.6 to 4.0.9 (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/issues/176">#176</a>)</li> <li><a href="https://github.com/apache/maven-invoker-plugin/commit/29da34c0bb723de4a25941b1c41b8521d03ed894"><code>29da34c</code></a> [MINVOKER-324] Temporary File Information Disclosure (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/issues/152">#152</a>)</li> <li><a href="https://github.com/apache/maven-invoker-plugin/commit/7024027bde6c816ac4a0fb43358478b49e1d6393"><code>7024027</code></a> [MINVOKER-322] Bump assertj-core from 3.23.1 to 3.24.2 (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/issues/168">#168</a>)</li> <li><a href="https://github.com/apache/maven-invoker-plugin/commit/6bb7c6b013d27a9c97e558bdfcaae5920365fc38"><code>6bb7c6b</code></a> Bump project version to 3.5.0-SNAPSHOT</li> <li><a href="https://github.com/apache/maven-invoker-plugin/commit/74de49339e406eaee5519fe050ef362a83f18519"><code>74de493</code></a> [MINVOKER-313] Get rid of maven-artifact-transfer - InstallMojo refactor</li> <li><a href="https://github.com/apache/maven-invoker-plugin/commit/c06ec6cf70fbf3986a70cd841320825d39cc093d"><code>c06ec6c</code></a> Fix format</li> <li><a href="https://github.com/apache/maven-invoker-plugin/commit/1e5496638b37ae073de50093f368bca401fa04df"><code>1e54966</code></a> Remove duplicate license headers</li> <li><a href="https://github.com/apache/maven-invoker-plugin/commit/6e9ac4b80ed676b3ca96e5b94c5347e274f7033e"><code>6e9ac4b</code></a> build with jdk19 (<a href="https://github-redirect.dependabot.com/apache/maven-invoker-plugin/issues/161">#161</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apache/maven-invoker-plugin/compare/maven-invoker-plugin-3.4.0...maven-invoker-plugin-3.5.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Fixes #1449 COPYBARA_INTEGRATE_REVIEW=https://github.com/google/auto/pull/1449 from google:dependabot/maven/value/org.apache.maven.plugins-maven-invoker-plugin-3.5.0 2579d0974ba40e1cfbd5f030e94b96c988385142 PiperOrigin-RevId: 509990111
D
dependabot[bot] committed
3b462fcde2debebd6f67e143ef027c8cf6689dca
Parent: 854ab07
Committed by Google Java Core Libraries <java-libraries-firehose+copybara@google.com>
on 2/16/2023, 2:43:37 AM