🚀 New features and improvements

• Add caching for GenericVersion instances in GenericVersionScheme (#1498) @gnodet
• Refine performance (alt) (#1508) @cstamas
• Metadata type out of coordinates (#1491) @cstamas
• Intern context strings (#1488) @cstamas
• Copy in copy method; otherwise reuse (#750) @cstamas
• DepMgr hashCode handling (#749) @cstamas

🐛 Bug Fixes

• Use GET() and PUT() instead of method() (#740) @cstamas

👻 Maintenance

• Align guice with Maven (#748) @cstamas
• Enable Github issues (#734) @Bukama

📦 Dependency updates

• Bump org.apache.maven:maven-parent from 44 to 45 (#1499) @cstamas
• Bump org.redisson:redisson from 3.49.0 to 3.50.0 (#1493) @dependabot[bot]
• Bump testcontainersVersion from 1.21.1 to 1.21.2 (#1497) @dependabot[bot]
• Bump bouncycastleVersion from 1.80 to 1.81 (#744) @dependabot[bot]
• Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.0 to 3.6.1 (#743) @dependabot[bot]
• Bump org.mockito:mockito-core from 5.17.0 to 5.18.0 (#726) @dependabot[bot]
• Bump sisuVersion from 0.9.0.M3 to 0.9.0.M4 (#727) @dependabot[bot]
• Bump testcontainersVersion from 1.21.0 to 1.21.1 (#733) @dependabot[bot]
• Bump org.redisson:redisson from 3.46.0 to 3.49.0 (#737) @dependabot[bot]
• Bump maven3Version from 3.9.9 to 3.9.10 (#741) @dependabot[bot]
• Bump org.codehaus.mojo:exec-maven-plugin from 3.5.0 to 3.5.1 (#731) @dependabot[bot]

🚀 New features and improvements

• Metadata type out of coordinates (#1503) @cstamas
• RFC9457 implementation (#1502) @doddi
• Intern context strings (#1500) @slawekjaranowski

👻 Maintenance

• Align plexus-util version with Maven (#1506) @slawekjaranowski
• Align guice version with Maven (#1505) @slawekjaranowski
• Enable Github Issues (1.9.x branch) (#735) @Bukama

📦 Dependency updates

• Bump org.redisson:redisson from 3.46.0 to 3.50.0 (#1495) @dependabot[bot]
• Bump sisuVersion from 0.9.0.M3 to 0.9.0.M4 (#725) @dependabot[bot]
• Bump org.apache.maven:maven-parent from 44 to 45 (#1496) @dependabot[bot]
• Bump mavenVersion from 3.9.9 to 3.9.10 (#738) @dependabot[bot]

Release Notes - Maven Resolver - Version 2.0.9

Bug

• [MRESOLVER-588] - Incomplete system properties in SessionBuilderSupplier

Task

• [MRESOLVER-699] - Fix release tag
• [MRESOLVER-700] - Bundle transport: read support
• [MRESOLVER-701] - Restore "aether.layout.maven2.checksumAlgorithms" to obey old (deprecated) key as well
• [MRESOLVER-720] - Add generated file warning headers to velocity templates

Dependency upgrade

• [MRESOLVER-702] - Bump com.google.code.gson:gson from 2.12.1 to 2.13.0
• [MRESOLVER-719] - Bump org.redisson:redisson from 3.45.1 to 3.46.0
• [MRESOLVER-721] - Bump com.google.code.gson:gson from 2.13.0 to 2.13.1
• [MRESOLVER-722] - Bump testcontainersVersion from 1.20.6 to 1.21.0
• [MRESOLVER-723] - Bump info.picocli:picocli from 4.7.6 to 4.7.7

What's Changed

• [MRESOLVER-700] Bundle transport: read support by @cstamas in #685
• Bump com.google.code.gson:gson from 2.12.1 to 2.13.0 by @dependabot in #686
• Add standard dependabot labels for 1.9.x by @slawekjaranowski in #690
• Add PR Automation and Stale GitHub Actions by @slawekjaranowski in #692
• Ignore some updates for 1.9.x by @slawekjaranowski in #698
• Ignore plexus-xml 4.x updates for 1.9.x by @slawekjaranowski in #706
• Ignore plexus-xml 4.x updates for 1.9.x - fix by @slawekjaranowski in #707
• Ignore javax.servlet-api 4.x updates for 1.9.x by @slawekjaranowski in #710
• Remove suppressions for checkstyle MagicNumber by @slawekjaranowski in #718
• Bump org.redisson:redisson from 3.45.1 to 3.46.0 by @dependabot in #715
• Add generated file warning headers to velocity templates by @gnodet in #691
• Bump com.google.code.gson:gson from 2.13.0 to 2.13.1 by @dependabot in #689
• Bump testcontainersVersion from 1.20.6 to 1.21.0 by @dependabot in #688
• Bump info.picocli:picocli from 4.7.6 to 4.7.7 by @dependabot in #687
• Mresolver 699 by @cstamas in #722
• [MRESOLVER-701] Support legacy property by @cstamas in #723
• [MRESOLVER-588] Incomplete system properties in suppliers by @cstamas in #724

Full Changelog: maven-resolver-2.0.8...maven-resolver-2.0.9

Release Notes - Maven Resolver - Version 1.9.23

Bug

• [MRESOLVER-659] - NPE in trusted checksum post processor if artifact resolution failed

Improvement

• [MRESOLVER-680] - Disable checksum by default for .sigstore.json as well
• [MRESOLVER-703] - HTTP transport should expose config for max redirects

Dependency upgrade

• [MRESOLVER-704] - Bump sisuVersion from 0.9.0.M2 to 0.9.0.M3
• [MRESOLVER-705] - Bump mavenVersion from 3.9.8 to 3.9.9
• [MRESOLVER-706] - Bump org.hamcrest:hamcrest-core from 2.2 to 3.0
• [MRESOLVER-707] - Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.2
• [MRESOLVER-708] - Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.22.0 to 0.23.1
• [MRESOLVER-709] - Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23 to 1.24
• [MRESOLVER-710] - Bump jettyVersion from 9.4.54.v20240208 to 9.4.57.v20241219
• [MRESOLVER-711] - Bump org.redisson:redisson from 3.34.1 to 3.46.0
• [MRESOLVER-712] - Bump commons-codec:commons-codec from 1.17.1 to 1.18.0
• [MRESOLVER-713] - Bump com.hazelcast:hazelcast from 5.3.7 to 5.3.8
• [MRESOLVER-714] - Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.2
• [MRESOLVER-715] - Bump org.apache.maven:maven-parent from 42 to 44
• [MRESOLVER-716] - Bump com.google.guava:guava from 33.1.0-jre to 33.4.8-jre
• [MRESOLVER-717] - Bump org.codehaus.plexus:plexus-classworlds from 2.7.0 to 2.9.0

What's Changed

• Update Maven in GH workflow by @cstamas in #663
• [1.9.x] [MRESOLVER-680] Sigstore extension added by @cstamas in #662
• [MRESOLVER-659] NPE in trusted checksum post processor if artifact resolution failed by @cstamas in #665
• Add PR Automation in 1.9.x branch by @slawekjaranowski in #693
• [MRESOLVER-704] Bump sisuVersion from 0.9.0.M2 to 0.9.0.M3 by @dependabot in #566
• [MRESOLVER-705] Bump mavenVersion from 3.9.8 to 3.9.9 by @dependabot in #568
• [MRESOLVER-706] Bump org.hamcrest:hamcrest-core from 2.2 to 3.0 by @dependabot in #571
• [MRESOLVER-707] Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.2 by @dependabot in #580
• [MRESOLVER-708] Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.22.0 to 0.23.1 by @dependabot in #636
• [MRESOLVER-709] Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23 to 1.24 by @dependabot in #699
• [MRESOLVER-710] Bump jettyVersion from 9.4.54.v20240208 to 9.4.57.v20241219 by @dependabot in #703
• [MRESOLVER-706] Bump org.hamcrest:hamcrest from 2.2 to 3.0 by @dependabot in #704
• [MRESOLVER-711] Bump org.redisson:redisson from 3.34.1 to 3.45.1 by @dependabot in #700
• [MRESOLVER-712] Bump commons-codec:commons-codec from 1.17.1 to 1.18.0 by @dependabot in #705
• [MRESOLVER-715] Bump org.apache.maven:maven-parent from 42 to 44 by @dependabot in #711
• [MRESOLVER-713] Bump com.hazelcast:hazelcast from 5.3.7 to 5.3.8 by @dependabot in #708
• [MRESOLVER-714] Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.2 by @dependabot in #709
• [MRESOLVER-716] Bump com.google.guava:guava from 33.1.0-jre to 33.4.8-jre by @dependabot in #712
• [MRESOLVER-717] Bump org.codehaus.plexus:plexus-classworlds from 2.7.0 to 2.9.0 by @dependabot in #713
• Update site descriptors by @slawekjaranowski in #717
• Deploy snapshot artifacts by Jenkins by @slawekjaranowski in #719
• [MRESOLVER-711] Bump org.redisson:redisson from 3.45.1 to 3.46.0 by @dependabot in #714
• [MRESOLVER-703] Expose redirect config for http transport by @slawekjaranowski in #716
• Remove suppressions for checkstyle MagicNumber by @slawekjaranowski in #720
• Refresh links on the configuration page by @slawekjaranowski in #721

Full Changelog: maven-resolver-1.9.22...maven-resolver-1.9.23

Release Notes - Maven Resolver - Version 2.0.8

Bug

• [MRESOLVER-569] - DependencyCollectionException.getResult().getExceptions() always returns one exception

Improvement

• [MRESOLVER-685] - Connector pipelining
• [MRESOLVER-687] - Add Artifact/Dependency validation SPI hook

Dependency upgrade

• [MRESOLVER-688] - Bump org.mockito:mockito-core from 5.15.2 to 5.16.1
• [MRESOLVER-689] - Bump testcontainersVersion from 1.20.5 to 1.20.6
• [MRESOLVER-690] - Bump junit from 5.11.2 to 5.12.1
• [MRESOLVER-691] - Bump org.redisson:redisson from 3.45.0 to 3.45.1
• [MRESOLVER-692] - Bump maven-parent from 43 to 44
• [MRESOLVER-694] - Bump org.ow2.asm:asm from 9.7.1 to 9.8
• [MRESOLVER-695] - Bump org.codehaus.plexus:plexus-testing from 1.4.0 to 1.5.0
• [MRESOLVER-696] - Bump org.mockito:mockito-core from 5.16.1 to 5.17.0
• [MRESOLVER-697] - Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0
• [MRESOLVER-698] - Update mvn4 supplier to Maven 4.0.0-rc3

What's Changed

• Bump org.mockito:mockito-core from 5.15.2 to 5.16.1 by @dependabot in #670
• Bump testcontainersVersion from 1.20.5 to 1.20.6 by @dependabot in #669
• Bump org.redisson:redisson from 3.45.0 to 3.45.1 by @dependabot in #673
• [MRESOLVER-687] Validator SPI by @cstamas in #671
• Bump maven-parent from 43 to 44 by @cstamas in #675
• Update site descriptors by @cstamas in #676
• Bump org.ow2.asm:asm from 9.7.1 to 9.8 by @dependabot in #677
• Bump org.codehaus.plexus:plexus-testing from 1.4.0 to 1.5.0 by @dependabot in #680
• Bump org.mockito:mockito-core from 5.16.1 to 5.17.0 by @dependabot in #682
• Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0 by @dependabot in #681
• [MRESOLVER-685] Connector pipelining by @cstamas in #679
• [MRESOLVER-569] Pass on exceptions by @cstamas in #678
• [MRESOLVER-698] Update Maven4 to rc-3 by @cstamas in #684

Full Changelog: maven-resolver-2.0.7...maven-resolver-2.0.8

Release Notes - Maven Resolver - Version 2.0.7

Bug

• [MRESOLVER-681] - Sigstore generator when loaded as Maven extension fails

Improvement

• [MRESOLVER-633] - Clarify caching of unresolvable artifacts in local repository
• [MRESOLVER-680] - Disable checksum by default for .sigstore.json as well

Dependency upgrade

• [MRESOLVER-678] - (test) Bump com.redis:testcontainers-redis from 2.2.3 to 2.2.4
• [MRESOLVER-679] - (test) Bump testcontainersVersion from 1.20.4 to 1.20.5
• [MRESOLVER-682] - Bump org.redisson:redisson from 3.44.0 to 3.45.0
• [MRESOLVER-683] - Bump dev.sigstore:sigstore-java from 1.2.0 to 1.3.0
• [MRESOLVER-684] - Bump slf4jVersion from 2.0.16 to 2.0.17

What's Changed

• [MRESOLVER-633] Document caching of unresolvable artifacts by @kwin in #651
• Do not skip PMD by @pzygielo in #653
• ASCII digits only for versions by @elharo in #652
• Bump com.redis:testcontainers-redis from 2.2.3 to 2.2.4 by @dependabot in #657
• Bump testcontainersVersion from 1.20.4 to 1.20.5 by @dependabot in #656
• [MRESOLVER-681] Sigstore TCCL bugfix by @cstamas in #660
• Bump org.redisson:redisson from 3.44.0 to 3.45.0 by @dependabot in #658
• Update Maven in GH workflow by @cstamas in #664
• [MRESOLVER-680] Sigstore extension added by @cstamas in #661
• Bump dev.sigstore:sigstore-java from 1.2.0 to 1.3.0 by @dependabot in #667
• Bump slf4jVersion from 2.0.16 to 2.0.17 by @dependabot in #666

Full Changelog: maven-resolver-2.0.6...maven-resolver-2.0.7

Release Notes - Maven Resolver - Version 2.0.6

Bug

• [MRESOLVER-650] - Demo DependencyTree not working for io.netty:netty-codec-http:4.1.114.Final
• [MRESOLVER-651] - Align documentation with renamed properties
• [MRESOLVER-652] - Resolver 2.x renamed some properties like split repo
• [MRESOLVER-653] - NPE in trusted checksum post processor if artifact resolution failed

Dependency upgrade

• [MRESOLVER-654] - Bump io.minio:minio from 8.5.14 to 8.5.17
• [MRESOLVER-655] - Bump org.redisson:redisson from 3.40.2 to 3.43.0
• [MRESOLVER-656] - (build) Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.23.0 to 0.23.1
• [MRESOLVER-657] - Bump commons-codec:commons-codec from 1.17.1 to 1.17.2
• [MRESOLVER-658] - (test) Bump org.mockito:mockito-core from 5.14.2 to 5.15.2
• [MRESOLVER-661] - (test) Bump com.redis:testcontainers-redis from 2.2.2 to 2.2.3
• [MRESOLVER-662] - Bump commons-codec:commons-codec from 1.17.2 to 1.18.0
• [MRESOLVER-663] - Bump bouncycastleVersion from 1.79 to 1.80
• [MRESOLVER-664] - Bump org.redisson:redisson from 3.43.0 to 3.44.0
• [MRESOLVER-665] - Bump com.google.code.gson:gson from 2.11.0 to 2.12.1

What's Changed

• add .DS_Store to gitignore by @elharo in #626
• Update sample code to use Guice injection instead of Plexus by @elharo in #627
• Prefer Guice injection in sample by @elharo in #628
• Bump io.minio:minio from 8.5.14 to 8.5.17 by @dependabot in #639
• Bump org.redisson:redisson from 3.40.2 to 3.43.0 by @dependabot in #637
• Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.23.0 to 0.23.1 by @dependabot in #635
• Bump commons-codec:commons-codec from 1.17.1 to 1.17.2 by @dependabot in #632
• Bump org.mockito:mockito-core from 5.14.2 to 5.15.2 by @dependabot in #631
• [MRESOLVER-653] NPE in case of failed result by @cstamas in #640
• Bump com.redis:testcontainers-redis from 2.2.2 to 2.2.3 by @dependabot in #645
• Bump commons-codec:commons-codec from 1.17.2 to 1.18.0 by @dependabot in #643
• Bump bouncycastleVersion from 1.79 to 1.80 by @dependabot in #642
• Update Redisson by @cstamas in #646
• Bump com.google.code.gson:gson from 2.11.0 to 2.12.1 by @dependabot in #648
• [MRESOLVER-651] Doco update re split repo by @cstamas in #650
• [MRESOLVER-652] Support legacy 1.9.x split repository config by @cstamas in #649

Full Changelog: maven-resolver-2.0.5...maven-resolver-2.0.6

Release Notes - Maven Resolver - Version 2.0.5

Bug

• [MRESOLVER-640] - (docgen) Errors are thrown when it should not (as it is only about "beautify" the output)

New Feature

• [MRESOLVER-644] - ArtifactTransformer SPI

Improvement

• [MRESOLVER-632] - (docgen) remove property numbering, they are misleading and properties are "floating" anyway (alphabetically)
• [MRESOLVER-635] - Use Instant instead of untyped millis for TransferResource startTime
• [MRESOLVER-645] - Drop repetitions while using LRM

Dependency upgrade

• [MRESOLVER-636] - Bump org.redisson:redisson from 3.38.1 to 3.40.1
• [MRESOLVER-637] - Bump dev.sigstore:sigstore-java from 1.0.0 to 1.2.0
• [MRESOLVER-638] - Bump io.minio:minio from 8.5.13 to 8.5.14
• [MRESOLVER-639] - (test) Bump testcontainersVersion from 1.20.3 to 1.20.4
• [MRESOLVER-641] - (build) Bump biz.aQute.bnd:bnd-maven-plugin from 7.0.0 to 7.1.0
• [MRESOLVER-642] - (docgen) Bump org.jboss.forge.roaster:roaster-api from 2.29.0.Final to 2.30.0.Final
• [MRESOLVER-643] - (docgen) Bump org.jboss.forge.roaster:roaster-jdt from 2.29.0.Final to 2.30.0.Final
• [MRESOLVER-647] - Bump org.redisson:redisson from 3.40.1 to 3.40.2
• [MRESOLVER-648] - Bump org.jboss.forge.roaster:roaster-api from 2.30.0.Final to 2.30.1.Final
• [MRESOLVER-649] - Bump org.jboss.forge.roaster:roaster-jdt from 2.30.0.Final to 2.30.1.Final

What's Changed

• Update to 1.9.22 by @elharo in #603
• Add missing .mvn dir by @gnodet in #616
• Bump org.redisson:redisson from 3.38.1 to 3.40.1 by @dependabot in #614
• Bump dev.sigstore:sigstore-java from 1.0.0 to 1.2.0 in /maven-resolver-generator-sigstore by @dependabot in #613
• Bump io.minio:minio from 8.5.13 to 8.5.14 by @dependabot in #608
• Bump testcontainersVersion from 1.20.3 to 1.20.4 by @dependabot in #606
• [MRESOLVER-635] Use Instant instead of untyped millis for TransferResource startTime by @gnodet in #615
• Bump biz.aQute.bnd:bnd-maven-plugin from 7.0.0 to 7.1.0 by @dependabot in #619
• Bump org.jboss.forge.roaster:roaster-api from 2.29.0.Final to 2.30.0.Final by @dependabot in #618
• Bump org.jboss.forge.roaster:roaster-jdt from 2.29.0.Final to 2.30.0.Final by @dependabot in #617
• [MRESOLVER-644] Artifact Transformer SPI by @cstamas in #605
• [MRESOLVER-645] Remove repeated LRM interaction by @cstamas in #611
• [MRESOLVER-632][MRESOLVER-640] Remove unneded error cases by @cstamas in #620
• Bump org.redisson:redisson from 3.40.1 to 3.40.2 by @dependabot in #622
• Bump org.jboss.forge.roaster:roaster-api from 2.30.0.Final to 2.30.1.Final by @dependabot in #623
• Bump org.jboss.forge.roaster:roaster-jdt from 2.30.0.Final to 2.30.1.Final by @dependabot in #624

Full Changelog: maven-resolver-2.0.4...maven-resolver-2.0.5

Release Notes - Maven Resolver - Version 2.0.4

Bug

• [MRESOLVER-627] - Improve handling and logging around transport selection
• [MRESOLVER-628] - Class cast issue (probably concurrency issue)

Task

• [MRESOLVER-629] - Make JDK transport default protocol HTTP/1.1

Dependency upgrade

• [MRESOLVER-630] - Bump bouncycastleVersion from 1.78.1 to 1.79
• [MRESOLVER-631] - Bump org.redisson:redisson from 3.37.0 to 3.38.1

What's Changed

• [MRESOLVER-630] Bump bouncycastleVersion from 1.78.1 to 1.79 by @cstamas in #602
• Bump org.redisson:redisson from 3.37.0 to 3.38.1 by @dependabot in #598
• [MRESOLVER-629] JDK transport should default to HTTP/1.1 by @cstamas in #600
• [MRESOLVER-628] Explicit cache key for prioritized components by @cstamas in #601
• [MRESOLVER-627] Improve transport selection and logging by @cstamas in #599

Full Changelog: maven-resolver-2.0.3...maven-resolver-2.0.4

Release Notes - Maven Resolver - Version 2.0.3

Bug

• [MRESOLVER-612] - Align connect and request timeout interpretation by HTTP transports
• [MRESOLVER-614] - Collector applies depMgt entries coming from a self onto itself

Improvement

• [MRESOLVER-613] - Deploy the properties metadata
• [MRESOLVER-615] - Increase default HTTP timeouts

Task

• [MRESOLVER-623] - Merge Docgen tool with Maven one

Dependency upgrade

• [MRESOLVER-616] - (build) Bump testcontainersVersion from 1.20.2 to 1.20.3
• [MRESOLVER-617] - Bump org.apache.velocity:velocity-engine-core from 2.4 to 2.4.1
• [MRESOLVER-618] - (build) Bump org.mockito:mockito-core from 5.14.1 to 5.14.2
• [MRESOLVER-620] - (build) Bump exec-maven-plugin to 3.5.0
• [MRESOLVER-621] - Update Jetty to 10.0.24
• [MRESOLVER-622] - Maven 4.0.0-beta-5
• [MRESOLVER-624] - Bump io.minio:minio from 8.5.12 to 8.5.13

What's Changed

• Bump testcontainersVersion from 1.20.2 to 1.20.3 by @dependabot in #586
• Bump org.apache.velocity:velocity-engine-core from 2.4 to 2.4.1 by @dependabot in #585
• Bump org.mockito:mockito-core from 5.14.1 to 5.14.2 by @dependabot in #583
• Bump org.codehaus.plexus:plexus-xml from 3.0.1 to 4.0.4 by @dependabot in #582
• Updates by @cstamas in #589
• Undo P-X raise by @cstamas in #590
• [MRESOLVER-612] Align timeout interpretations across HTTP transports by @cstamas in #587
• [MRESOLVER-614] Do not apply depMgt onto itself by @cstamas in #588
• Bump io.minio:minio from 8.5.12 to 8.5.13 by @dependabot in #593
• Merge docgen by @cstamas in #591

Full Changelog: maven-resolver-2.0.2...maven-resolver-2.0.3