GeezerVison

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.7.0

⚠️ Deprecated

• Name enforcer 4.0.0 as the release that removes the legacy rule API (#1047) @​slachiewicz
• Deprecate the evaluateBeanshell rule (#1034) @​slachiewicz

🚀 New features and improvements

• Improve RequireUpperBoundDeps error message (#1059) @​Sambuddha-Jana
• [MENFORCER-433] - Add banPropertyPrefix rule to ban Maven properties by configured prefixes (#1039) @​juliojgd
• Improve RequireUpperBoundDeps error message (#1022) @​dhruv9b
• [ENFORCER-939] - Support enforcer.skip without a POM (#1021) @​dhruv9b

🐛 Bug Fixes

• Fix RequireUpperBoundDeps with test-scope mediation (#1064) @​efegokdemir
• Fix EnforcerRuleCache concurrency across plugin realms (#1057) @​efegokdemir
• Resolve plugins on copies of the model plugins (#1046) @​slachiewicz
• [MENFORCER-517] - RequireReleaseDeps checks now also for optional dependencies (#1025) @​schwarfl
• fix: avoid misleading legacy warning for unknown rules (#1037) @​efegokdemir
• requireFilesExist should accept a symbolic link (#1031) @​slawekjaranowski
• Fix/916 require same versions for managed report plugins (#1024) @​dhruv9b
• fix: correct enforceBytecodeVersion excludes filtering (#990) @​w3lld1
• Fix: support custom output for 9 enforcer rules that ignored getMessage() (#1004) @​btpka3
• RequireFilesExist should accept a file reached through .. (#977) (#1011) @​AzazelSensei

📝 Documentation updates

• Deprecate the evaluateBeanshell rule (#1034) @​slachiewicz
• javadoc grammar (#1013) @​elharo
• Restore the common wording on the download page (#1008) @​slachiewicz
• Use <a id> rather than <a name> for the FAQ anchors (#1010) @​slachiewicz
• Convert the FAQ from FML to Markdown (#1009) @​slachiewicz
• Remove obsolete note, clean up typos (#1001) @​scordio
• Add enforceBytecodeVersion to rules index (#983) @​omribz156
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#989) @​potiuk

👻 Maintenance

• Ignore SLF4J 2.x in Dependabot (#1062) @​slachiewicz
• Remove redundant rat configuration (#1061) @​slawekjaranowski
• Fix ATR project name (#1060) @​slawekjaranowski
• Use push for PR Automation (#1058) @​slawekjaranowski
• Use workflow_run for PR check (#1056) @​slawekjaranowski
• Add project metadata for ATR (#1044) @​slawekjaranowski
• Use ReaderInputStream builder in RequireTextFileChecksum (#1052) @​slawekjaranowski
• Use Resolver RemoteRepository in BannedRepositories (#1051) @​slawekjaranowski
• Add PR check workflow (#1053) @​slawekjaranowski
• Replace plexus-utils StringUtils with commons-lang3 in enforcer-rules (#1048) @​slachiewicz

... (truncated)

• 465ebf2 [maven-release-plugin] prepare release enforcer-3.7.0
• b24b05c Fix test-scope mediation in RequireUpperBoundDeps
• 2b75dd3 Improve RequireUpperBoundDeps error message (#1059)
• b519cd0 Fix EnforcerRuleCache concurrency across plugin realms (#1055)
• f622234 Ignore SLF4J 2.x in Dependabot
• 5a9ebca Remove redundant rat configuration
• e8512d0 Fix ATR project name
• 08605b2 Use push for PR Automation
• fbe1ae5 Use workflow_run for PR check (#1056)
• b1d59aa Bump commons-codec:commons-codec from 1.22.1 to 1.23.0
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)