Skip to content

build(deps): bump org.apache.maven.resolver:maven-resolver-impl from 1.3.1 to 2.0.22 - #20180

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.apache.maven.resolver-maven-resolver-impl-2.0.22
Closed

build(deps): bump org.apache.maven.resolver:maven-resolver-impl from 1.3.1 to 2.0.22#20180
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.apache.maven.resolver-maven-resolver-impl-2.0.22

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor

Bumps org.apache.maven.resolver:maven-resolver-impl from 1.3.1 to 2.0.22.

Release notes

Sourced from org.apache.maven.resolver:maven-resolver-impl's releases.

2.0.22

🚀 New features and improvements

🐛 Bug Fixes

  • Fix InterruptedException silently dropping task in SmartExecutor.Limited.submit(Runnable) (#2012) @​elharo

📝 Documentation updates

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 402b249 [maven-release-plugin] prepare release maven-resolver-2.0.22
  • 832c953 docs: rewrite expected-checksums.md to STE rules (#2041)
  • ab8054b deps: Updates (#2061)
  • f434087 Support deprecated tag. (#2059)
  • ed4a939 Improve error reporting (#1983)
  • 14b23c9 Reconcile the two download pages and modernise them
  • a845d08 Drop the versions.junit5 property the parent already provides
  • df3b5d2 Fix #1998: use try-with-resources in test file utilities (#2056)
  • 8d6cf0a Bump org.redisson:redisson from 4.6.1 to 4.7.0 (#2053)
  • d72cfef Convert the index page from xdoc to Markdown
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.apache.maven.resolver:maven-resolver-impl](https://github.com/apache/maven-resolver) from 1.3.1 to 2.0.22.
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](apache/maven-resolver@maven-resolver-1.3.1...maven-resolver-2.0.22)

---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
  dependency-version: 2.0.22
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 27, 2026
@FrankChen021

Copy link
Copy Markdown
Member

Backward compatibility: INCOMPATIBLE — verified at PR head 5e3836b against upstream master 8c05f05. The PR changes only services/pom.xml but sets maven-resolver-impl to 2.0.22 while resolver API, SPI, util, connector-basic, and transport-http remain at 1.3.1. Pre-existing PullDependencies.java imports DefaultServiceLocator, which is absent from Resolver 2.0.22, and the 22 terminal CI failures confirm the resulting compile and RequireUpperBoundDeps breaks.

Closure rationale: CLOSED_HIGH_EFFORT / WONT_FIX_LARGE_CHANGE. A valid Resolver 2.x update requires coordinated alignment of the Resolver family and Maven provider/transport, replacement of DefaultServiceLocator, service provisioning and session-lifecycle migration, license metadata updates, and CLI/distribution verification. This is a broad compatibility migration, not a smallest surgical fix.

Code-change explanation: no tracked Java production or test source changed; the original PR changes only the maven-resolver-impl version line in services/pom.xml, and the failing PullDependencies.java call site is pre-existing and untouched.

@dependabot @github

dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/maven/org.apache.maven.resolver-maven-resolver-impl-2.0.22 branch August 28, 2026 03:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Area - Dependencies dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant