[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.codehaus.mojo:versions-maven-plugin (source)	2.23.0 → 2.24.0

---

Release Notes

mojohaus/versions (org.codehaus.mojo:versions-maven-plugin)

v2.24.0

Compare Source

Versions Maven Plugin 2.24.0 improves compatibility with modern Maven distributions when loading remote rulesUri configurations, refreshes its HTML report rendering and documentation site, and raises the minimum Maven version. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

• Bundled file and http(s) Wagons for rulesUri: wagon-file and wagon-http are now bundled with the plugin so loading version comparison rules via <rulesUri> (http://, https://, or file://) works out of the box on Maven distributions (including Maven 4) that no longer bundle Wagon (#​1474).
• Plain-text status indicators in HTML reports: The dependency, plugin, and property update reports now render status indicators as clear text instead of relying on external Doxia skin icon images (#​1472).
• Documentation site improvements: Added a top-level landing page and navigation bar to the documentation site and clarified the XMLStreamException FAQ (#​1454, #​1465).

🚨 Removed

• Require Maven 3.9.0 (#​1453) @​slachiewicz

🚀 New features and improvements

• Show report status as text instead of skin images (#​1472) @​slachiewicz

📝 Documentation updates

• Fix typo in XMLStreamException documentation (#​1465) @​ngocnhan-tran1996
• Use the MojoHaus license header on the site pages (#​1455) @​slachiewicz
• Add a landing page and a top bar to the site (#​1454) @​slachiewicz

👻 Maintenance

• Bundle the file and HTTP wagons used to load rulesUri (#​1474) @​slachiewicz
• Declare the Maven artifacts the code uses (#​1467) @​slachiewicz
• Clean up declared dependencies (#​1466) @​slachiewicz
• Keep Dependabot on SLF4J 1.7.x (#​1460) @​slachiewicz
• Remove the stale bot (#​1458) @​slachiewicz
• Keep Dependabot on Maven 3.9.x (#​1456) @​slachiewicz

🔧 Build

• Keep Dependabot on Resolver 1.9.x (#​1471) @​slachiewicz
• Run the fail-fast build with verify instead of install (#​1462) @​slachiewicz
• Use the runners' cached Temurin JDKs in CI (#​1459) @​slachiewicz

📦 Dependency updates

• Stay on maven-reporting-api 4.0.0 (#​1473) @​slachiewicz
• Bump the maven group across 1 directory with 7 updates (#​1469) @​dependabot[bot]
• Bump the maven group with 4 updates (#​1463) @​dependabot[bot]
• Bump org.codehaus.woodstox:stax2-api from 4.3.1 to 4.3.2 in the maven group (#​1461) @​dependabot[bot]
• Bump commons-codec:commons-codec from 1.22.1 to 1.23.0 in the maven group (#​1457) @​dependabot[bot]

Thanks to @​ngocnhan-tran1996 and @​slachiewicz.

Full changelog

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.