[dependabot]

Bumps org.codehaus.plexus:plexus-java from 1.6.0 to 1.7.0.

Release notes

Sourced from org.codehaus.plexus:plexus-java's releases.

1.7.0

This release removes the runtime dependency on ASM and improves multi-release module-info.class resolution:

• ASM-free module-info.class parsing (#242): Replaces AsmModuleInfoParser with a direct reader of the JVMS Module attribute (ModuleInfoClassParser) and drops the org.ow2.asm:asm dependency (requires org.objectweb.asm removed from module-info.java). Because class file major versions are no longer gated by ASM, module descriptors compiled by any future JDK parse without requiring a new plexus-java release.
• Target-release-aware multi-release lookup (#240, #237): Adds ResolvePathsRequest.setTargetRelease(JavaVersion) so callers (such as maven-compiler-plugin) can resolve versioned META-INF/versions/<N>/module-info.class descriptors against the target --release version rather than the running JDK version.
• Multi-release output directories (#236): Unpackaged reactor output directories built with multiReleaseOutput (META-INF/versions/<N>/module-info.class) now receive the same versioned descriptor lookup as multi-release JARs.

🚀 New features and improvements

• Read module descriptors without ASM (#242) @​slachiewicz
• Choose the versioned module descriptor by the target release (#240) @​slachiewicz

🐛 Bug Fixes

• Read the module descriptor of a multi-release output directory (#236) @​slachiewicz
• Read module descriptors newer than ASM supports (#239) @​slachiewicz

📝 Documentation updates

• Drop the Source Xref menu item (#234) @​slachiewicz
• Stop pinning a version in the README snippet (#233) @​slachiewicz

👻 Maintenance

• Target 1.7.0 for the next release (#241) @​slachiewicz
• Drop the Source Xref menu item (#234) @​slachiewicz

🔧 Build

• Let the extra matrix entries take the default Maven version (#248) @​slachiewicz
• Use the shared release-drafter workflow (#246) @​slachiewicz
• Build on JDK 26, 27 and 28-ea (#243) @​slachiewicz
• Ignore Mockito 5 in Dependabot (#238) @​slachiewicz
• Draft the version the labels imply, not always a patch (#232) @​slachiewicz

Full changelog

Commits

• f8ec748 [maven-release-plugin] prepare release plexus-languages-1.7.0
• c3f2165 Read module descriptors without ASM
• cadb3f0 Bump org.ow2.asm:asm from 9.10.1 to 9.11
• bcbd280 Let the extra matrix entries take the default Maven version
• 28b2ea5 Allow maintainers to start the build manually
• 57268fa Name the Maven version of the extra matrix entries
• 343c52f Use the shared release-drafter workflow
• ccabf9d Build on JDK 26, 27 and 28-ea
• 0551146 Target 1.7.0 for the next release
• 4f3f0c1 Choose the versioned module descriptor by the target release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 80707ac.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Package	Version	Score	Details
maven/org.codehaus.plexus:plexus-java	1.7.0	Unknown	Unknown

Scanned Files

• parent-pom/pom.xml

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

📚 Javadoc Generated

The Javadoc documentation has been generated for this PR. Download the javadoc artifact from the workflow run to view the complete API documentation with UML diagrams.