Skip to content

chore(deps): bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.13.0 - #5295

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/master/org.codehaus.plexus-plexus-archiver-4.13.0
Open

chore(deps): bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.13.0#5295
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/master/org.codehaus.plexus-plexus-archiver-4.13.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.13.0.

Release notes

Sourced from org.codehaus.plexus:plexus-archiver's releases.

4.13.0

The jar declares Automatic-Module-Name: org.codehaus.plexus.archiver, which is what makes this 4.13.0 rather than a patch. It also picks up plexus-io 3.7.0, whose FileSelector now follows symbolic links to files when isFollowingSymLinks() is set.

slf4j stays on 1.7.36 on this line: the 2.0.18 bump was taken and reverted, since the 4.x line targets consumers that have not moved.

🚀 New features and improvements

📦 Dependency updates

🔧 Build

4.12.0

🐛 Bug Fixes

📦 Dependency updates

4.11.0

📦 Dependency updates

  • Replace Airlift Snappy with Apache Commons Compress #413 @​slachiewicz
  • Removal of dependency to AirCompressor that contains vulnerabilities #411

... (truncated)

Commits
  • 8ffe7db [maven-release-plugin] prepare release plexus-archiver-4.13.0
  • 90a7961 Bump plexus-io to 3.7.0
  • d49f8a1 Bump com.github.luben:zstd-jni from 1.5.7-13 to 1.5.7-14
  • 7fbba4c Bump org.eclipse.sisu:org.eclipse.sisu.inject from 1.0.0 to 1.1.0
  • e8bd15f Revert "Bump slf4jVersion from 1.7.36 to 2.0.18"
  • 7e869d4 Bump plexus-utils to 3.6.2
  • 48ab8d8 Bump slf4jVersion from 1.7.36 to 2.0.18
  • 3907c70 Bump com.github.luben:zstd-jni from 1.5.7-9 to 1.5.7-13
  • 2852ce3 Update parent to plexus 27
  • 0b73cb6 Bump org.codehaus.plexus:plexus from 25 to 26
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 24, 2026
Bumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.10.0 to 4.13.0.
- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)
- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)
- [Commits](codehaus-plexus/plexus-archiver@plexus-archiver-4.10.0...plexus-archiver-4.13.0)

---
updated-dependencies:
- dependency-name: org.codehaus.plexus:plexus-archiver
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/master/org.codehaus.plexus-plexus-archiver-4.13.0 branch from dfb251e to d11bf1b Compare August 25, 2026 13:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants