Update dependency org.codehaus.gmavenplus:gmavenplus-plugin to v3.0.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.codehaus.gmavenplus:gmavenplus-plugin (source)	3.0.0 -> 3.0.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

groovy/GMavenPlus (org.codehaus.gmavenplus:gmavenplus-plugin)

v3.0.2

Compare Source

Bugs

[#​280] The 3.0.1 jar was corrupt (thanks @​eugene-sadovsky for reporting this!).

Enhancements

• [#​279] Fix CVE-2023-42503.

Potentially breaking changes

None.

Notes

The CVE fixed were related to dependencies of the plugin. While I haven't done an analysis of whether they were exploitable (since this is a Maven plugin and not an application), it seems unlikely.

v3.0.1

Compare Source

Bugs

• [#​276] Fix that enabling skipBytecodeCheck causes the Groovy version to be reported as not supporting the goal (thanks for reporting this @​jgenoctr!).

Enhancements

• [#​264] Support targeting Java 21 bytecode (thanks @​bmarwell!).
• [#​253] Fix CVE-2020-8908 and CVE-2023-2976.
• Fix CVE-2023-37460 (242baa8 and 623a56f).

Potentially breaking changes

None.

Notes

The CVEs fixed were related to dependencies of the plugin. While I haven't done an analysis of whether they were exploitable (since this is a Maven plugin and not an application), it seems unlikely.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[0crat]

@renovate/z[bot] this pull request is too small, just 2 lines changed (less than 10), there will be no formal code review, see §53 and §28; in the future, try to make sure your pull requests are not too small; @yegor256/z please review this and merge or reject

[yegor256]

@rultor please, try to merge, since 8 checks have passed

[rultor]

@rultor please, try to merge, since 8 checks have passed

@yegor256 OK, I'll try to merge now. You can check the progress of the merge here

[rultor]

@rultor please, try to merge, since 8 checks have passed

@renovate[bot] @yegor256 Oops, I failed. You can see the full log here (spent 2min)

Fetching fork
From github.com:jcabi/jcabi-parent
 * [new branch]      dependabot/maven/commons-net-commons-net-3.7.2 -> fork/dependabot/maven/commons-net-commons-net-3.7.2
 * [new branch]      dependabot/maven/javax.json-javax.json-api-1.1.4 -> fork/dependabot/maven/javax.json-javax.json-api-1.1.4
 * [new branch]      dependabot/maven/org.codehaus.gmavenplus-gmavenplus-plugin-1.11.1 -> fork/dependabot/maven/org.codehaus.gmavenplus-gmavenplus-plugin-1.11.1
 * [new branch]      dependabot/maven/org.codehaus.groovy-groovy-all-3.0.0-alpha-1 -> fork/dependabot/maven/org.codehaus.groovy-groovy-all-3.0.0-alpha-1
 * [new branch]      dependabot/maven/org.hibernate.validator-hibernate-validator-6.1.6.Final -> fork/dependabot/maven/org.hibernate.validator-hibernate-validator-6.1.6.Final
 * [new branch]      gh-pages   -> fork/gh-pages
 * [new branch]      master     -> fork/master
 * [new branch]      renovate/org.apache.maven.plugins-maven-dependency-plugin-3.x -> fork/renovate/org.apache.maven.plugins-maven-dependency-plugin-3.x
 * [new branch]      renovate/org.apache.maven.plugins-maven-release-plugin-3.x -> fork/renovate/org.apache.maven.plugins-maven-release-plugin-3.x
 * [new branch]      renovate/org.clojure-clojure-1.x -> fork/renovate/org.clojure-clojure-1.x
 * [new branch]      renovate/org.codehaus.gmavenplus-gmavenplus-plugin-3.x -> fork/renovate/org.codehaus.gmavenplus-gmavenplus-plugin-3.x
+ args=
+ '[' default == default ']'
+ args=' --ff'
+ '[' default == no ']'
+ '[' default == only ']'
+ export BRANCH=__rultor
+ BRANCH=__rultor
++ git show-branch __rultor
++ wc -l
+ '[' 0 -gt 0 ']'
+ git status
On branch master
Your branch is up to date with 'origin/master'.

nothing to commit, working tree clean
+ git checkout -B __rultor fork/renovate/org.codehaus.gmavenplus-gmavenplus-plugin-3.x
Switched to a new branch '__rultor'
branch '__rultor' set up to track 'fork/renovate/org.codehaus.gmavenplus-gmavenplus-plugin-3.x'.
+ git checkout -B master origin/master
Switched to and reset branch 'master'
branch 'master' set up to track 'origin/master'.
Your branch is up to date with 'origin/master'.
+ '[' false == true ']'
+ '[' false == true ']'
+ git merge --ff __rultor
Updating ea428da..643b876
Fast-forward
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
+ docker_when_possible
+ true
++ uptime
++ tail -n 1
++ sed 's/ /\n/g'
+ load=20.65
++ bc
++ echo 20.65 '>' 30
+ '[' 0 -eq 1 ']'
+ echo 'load average is 20.65, low enough to run a new Docker container'
load average is 20.65, low enough to run a new Docker container
+ break
+ cd ..
+ '[' -n '' ']'
+ use_image=yegor256/rultor-image:1.19.0
+ docker pull yegor256/rultor-image:1.19.0
Error response from daemon: Head "https://registry-1.docker.io/v2/yegor256/rultor-image/manifests/1.19.0": received unexpected HTTP status: 503 Service Unavailable
'cid' file is absent, most probably the Docker container wasn't started correctly

[yegor256]

@rultor merge

[rultor]

@rultor merge

@yegor256 OK, I'll try to merge now. You can check the progress of the merge here

[rultor]

@rultor merge

@yegor256 Done! FYI, the full log is here (took me 2min)