<div class="container">
<h1>Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2026:3390-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-07-28T15:40:06Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
</ul>
</td>
</tr>
<tr>
<th>
Cross-References:
</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2025-48924.html">CVE-2025-48924</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-48924</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.7</span>
<span class="cvss-vector">CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-48924</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">4.7</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2025-48924</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">Basesystem Module 15-SP7</li>
<li class="list-group-item">Development Tools Module 15-SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Desktop 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing LTSS 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing LTSS 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Real Time 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP4 LTSS</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP5 LTSS</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP6 LTSS</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP7</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that solves one vulnerability can now be installed.</p>
<h2>Description:</h2>
<p>This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues:</p>
<p>apache-commons-lang3 was updated to 3.20.0:</p>
<ul>
<li>
<p>New features:</p>
<ul>
<li>Add SystemProperties.getPath(String, Supplier<Path>)</li>
<li>Add JavaVersion.JAVA_25</li>
<li>Add JavaVersion.JAVA_26</li>
<li>Add SystemUtils.IS_JAVA_25</li>
<li>Add SystemUtils.IS_JAVA_26</li>
<li>Add MutablePair.ofNonNull(Map.Entry)</li>
<li>Add TimedSemaphore.builder(), Builder, and deprecate
constructors</li>
<li>LANG-1504: Adding labels and history to split StopWatch</li>
</ul>
</li>
<li>
<p>Fixed Bugs:</p>
<ul>
<li>Optimize ObjectToStringComparator.compare() method</li>
<li>[javadoc] Improve StringUtils Javadoc</li>
<li>Fix internal inverted logic in private isEnum() method and
correct its usage in getFirstEnum()</li>
<li>Use accessors in ToStringStyle so subclasses can effectively
override them</li>
<li>'LocaleUtils.toLocale(String)' for a 2 letter country code
now returns a value instead of throwing an
'IllegalArgumentException'</li>
<li>Fix typo in StringUtils.trunctate() IllegalArgumentException
message and test assertion messages</li>
<li>Fix test fixture in
ReflectionDiffBuilderTest.testTransientFieldDifference()</li>
<li>LANG-1789: NullPointerException when generating
NoSuchMethodException in MethodUtils</li>
<li>LANG-1786: Map deprecated TimeZone short IDs and avoid JRE
WARNINGs to the console</li>
<li>LANG-1792: TypeUtils.toString() skips angle brackets for Class
type</li>
<li>Mention JDK 25 LTS as a tested version in the release notes</li>
</ul>
</li>
<li>
<p>Changes:</p>
<ul>
<li>Bump org.apache.commons:commons-parent from 88 to 92</li>
</ul>
</li>
</ul>
<p>Update to 3.19.0:</p>
<ul>
<li>New features:<ul>
<li>Add ArrayUtils.SOFT_MAX_ARRAY_LENGTH</li>
<li>Add SystemUtils.IS_OS_NETWARE</li>
<li>Add MethodUtils.getAccessibleMethod(Class, Method)</li>
<li>Add documentation to site for CVE-2025-48924
ClassUtils.getClass(...) can throw a StackOverflowError on
very long inputs</li>
<li>Add StringUtils.indexOfAny(CharSequence, int, char...)</li>
<li>Add ConcurrentException.ConcurrentException(String)</li>
<li>Add DateUtils.toLocalDateTime(Date[, TimeZone])</li>
<li>Add DateUtils.toOffsetDateTime(Date[, TimeZone])</li>
<li>Add DateUtils.toZonedDateTime(Date[, TimeZone])</li>
<li>Add ByteConsumer</li>
<li>Add ByteSupplier</li>
<li>Add FailableByteConsumer</li>
<li>Add FailableByteSupplier</li>
<li>LANG-1784: Add Functions methods for null-safe mapping and
chaining</li>
<li>LANG-1784: Add Failable methods for null-safe mapping and
chaining</li>
<li>Add DoubleRange.fit(double)</li>
<li>Add IntegerRange.fit(int)</li>
<li>Add LongRange.fit(long)</li>
<li>Add DurationUtils.get(String, TemporalUnit, long)</li>
<li>Add DurationUtils.getMillis(String, long)</li>
<li>Add DurationUtils.getSeconds(String, long)</li>
<li>Add SystemProperties.getBoolean(Class, String, boolean)</li>
<li>Add SystemProperties.getInt(Class, String, int)</li>
<li>Add SystemProperties.getLong(Class, String, long)</li>
</ul>
</li>
<li>Fixed Bugs:<ul>
<li>LANG-1778: MethodUtils.getMatchingMethod() doesn't respect the
hierarchy of methods</li>
<li>MethodUtils.getMethodObject(Class<?>, String, Class<?>...) now
returns null instead of throwing a NullPointerException, as it
does for other exception types</li>
<li>Reduce spurious failures in ArrayUtilsTest methods that test
ArrayUtils.shuffle() methods</li>
<li>MethodUtils cannot find or invoke a public method on a public
class implemented in its package-private superclass</li>
<li>AtomicSafeInitializer.get() can spin internally if the
FailableSupplier given to AbstractConcurrentInitializer
.AbstractBuilder.setInitializer(FailableSupplier) throws a
RuntimeException</li>
<li>LANG-1783: WordUtils.containsAllWords?() may throw
PatternSyntaxException</li>
<li>LANG-1782: MethodUtils cannot find or invoke vararg methods
without providing vararg types or values</li>
<li>MethodUtils cannot find or invoke vararg methods of interface
types</li>
<li>MethodUtils cannot find or invoke vararg methods when widening
primitive types following the JLS 5.1.2. Widening Primitive
Conversion</li>
<li>LANG-1597: Invocation fails because matching varargs method
found but then discarded</li>
<li>Don't check accessibility twice in MemberUtils
.setAccessibleWorkaround(T)</li>
<li>LANG-1774: Improve handling of ClassUtils
.getShortCanonicalName() for invalid input</li>
<li>LANG-1720: Improve Javadocs for Conversion</li>
<li>Fix CalendarUtils.toLocalDate() Javadoc return type
description</li>
<li>Fix the method name in Javadoc examples for CharUtils.isHex()</li>
<li>Deprecate NumberUtils.compare(byte, byte) in favor of
Byte.compare(byte, byte)</li>
<li>Deprecate NumberUtils.compare(int, int) in favor of
Integer.compare(int, int)</li>
<li>Deprecate NumberUtils.compare(long, long) in favor of
Long.compare(long, long)</li>
<li>Deprecate NumberUtils.compare(short, short) in favor of
Short.compare(short, short)</li>
<li>Deprecate obsolete system property constant
SystemProperties.AWT_TOOLKIT</li>
<li>Deprecate obsolete system property constant
SystemProperties.JAVA_AWT_FONTS</li>
<li>Deprecate obsolete system property constant
SystemProperties.JAVA_AWT_GRAPHICSENV</li>
<li>Deprecate obsolete system property constant
SystemProperties.JAVA_AWT_HEADLESS</li>
<li>Deprecate obsolete system property constant
SystemProperties.JAVA_AWT_PRINTERJOB</li>
<li>Deprecate obsolete system property constant
SystemProperties.JAVA_COMPILER</li>
<li>Deprecate obsolete system property constant
SystemProperties.JAVA_ENDORSED_DIRS</li>
<li>Deprecate obsolete system property constant
SystemProperties.JAVA_EXT_DIRS</li>
<li>Deprecate method for obsolete system property constant
SystemProperties.getAwtToolkit()</li>
<li>Deprecate method for obsolete system property constant
SystemProperties.getJavaAwtFonts()</li>
<li>Deprecate method for obsolete system property constant
SystemProperties.getJavaAwtGraphicsenv()</li>
<li>Deprecate method for obsolete system property constant
SystemProperties.getJavaAwtHeadless()</li>
<li>Deprecate method for obsolete system property constant
SystemProperties.getJavaAwtPrinterjob()</li>
<li>Deprecate method for obsolete system property constant
SystemProperties.getJavaCompiler()</li>
<li>Deprecate method for obsolete system property constant
SystemProperties.getJavaEndorsedDirs()</li>
<li>Deprecate method for obsolete system property constant
SystemProperties.getJavaExtDirs()</li>
<li>Deprecate method for obsolete system property constant
SystemUtils.isJavaAwtHeadless()</li>
<li>Deprecate constants for obsolete system property
SystemUtils.JAVA_AWT_FONTS</li>
<li>Deprecate constants for obsolete system property
SystemUtils.JAVA_AWT_GRAPHICSENV</li>
<li>Deprecate constants for obsolete system property
SystemUtils.JAVA_AWT_HEADLESS</li>
<li>Deprecate constants for obsolete system property
SystemUtils.JAVA_AWT_PRINTERJOB</li>
<li>Deprecate constants for obsolete system property
SystemUtils.JAVA_COMPILER</li>
<li>Deprecate constants for obsolete system property
SystemUtils.JAVA_ENDORSED_DIRS</li>
<li>Deprecate constants for obsolete system property
SystemUtils.JAVA_EXT_DIRS</li>
<li>[javadoc] General improvements</li>
<li>[javadoc] Fix thrown exception documentation for
MethodUtils.getMethodObject(Class<?>, String, Class<?>...)</li>
<li>[javadoc] Strings::equalsAny: CI doc string should show it's
insensitive</li>
<li>[javadoc] General Javadoc improvements</li>
<li>LANG-1780: [javadoc] Fix Strings Javadoc</li>
<li>[javadoc] Fix typo in Javadoc of Strings instances</li>
<li>[javadoc] Fix Javadocs in ClassUtils</li>
<li>[javadoc] Fix @deprecated link for StringUtils#startsWithAny</li>
<li>Replace old feather logotype with new oak logotype</li>
</ul>
</li>
<li>Changes:<ul>
<li>[test] Bump org.apache.commons:commons-text from 1.13.1 to
1.14.0</li>
<li>Bump org.apache.commons:commons-parent from 85 to 88</li>
</ul>
</li>
</ul>
<p>Update to 3.18.0:</p>
<ul>
<li>
<p>Fix component version in default.properties to 3.12</p>
<ul>
<li>Add and use LocaleUtils.toLocale(Locale) to avoid NPEs.</li>
<li>Add FailableShortSupplier, handy for JDBC APIs.</li>
<li>Add JavaVersion.JAVA_17.</li>
<li>Add StringUtils.substringBefore(String, int).</li>
<li>Add Range.INTEGER.</li>
<li>Add DurationUtils.</li>
<li>Correct implementation of RandomUtils.nextLong(long, long).</li>
<li>Update maven-surefire-plugin 2.22.2 -> 3.0.0-M5.</li>
<li>Bump junit-bom from 5.7.0 to 5.7.1.</li>
<li>Ignored exception 'ignored', should not be called so.</li>
<li>Change array style from 'int a[]' to 'int[] a'.</li>
</ul>
</li>
</ul>
<p>google-guice was updated to fix:</p>
<ul>
<li>Fix build with Java 25</li>
<li>Add alias to com.google.inject:guice::classes artifact, needed
by maven 4.x</li>
</ul>
<p>maven-resolver-supplier was updated to upstream version 1.9.27:</p>
<ul>
<li>Bug Fixes<ul>
<li>Sync TrackingFileManager with 2.x</li>
</ul>
</li>
</ul>
<p>Update to upstream version 1.9.26:</p>
<ul>
<li>New features and improvements<ul>
<li>GH-1773: Treat 410 Gone as 404 Not Found</li>
<li>GH-1737: Revert partially parallel upload change</li>
</ul>
</li>
<li>Bug Fixes<ul>
<li>GH-1768; Drastically simplify auth caching</li>
<li>[1.9.x] Bug: GH-1703 Locally cached artifacts defy RRF</li>
</ul>
</li>
<li>Documentation updates<ul>
<li>Clarify that HTTP Transport uses Apache HTTP Client</li>
</ul>
</li>
<li>
<p>Dependency updates</p>
<ul>
<li>Bump org.redisson:redisson from 3.52.0 to 4.2.0</li>
<li>Bump commons-codec:commons-codec from 1.20.0 to 1.21.0</li>
<li>Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.26
to 1.27</li>
<li>Bump org.apache.maven:maven-parent from 46 to 47</li>
<li>Bump com.github.siom79.japicmp:japicmp-maven-plugin from
0.25.0 to 0.25.4</li>
<li>Bump mavenVersion from 3.9.11 to 3.9.12</li>
</ul>
</li>
<li>
<p>Update to upstream version 1.9.25</p>
</li>
<li>New features and improvements<ul>
<li>Add scope support for trusted checksums</li>
<li>Name mappers cleanup and new GAECV mapper</li>
<li>Proper metadata locking support</li>
<li>Ability to augment metadata nature for version range request</li>
</ul>
</li>
<li>Bug Fixes<ul>
<li>TrackingFileManager changes</li>
<li>Maven filters daemon friendly</li>
<li>Remove hack from Basic connector</li>
<li>Fix locking issues</li>
</ul>
</li>
<li>Documentation updates<ul>
<li>Updated the documentation to reflect the current list of name
mappers</li>
</ul>
</li>
<li>Maintenance<ul>
<li>Mild backport: support same properties as Resolver 2.x</li>
<li>Maven resolver lockrepro</li>
<li>Bugfix: Java 25 broke test</li>
</ul>
</li>
<li>
<p>Dependency updates</p>
<ul>
<li>Bump com.github.siom79.japicmp:japicmp-maven-plugin from
0.23.1 to 0.25.0</li>
<li>Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.24
to 1.26</li>
<li>Bump commons-codec:commons-codec from 1.18.0 to 1.20.0</li>
<li>Bump org.redisson:redisson from 3.50.0 to 3.52.0</li>
<li>Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre</li>
<li>Bump com.google.code.gson:gson from 2.13.1 to 2.13.2</li>
<li>Bump jettyVersion from 9.4.57.v20241219 to 9.4.58.v20250814</li>
<li>Bump mavenVersion from 3.9.10 to 3.9.11</li>
</ul>
</li>
<li>
<p>Update to upstream version 1.9.24</p>
</li>
<li>New features and improvements<ul>
<li>Metadata type out of coordinates</li>
<li>RFC9457 implementation</li>
<li>Intern context strings</li>
</ul>
</li>
<li>Maintenance<ul>
<li>Align plexus-util version with Maven</li>
<li>Align guice version with Maven</li>
<li>Enable Github Issues (1.9.x branch)</li>
</ul>
</li>
<li>
<p>Build also maven-resolver-supplier package in separate spec file</p>
</li>
<li>
<p>Add dependency on objectweb-asm to build with sisu 0.9.0.M4</p>
</li>
<li>
<p>Update to upstream version 1.9.23</p>
</li>
<li>Bug<ul>
<li>MRESOLVER-659: NPE in trusted checksum post processor if</li>
</ul>
</li>
<li>
<p>Improvement</p>
<ul>
<li>MRESOLVER-680: Disable checksum by default for .sigstore.json
as well</li>
<li>MRESOLVER-703: HTTP transport should expose config for max
redirects</li>
</ul>
</li>
<li>
<p>Upgrade to upstream version 1.9.22</p>
</li>
<li>Bug<ul>
<li>MRESOLVER-572: Resolver-Supplier unusable in OSGi runtimes</li>
<li>MRESOLVER-574: Invalid Cookie set under proxy conditions</li>
<li>MRESOLVER-586: In typical setups, DefaultArtifact copies the
same maps over and over again</li>
<li>MRESOLVER-587: Memory consumption improvements</li>
</ul>
</li>
<li>New Feature<ul>
<li>MRESOLVER-571: Import o.e.aether packages with the exact same
version in OSGi metadata</li>
</ul>
</li>
<li>Improvement<ul>
<li>MRESOLVER-570: Remove excessive strictness of OSGi dependency
metadata</li>
</ul>
</li>
<li>
<p>Task</p>
<ul>
<li>MRESOLVER-576: Allow co-release of Resolver 1.x and 2.x</li>
</ul>
</li>
<li>
<p>Upgrade to upstream version 1.9.20</p>
</li>
<li>Bug<ul>
<li>MRESOLVER-483: PreorderNodeListGenerator bug: may print
trailing ":"</li>
<li>MRESOLVER-522: File locking threads not entering critical
region were "oversleeping"</li>
<li>MRESOLVER-547: BF collector always copies artifacts, even
when it should not</li>
</ul>
</li>
<li>
<p>Improvement</p>
<ul>
<li>MRESOLVER-536: Skip setting last modified time when FS does
not support it</li>
</ul>
</li>
<li>
<p>Add dependency on plexus-xml where relevant</p>
</li>
<li>
<p>this will be needed for smooth upgrade to plexus-utils 4.0.0</p>
</li>
<li>
<p>Upgrade to upstream version 1.9.18</p>
</li>
<li>Bug<ul>
<li>MRESOLVER-372: Sporadic AccessDeniedEx on Windows</li>
<li>MRESOLVER-441: Undo FileUtils changes that altered non-Windows
execution path</li>
</ul>
</li>
<li>Improvement<ul>
<li>MRESOLVER-396: Native transport should retry on HTTP 429
(Retry-After)</li>
</ul>
</li>
<li>
<p>Task</p>
<ul>
<li>MRESOLVER-397: Deprecate Guice modules</li>
<li>MRESOLVER-405: Get rid of component name string literals, make
them constants and reusable</li>
<li>MRESOLVER-433: Expose configuration for inhibiting
Expect-Continue handshake in 1.x</li>
<li>MRESOLVER-435: Refresh download page</li>
<li>MRESOLVER-437: Resolver should not override given HTTP
transport default use of expect-continue handshake</li>
</ul>
</li>
<li>
<p>Upgrade to upstream version 1.9.15</p>
</li>
<li>Bug<ul>
<li>MRESOLVER-373: Remove lock upgrading code</li>
<li>MRESOLVER-375: Several key aspects are broken in provided and
trusted checksum feature</li>
<li>MRESOLVER-376: StackOverflowError at
BfDependencyCollector.processDependency</li>
<li>MRESOLVER-380: Lock diagnostic: attempted lock step is
recorded, but on failed attempt is not removed</li>
<li>MRESOLVER-393: Transport HTTP does not retain last modified as
sent by remote end</li>
</ul>
</li>
<li>Improvement<ul>
<li>MRESOLVER-220: Modify signaling for unsupported operations</li>
<li>MRESOLVER-382: Define local outgoing (bind) address</li>
<li>MRESOLVER-385: Reduce default value for
aether.connector.http.connectionMaxTtl</li>
</ul>
</li>
<li>
<p>Task</p>
<ul>
<li>MRESOLVER-378: Update parent POM to 40</li>
<li>MRESOLVER-381: Undo MRESOLVER-373 as it was fixed by other
means</li>
<li>MRESOLVER-386: Make all injected ctors public, deprecate all
def ctors</li>
<li>MRESOLVER-388: Transport HTTP old codec proper override</li>
</ul>
</li>
<li>
<p>Upgrade to upstream version 1.9.12</p>
</li>
<li>Bug<ul>
<li>[MRESOLVER-371] Unjustified WARNING log added by
MRESOLVER-364</li>
<li>[MRESOLVER-361] Unreliable TCP and retries on upload</li>
<li>[MRESOLVER-357] ConflictResolver STANDARD verbosity
misbehaves</li>
<li>[MRESOLVER-352] Duplicate METADATA_DOWNLOADING event is
being sent</li>
</ul>
</li>
<li>Improvement<ul>
<li>[MRESOLVER-360] disable checksum by default for .sigstore
in addition to .asc</li>
</ul>
</li>
<li>New Feature<ul>
<li>[MRESOLVER-370] Lock factory should dump lock states on
failure</li>
<li>[MRESOLVER-353] Make aether.checksums.algorithms settable
per remote repository</li>
</ul>
</li>
<li>
<p>Task</p>
<ul>
<li>[MRESOLVER-366] Upgrade build plugins</li>
<li>[MRESOLVER-364] Revert MRESOLVER-132</li>
<li>[MRESOLVER-359] Make build be explicit about build time
requirements</li>
<li>[MRESOLVER-356] Remove Guava (is unused)</li>
<li>[MRESOLVER-354] Document expected checksums</li>
</ul>
</li>
<li>
<p>Upgrade to upstream version 1.9.8</p>
</li>
<li>Bug<ul>
<li>[MRESOLVER-345] Conflict resolution in verbose mode is
sensitive to version ordering</li>
<li>[MRESOLVER-348] SslConfig httpSecurityMode change is not
detected</li>
<li>[MRESOLVER-339] Preemptive Auth broken when default ports used</li>
<li>[MRESOLVER-325] [REGRESSION] Suddenly seeing I/O errors under
windows aborting the build</li>
<li>[MRESOLVER-330] Static name mapper is unusable with file-lock
factory</li>
<li>[MRESOLVER-314] Getting "IllegalArgumentException: Comparison
method violates its general contract!"</li>
<li>[MRESOLVER-316] DF collector enters endless loop when
collecting org.webjars.npm:musquette:1.1.1</li>
<li>[MRESOLVER-298] javax.inject should be provided or optional</li>
<li>[MRESOLVER-305] Evaluate blocked repositories also when
retrieving metadata</li>
<li>[MRESOLVER-309] PrefixesRemoteRepositoryFilterSource aborts
the build while it should not</li>
<li>[MRESOLVER-313] Artifact file permissions are 0600 and not
implicitly set by umask</li>
<li>[MRESOLVER-296] FileProcessor.write( File, InputStream ) is
defunct</li>
<li>[MRESOLVER-292] Documented and used param names mismatch</li>
<li>[MRESOLVER-294] Fix JapiCmp configuration and document it</li>
<li>[MRESOLVER-285] File locking on Windows knows to misbehave</li>
<li>[MRESOLVER-246] m-deploy-p will create hashes for hashes</li>
<li>[MRESOLVER-265] Discrepancy between produced and recognized
checksums</li>
<li>[MRESOLVER-241] Resolver checksum calculation should be driven
by layout</li>
<li>[MRESOLVER-242] When no remote checksums provided by layout,
transfer inevitably fails/warns</li>
<li>[MRESOLVER-250] Usage of descriptors map in DataPool prevents
gargabe collection</li>
</ul>
</li>
<li>New Feature<ul>
<li>[MRESOLVER-32] Support parallel artifact/metadata uploads</li>
<li>[MRESOLVER-319] Support parallel deploy</li>
<li>[MRESOLVER-297] Chained LRM</li>
<li>[MRESOLVER-167] Support forcing specific repositories for
artifacts</li>
<li>[MRESOLVER-268] Apply artifact checksum verification for any
resolved artifact</li>
<li>[MRESOLVER-274] Introduce Remote Repository Filter feature</li>
<li>[MRESOLVER-275] Introduce trusted checksums source</li>
<li>[MRESOLVER-276] Resolver post-processor</li>
<li>[MRESOLVER-278] BREAKING: Introduce RepositorySystem shutdown
hooks</li>
<li>[MRESOLVER-236] Make it possible to resolve .asc on a 'fail'
respository.</li>
</ul>
</li>
<li>Improvement<ul>
<li>[MRESOLVER-346] Too eager locking</li>
<li>[MRESOLVER-347] Better connection pool configuration (reuse,
max TTL, maxPerRoute)</li>
<li>[MRESOLVER-349] Adapter when locking should "give up and
retry"</li>
<li>[MRESOLVER-350] Get rid of commons-lang dependency</li>
<li>[MRESOLVER-327] Make tranport-http obey system properties
regarding proxy settings</li>
<li>[MRESOLVER-340] Make WebDAV "dance" disabled by default</li>
<li>[MRESOLVER-341] Add option for preemptive PUT Auth</li>
<li>[MRESOLVER-315] Implement preemptive authentication feature
for transport-http</li>
<li>[MRESOLVER-328] The transport-http should be able to ignore
cert errors</li>
<li>[MRESOLVER-337] Real cause when artifact not found with
repository filtering</li>
<li>[MRESOLVER-287] Get rid of deprecated finalize methods</li>
<li>[MRESOLVER-317] Improvements for BF collector</li>
<li>[MRESOLVER-318] Cleanup redundant code and centralize executor
handling</li>
<li>[MRESOLVER-303] Make checksum detection reusable</li>
<li>[MRESOLVER-290] Improve file handling resolver wide</li>
<li>[MRESOLVER-7] Download dependency POMs in parallel in BF
collector</li>
<li>[MRESOLVER-266] Simplify adapter creation and align
configuration for it</li>
<li>[MRESOLVER-269] Allow more compact storage of provided
checksums</li>
<li>[MRESOLVER-273] Create more compact File locking layout/mapper</li>
<li>[MRESOLVER-284] BREAKING: Some Sisu parameters needs to be
bound</li>
<li>[MRESOLVER-286] Improve basic connector closed state handling</li>
<li>[MRESOLVER-240] Using breadth-first approach to resolve Maven
dependencies</li>
<li>[MRESOLVER-247] Avoid unnecessary dependency resolution by a
Skip solution based on BFS</li>
<li>[MRESOLVER-248] Make DF and BF collector implementations
coexist</li>
</ul>
</li>
<li>Task<ul>
<li>[MRESOLVER-326] Resolver transport-http should retry on
failures</li>
<li>[MRESOLVER-331] Make DefaultTrackingFileManager write directly
to tracking files</li>
<li>[MRESOLVER-333] Distinguish better resolver errors for
artifact availability</li>
<li>[MRESOLVER-320] Investigate slower resolving speeds as
reported by users</li>
<li>[MRESOLVER-291] Undo MRESOLVER-284</li>
<li>[MRESOLVER-279] Simplify and improve trusted checksum sources</li>
<li>[MRESOLVER-281] Update configurations page with new elements</li>
<li>[MRESOLVER-282] Drop PartialFile</li>
<li>[MRESOLVER-230] Make supported checksum algorithms extensible</li>
<li>[MRESOLVER-231] Extend “smart checksum” feature</li>
<li>[MRESOLVER-234] Introduce “provided” checksums feature</li>
<li>[MRESOLVER-237] Make all checksum mismatches handled same</li>
<li>[MRESOLVER-239] Update and sanitize dependencies</li>
<li>[MRESOLVER-244] Deprecate FileTransformer API</li>
<li>[MRESOLVER-245] Isolate Hazelcast tests</li>
</ul>
</li>
<li>
<p>Dependency upgrade</p>
<ul>
<li>[MRESOLVER-311] Upgrade Parent to 39</li>
<li>[MRESOLVER-293] Update dependencies, align with Maven</li>
<li>[MRESOLVER-272] Update parent POM to 37, remove plugin version
overrides, update bnd</li>
<li>[MRESOLVER-280] Upgrade invoker, install, deploy, require
maven 3.8.4+</li>
<li>[MRESOLVER-251] Upgrade Redisson to 3.17.5</li>
<li>[MRESOLVER-249] Update Hazelcast to 5.1.1 in
named-locks-hazelcast module</li>
</ul>
</li>
<li>
<p>Add an alias for the wagon connector</p>
</li>
<li>
<p>Build against the standalone JavaEE modules unconditionally</p>
</li>
<li>
<p>Remove the javax.annotation:javax.annotation-api dependency on
distribution versions that do not incorporate the JavaEE modules</p>
</li>
<li>
<p>Add the glassfish-annotation-api jar to the build classpath</p>
</li>
<li>
<p>Upgrade to upstream version 1.7.3</p>
</li>
<li>Bug<ul>
<li>[MRESOLVER-96] - Dependency Injection fails after upgrading
to Maven 3.6.2</li>
<li>[MRESOLVER-153] - resolver-status.properties file is corrupted
due to concurrent writes</li>
<li>[MRESOLVER-171] - Resolver fails when compiled on Java 9+ an
run on Java 8 due to JDK API breakage</li>
<li>[MRESOLVER-189] - Using semaphore-redisson followed by
rwlock-redisson on many parallel build of the same project
triggers redisson error</li>
</ul>
</li>
<li>New Feature<ul>
<li>[MRESOLVER-90] - HTML content in POM: Maven should validate
content before storing in local repo</li>
<li>[MRESOLVER-145] - Introduce more SyncContext implementations</li>
</ul>
</li>
<li>Improvement<ul>
<li>[MRESOLVER-103] - Replace deprecated HttpClient classes</li>
<li>[MRESOLVER-104] - maven-resolver-demo-maven-plugin uses
reserved artifactId</li>
<li>[MRESOLVER-147] - Upgrade to Java 8</li>
<li>[MRESOLVER-148] - Use vanilla Guice 4 instead of forked
Guice 3</li>
<li>[MRESOLVER-156] - Active dependency management for Google
Guice/Guava</li>
<li>[MRESOLVER-168] - add DEBUG message when downloading an
artifact from repositories</li>
<li>[MRESOLVER-193] - Properly type lock key names in Redis</li>
<li>[MRESOLVER-197] - Minors improvements (umbrella)</li>
<li>[MRESOLVER-204] - Add a SessionData#computeIfAbsent method</li>
<li>[MRESOLVER-214] - Remove clirr configuration</li>
</ul>
</li>
<li>Task<ul>
<li>[MRESOLVER-141] - Review index-based access to collections</li>
<li>[MRESOLVER-151] - Enforce a checksum policy to be provided
explicitly</li>
<li>[MRESOLVER-152] - Perform null checks when interface
contracts require it</li>
<li>[MRESOLVER-154] - Move SyncContextFactory interface to SPI
module</li>
<li>[MRESOLVER-155] - Make TrackingFileManager member of
DefaultUpdateCheckManager</li>
<li>[MRESOLVER-158] - Simplify SimpleDigest class</li>
<li>[MRESOLVER-159] - Mark singleton components as Sisu Singletons</li>
<li>[MRESOLVER-160] - Deprecate ServiceLocator</li>
<li>[MRESOLVER-162] - Restore binary compatibility broken by
MRESOLVER-154</li>
<li>[MRESOLVER-170] - Deprecate org.eclipse.aether.spi.log</li>
<li>[MRESOLVER-172] - Make TrackingFileManager shared singleton
component</li>
<li>[MRESOLVER-173] - Drop deprecated AetherModule</li>
<li>[MRESOLVER-174] - Use all bindings in UTs and tests</li>
<li>[MRESOLVER-175] - Drop SyncContextFactory delegates in favor
of a selector approach</li>
<li>[MRESOLVER-177] - Move pre-/post-processing of metadata from
ResolveTask to DefaultMetadataResolver</li>
<li>[MRESOLVER-183] - Don't require optional dependencies for
Redisson</li>
<li>[MRESOLVER-184] - Destroy Redisson semaphores if not used
anymore</li>
<li>[MRESOLVER-186] - Update Maven version in Resolver Demo
Snippets</li>
<li>[MRESOLVER-188] - Improve documentation on using the named
locks with redis/hazelcast (umbrella)</li>
<li>[MRESOLVER-190] - [Regression] Revert MRESOLVER-184</li>
<li>[MRESOLVER-191] - Document how to analyze lock issues</li>
<li>[MRESOLVER-196] - Document named locks configuration options</li>
<li>[MRESOLVER-219] - Implement NamedLock with advisory file
locking</li>
<li>[MRESOLVER-227] - Refactor NamedLockFactorySelector to a
managed component</li>
<li>[MRESOLVER-232] - Make SimpleNamedLockFactorySelector logic
reusable</li>
</ul>
</li>
<li>Sub-task<ul>
<li>[MRESOLVER-198] - Replace assert by simpler but equivalent
calls</li>
<li>[MRESOLVER-199] - Java 8 improvements</li>
<li>[MRESOLVER-200] - Simplify conditions with the same result
and avoid extra validations</li>
<li>[MRESOLVER-201] - Make variables final whenever possible</li>
<li>[MRESOLVER-202] - Use isEmpty() instead length() <= 0</li>
</ul>
</li>
<li>Dependency upgrade<ul>
<li>[MRESOLVER-185] - Upgrade Redisson to 3.15.6</li>
</ul>
</li>
<li>
<p>Change of API and incompatible with maven-resolver < 1.7</p>
</li>
<li>
<p>Upgrade to upstream version 1.6.3</p>
</li>
<li>Bug<ul>
<li>[MRESOLVER-153] - resolver-status.properties file is corrupted
due to concurrent writes</li>
<li>[MRESOLVER-171] - Resolver fails when compiled on Java 9+ and
run on Java 8 due to JDK API breakage</li>
</ul>
</li>
<li>Improvement<ul>
<li>[MRESOLVER-168] - add DEBUG message when downloading an
artifact from repositories</li>
</ul>
</li>
<li>Task<ul>
<li>[MRESOLVER-177] - Move pre-/post-processing of metadata from
ResolveTask to DefaultMetadataResolver</li>
</ul>
</li>
<li>
<p>Needed for maven 3.8.4</p>
</li>
<li>
<p>Do not build/run the tests against the legacy guava20 package</p>
</li>
<li>
<p>Upgrade to upstream version 1.6.2</p>
</li>
<li>Sub-task<ul>
<li>[MRESOLVER-139] - Make SimpleDigest use SHA-1 or MD5 only</li>
<li>[MRESOLVER-140] - Default to SHA-1 and MD5 hashing algorithms</li>
</ul>
</li>
<li>Bug<ul>
<li>[MRESOLVER-25] - Resume support is broken under high
concurrency</li>
<li>[MRESOLVER-114] - ArtifactNotFoundExceptions when building in
parallel</li>
<li>[MRESOLVER-129] - Exclusion has no setters</li>
<li>[MRESOLVER-137] - Make OSGi bundles reproducible</li>
<li>[MRESOLVER-138] - MRESOLVER-56 introduces severe performance
regression</li>
</ul>
</li>
<li>New Feature<ul>
<li>[MRESOLVER-109] - AndDependencySelector should override
toString</li>
<li>[MRESOLVER-115] - Make checksum algorithms configurable</li>
<li>[MRESOLVER-123] - Provide a global locking sync context by
default</li>
<li>[MRESOLVER-131] - Introduce a Redisson-based
SyncContextFactory</li>
<li>[MRESOLVER-165] - Add support for mirror selector on
external:http:*</li>
<li>[MRESOLVER-166] - Add support for blocked
repositories/mirrors</li>
</ul>
</li>
<li>Improvement<ul>
<li>[MRESOLVER-56] - Support SHA-256 and SHA-512 as checksums</li>
<li>[MRESOLVER-116] - Add page with all supported configuration
options</li>
<li>[MRESOLVER-125] - Use type conversions returning primitives</li>
<li>[MRESOLVER-127] - Don't use boolean for property
'aether.updateCheckManager.sessionState'</li>
<li>[MRESOLVER-136] - Migrate from maven-bundle-plugin to
bnd-maven-plugin</li>
</ul>
</li>
<li>Task<ul>
<li>[MRESOLVER-119] - Turn log messages to SLF4J placeholders</li>
<li>[MRESOLVER-130] - Move GlobalSyncContextFactory to a separate
module</li>
<li>[MRESOLVER-132] - Remove synchronization in
TrackingFileManager</li>
</ul>
</li>
<li>Dependency upgrade<ul>
<li>[MRESOLVER-105] - Update Plexus Components</li>
<li>[MRESOLVER-106] - Update HttpComponents</li>
<li>[MRESOLVER-107] - Update Wagon Provider API to 3.4.0</li>
<li>[MRESOLVER-108] - Update mockito-core to 2.28.2</li>
<li>[MRESOLVER-117] - Upgrade SLF4J to 1.7.30</li>
<li>[MRESOLVER-118] - Upgrade Sisu Components to 0.3.4</li>
</ul>
</li>
<li>
<p>Needed for maven 3.8.x</p>
</li>
<li>
<p>Set buildshell to bash for "<<<".</p>
</li>
<li>
<p>Upgrade to upstream version 1.4.2</p>
</li>
<li>Bug:<ul>
<li>MRESOLVER-38 – SOE/OOME in DefaultDependencyNode.accept</li>
</ul>
</li>
<li>
<p>Improvements:</p>
<ul>
<li>MRESOLVER-93 – PathRecordingDependencyVisitor to handle 3 cycles</li>
<li>MRESOLVER-102 – make build Reproducible</li>
</ul>
</li>
<li>
<p>Upgrade to upstream version 1.4.1</p>
</li>
<li>Task<ul>
<li>[MRESOLVER-92] - Revert MRESOLVER-7</li>
</ul>
</li>
<li>Bug<ul>
<li>[MRESOLVER-86] - ResolveArtifactMojo from resolver example
uses plugin repositories to resolve dependencies</li>
</ul>
</li>
<li>New Feature<ul>
<li>[MRESOLVER-10] - New 'TransitiveDependencyManager'
supporting transitive dependency management</li>
<li>[MRESOLVER-33] - New 'DefaultDependencyManager' managing
dependencies on all levels supporting transitive dependency
management</li>
</ul>
</li>
<li>
<p>Improvement</p>
<ul>
<li>[MRESOLVER-7] - Download dependency POMs in parallel</li>
<li>[MRESOLVER-84] - Add support for "release" qualifier</li>
<li>[MRESOLVER-87] - Refresh examples to use maven-resolver
artifacts for demo</li>
<li>[MRESOLVER-88] - Code style cleanup to use Java 7 features</li>
</ul>
</li>
<li>
<p>Initial packaging of maven-resolver 1.3.1</p>
</li>
<li>Generate and customize the ant build files</li>
</ul>
<p>maven-resolver was update to upstream version 1.9.27:</p>
<ul>
<li>
<p>Bug Fixes</p>
<ul>
<li>Sync TrackingFileManager with 2.x</li>
</ul>
</li>
<li>
<p>Update to upstream version 1.9.26</p>
</li>
<li>New features and improvements<ul>
<li>GH-1773: Treat 410 Gone as 404 Not Found</li>
<li>GH-1737: Revert partially parallel upload change</li>
</ul>
</li>
<li>Bug Fixes<ul>
<li>GH-1768; Drastically simplify auth caching</li>
<li>[1.9.x] Bug: GH-1703 Locally cached artifacts defy RRF</li>
</ul>
</li>
<li>Documentation updates<ul>
<li>Clarify that HTTP Transport uses Apache HTTP Client</li>
</ul>
</li>
<li>
<p>Dependency updates</p>
<ul>
<li>Bump org.redisson:redisson from 3.52.0 to 4.2.0</li>
<li>Bump commons-codec:commons-codec from 1.20.0 to 1.21.0</li>
<li>Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.26
to 1.27</li>
<li>Bump org.apache.maven:maven-parent from 46 to 47</li>
<li>Bump com.github.siom79.japicmp:japicmp-maven-plugin from
0.25.0 to 0.25.4</li>
<li>Bump mavenVersion from 3.9.11 to 3.9.12</li>
</ul>
</li>
<li>
<p>Update to upstream version 1.9.25</p>
</li>
<li>New features and improvements<ul>
<li>Add scope support for trusted checksums</li>
<li>Name mappers cleanup and new GAECV mapper</li>
<li>Proper metadata locking support</li>
<li>Ability to augment metadata nature for version range request</li>
</ul>
</li>
<li>Bug Fixes<ul>
<li>TrackingFileManager changes</li>
<li>Maven filters daemon friendly</li>
<li>Remove hack from Basic connector</li>
<li>Fix locking issues</li>
</ul>
</li>
<li>Documentation updates<ul>
<li>Updated the documentation to reflect the current list of name
mappers</li>
</ul>
</li>
<li>Maintenance<ul>
<li>Mild backport: support same properties as Resolver 2.x</li>
<li>Maven resolver lockrepro</li>
<li>Bugfix: Java 25 broke test</li>
</ul>
</li>
<li>
<p>Dependency updates</p>
<ul>
<li>Bump com.github.siom79.japicmp:japicmp-maven-plugin from
0.23.1 to 0.25.0</li>
<li>Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.24
to 1.26</li>
<li>Bump commons-codec:commons-codec from 1.18.0 to 1.20.0</li>
<li>Bump org.redisson:redisson from 3.50.0 to 3.52.0</li>
<li>Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre</li>
<li>Bump com.google.code.gson:gson from 2.13.1 to 2.13.2</li>
<li>Bump jettyVersion from 9.4.57.v20241219 to 9.4.58.v20250814</li>
<li>Bump mavenVersion from 3.9.10 to 3.9.11</li>
</ul>
</li>
<li>
<p>Update to upstream version 1.9.24</p>
</li>
<li>New features and improvements<ul>
<li>Metadata type out of coordinates</li>
<li>RFC9457 implementation</li>
<li>Intern context strings</li>
</ul>
</li>
<li>Maintenance<ul>
<li>Align plexus-util version with Maven</li>
<li>Align guice version with Maven</li>
<li>Enable Github Issues (1.9.x branch)</li>
</ul>
</li>
<li>
<p>Build also maven-resolver-supplier package in separate spec file</p>
</li>
<li>
<p>Add dependency on objectweb-asm to build with sisu 0.9.0.M4</p>
</li>
<li>
<p>Update to upstream version 1.9.23</p>
</li>
<li>Bug<ul>
<li>MRESOLVER-659: NPE in trusted checksum post processor if</li>
</ul>
</li>
<li>
<p>Improvement</p>
<ul>
<li>MRESOLVER-680: Disable checksum by default for .sigstore.json
as well</li>
<li>MRESOLVER-703: HTTP transport should expose config for max
redirects</li>
</ul>
</li>
<li>
<p>Upgrade to upstream version 3.9.16</p>
</li>
<li>Bug Fixes<ul>
<li>Trim threadConfiguration to accept input surrounded with
spaces</li>
<li>Backport: Maven 3.10.x fixed plugin resolution</li>
</ul>
</li>
<li>
<p>Dependency updates</p>
<ul>
<li>Bump org.codehaus.plexus:plexus-classworlds from 2.9.0 to
2.11.0</li>
<li>[3.9.x] Bump to parent POM 48</li>
<li>Bump commons-io:commons-io from 2.21.0 to 2.22.0</li>
<li>Bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre</li>
<li>Bump actions/cache from 5.0.4 to 5.0.5</li>
</ul>
</li>
<li>
<p>There is no need to link the jansi-native library into the tree,
since our jansi java library will load it from the system anyway</p>
</li>
<li>
<p>Upgrade to upstream version 3.9.15</p>
</li>
<li>Documentation updates<ul>
<li>Use new Maven logos in documentation</li>
<li>document modelVersion only supported value: 4.0.0</li>
</ul>
</li>
<li>
<p>Dependency updates</p>
<ul>
<li>Bump actions/upload-artifact from 7.0.0 to 7.0.1</li>
<li>Bump org.codehaus.plexus:plexus-utils from 3.6.0 to 3.6.1</li>
<li>Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3</li>
<li>Bump actions/cache from 5.0.3 to 5.0.4</li>
<li>Bump actions/download-artifact from 8.0.0 to 8.0.1</li>
</ul>
</li>
<li>
<p>Upgrade to upstream version 3.9.14</p>
</li>
<li>Bug Fixes<ul>
<li>plexus-testing dependencies should be used in test scope</li>
</ul>
</li>
<li>
<p>Dependency updates</p>
<ul>
<li>Bump actions/upload-artifact from 6.0.0 to 7.0.0</li>
<li>Bump actions/download-artifact from 7.0.0 to 8.0.0</li>
</ul>
</li>
<li>
<p>Upgrade to upstream version 3.9.13</p>
</li>
<li>Bug Fixes<ul>
<li>Bug: SecDispatcher is managed by legacy Plexus DI</li>
<li>[3.9.x] MavenPluginJavaPrerequisiteChecker: Handle 8/1.8
Java version in ranges as well</li>
</ul>
</li>
<li>Maintenance<ul>
<li>Update Maven plugin versions in default-bindings.xml</li>
<li>Migrate to JUnit 5 - avoid using TestCase</li>
</ul>
</li>
<li>
<p>Dependency updates</p>
<ul>
<li>Maven Resolver 1.9.27</li>
<li>Bump resolverVersion from 1.9.25 to 1.9.26</li>
<li>Bump version.sisu-maven-plugin from 0.9.0.M4 to 1.0.0</li>
<li>Bump actions/cache from 5.0.0 to 5.0.3</li>
<li>Bump org.apache.maven:maven-parent from 45 to 47</li>
<li>Bump actions/checkout from 6.0.1 to 6.0.2</li>
<li>Bump actions/setup-java from 5.1.0 to 5.2.0</li>
<li>Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.26
to 1.27</li>
<li>Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.2.1
to 3.3.0</li>
<li>Bump org.codehaus.plexus:plexus-testing from 2.0.2 to 2.1.0</li>
<li>Bump org.ow2.asm:asm from 9.9 to 9.9.1</li>
<li>Bump actions/upload-artifact from 5.0.0 to 6.0.0</li>
<li>Bump actions/download-artifact from 6.0.0 to 7.0.0</li>
</ul>
</li>
<li>
<p>Specify required maven-resolver version since the
maven-resolver-provider requires methods added in 1.9.25</p>
</li>
<li>
<p>Upgrade to upstream version 3.9.12</p>
</li>
<li>New features and improvements<ul>
<li>Apply resolver changes and improvements</li>
<li>Update formatting of prerequisites-requirements error to
improve readability</li>
<li>Allow a Maven plugin to require a Java version</li>
<li>Use MavenRepositorySystem in ProjectBuildingHelper instead
of deprecated RepositorySystem</li>
<li>Make maven.config use UTF8</li>
<li>Simplify prefix resolution</li>
</ul>
</li>
<li>Bug Fixes<ul>
<li>Add default implementation for new method in
MavenPluginManager</li>
<li>Repository layout should be used in MavenRepositorySystem</li>
<li>Fix plugin prefix resolution when metadata is not available
from repository</li>
<li>Improve source root modification warning message</li>
<li>Bug: bad cache isolation between two sessions</li>
<li>Set Guice class loading to CHILD - avoid using terminally
deprecated methods</li>
<li>Avoid parsing MAVEN_OPTS (3.9.x)</li>
</ul>
</li>
<li>Documentation updates<ul>
<li>clarify repository vs deployment repository</li>
<li>add maintained branches</li>
</ul>
</li>
<li>Maintenance<ul>
<li>Add IntelliJ icon</li>
<li>Build by JDK 25</li>
<li>Deprecate org.apache.maven.repository.RepositorySystem in
3.9.x</li>
</ul>
</li>
<li>Build<ul>
<li>Bump actions/download-artifact from 5.0.0 to 6.0.0</li>
<li>Bump actions/upload-artifact from 4.6.2 to 5.0.0</li>
</ul>
</li>
<li>
<p>Dependency updates</p>
<ul>
<li>Bump actions/cache from 4.2.3 to 5.0.0</li>
<li>Bump resolverVersion from 1.9.24 to 1.9.25</li>
<li>Bump actions/checkout from 5.0.0 to 6.0.1</li>
<li>Bump actions/setup-java from 5.0.0 to 5.1.0</li>
<li>Bump commons-cli:commons-cli from 1.9.0 to 1.11.0</li>
<li>Bump org.codehaus.plexus:plexus-interpolation from 1.28 to
1.29</li>
<li>Bump commons-io:commons-io from 2.19.0 to 2.21.0</li>
<li>Bump xmlunitVersion from 2.10.3 to 2.11.0</li>
<li>Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.24
to 1.26</li>
<li>Bump org.ow2.asm:asm from 9.8 to 9.9</li>
<li>Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre</li>
</ul>
</li>
<li>
<p>Upgrade to upstream version 3.9.11</p>
</li>
<li>New features and improvements<ul>
<li>Augment version range resolution used repositories</li>
</ul>
</li>
<li>Bug Fixes<ul>
<li>Deduplicate filtered dependency graph</li>
<li>Move ensure in boundaries of project lock</li>
</ul>
</li>
<li>Maintenance<ul>
<li>[MNGSITE-393] - remove references to Maven 2</li>
<li>Update CONTRIBUTING after GitHub issues enabled</li>
<li>Enable Github Issues</li>
<li>[MNG-8763] - Remove name from site bannerLeft</li>
</ul>
</li>
<li>
<p>Build</p>
<ul>
<li>Pin GitHub action versions by hash</li>
<li>Build the project by JDK 21 as default</li>
<li>Use Maven 3.9.10 for build on GitHub</li>
</ul>
</li>
<li>
<p>Upgrade to upstream version 3.9.10</p>
</li>
<li>Bug<ul>
<li>MNG-8096: Inconsistent dependency resolution behaviour for
concurrent multi-module build can cause failures</li>
<li>MNG-8169: MINGW support requires
--add-opens java.base/java.lang=ALL-UNNAMED</li>
<li>MNG-8170: Maven 3.9.8 contains weird native library for Jansi
on Windows/arm64</li>
<li>MNG-8211: Maven should fail builds that use CI Friendly
versions but have no values set</li>
<li>MNG-8248: WARNING: A restricted method in java.lang.System has
been called</li>
<li>MNG-8256: ProjectDependencyGraph bug: in case of filtering,
non-direct module links are lost</li>
<li>MNG-8315: Failure of mvn.cmd if a .mvn directory is located at
drive root</li>
<li>MNG-8396: Maven takes forever to resume</li>
<li>MNG-8711: "Duplicate artifact" in LifecycleDependencyResolver</li>
</ul>
</li>
<li>Improvement<ul>
<li>MNG-8370: Introduce maven.repo.local.head</li>
<li>MNG-8399: JDK 24+ issues warning about usage of
sun.misc.Unsafe</li>
<li>MNG-8707: Add methods to remove compile and test source roots</li>
<li>MNG-8712: improve dependency version explanation: it's a
requirement, not always effective version</li>
<li>MNG-8717: Remove maven-plugin-plugin:addPluginArtifactMetadata
from default binding</li>
<li>MNG-8722: Use a single standalone version of asm</li>
<li>MNG-8731: Use https for xsi:schemaLocation in generated
descriptors</li>
<li>MNG-8734: Simplify scripting like "get project version" cases</li>
</ul>
</li>
<li>
<p>Task</p>
<ul>
<li>MNG-8728: Bump Eclipse Sisu from 0.9.0.M3 to 0.9.0.M4 and use
Java 24 on CI</li>
</ul>
</li>
<li>
<p>Link also the objectweb-asm/asm to the lib directory</p>
<ul>
<li>MNG-8177: Warning</li>
</ul>
</li>
</ul>
<p>xmvn-connector was updated to fix:</p>
<ul>
<li>
<p>Add dependency on objectweb-asm to build with sisu 0.9.0.M4</p>
</li>
<li>
<p>Upgrade to version 4.3.0</p>
</li>
<li>Changes:<ul>
<li>Fix typo in JavadocMojo</li>
<li>Reproducible javadoc</li>
<li>Reproducible manifest injection</li>
<li>Deprecate UUIDs</li>
<li>Implement MetadataResult.getPackageMetadataMap()</li>
</ul>
</li>
</ul>
<p>xmvn-mojo was updated to fix:</p>
<p>Upgrade to version 4.3.0</p>
<ul>
<li>Changes:<ul>
<li>Fix typo in JavadocMojo</li>
<li>Reproducible javadoc</li>
<li>Reproducible manifest injection</li>
<li>Deprecate UUIDs</li>
<li>Implement MetadataResult.getPackageMetadataMap()</li>
</ul>
</li>
</ul>
<p>xmvn-parent was updated to fix:</p>
<ul>
<li>Upgrade to version 4.3.0</li>
<li>Changes:<ul>
<li>Fix typo in JavadocMojo</li>
<li>Reproducible javadoc</li>
<li>Reproducible manifest injection</li>
<li>Deprecate UUIDs</li>
<li>Implement MetadataResult.getPackageMetadataMap()</li>
</ul>
</li>
</ul>
<p>xmvn-tools was updated to:</p>
<ul>
<li>
<p>The new commons-compress needs commons-lang3</p>
</li>
<li>
<p>Upgrade to version 4.3.0</p>
</li>
<li>Changes:<ul>
<li>Fix typo in JavadocMojo</li>
<li>Reproducible javadoc</li>
<li>Reproducible manifest injection</li>
<li>Deprecate UUIDs</li>
<li>Implement MetadataResult.getPackageMetadataMap()</li>
</ul>
</li>
</ul>
<p>xmvn was updated to fix:</p>
<ul>
<li>
<p>Adapt to no libjansi.so linked into the arch independent path</p>
</li>
<li>
<p>Fix build after removal of the default %%{java_home} define</p>
</li>
<li>
<p>Upgrade to version 4.3.0</p>
</li>
<li>Changes:<ul>
<li>Fix typo in JavadocMojo</li>
<li>Reproducible javadoc</li>
<li>Reproducible manifest injection</li>
<li>Deprecate UUIDs</li>
<li>Implement MetadataResult.getPackageMetadataMap()</li>
</ul>
</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP4 LTSS
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-3390=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-3390=1</code>
</li>
<li class="list-group-item">
Basesystem Module 15-SP7
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-3390=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-3390=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP6 LTSS
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3390=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3390=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-3390=1</code>
</li>
<li class="list-group-item">
Development Tools Module 15-SP7
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-3390=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP6
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3390=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP5 LTSS
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3390=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3390=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3390=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)
<ul>
<li>xmvn-minimal-4.3.0-150200.3.30.1</li>
<li>jansi-2.4.0-150200.3.9.1</li>
<li>xmvn-4.3.0-150200.3.30.1</li>
<li>maven-lib-3.9.16-150200.4.33.1</li>
<li>maven-3.9.16-150200.4.33.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP4 LTSS (noarch)
<ul>
<li>xmvn-install-4.3.0-150200.3.30.1</li>
<li>beust-jcommander-1.83-150200.3.15.1</li>
<li>apache-commons-lang3-3.20.0-150200.3.15.2</li>
<li>maven-resolver-api-1.9.27-150200.3.29.1</li>
<li>maven-resolver-named-locks-1.9.27-150200.3.29.1</li>
<li>xmvn-resolve-4.3.0-150200.3.30.1</li>
<li>apache-commons-compress-1.28.0-150200.3.21.1</li>
<li>xmvn-core-4.3.0-150200.3.30.1</li>
<li>maven-resolver-connector-basic-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-file-1.9.27-150200.3.29.1</li>
<li>plexus-interpolation-1.27.0-150200.3.9.1</li>
<li>maven-resolver-transport-http-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-wagon-1.9.27-150200.3.29.1</li>
<li>xmvn-connector-4.3.0-150200.3.30.1</li>
<li>xmvn-mojo-4.3.0-150200.3.30.1</li>
<li>maven-resolver-impl-1.9.27-150200.3.29.1</li>
<li>maven-resolver-spi-1.9.27-150200.3.29.1</li>
<li>xmvn-api-4.3.0-150200.3.30.1</li>
<li>maven-resolver-util-1.9.27-150200.3.29.1</li>
<li>google-guice-6.0.0-150200.3.13.2</li>
<li>plexus-xml-3.0.1-150200.5.10.1</li>
<li>guava-33.2.1-150200.3.15.1</li>
<li>xmvn-subst-4.3.0-150200.3.30.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch)
<ul>
<li>xmvn-install-4.3.0-150200.3.30.1</li>
<li>beust-jcommander-1.83-150200.3.15.1</li>
<li>apache-commons-lang3-3.20.0-150200.3.15.2</li>
<li>maven-resolver-api-1.9.27-150200.3.29.1</li>
<li>maven-resolver-named-locks-1.9.27-150200.3.29.1</li>
<li>xmvn-resolve-4.3.0-150200.3.30.1</li>
<li>apache-commons-compress-1.28.0-150200.3.21.1</li>
<li>xmvn-core-4.3.0-150200.3.30.1</li>
<li>maven-resolver-connector-basic-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-file-1.9.27-150200.3.29.1</li>
<li>plexus-interpolation-1.27.0-150200.3.9.1</li>
<li>maven-resolver-transport-http-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-wagon-1.9.27-150200.3.29.1</li>
<li>xmvn-connector-4.3.0-150200.3.30.1</li>
<li>xmvn-mojo-4.3.0-150200.3.30.1</li>
<li>maven-resolver-impl-1.9.27-150200.3.29.1</li>
<li>maven-resolver-spi-1.9.27-150200.3.29.1</li>
<li>xmvn-api-4.3.0-150200.3.30.1</li>
<li>maven-resolver-util-1.9.27-150200.3.29.1</li>
<li>google-guice-6.0.0-150200.3.13.2</li>
<li>plexus-xml-3.0.1-150200.5.10.1</li>
<li>guava-33.2.1-150200.3.15.1</li>
<li>xmvn-subst-4.3.0-150200.3.30.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
<ul>
<li>jansi-debuginfo-2.4.0-150200.3.9.1</li>
<li>xmvn-minimal-4.3.0-150200.3.30.1</li>
<li>jansi-2.4.0-150200.3.9.1</li>
<li>xmvn-4.3.0-150200.3.30.1</li>
<li>maven-lib-3.9.16-150200.4.33.1</li>
<li>maven-3.9.16-150200.4.33.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
<ul>
<li>jansi-debuginfo-2.4.0-150200.3.9.1</li>
<li>xmvn-minimal-4.3.0-150200.3.30.1</li>
<li>jansi-2.4.0-150200.3.9.1</li>
<li>xmvn-4.3.0-150200.3.30.1</li>
<li>maven-lib-3.9.16-150200.4.33.1</li>
<li>maven-3.9.16-150200.4.33.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP6 LTSS (noarch)
<ul>
<li>xmvn-install-4.3.0-150200.3.30.1</li>
<li>beust-jcommander-1.83-150200.3.15.1</li>
<li>apache-commons-lang3-3.20.0-150200.3.15.2</li>
<li>maven-resolver-api-1.9.27-150200.3.29.1</li>
<li>maven-resolver-named-locks-1.9.27-150200.3.29.1</li>
<li>xmvn-resolve-4.3.0-150200.3.30.1</li>
<li>apache-commons-compress-1.28.0-150200.3.21.1</li>
<li>xmvn-core-4.3.0-150200.3.30.1</li>
<li>maven-resolver-connector-basic-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-file-1.9.27-150200.3.29.1</li>
<li>plexus-interpolation-1.27.0-150200.3.9.1</li>
<li>maven-resolver-transport-wagon-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-http-1.9.27-150200.3.29.1</li>
<li>xmvn-connector-4.3.0-150200.3.30.1</li>
<li>xmvn-mojo-4.3.0-150200.3.30.1</li>
<li>maven-resolver-impl-1.9.27-150200.3.29.1</li>
<li>maven-resolver-spi-1.9.27-150200.3.29.1</li>
<li>xmvn-api-4.3.0-150200.3.30.1</li>
<li>maven-resolver-util-1.9.27-150200.3.29.1</li>
<li>google-guice-6.0.0-150200.3.13.2</li>
<li>plexus-xml-3.0.1-150200.5.10.1</li>
<li>guava-33.2.1-150200.3.15.1</li>
<li>xmvn-subst-4.3.0-150200.3.30.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
<ul>
<li>jansi-debuginfo-2.4.0-150200.3.9.1</li>
<li>xmvn-minimal-4.3.0-150200.3.30.1</li>
<li>jansi-2.4.0-150200.3.9.1</li>
<li>xmvn-4.3.0-150200.3.30.1</li>
<li>maven-lib-3.9.16-150200.4.33.1</li>
<li>maven-3.9.16-150200.4.33.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP5 LTSS (noarch)
<ul>
<li>xmvn-install-4.3.0-150200.3.30.1</li>
<li>beust-jcommander-1.83-150200.3.15.1</li>
<li>apache-commons-lang3-3.20.0-150200.3.15.2</li>
<li>maven-resolver-api-1.9.27-150200.3.29.1</li>
<li>maven-resolver-named-locks-1.9.27-150200.3.29.1</li>
<li>xmvn-resolve-4.3.0-150200.3.30.1</li>
<li>apache-commons-compress-1.28.0-150200.3.21.1</li>
<li>xmvn-core-4.3.0-150200.3.30.1</li>
<li>maven-resolver-connector-basic-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-file-1.9.27-150200.3.29.1</li>
<li>plexus-interpolation-1.27.0-150200.3.9.1</li>
<li>maven-resolver-transport-http-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-wagon-1.9.27-150200.3.29.1</li>
<li>xmvn-connector-4.3.0-150200.3.30.1</li>
<li>xmvn-mojo-4.3.0-150200.3.30.1</li>
<li>maven-resolver-impl-1.9.27-150200.3.29.1</li>
<li>maven-resolver-spi-1.9.27-150200.3.29.1</li>
<li>xmvn-api-4.3.0-150200.3.30.1</li>
<li>maven-resolver-util-1.9.27-150200.3.29.1</li>
<li>google-guice-6.0.0-150200.3.13.2</li>
<li>plexus-xml-3.0.1-150200.5.10.1</li>
<li>guava-33.2.1-150200.3.15.1</li>
<li>xmvn-subst-4.3.0-150200.3.30.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch)
<ul>
<li>xmvn-install-4.3.0-150200.3.30.1</li>
<li>beust-jcommander-1.83-150200.3.15.1</li>
<li>apache-commons-lang3-3.20.0-150200.3.15.2</li>
<li>maven-resolver-api-1.9.27-150200.3.29.1</li>
<li>maven-resolver-named-locks-1.9.27-150200.3.29.1</li>
<li>xmvn-resolve-4.3.0-150200.3.30.1</li>
<li>apache-commons-compress-1.28.0-150200.3.21.1</li>
<li>xmvn-core-4.3.0-150200.3.30.1</li>
<li>maven-resolver-connector-basic-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-file-1.9.27-150200.3.29.1</li>
<li>plexus-interpolation-1.27.0-150200.3.9.1</li>
<li>maven-resolver-transport-wagon-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-http-1.9.27-150200.3.29.1</li>
<li>xmvn-connector-4.3.0-150200.3.30.1</li>
<li>maven-resolver-impl-1.9.27-150200.3.29.1</li>
<li>xmvn-mojo-4.3.0-150200.3.30.1</li>
<li>maven-resolver-spi-1.9.27-150200.3.29.1</li>
<li>xmvn-api-4.3.0-150200.3.30.1</li>
<li>maven-resolver-util-1.9.27-150200.3.29.1</li>
<li>google-guice-6.0.0-150200.3.13.2</li>
<li>plexus-xml-3.0.1-150200.5.10.1</li>
<li>guava-33.2.1-150200.3.15.1</li>
<li>xmvn-subst-4.3.0-150200.3.30.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64)
<ul>
<li>xmvn-minimal-4.3.0-150200.3.30.1</li>
<li>jansi-2.4.0-150200.3.9.1</li>
<li>xmvn-4.3.0-150200.3.30.1</li>
<li>maven-lib-3.9.16-150200.4.33.1</li>
<li>maven-3.9.16-150200.4.33.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64)
<ul>
<li>jansi-debuginfo-2.4.0-150200.3.9.1</li>
<li>xmvn-minimal-4.3.0-150200.3.30.1</li>
<li>jansi-2.4.0-150200.3.9.1</li>
<li>xmvn-4.3.0-150200.3.30.1</li>
<li>maven-lib-3.9.16-150200.4.33.1</li>
<li>maven-3.9.16-150200.4.33.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch)
<ul>
<li>xmvn-install-4.3.0-150200.3.30.1</li>
<li>beust-jcommander-1.83-150200.3.15.1</li>
<li>apache-commons-lang3-3.20.0-150200.3.15.2</li>
<li>maven-resolver-api-1.9.27-150200.3.29.1</li>
<li>maven-resolver-named-locks-1.9.27-150200.3.29.1</li>
<li>xmvn-resolve-4.3.0-150200.3.30.1</li>
<li>apache-commons-compress-1.28.0-150200.3.21.1</li>
<li>xmvn-core-4.3.0-150200.3.30.1</li>
<li>maven-resolver-connector-basic-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-file-1.9.27-150200.3.29.1</li>
<li>plexus-interpolation-1.27.0-150200.3.9.1</li>
<li>maven-resolver-transport-http-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-wagon-1.9.27-150200.3.29.1</li>
<li>xmvn-connector-4.3.0-150200.3.30.1</li>
<li>xmvn-mojo-4.3.0-150200.3.30.1</li>
<li>maven-resolver-impl-1.9.27-150200.3.29.1</li>
<li>maven-resolver-spi-1.9.27-150200.3.29.1</li>
<li>xmvn-api-4.3.0-150200.3.30.1</li>
<li>maven-resolver-util-1.9.27-150200.3.29.1</li>
<li>google-guice-6.0.0-150200.3.13.2</li>
<li>plexus-xml-3.0.1-150200.5.10.1</li>
<li>guava-33.2.1-150200.3.15.1</li>
<li>xmvn-subst-4.3.0-150200.3.30.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch)
<ul>
<li>xmvn-install-4.3.0-150200.3.30.1</li>
<li>beust-jcommander-1.83-150200.3.15.1</li>
<li>apache-commons-lang3-3.20.0-150200.3.15.2</li>
<li>maven-resolver-api-1.9.27-150200.3.29.1</li>
<li>maven-resolver-named-locks-1.9.27-150200.3.29.1</li>
<li>xmvn-resolve-4.3.0-150200.3.30.1</li>
<li>apache-commons-compress-1.28.0-150200.3.21.1</li>
<li>xmvn-core-4.3.0-150200.3.30.1</li>
<li>maven-resolver-connector-basic-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-file-1.9.27-150200.3.29.1</li>
<li>plexus-interpolation-1.27.0-150200.3.9.1</li>
<li>maven-resolver-transport-wagon-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-http-1.9.27-150200.3.29.1</li>
<li>xmvn-connector-4.3.0-150200.3.30.1</li>
<li>xmvn-mojo-4.3.0-150200.3.30.1</li>
<li>maven-resolver-impl-1.9.27-150200.3.29.1</li>
<li>maven-resolver-spi-1.9.27-150200.3.29.1</li>
<li>xmvn-api-4.3.0-150200.3.30.1</li>
<li>maven-resolver-util-1.9.27-150200.3.29.1</li>
<li>google-guice-6.0.0-150200.3.13.2</li>
<li>plexus-xml-3.0.1-150200.5.10.1</li>
<li>guava-33.2.1-150200.3.15.1</li>
<li>xmvn-subst-4.3.0-150200.3.30.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
<ul>
<li>jansi-debuginfo-2.4.0-150200.3.9.1</li>
<li>xmvn-minimal-4.3.0-150200.3.30.1</li>
<li>jansi-2.4.0-150200.3.9.1</li>
<li>xmvn-4.3.0-150200.3.30.1</li>
<li>maven-lib-3.9.16-150200.4.33.1</li>
<li>maven-3.9.16-150200.4.33.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch)
<ul>
<li>xmvn-install-4.3.0-150200.3.30.1</li>
<li>beust-jcommander-1.83-150200.3.15.1</li>
<li>apache-commons-lang3-3.20.0-150200.3.15.2</li>
<li>maven-resolver-api-1.9.27-150200.3.29.1</li>
<li>maven-resolver-named-locks-1.9.27-150200.3.29.1</li>
<li>xmvn-resolve-4.3.0-150200.3.30.1</li>
<li>apache-commons-compress-1.28.0-150200.3.21.1</li>
<li>xmvn-core-4.3.0-150200.3.30.1</li>
<li>maven-resolver-connector-basic-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-file-1.9.27-150200.3.29.1</li>
<li>plexus-interpolation-1.27.0-150200.3.9.1</li>
<li>maven-resolver-transport-wagon-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-http-1.9.27-150200.3.29.1</li>
<li>xmvn-connector-4.3.0-150200.3.30.1</li>
<li>xmvn-mojo-4.3.0-150200.3.30.1</li>
<li>maven-resolver-impl-1.9.27-150200.3.29.1</li>
<li>maven-resolver-spi-1.9.27-150200.3.29.1</li>
<li>xmvn-api-4.3.0-150200.3.30.1</li>
<li>maven-resolver-util-1.9.27-150200.3.29.1</li>
<li>google-guice-6.0.0-150200.3.13.2</li>
<li>plexus-xml-3.0.1-150200.5.10.1</li>
<li>guava-33.2.1-150200.3.15.1</li>
<li>xmvn-subst-4.3.0-150200.3.30.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64)
<ul>
<li>jansi-debuginfo-2.4.0-150200.3.9.1</li>
<li>xmvn-minimal-4.3.0-150200.3.30.1</li>
<li>jansi-2.4.0-150200.3.9.1</li>
<li>xmvn-4.3.0-150200.3.30.1</li>
<li>maven-lib-3.9.16-150200.4.33.1</li>
<li>maven-3.9.16-150200.4.33.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch)
<ul>
<li>xmvn-install-4.3.0-150200.3.30.1</li>
<li>beust-jcommander-1.83-150200.3.15.1</li>
<li>apache-commons-lang3-3.20.0-150200.3.15.2</li>
<li>maven-resolver-api-1.9.27-150200.3.29.1</li>
<li>maven-resolver-named-locks-1.9.27-150200.3.29.1</li>
<li>xmvn-resolve-4.3.0-150200.3.30.1</li>
<li>apache-commons-compress-1.28.0-150200.3.21.1</li>
<li>xmvn-core-4.3.0-150200.3.30.1</li>
<li>maven-resolver-connector-basic-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-file-1.9.27-150200.3.29.1</li>
<li>plexus-interpolation-1.27.0-150200.3.9.1</li>
<li>maven-resolver-transport-wagon-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-http-1.9.27-150200.3.29.1</li>
<li>xmvn-connector-4.3.0-150200.3.30.1</li>
<li>xmvn-mojo-4.3.0-150200.3.30.1</li>
<li>maven-resolver-impl-1.9.27-150200.3.29.1</li>
<li>maven-resolver-spi-1.9.27-150200.3.29.1</li>
<li>xmvn-api-4.3.0-150200.3.30.1</li>
<li>maven-resolver-util-1.9.27-150200.3.29.1</li>
<li>google-guice-6.0.0-150200.3.13.2</li>
<li>plexus-xml-3.0.1-150200.5.10.1</li>
<li>guava-33.2.1-150200.3.15.1</li>
<li>xmvn-subst-4.3.0-150200.3.30.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64)
<ul>
<li>xmvn-minimal-4.3.0-150200.3.30.1</li>
<li>jansi-2.4.0-150200.3.9.1</li>
<li>xmvn-4.3.0-150200.3.30.1</li>
<li>maven-lib-3.9.16-150200.4.33.1</li>
<li>maven-3.9.16-150200.4.33.1</li>
</ul>
</li>
<li>
Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64)
<ul>
<li>jansi-debuginfo-2.4.0-150200.3.9.1</li>
<li>xmvn-minimal-4.3.0-150200.3.30.1</li>
<li>jansi-2.4.0-150200.3.9.1</li>
<li>xmvn-4.3.0-150200.3.30.1</li>
<li>maven-lib-3.9.16-150200.4.33.1</li>
<li>maven-3.9.16-150200.4.33.1</li>
</ul>
</li>
<li>
Development Tools Module 15-SP7 (noarch)
<ul>
<li>xmvn-install-4.3.0-150200.3.30.1</li>
<li>beust-jcommander-1.83-150200.3.15.1</li>
<li>maven-resolver-api-1.9.27-150200.3.29.1</li>
<li>maven-resolver-named-locks-1.9.27-150200.3.29.1</li>
<li>xmvn-resolve-4.3.0-150200.3.30.1</li>
<li>xmvn-core-4.3.0-150200.3.30.1</li>
<li>maven-resolver-connector-basic-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-file-1.9.27-150200.3.29.1</li>
<li>plexus-interpolation-1.27.0-150200.3.9.1</li>
<li>maven-resolver-transport-wagon-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-http-1.9.27-150200.3.29.1</li>
<li>xmvn-connector-4.3.0-150200.3.30.1</li>
<li>xmvn-mojo-4.3.0-150200.3.30.1</li>
<li>maven-resolver-impl-1.9.27-150200.3.29.1</li>
<li>maven-resolver-spi-1.9.27-150200.3.29.1</li>
<li>xmvn-api-4.3.0-150200.3.30.1</li>
<li>maven-resolver-util-1.9.27-150200.3.29.1</li>
<li>google-guice-6.0.0-150200.3.13.2</li>
<li>plexus-xml-3.0.1-150200.5.10.1</li>
<li>guava-33.2.1-150200.3.15.1</li>
<li>xmvn-subst-4.3.0-150200.3.30.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch)
<ul>
<li>xmvn-install-4.3.0-150200.3.30.1</li>
<li>beust-jcommander-1.83-150200.3.15.1</li>
<li>apache-commons-lang3-3.20.0-150200.3.15.2</li>
<li>maven-resolver-api-1.9.27-150200.3.29.1</li>
<li>maven-resolver-named-locks-1.9.27-150200.3.29.1</li>
<li>xmvn-resolve-4.3.0-150200.3.30.1</li>
<li>apache-commons-compress-1.28.0-150200.3.21.1</li>
<li>xmvn-core-4.3.0-150200.3.30.1</li>
<li>maven-resolver-connector-basic-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-file-1.9.27-150200.3.29.1</li>
<li>plexus-interpolation-1.27.0-150200.3.9.1</li>
<li>maven-resolver-transport-http-1.9.27-150200.3.29.1</li>
<li>maven-resolver-transport-wagon-1.9.27-150200.3.29.1</li>
<li>xmvn-connector-4.3.0-150200.3.30.1</li>
<li>xmvn-mojo-4.3.0-150200.3.30.1</li>
<li>maven-resolver-impl-1.9.27-150200.3.29.1</li>
<li>maven-resolver-spi-1.9.27-150200.3.29.1</li>
<li>xmvn-api-4.3.0-150200.3.30.1</li>
<li>maven-resolver-util-1.9.27-150200.3.29.1</li>
<li>google-guice-6.0.0-150200.3.13.2</li>
<li>plexus-xml-3.0.1-150200.5.10.1</li>
<li>guava-33.2.1-150200.3.15.1</li>
<li>xmvn-subst-4.3.0-150200.3.30.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)
<ul>
<li>xmvn-minimal-4.3.0-150200.3.30.1</li>
<li>jansi-2.4.0-150200.3.9.1</li>
<li>xmvn-4.3.0-150200.3.30.1</li>
<li>maven-lib-3.9.16-150200.4.33.1</li>
<li>maven-3.9.16-150200.4.33.1</li>
</ul>
</li>
<li>
Basesystem Module 15-SP7 (noarch)
<ul>
<li>apache-commons-lang3-3.20.0-150200.3.15.2</li>
<li>apache-commons-compress-1.28.0-150200.3.21.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://www.suse.com/security/cve/CVE-2025-48924.html">https://www.suse.com/security/cve/CVE-2025-48924.html</a>
</li>
</ul>
</div>