SUSE-RU-2026:22828-1: moderate: Recommended update for maven-doxia-sitetools, maven-dependency-plugin
SLE-UPDATES
null at suse.de
Mon Jul 27 17:52:09 UTC 2026
# Recommended update for maven-doxia-sitetools, maven-dependency-plugin
Announcement ID: SUSE-RU-2026:22828-1
Release Date: 2026-07-20T09:58:12Z
Rating: moderate
References:
Affected Products:
* SUSE Linux Enterprise Server 16.0
* SUSE Linux Enterprise Server for SAP applications 16.0
An update that can now be installed.
## Description:
This update for maven-doxia-sitetools, maven-dependency-plugin fixes the
following issues:
Changes in maven-doxia-sitetools:
Upgrade to upstream version 2.1.0:
* New features and improvements
* Expose SCM last modification date and author from Doxia source in Velocity
* Allow to set an alternative source directory (for editing)
* Support conditional resources from skins
* Support for rendering Mermaid diagrams client-side.
* Bug Fixes
* Interpolate using user and system properties in Site Descriptor
* Documentation updates
* Convert Sites from APT to MD
* Clarify menu inheritance and default behavior of "inherit" attribute
* Upgrade to Site Descriptor 2.x
* Clarify image attributes in site descriptor
* Document value "none" for attribute "position"
* Maintenance
* JUnit Jupiter best practices
* PlexusStringUtils Refaster recipes
* PlexusFileUtils Refaster recipes
* JUnit Jupiter migration from JUnit 4.x
* feat: enable prevent branch protection rules
* Enable Github issues
* DOXIASITETOOLS-359: Support site directories where duplicates are skipped
* DOXIASITETOOLS-356: Provide more context in error message
* DOXIASITETOOLS-313: Refresh download page
* Dependency updates
* Update to Doxia 2.1.0
* Bump org.junit:junit-bom from 5.11.2 to 5.14.3
* Bump org.apache.maven.plugin-testing :maven-plugin-testing-harness from 3.3.0 to 3.5.1
* DOXIASITETOOLS-360: Bump org.codehaus.mojo:l10n-maven-plugin from 1.0.0 to 1.1.0
* Bump org.codehaus.mojo:l10n-maven-plugin from 1.1.0 to 1.2.0
* Bump org.apache.maven:maven-parent from 43 to 47
* Bump org.codehaus.plexus:plexus-testing from 1.4.0 to 2.1.0
* DOXIASITETOOLS-361: Bump org.htmlunit:htmlunit from 4.4.0 to 4.9.0
* Bump org.htmlunit:htmlunit from 4.9.0 to 4.21.0
* Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0
* Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.29
* Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.1.0
* Bump commons-io:commons-io from 2.17.0 to 2.21.0
* Bump org.codehaus.plexus:plexus-velocity from 2.2.0 to 2.3.0
* Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0
* Bump org.apache.velocity:velocity-engine-core from 2.4 to 2.4.1
Changes in maven-dependency-plugin:
Upgrade to version 3.11.0:
* New features and improvements
* Add dependency:add and dependency:remove goals
* Added ability to provide arbitrary dependencies to properties mojo
* Bug Fixes
* Fix artifact relocation support
* fix: fix addParentPoms=true causes repositories to be ignored.
* Fix false positive in analyze-exclusions with transitive dependency exclusion
* Make AbstractAnalyzeMojo.filterArtifactsByScope() null-safe
* Prevent NPE in BuildClasspathMojo.appendArtifactPath() when an artifact has no resolved file
* Log unpacking at debug level
* Resolve plugins declared in pluginManagement for resolve-plugins and go-offline
* Fix analyze-exclusions crashes if there is no dependencyManagement element
* Maintenance
* Enable ITs for dependency:remove and use mock dependencies
* More meaningful assertions
* Cure various typos IntelliJ complains about
* Remove unused jansi dependency
* Enable ITs for dependecy:add and use mock dependencies
* Cleaner exception handling
* Dependency updates
* Manage ASM version 9.10 to support JDK 27
* Bump eu.maveniverse.maven.domtrip:domtrip-core from 1.5.0 to 1.5.1
* Bump eu.maveniverse.maven.domtrip:domtrip-maven from 1.5.0 to 1.5.1
* Bump mavenVersion from 3.9.12 to 3.9.16
* Bump org.apache.maven.shared:maven-dependency-analyzer from 1.17.0 to 1.17.1
* Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 in /src/it/projects/remove-dependency/basic
* Bump org.apache.maven.plugins:maven-plugins from 47 to 48
* Bump org.jsoup:jsoup from 1.22.1 to 1.22.2
* Bump org.apache.maven.doxia:doxia-sink-api from 2.0.0 to 2.1.0
* Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3
* Bump org.apache.maven.plugin-testing :maven-plugin-testing-harness from 3.5.0 to 3.5.1
Upgrade to version 3.10.0:
* New features and improvements
* Introduce graphRoots for dependencyFilter based mojos
* Bug Fixes
* Apply excludeReactor to plugin dependencies in go-offline and resolve-plugins
* Only log dependency classpath when no property/file output is specified
* MDEP-974: strip ansi codes when writing to a file
* Documentation updates
* Add analyze-only to usage page
* Move doc comment to correct location
* Focus on most recent version
* Maintenance
* Fix Jenkin bages in README
* Improve dependencies filtering in AbstractAnalyzeMojo
* Migration to JUnit 5
* JUnit Jupiter best practices
* Migrate JUnit3 based Tests to JUnit 5
* Dependency updates
* Bump org.apache.maven.shared:maven-dependency-analyzer from 1.16.0 to 1.17.0
* Bump org.assertj:assertj-core from 2.9.1 to 3.27.7 in /src/it/projects/analyze-testDependencyWithNonTestScope
* Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
* Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1
* Bump org.apache.maven.plugins:maven-plugins from 46 to 47
* Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.11.0
* Bump org.apache.maven.plugins:maven-plugins from 45 to 46
* Bump org.jsoup:jsoup from 1.21.2 to 1.22.1
* Bump mavenVersion from 3.9.11 to 3.9.12
* Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0
* Bump commons-io:commons-io from 2.20.0 to 2.21.0
* Bump org.codehaus.plexus:plexus-io from 3.5.1 to 3.6.0
* Bump org.codehaus.plexus:plexus-i18n from 1.0.0 to 1.1.0
* Bump org.apache.maven.plugin-testing :maven-plugin-testing-harness from 3.3.0 to 3.4.0
Upgrade to version 3.9.0:
* New features and improvements
* Use Resolver API in go-offline for dependencies resolving
* Use Resolver API in go-offline for plugins resolving
* Fixes #1522, add render-dependencies mojo
* Use Resolver API in resolve-plugin
* MDEP-964: unconditionally ignore dependencies known to be loaded by reflection
* Update maven-dependency-analyzer to support Java24
* MDEP-972: copy-dependencies: copy signatures alongside artifacts
* MDEP-776: Warn when multiple dependencies have the same file name
* MDEP-966: Migrate AnalyzeDepMgt to Sisu
* MDEP-957: By default, don't report slf4j-simple as unused
* Bug Fixes
* ProjectBuildingRequest should not be modified
* Fix: markersDirectory is not working when unpack goal is executed from command line
* Fix broken link for analyze-exclusions-mojo on usage-page
* MDEP-839: Avoid extra blank lines in file
* Update collect URL
* MDEP-689: Fixes ignored dependency filtering in go-offline goal
* MDEP-960: Repair silent logging
* Documentation updates
* MDEP-933: Document dependency tree output formats
* Add additional comment to clarify the minimal supported version of outputing dependency tree in JSON fromat.
* MNGSITE-529: Rename "Goals" to "Plugin Documentation"
* Unix file separators
* Maintenance
* Simplify usage of RepositoryManager and DependencyResolver
* Use Resolver API in copy and unpack
* Update site descriptor to 2.0.0
* Enable prevent branch protection rules
* Fix [MDEP-931: Replace PrintWriter with Writer in AbstractSerializing Visitor and subclasses
* Cleanups dependencies
* Copy edit parameter descriptions
* Small Javadoc clarifications
* MDEP-967: Change info to debug logging in AbstractFromConfigurationMojo
* fix: remove duplicate maven-resolver-api and maven-resolver-util dependencies in pom.xml
* Enable GH issues
* Remove redundant/unneeded code
* Add PR Automation and Stale actions
* Keep files in temporary directory to be deleted after test
* Drop unnecessary call
* Avoid deprecated ArtifactFactory
* MDEP-966: Convert remaining Mojos to Guice injection
* MDEP-966: Convert Analyze Mojos to Guice constructor injection
* MDEP-966: Prefer Guice injection
* MDEP-966: Migrate TreeMojo/CopyMojo/AnalyzeExclusionsMojo/ /UnpackMojo/CopyDependenciesMojo from Plexus to Sisu Guice
* MDEP-966: @component --> @Inject for DisplayAncestorsMojo
* Fixing flaky test in TestCopyDependenciesMojo
* MNG-2961: Remove workaround for fixed bug
* Build
* Build by Maven 4
* Dependency updates
* Bump Maven in dependencies to 3.9.11
* Bump commons-io:commons-io from 2.16.1 to 2.20.0
* Bump jettyVersion from 9.4.56.v20240826 to 9.4.58.v20250814
* Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.19.0
* Bump org.apache.maven.plugins:maven-plugins from 43 to 45
* Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
* Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1
* Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0
* Bump org.jsoup:jsoup from 1.18.1 to 1.21.2
* MDEP-963: Bump org.apache.maven.shared:maven-dependency-analyzer from 1.15.0 to 1.15.1
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Server 16.0
zypper in -t patch SUSE-SLES-16.0-1299=1
* SUSE Linux Enterprise Server for SAP applications 16.0
zypper in -t patch SUSE-SLES-16.0-1299=1
## Package List:
* SUSE Linux Enterprise Server 16.0 (noarch)
* maven-doxia-sitetools-2.1.0-160000.1.1
* maven-doxia-sitetools-javadoc-2.1.0-160000.1.1
* maven-dependency-plugin-javadoc-3.11.0-160000.1.1
* maven-dependency-plugin-3.11.0-160000.1.1
* SUSE Linux Enterprise Server for SAP applications 16.0 (noarch)
* maven-doxia-sitetools-2.1.0-160000.1.1
* maven-dependency-plugin-javadoc-3.11.0-160000.1.1
* maven-dependency-plugin-3.11.0-160000.1.1
* maven-doxia-sitetools-javadoc-2.1.0-160000.1.1
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20260727/a7568cfb/attachment-0001.htm>
More information about the sle-updates
mailing list