fix(deps): update mvn-packages

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
org.apache.maven.plugins:maven-assembly-plugin (source)	3.7.1 -> 3.8.0
com.google.errorprone:error_prone_core (source)	2.42.0 -> 2.45.0
com.google.auto.value:auto-value (source)	1.11.0 -> 1.11.1
com.google.auto.value:auto-value-annotations (source)	1.11.0 -> 1.11.1
org.codehaus.mojo:exec-maven-plugin (source)	3.5.1 -> 3.6.2
com.diffplug.spotless:spotless-maven-plugin	3.0.0 -> 3.1.0
com.helger.maven:ph-javacc-maven-plugin	5.0.0 -> 5.0.1
commons-cli:commons-cli (source)	1.10.0 -> 1.11.0

---

Release Notes

apache/maven-assembly-plugin (org.apache.maven.plugins:maven-assembly-plugin)

v3.8.0: 3.8.0

🐛 Bug Fixes

• [MASSEMBLY-1030] - Manifest entries from archive configuration are not added in final MANIFEST (#​205) @​olamy
• [MASSEMBLY-1029] - Use minimal level for model validation (#​204) @​gnodet

📝 Documentation updates

• [MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#​215) @​Bukama

👻 Maintenance

• chore: migrate junit3/4 to junit5 (#​1260) @​sparsick
• feat: enable prevent branch protection rules (#​1252) @​sebtiem
• Enable Github Issues (#​219) @​Bukama

📦 Dependency updates

• Bump Maven to 3.9.11. Prerequisite still 3.6.3 (#​1270) @​slachiewicz
• Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 (#​1269) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-io from 3.5.2 to 3.6.0 (#​1264) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-interpolation from 1.28 to 1.29 (#​1266) @​dependabot[bot]
• Bump commons-io:commons-io from 2.20.0 to 2.21.0 (#​1267) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4 (#​1265) @​dependabot[bot]
• Bump org.apache.maven:maven-archiver from 3.6.4 to 3.6.5 (#​1258) @​dependabot[bot]
• Bump com.github.luben:zstd-jni from 1.5.7-5 to 1.5.7-6 (#​1259) @​dependabot[bot]
• Bump plexus-archiver to 4.10.3 (#​1255) @​slachiewicz
• Bump m-invoker-p to 3.9.1 for Java 25 (#​1256) @​slachiewicz
• Bump com.github.luben:zstd-jni from 1.5.7-4 to 1.5.7-5 (#​1254) @​dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 44 to 45 (#​1251) @​dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 42 to 44 (#​216) @​dependabot[bot]
• Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0 (#​1248) @​dependabot[bot]
• Bump org.apache.maven:maven-archiver from 3.6.3 to 3.6.4 (#​1249) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1 (#​1250) @​dependabot[bot]
• Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#​1247) @​dependabot[bot]
• Bump com.github.luben:zstd-jni from 1.5.7-3 to 1.5.7-4 (#​1244) @​dependabot[bot]
• Bump commons-fileupload:commons-fileupload from 1.5 to 1.6.0 in /src/it/projects/bugs/massembly-580 (#​1245) @​dependabot[bot]
• Bump com.github.luben:zstd-jni from 1.5.7-2 to 1.5.7-3 (#​225) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.9.2 to 4.10.0 (#​209) @​dependabot[bot]
• Bump org.apache.maven.shared:maven-common-artifact-filters from 3.3.2 to 3.4.0 (#​207) @​dependabot[bot]
• Bump commons-io:commons-io from 2.16.1 to 2.19.0 (#​224) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28 (#​223) @​dependabot[bot]
• Bump com.github.luben:zstd-jni from 1.5.6-3 to 1.5.7-2 (#​222) @​dependabot[bot]
• Bump org.apache.maven:maven-archiver from 3.6.2 to 3.6.3 (#​221) @​dependabot[bot]
• Bump org.apache.commons:commons-compress from 1.27.0 to 1.27.1 (#​213) @​dependabot[bot]
• Bump org.apache.maven.shared:maven-filtering from 3.3.2 to 3.4.0 (#​220) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-io from 3.4.2 to 3.5.1 (#​214) @​dependabot[bot]
• Bump org.hamcrest:hamcrest from 2.2 to 3.0 (#​212) @​dependabot[bot]
• Bump org.apache.commons:commons-compress from 1.26.1 to 1.27.0 (#​211) @​dependabot[bot]
• Bump com.github.luben:zstd-jni from 1.5.6-1 to 1.5.6-3 (#​203) @​dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#​202) @​dependabot[bot]
• Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#​201) @​dependabot[bot]
• [MASSEMBLY-1028] - Bump org.apache.maven:maven-archiver from 3.6.1 to 3.6.2 (#​197) @​dependabot[bot]
• [MASSEMBLY-1027] - Bump commons-io:commons-io from 2.15.1 to 2.16.0 (#​198) @​dependabot[bot]
• Bump com.github.luben:zstd-jni from 1.5.5-11 to 1.5.6-1 (#​196) @​dependabot[bot]

google/error-prone (com.google.errorprone:error_prone_core)

v2.45.0: Error Prone 2.45.0

Changes:

• Improved compatibility with latest JDK 26 EA builds.

New checks:

• AssertSameIncompatible: Detect calls to assertSame and similar assertions, where the calls are guaranteed to either succeed or fail.
• FormatStringShouldUsePlaceholders: Suggests using a format string instead of string concatenation operations on format methods

Closed issues: #​5335

Full changelog: google/error-prone@v2.44.0...v2.45.0

v2.44.0: Error Prone 2.44.0

Changes

• The default severity for LabelledBreakTarget is now an error
• Update dependency on Guava (#​5108)

Closed issues: #​5218, #​5278

Full changelog: google/error-prone@v2.43.0...v2.44.0

v2.43.0: Error Prone 2.43.0

The minimum supported JDK version to run Error Prone is now JDK 21 (#​4867).

Changes:

• -XepPatchChecks now skips disabled checks (#​4943)
• AndroidJdkLibsChecker has been removed, the recommended replacement for Android code is Android Lint's NewApi check

New checks:

• NullNeedsCastForVarargs: Detect calls that incorrectly passes a null array instead of a null element.
• RedundantNullCheck: detect checks on expressions that are non-null.

Closed issues: #​4943, #​5102, #​5107, #​5121, #​5158, #​5217, #​5239

Full changelog: google/error-prone@v2.42.0...v2.43.0

mojohaus/exec-maven-plugin (org.codehaus.mojo:exec-maven-plugin)

v3.6.2

Compare Source

🚀 New features and improvements

• Add JPMS ServiceLoader Support with Multi-Release JAR (#​500) @​ascheman

📦 Dependency updates

• Bump asm.version from 9.8 to 9.9 (#​498) @​dependabot[bot]

v3.6.1

Compare Source

🐛 Bug Fixes

• Revert change from #​480 - plugin dependencies must be resolved from plugin repositories (#​496) @​slawekjaranowski

📦 Dependency updates

• Bump org.codehaus.mojo:mojo-parent from 93 to 94 (#​495) @​dependabot[bot]

v3.6.0

Compare Source

🚀 New features and improvements

• [ExecMojo]Add getShebang method to correctly set the command line executable name (#​487) @​uchenily
• JEP 512 Support (#​484) @​cayhorstmann

🐛 Bug Fixes

• fix inheritIo option (#​488) @​dernasherbrezon
• Fix for #​479 - Wrong repositories used to collect deps (#​480) @​cstamas

👻 Maintenance

• Use JSR-330 for component injection (#​493) @​slawekjaranowski
• Re-run failed tests (#​491) @​slawekjaranowski
• Restore default matrix build (#​486) @​slawekjaranowski

📦 Dependency updates

• Use Maven 3.9.11 in dependencies, still requires 3.6.3 as minimum (#​492) @​slawekjaranowski
• Bump org.codehaus.mojo:mojo-parent from 92 to 93 (#​483) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 91 to 92 (#​478) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 90 to 91 (#​477) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 89 to 90 (#​476) @​dependabot[bot]

diffplug/spotless (com.diffplug.spotless:spotless-maven-plugin)

v3.1.0

Added

• Support forclang-format on maven-plugin (#​2406)
• Allow overriding classLoader for all JarStates to enable spotless-cli (#​2427)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.