[dependabot]

Bumps org.apache.maven.plugins:maven-enforcer-plugin from 3.6.3 to 3.7.0.

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.7.0

⚠️ Deprecated

• Name enforcer 4.0.0 as the release that removes the legacy rule API (#1047) @​slachiewicz
• Deprecate the evaluateBeanshell rule (#1034) @​slachiewicz

🚀 New features and improvements

• Improve RequireUpperBoundDeps error message (#1059) @​Sambuddha-Jana
• [MENFORCER-433] - Add banPropertyPrefix rule to ban Maven properties by configured prefixes (#1039) @​juliojgd
• Improve RequireUpperBoundDeps error message (#1022) @​dhruv9b
• [ENFORCER-939] - Support enforcer.skip without a POM (#1021) @​dhruv9b

🐛 Bug Fixes

• Fix RequireUpperBoundDeps with test-scope mediation (#1064) @​efegokdemir
• Fix EnforcerRuleCache concurrency across plugin realms (#1057) @​efegokdemir
• Resolve plugins on copies of the model plugins (#1046) @​slachiewicz
• [MENFORCER-517] - RequireReleaseDeps checks now also for optional dependencies (#1025) @​schwarfl
• fix: avoid misleading legacy warning for unknown rules (#1037) @​efegokdemir
• requireFilesExist should accept a symbolic link (#1031) @​slawekjaranowski
• Fix/916 require same versions for managed report plugins (#1024) @​dhruv9b
• fix: correct enforceBytecodeVersion excludes filtering (#990) @​w3lld1
• Fix: support custom output for 9 enforcer rules that ignored getMessage() (#1004) @​btpka3
• RequireFilesExist should accept a file reached through .. (#977) (#1011) @​AzazelSensei

📝 Documentation updates

• Deprecate the evaluateBeanshell rule (#1034) @​slachiewicz
• javadoc grammar (#1013) @​elharo
• Restore the common wording on the download page (#1008) @​slachiewicz
• Use <a id> rather than <a name> for the FAQ anchors (#1010) @​slachiewicz
• Convert the FAQ from FML to Markdown (#1009) @​slachiewicz
• Remove obsolete note, clean up typos (#1001) @​scordio
• Add enforceBytecodeVersion to rules index (#983) @​omribz156
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#989) @​potiuk

👻 Maintenance

• Ignore SLF4J 2.x in Dependabot (#1062) @​slachiewicz
• Remove redundant rat configuration (#1061) @​slawekjaranowski
• Fix ATR project name (#1060) @​slawekjaranowski
• Use push for PR Automation (#1058) @​slawekjaranowski
• Use workflow_run for PR check (#1056) @​slawekjaranowski
• Add project metadata for ATR (#1044) @​slawekjaranowski
• Use ReaderInputStream builder in RequireTextFileChecksum (#1052) @​slawekjaranowski
• Use Resolver RemoteRepository in BannedRepositories (#1051) @​slawekjaranowski
• Add PR check workflow (#1053) @​slawekjaranowski
• Replace plexus-utils StringUtils with commons-lang3 in enforcer-rules (#1048) @​slachiewicz

... (truncated)

Commits

• 465ebf2 [maven-release-plugin] prepare release enforcer-3.7.0
• b24b05c Fix test-scope mediation in RequireUpperBoundDeps
• 2b75dd3 Improve RequireUpperBoundDeps error message (#1059)
• b519cd0 Fix EnforcerRuleCache concurrency across plugin realms (#1055)
• f622234 Ignore SLF4J 2.x in Dependabot
• 5a9ebca Remove redundant rat configuration
• e8512d0 Fix ATR project name
• 08605b2 Use push for PR Automation
• fbe1ae5 Use workflow_run for PR check (#1056)
• b1d59aa Bump commons-codec:commons-codec from 1.22.1 to 1.23.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 37%. Comparing base (f48b65a) to head (f48f625).
⚠️ Report is 7 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff            @@
##             master   #2851   +/-   ##
========================================
- Coverage        37%     37%   -0%     
  Complexity       74      74           
========================================
  Files           201     201           
  Lines         13547   13547           
  Branches       1432    1432           
========================================
- Hits           4904    4899    -5     
- Misses         8235    8239    +4     
- Partials        408     409    +1     

see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.