2.0.4

Release Notes - Maven Resolver - Version 2.0.4

Bug

• [MRESOLVER-627] - Improve handling and logging around transport selection
• [MRESOLVER-628] - Class cast issue (probably concurrency issue)

Task

• [MRESOLVER-629] - Make JDK transport default protocol HTTP/1.1

Dependency upgrade

• [MRESOLVER-630] - Bump bouncycastleVersion from 1.78.1 to 1.79
• [MRESOLVER-631] - Bump org.redisson:redisson from 3.37.0 to 3.38.1

---

What's Changed

• [MRESOLVER-630] Bump bouncycastleVersion from 1.78.1 to 1.79 by @cstamas in #602
• Bump org.redisson:redisson from 3.37.0 to 3.38.1 by @dependabot in #598
• [MRESOLVER-629] JDK transport should default to HTTP/1.1 by @cstamas in #600
• [MRESOLVER-628] Explicit cache key for prioritized components by @cstamas in #601
• [MRESOLVER-627] Improve transport selection and logging by @cstamas in #599

Full Changelog: maven-resolver-2.0.3...maven-resolver-2.0.4

2.0.3

Release Notes - Maven Resolver - Version 2.0.3

Bug

• [MRESOLVER-612] - Align connect and request timeout interpretation by HTTP transports
• [MRESOLVER-614] - Collector applies depMgt entries coming from a self onto itself

Improvement

• [MRESOLVER-613] - Deploy the properties metadata
• [MRESOLVER-615] - Increase default HTTP timeouts

Task

• [MRESOLVER-623] - Merge Docgen tool with Maven one

Dependency upgrade

• [MRESOLVER-616] - (build) Bump testcontainersVersion from 1.20.2 to 1.20.3
• [MRESOLVER-617] - Bump org.apache.velocity:velocity-engine-core from 2.4 to 2.4.1
• [MRESOLVER-618] - (build) Bump org.mockito:mockito-core from 5.14.1 to 5.14.2
• [MRESOLVER-620] - (build) Bump exec-maven-plugin to 3.5.0
• [MRESOLVER-621] - Update Jetty to 10.0.24
• [MRESOLVER-622] - Maven 4.0.0-beta-5
• [MRESOLVER-624] - Bump io.minio:minio from 8.5.12 to 8.5.13

---

What's Changed

• Bump testcontainersVersion from 1.20.2 to 1.20.3 by @dependabot in #586
• Bump org.apache.velocity:velocity-engine-core from 2.4 to 2.4.1 by @dependabot in #585
• Bump org.mockito:mockito-core from 5.14.1 to 5.14.2 by @dependabot in #583
• Bump org.codehaus.plexus:plexus-xml from 3.0.1 to 4.0.4 by @dependabot in #582
• Updates by @cstamas in #589
• Undo P-X raise by @cstamas in #590
• [MRESOLVER-612] Align timeout interpretations across HTTP transports by @cstamas in #587
• [MRESOLVER-614] Do not apply depMgt onto itself by @cstamas in #588
• Bump io.minio:minio from 8.5.12 to 8.5.13 by @dependabot in #593
• Merge docgen by @cstamas in #591

Full Changelog: maven-resolver-2.0.2...maven-resolver-2.0.3

2.0.2

Release Notes - Maven Resolver - Version 2.0.2

Bug

• [MRESOLVER-602] - Documentation for aether.priority.<class> has disappeared

New Feature

• [MRESOLVER-541] - S3 Transport
• [MRESOLVER-599] - Sigstore generator
• [MRESOLVER-600] - Implement RFC 9457 - Problem Details for HTTP APIs
• [MRESOLVER-604] - Make config properties metadata available

Improvement

• [MRESOLVER-598] - Improve javadoc around version ranges
• [MRESOLVER-603] - Apache HTTP transport should expose config for max redirects
• [MRESOLVER-605] - FileTransporter should offer symlink, hardlink ops aside of existing copy (experimental)

Dependency upgrade

• [MRESOLVER-606] - Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.17.0
• [MRESOLVER-607] - Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.22.0 to 0.23.0
• [MRESOLVER-608] - Bump org.apache.commons:commons-compress from 1.26.2 to 1.27.1
• [MRESOLVER-609] - Bump maven3Version from 3.9.8 to 3.9.9
• [MRESOLVER-610] - (build) Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1
• [MRESOLVER-611] - Bump slf4jVersion from 2.0.13 to 2.0.16

---

What's Changed

• [MRESOLVER-598] Improve Javadoc on version ranges by @kwin in #558
• Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.17.0 by @dependabot in #575
• Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.22.0 to 0.23.0 by @dependabot in #562
• Bump org.apache.commons:commons-compress from 1.26.2 to 1.27.1 by @dependabot in #561
• Bump maven3Version from 3.9.8 to 3.9.9 by @dependabot in #559
• Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1 by @dependabot in #557
• Bump slf4jVersion from 2.0.13 to 2.0.16 by @dependabot in #556
• [MRESOLVER-600] - RFC9457 Implementation by @doddi in #576
• [MRESOLVER-604] Make config properties metadata available by @gnodet in #574
• [MRESOLVER-541] S3 Transport using MinIO by @cstamas in #553
• [MRESOLVER-599] Sigstore Artifact Generator by @cstamas in #573
• [MRESOLVER-605] Linking support in file transporter by @cstamas in #578
• [MRESOLVER-602][MRESOLVER-603] Expose redirect config for apache transport by @cstamas in #581

New Contributors

• @doddi made their first contribution in #576

Full Changelog: maven-resolver-2.0.1...maven-resolver-2.0.2

2.0.1

Release Notes - Maven Resolver - Version 2.0.1

Bug

• [MRESOLVER-579] - JDK transport: Using insecure flag resets ALPN and SNI

New Feature

• [MRESOLVER-342] - New named lock: IPC
• [MRESOLVER-499] - IPC Named Locks

Improvement

• [MRESOLVER-582] - (demo) Use Google JIMFS for demos
• [MRESOLVER-584] - Jetty / JDK transport: HTTP2 GOAWAY improvement
• [MRESOLVER-585] - Is unclear how to use custom LocalRepositoryManager with builder
• [MRESOLVER-586] - In typical setups, DefaultArtifact copies the same maps over and over again
• [MRESOLVER-587] - Memory consumption improvements
• [MRESOLVER-595] - Jetty transport should expose config for redirect follow and max redirects

Dependency upgrade

• [MRESOLVER-580] - Bump org.codehaus.plexus:plexus-testing from 1.3.0 to 1.4.0
• [MRESOLVER-581] - Bump org.eclipse.jetty:jetty-bom from 10.0.21 to 10.0.22
• [MRESOLVER-583] - Bump org.apache.maven:maven-parent from 42 to 43
• [MRESOLVER-590] - Bump commons-codec:commons-codec from 1.17.0 to 1.17.1
• [MRESOLVER-591] - Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0
• [MRESOLVER-592] - (build) Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.21.2 to 0.22.0
• [MRESOLVER-593] - (build) Bump testcontainersVersion from 1.19.8 to 1.20.1
• [MRESOLVER-594] - Bump org.redisson:redisson from 3.32.0 to 3.34.1

---

What's Changed

• [MRESOLVER-579] Fix overwrite of SSLParameters in JDK HTTP transport when securityMode is "insecure" by @scholzi100 in #529
• [MRESOLVER-579] The TODO part by @cstamas in #530
• Bump org.codehaus.plexus:plexus-testing from 1.3.0 to 1.4.0 by @dependabot in #528
• Bump org.eclipse.jetty:jetty-bom from 10.0.21 to 10.0.22 by @dependabot in #527
• Use Google JIMFS for demos by @cstamas in #526
• [MRESOLVER-499] IPC Named locks by @cstamas in #435
• Bump org.apache.maven:maven-parent from 42 to 43 by @dependabot in #531
• [MRESOLVER-586] Avoid copying the type default properties map by @gsmet in #534
• [MRESOLVER-585] Explain reason for this method by @cstamas in #548
• [MRESOLVER-587] Memory usage improvements by @cstamas in #537
• Bump commons-codec:commons-codec from 1.17.0 to 1.17.1 by @dependabot in #538
• Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0 by @dependabot in #541
• Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.21.2 to 0.22.0 by @dependabot in #543
• Bump testcontainersVersion from 1.19.8 to 1.20.1 by @dependabot in #546
• Bump org.redisson:redisson from 3.32.0 to 3.34.1 by @dependabot in #547
• [MRESOLVER-584] JDK transport HTTP/2 GOAWAY improvement by @cstamas in #532
• [MRESOLVER-584] Jetty transport HTTP/2 GOAWAY improvement by @cstamas in #533
• [MRESOLVER-595] Expose follow and max redirects for Jetty client by @cstamas in #549

New Contributors

• @scholzi100 made their first contribution in #529

Full Changelog: maven-resolver-2.0.0...maven-resolver-2.0.1

1.9.22

Release Notes - Maven Resolver - Version 1.9.22

Improvement

• [MRESOLVER-586] - In typical setups, DefaultArtifact copies the same maps over and over again
• [MRESOLVER-587] - Memory consumption improvements

Dependency upgrade

• [MRESOLVER-590] - Bump commons-codec:commons-codec from 1.17.0 to 1.17.1
• [MRESOLVER-592] - (build) Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.21.2 to 0.22.0
• [MRESOLVER-594] - Bump org.redisson:redisson from 3.32.0 to 3.34.1

---

What's Changed

• [MRESOLVER-586] Avoid copying the type default properties map - 1.9.x by @gsmet in #535
• [MRESOLVER-587] Memory usage improvements by @cstamas in #536

Full Changelog: maven-resolver-1.9.21...maven-resolver-1.9.22

2.0.0

Release Notes - Maven Resolver - Version 2.0.0

Bug

• [MRESOLVER-164] - DefaultDependencyCollector filterVersions seems always return full version range
• [MRESOLVER-334] - Maven Resolver's GenericVersionScheme diverges from the spec
• [MRESOLVER-336] - Unexpected handling of qualifiers in GenericVersionScheme
• [MRESOLVER-372] - Sporadic AccessDeniedEx on Windows
• [MRESOLVER-392] - Resolver installer should not be "smart" about installs
• [MRESOLVER-413] - BF collector causes failure when -Dmaven.artifact.threads=1 used
• [MRESOLVER-414] - MRESOLVER-377 makes several metadata related Maven IT fail
• [MRESOLVER-436] - The Upgrading Resolver page uses classnames before rename
• [MRESOLVER-438] - The new jdk transport bug on Java 11 and Java 17
• [MRESOLVER-441] - Undo FileUtils changes that altered non-Windows execution path
• [MRESOLVER-455] - JDK transport: Improper handling of ofInputStream body handlers in case of error
• [MRESOLVER-464] - JDK transport bug
• [MRESOLVER-483] - PreorderNodeListGenerator bug: may print trailing ":"
• [MRESOLVER-515] - Restore compatibility broken by MRESOLVER-496
• [MRESOLVER-521] - File locking threads not entering critical region were "oversleeping"
• [MRESOLVER-547] - BF collector always copies artifacts, even when it should not
• [MRESOLVER-572] - Resolver-Supplier unusable in OSGi runtimes
• [MRESOLVER-574] - Invalid Cookie set under proxy conditions

New Feature

• [MRESOLVER-217] - Allow extra "sources" for Artifact decoration
• [MRESOLVER-301] - Artifact Generators
• [MRESOLVER-415] - New transport: JDK11 HTTP/2 capable
• [MRESOLVER-416] - New transport: Jetty, HTTP/2 capable
• [MRESOLVER-446] - Version Scheme Provider
• [MRESOLVER-451] - Expose version range processing strategies
• [MRESOLVER-512] - Scope Manager
• [MRESOLVER-518] - Improvements for version selector
• [MRESOLVER-571] - Import o.e.aether packages with the exact same version in OSGi metadata

Improvement

• [MRESOLVER-264] - Make file-lock the default locking
• [MRESOLVER-302] - Introduce onSession close
• [MRESOLVER-321] - Resolver while collecting may end up in busy loop without any possibility to be stopped
• [MRESOLVER-335] - Better resolver errors for Artifact Not Found
• [MRESOLVER-377] - Introduce metadata update policy
• [MRESOLVER-384] - Support HTTP/2 in maven-resolver-transport-http
• [MRESOLVER-390] - Customize graph visiting strategy
• [MRESOLVER-420] - Prioritized components should be cached per session
• [MRESOLVER-421] - Extend NamedLock API to carry more than one name
• [MRESOLVER-445] - Simplify session handling, move out logic from session builder
• [MRESOLVER-447] - Expose flatten method on RepositorySystem
• [MRESOLVER-450] - Add a RepositoryCache#computeIfAbsent method
• [MRESOLVER-460] - More filter improvements for H/L
• [MRESOLVER-463] - Ensure checksum record file (summary fie) is sorted by artifact relative path and not checksum
• [MRESOLVER-465] - Make room for new version scheme implementations
• [MRESOLVER-467] - Pull out shared HTTP (Remote Included checksum) code
• [MRESOLVER-468] - Stabilize supplier binary and source compatibility
• [MRESOLVER-484] - The dependencies properties should be provided by the resolver consumer
• [MRESOLVER-493] - Support premanaged of optional, exclusions and properties by DependencyGraphDumper
• [MRESOLVER-494] - LOCAL_PATH Artifact property really belongs to "system" scope (or is at least very related to it)
• [MRESOLVER-519] - Drop copies of same method, re-add them to parent (collectors)
• [MRESOLVER-520] - Move repeated code (decorators, generators) into Utils
• [MRESOLVER-535] - DependencyGraphDumper should be configurable
• [MRESOLVER-536] - Skip setting last modified time when FS does not support it
• [MRESOLVER-538] - In dirty tree, nodes coming from range (and parents having ranges) should be detectable
• [MRESOLVER-540] - TransferResource can and should tell more about transfer
• [MRESOLVER-542] - Reduce usage of final classes
• [MRESOLVER-554] - Support configuration of upload/download threads individually
• [MRESOLVER-570] - Remove excessive strictness of OSGi dependency metadata
• [MRESOLVER-573] - CollectionConfiguration should ignore module-info.java

Wish

• [MRESOLVER-324] - Make the BF algorithm as the default option to speed up maven dependency resolution and downloading

Task

• [MRESOLVER-157] - Get rid of ServiceLocator in Resolver
• [MRESOLVER-289] - Remove "Aether wiki" link from site
• [MRESOLVER-295] - Deprecate ChecksumUtils, split its ...

1.9.21

Release Notes - Maven Resolver - Version 1.9.21

Bug

• [MRESOLVER-572] - Resolver-Supplier unusable in OSGi runtimes
• [MRESOLVER-574] - Invalid Cookie set under proxy conditions

New Feature

• [MRESOLVER-571] - Import o.e.aether packages with the exact same version in OSGi metadata

Improvement

• [MRESOLVER-570] - Remove excessive strictness of OSGi dependency metadata

Task

• [MRESOLVER-576] - Allow co-release of Resolver 1.x and 2.x

Dependency upgrade

• [MRESOLVER-575] - Bump org.redisson:redisson to 3.32.0
• [MRESOLVER-577] - Bump maven version to 3.9.8

---

What's Changed

• [Build] Unify bnd-maven-plugin and maven-jar-plugin invocations by @HannesWell in #509
• [Build] Define all MANIFEST.MF entries through the bnd-maven-plugin by @HannesWell in #518
• [1.9.x] [MRESOLVER-570] Remove excessive strictness of OSGi dependency metadata by @HannesWell in #505
• [1.9.x] [MRESOLVER-572] Export internal packages in OSGi metadata as x-internal by @HannesWell in #510
• [1.9.x] [MRESOLVER-571] Import o.e.aether packages with the exact same version by @HannesWell in #507
• [1.9.x] [MRESOLVER-574] Use standard cookie spec by @cstamas in #523
• [1.9.x] Tame bnd plugin warnings by @cstamas in #524

Full Changelog: maven-resolver-1.9.20...maven-resolver-1.9.21

1.9.20

Release Notes - Maven Resolver - Version 1.9.20

Bug

• [MRESOLVER-547] - BF collector always copies artifacts, even when it should not

Dependency upgrade

• [MRESOLVER-549] - Use parent POM 42
• [MRESOLVER-550] - Bump Redisson from 3.28.0 to 3.29.0
• [MRESOLVER-551] - (build) Bump japicmp from 0.17.2 to 0.21.1

---

What's Changed

• [MRESOLVER-547] Just use setVersion by @cstamas in #483
• [MRESOLVER-549] Parent POM 42 by @cstamas in #484

Full Changelog: maven-resolver-1.9.19...maven-resolver-1.9.20

2.0.0-alpha-11

Release Notes - Maven Resolver - Version 2.0.0-alpha-11

Bug

• [MRESOLVER-521] - File locking threads not entering critical region were "oversleeping"
• [MRESOLVER-547] - BF collector always copies artifacts, even when it should not

New Feature

• [MRESOLVER-217] - Allow extra "sources" for Artifact decoration
• [MRESOLVER-518] - Improvements for version selector

Improvement

• [MRESOLVER-519] - Drop copies of same method, re-add them to parent (collectors)
• [MRESOLVER-520] - Move repeated code (decorators, generators) into Utils
• [MRESOLVER-535] - DependencyGraphDumper should be configurable
• [MRESOLVER-536] - Skip setting last modified time when FS does not support it
• [MRESOLVER-538] - In dirty tree, nodes coming from range (and parents having ranges) should be detectable
• [MRESOLVER-540] - TransferResource can and should tell more about transfer
• [MRESOLVER-542] - Reduce usage of final classes

Task

• [MRESOLVER-552] - Redirect site creation to enable concurrent release of 1.x and 2.x resolver

Dependency upgrade

• [MRESOLVER-523] - Update GPG generator to Bouncycastle 1.78
• [MRESOLVER-524] - Update Hazelcast to 5.3.7
• [MRESOLVER-525] - Update test dep testcointainers-redis to 2.2.2
• [MRESOLVER-534] - Redisson 3.28.0
• [MRESOLVER-537] - Use slf4j 2.0.13
• [MRESOLVER-539] - Use parent POM 42
• [MRESOLVER-543] - (build) Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.20.0 to 0.21.1
• [MRESOLVER-544] - Bump org.redisson:redisson from 3.28.0 to 3.29.0
• [MRESOLVER-545] - Bump bouncycastleVersion from 1.78 to 1.78.1
• [MRESOLVER-546] - Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1

---

What's Changed

• [MNG-7416] Simplify Boolean expressions and returns by @timtebeek in #333
• [MRESOLVER-407] Update to Maven 3.9.5 by @cstamas in #336
• [MRESOLVER-408] Make master 2.0.0-SNAPSHOT by @cstamas in #335
• [MRESOLVER-324] Make bf option as default by @caiwei-ebay in #325
• [MRESOLVER-377] Introduce metadataUpdatePolicy by @cstamas in #308
• [MRESOLVER-390] Customize graph visiting strategy by @cstamas in #322
• [MRESOLVER-338] Drop FileTransform API by @cstamas in #337
• [MRESOLVER-389] Drop logging facade by @cstamas in #338
• [MRESOLVER-409] Drop various deprecated methods and classes by @cstamas in #339
• [MRESOLVER-157] Drop Service Locator by @cstamas in #340
• [MRESOLVER-413] BF collector should not use maven.artifact.threads by @cstamas in #341
• [MRESOLVER-414] Fully split update policies internally by @cstamas in #342
• [MRESOLVER-415] The "jdk" transport by @cstamas in #343
• [MRESOLVER-416] New transport "jetty" by @cstamas in #344
• [MRESOLVER-418] Migrate to JUnit 5 by @cstamas in #345
• [MRESOLVER-409] More deprecation removal by @cstamas in #346
• [MRESOLVER-419] Preserve component names by @cstamas in #347
• [MRESOLVER-420] Cache prioritized components by @cstamas in #348
• Automatic code improvement, no semantic change by @cstamas in #349
• [MRESOLVER-411] Update to Maven 4.0.0-alpha-8 by @cstamas in #350
• [MRESOLVER-392] Remove change detection logic on install by @cstamas in #351
• [MRESOLVER-295] ChecksumUtils should be gone (deprecated) by @cstamas in #352
• Bump org.eclipse.jetty:jetty-http from 9.4.52.v20230823 to 9.4.53.v20231009 in /maven-resolver-transport-http by @dependabot in #334
• Fix javadoc (wip) by @gnodet in #353
• [MRESOLVER-423] Legacy promotion is no stay here by @cstamas in #354
• [MRESOLVER-424] Make graph dumper extensible by @cstamas in #355
• [MRESOLVER-430] Build time Java 21 required by @cstamas in #358
• [MRESOLVER-426] Make some HTTP configuration shared by @cstamas in #356
• [MRESOLVER-422] Fix javadoc configuration by @cstamas in #359
• [MRESOLVER-302] Introduce onSessionClose by @cstamas in #357
• [MRESOLVER-302] Addendum by @cstamas in #360
• [MRESOLVER-431] Make chained repository and transfer listeners extensible by @cstamas in #361
• [MRESOLVER-432] Introduce Session Supplier similar to System Supplier by @cstamas in #362
• [MRESOLVER-427] Config for expect/continue inhibition by @cstamas in #363
• [MRESOLVER-372] Rework the FileUtils collocated temp file by @cstamas in #364
• [MRESOLVER-434] Upgrade Parent to 41 by @slawekjaranowski in #368
• [MRESOLVER-435] Refresh download page by @slawekjaranowski in #370
• Ensure we have a single JDK module by @rmannibucau in #374
• [MRESOLVER-436] Update page with renames by @cstamas in #372
• [MRESOLVER-437][MRESOLVER-438] Do not force set Expect-Continue setting by @cstamas in #373
• [MRESOLVER-441] Undo FileUtils changes for non-Windows by @cstamas in #377
• [MRESOLVER-440] Clean up transport names and config keys by @cstamas in #375
• [MRESOLVER-429] Emit more informative message on connection refused by @cstamas in #379
• [MRESOLVER-321] Make collection and visiting interruptable by @cstamas in #380
• [MRESOLVER-442] Build JDK transport MR JAR the proper way by @cstamas in #381
• [MRESOLVER-440] Addendum by @cstamas in #382
• [MRESOLVER-446] Introduce version scheme selector by @cstamas in #384
• [MRESOLVER-445] Simplify session handling, move out logic from session builder by @cstamas in #383
• Update UTs regarding deprecations by @cstamas in #387
• [MRESOLVER-447] Expose flatten method w/ filter by @cstamas in #389
• [MRESOLVER-448] Align Jetty versions by @cstamas in #390
• [MRESOLVER-443] Integrate tool into build by @cstamas in #385
• [MRE...

1.9.19

Release Notes - Maven Resolver - Version 1.9.19

Bug

• [MRESOLVER-483] - PreorderNodeListGenerator bug: may print trailing ":"
• [MRESOLVER-522] - File locking threads not entering critical region were "oversleeping"

Improvement

• [MRESOLVER-536] - Skip setting last modified time when FS does not support it

Dependency upgrade

• [MRESOLVER-527] - Hazelcast 5.3.7
• [MRESOLVER-528] - Redisson 3.28.0
• [MRESOLVER-529] - Commons Codec 1.16.1
• [MRESOLVER-530] - Eclipse Sisu 0.9.0.M2
• [MRESOLVER-531] - Maven 3.9.6 (demos)
• [MRESOLVER-532] - Guice 6.0.0 (and Guava 33.1.0)
• [MRESOLVER-533] - Jetty 9.4.54 (used in tests)

---

What's Changed

• [1.9.x][MRESOLVER-483] Fix path concatenation logic by @cstamas in #420
• [1.9.x] [MRESOLVER-522] Improve congested file locks behaviour (#455) by @cstamas in #461
• [1.9.x] Update dependencies by @cstamas in #462
• [1.9.x] [MRESOLVER-536] Do not belly up if FS does not support setting mtime by @cstamas in #469

Full Changelog: maven-resolver-1.9.18...maven-resolver-1.9.19