Skip to content

Bump com.diffplug.spotless:spotless-maven-plugin from 3.5.0 to 3.5.1 - #728

Merged
slawekjaranowski merged 1 commit into
masterfrom
dependabot/maven/com.diffplug.spotless-spotless-maven-plugin-3.5.1
May 24, 2026
Merged

slawekjaranowski merged 1 commit into
masterfrom
dependabot/maven/com.diffplug.spotless-spotless-maven-plugin-3.5.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps com.diffplug.spotless:spotless-maven-plugin from 3.5.0 to 3.5.1.

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.5.1

Fixed

  • <licenseHeader> with <yearMode>SET_FROM_GIT</yearMode> no longer runs git log through a shell, eliminating a shell-injection vector when formatting files whose names contain shell metacharacters.
  • Bump transitive plexus-utils 4.0.2 -> 4.0.3 to address CVE-2025-67030. (#2919)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 19, 2026
@slachiewicz

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.5.0 to 3.5.1.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.5.0...maven/3.5.1)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/com.diffplug.spotless-spotless-maven-plugin-3.5.1 branch from 68ac5cd to c4edb80 Compare May 24, 2026 09:20
@slawekjaranowski
slawekjaranowski merged commit 1c32b53 into master May 24, 2026
4 checks passed
@slawekjaranowski
slawekjaranowski deleted the dependabot/maven/com.diffplug.spotless-spotless-maven-plugin-3.5.1 branch May 24, 2026 11:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants