From bd03418a406e813f7f89e4466b554932e56f2a79 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 28 Mar 2026 02:35:36 +0800
Subject: [PATCH 1/4] =?UTF-8?q?chore(deps):=20=E4=BE=9D=E8=B5=96=E9=A1=B9?=
 =?UTF-8?q?=E5=8D=87=E7=BA=A7[org.codehaus.mojo:flatten-maven-plugin][1.7.?=
 =?UTF-8?q?1=20=3D>=201.7.3]=20(#1071)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin)
from 1.7.1 to 1.7.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mojohaus/flatten-maven-plugin/releases">org.codehaus.mojo:flatten-maven-plugin's
releases</a>.</em></p>
<blockquote>
<h2>1.7.3</h2>
<!-- raw HTML omitted -->
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Fixes condition-activated profiles not considered in effective model
(<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/481">#481</a>)
<a href="https://github.com/oldhen"><code>@​oldhen</code></a></li>
</ul>
<h2>📦 Dependency updates</h2>
<ul>
<li>Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/482">#482</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.codehaus.mojo:mojo-parent from 92 to 93 (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/480">#480</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/479">#479</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
</ul>
<h2>1.7.2</h2>
<!-- raw HTML omitted -->
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Create missing target directories, use NIO for file block operations
(<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/471">#471</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
</ul>
<h2>📝 Documentation updates</h2>
<ul>
<li>Clarify example in usage about updatePomFile behavior (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/477">#477</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
</ul>
<h2>👻 Maintenance</h2>
<ul>
<li>Add stale GitHub Action (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/476">#476</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li>Add Maven 4 to build matrix on GitHub Actions (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/474">#474</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li>Improve assertions in no-overwrite tests (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/475">#475</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li>Add a missing plugin version in ITS (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/473">#473</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li>Add integration test for install and deploy flattened pom (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/472">#472</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
</ul>
<h2>📦 Dependency updates</h2>
<ul>
<li>Bump commons-io:commons-io from 2.19.0 to 2.20.0 (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/470">#470</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump mavenVersion from 3.9.10 to 3.9.11 (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/467">#467</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump com.fasterxml.jackson.core:jackson-core from 2.3.3 to 2.15.0 in
/src/it/projects/bom-flattenMode/bom (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/464">#464</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump com.fasterxml.jackson.core:jackson-core from 2.13.0 to 2.15.0
in /src/it/projects/bom-pomElements/bom (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/pull/463">#463</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/mojohaus/flatten-maven-plugin/commit/bd7c560961a12c1329dc7250546621556b79ee59"><code>bd7c560</code></a>
[maven-release-plugin] prepare release 1.7.3</li>
<li><a
href="https://github.com/mojohaus/flatten-maven-plugin/commit/aee23ca1ba880d75f7244643749c936b4af1de5e"><code>aee23ca</code></a>
Bump org.assertj:assertj-core from 3.27.4 to 3.27.5</li>
<li><a
href="https://github.com/mojohaus/flatten-maven-plugin/commit/7da52c3820b0e555333689ce21ccad4db1bfdd10"><code>7da52c3</code></a>
Fixes condition-activated profiles not considered in effective model (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/issues/481">#481</a>)</li>
<li><a
href="https://github.com/mojohaus/flatten-maven-plugin/commit/7680ed43c482f7b199e02fd8325c560062678552"><code>7680ed4</code></a>
Bump org.codehaus.mojo:mojo-parent from 92 to 93</li>
<li><a
href="https://github.com/mojohaus/flatten-maven-plugin/commit/deae474c9f3016ab57146c6a4d610d09ca8a4547"><code>deae474</code></a>
Bump org.assertj:assertj-core from 3.27.3 to 3.27.4</li>
<li><a
href="https://github.com/mojohaus/flatten-maven-plugin/commit/318971829ad1a57aea0f0350caa1d7cf209db6c6"><code>3189718</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="https://github.com/mojohaus/flatten-maven-plugin/commit/9d8004182e527cfe77271750b004d922afcbc206"><code>9d80041</code></a>
[maven-release-plugin] prepare release 1.7.2</li>
<li><a
href="https://github.com/mojohaus/flatten-maven-plugin/commit/6c62863516b007a5a24da6842b5fe12085b58f3f"><code>6c62863</code></a>
Clarify example in usage about updatePomFile behavior</li>
<li><a
href="https://github.com/mojohaus/flatten-maven-plugin/commit/fc35f4cd0bc85f1781ee2425b20a217ec5c0ac02"><code>fc35f4c</code></a>
Add stale GitHub Action</li>
<li><a
href="https://github.com/mojohaus/flatten-maven-plugin/commit/0fb1ea0403a952402003957a3914c5cdced9de4f"><code>0fb1ea0</code></a>
Add Maven 4 to build matrix on GitHub Actions (<a
href="https://redirect.github.com/mojohaus/flatten-maven-plugin/issues/474">#474</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/mojohaus/flatten-maven-plugin/compare/1.7.1...1.7.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.codehaus.mojo:flatten-maven-plugin&package-manager=maven&previous-version=1.7.1&new-version=1.7.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 meta-bom/bom-deamon/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta-bom/bom-deamon/pom.xml b/meta-bom/bom-deamon/pom.xml
index 818f51fe..2afa8087 100644
--- a/meta-bom/bom-deamon/pom.xml
+++ b/meta-bom/bom-deamon/pom.xml
@@ -1635,7 +1635,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>flatten-maven-plugin</artifactId>
-                <version>1.7.1</version>
+                <version>1.7.3</version>
                 <configuration>
                     <updatePomFile>true</updatePomFile>
                     <flattenMode>bom</flattenMode>

From 9feee10ed8a25762344c84ad88872c632bc62034 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 28 Mar 2026 02:35:57 +0800
Subject: [PATCH 2/4] =?UTF-8?q?chore(deps):=20=E4=BE=9D=E8=B5=96=E9=A1=B9?=
 =?UTF-8?q?=E5=8D=87=E7=BA=A7[org.apache.maven.plugins:maven-antrun-plugin?=
 =?UTF-8?q?][3.1.0=20=3D>=203.2.0]=20(#1073)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[org.apache.maven.plugins:maven-antrun-plugin](https://github.com/apache/maven-antrun-plugin)
from 3.1.0 to 3.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/apache/maven-antrun-plugin/releases">org.apache.maven.plugins:maven-antrun-plugin's
releases</a>.</em></p>
<blockquote>
<h2>3.2.0</h2>
<!-- raw HTML omitted -->
<h2>📝 Documentation updates</h2>
<ul>
<li><a
href="https://issues.apache.org/jira/browse/MNGSITE-529">[MNGSITE-529]</a>
- Rename &quot;Goals&quot; to &quot;Plugin Documentation&quot; (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/112">#112</a>)
<a href="https://github.com/Bukama"><code>@​Bukama</code></a></li>
<li><a
href="https://issues.apache.org/jira/browse/MANTRUN-231">[MANTRUN-231]</a>
- Document limitations of exportAntProperties (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/108">#108</a>)
<a href="https://github.com/elharo"><code>@​elharo</code></a></li>
</ul>
<h2>👻 Maintenance</h2>
<ul>
<li>Refresh download page, use site descriptor 2.0 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/342">#342</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li>Add tag-template to release-drafter (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/343">#343</a>)
<a
href="https://github.com/slawekjaranowski"><code>@​slawekjaranowski</code></a></li>
<li>Run ci also with Maven 4 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/341">#341</a>)
<a
href="https://github.com/slachiewicz"><code>@​slachiewicz</code></a></li>
<li>Bump Maven to 3.9.11 and keep prerequisites at 3.6.3 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/340">#340</a>)
<a
href="https://github.com/slachiewicz"><code>@​slachiewicz</code></a></li>
<li>feat: enable prevent branch protection rules (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/337">#337</a>)
<a href="https://github.com/sparsick"><code>@​sparsick</code></a></li>
<li>Enable Github Issues (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/116">#116</a>)
<a href="https://github.com/Bukama"><code>@​Bukama</code></a></li>
<li>Switch from plexus to Guice (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/106">#106</a>)
<a href="https://github.com/elharo"><code>@​elharo</code></a></li>
<li>Correct user visible spelling error (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/105">#105</a>)
<a href="https://github.com/elharo"><code>@​elharo</code></a></li>
<li><a
href="https://issues.apache.org/jira/browse/MANTRUN-241">[MANTRUN-241]</a>
- Bump org.junit:junit-bom from 5.10.1 to 5.10.2 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/92">#92</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li><a
href="https://issues.apache.org/jira/browse/MANTRUN-239">[MANTRUN-239]</a>
- Upgrade parent pom to 40 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/88">#88</a>)
<a
href="https://github.com/slachiewicz"><code>@​slachiewicz</code></a></li>
<li><a
href="https://issues.apache.org/jira/browse/MANTRUN-239">[MANTRUN-239]</a>
- Update parent pom to 39 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/80">#80</a>)
<a
href="https://github.com/slachiewicz"><code>@​slachiewicz</code></a></li>
</ul>
<h2>📦 Dependency updates</h2>
<ul>
<li>Bump version.xmlunit from 2.10.3 to 2.10.4 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/338">#338</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.apache.maven.plugins:maven-plugins from 44 to 45 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/336">#336</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/115">#115</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump version.xmlunit from 2.10.2 to 2.10.3 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/333">#333</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump version.xmlunit from 2.10.1 to 2.10.2 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/118">#118</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump version.xmlunit from 2.10.0 to 2.10.1 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/117">#117</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.apache.ant:ant from 1.10.14 to 1.10.15 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/103">#103</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li><a
href="https://issues.apache.org/jira/browse/MANTRUN-239">[MANTRUN-239]</a>
- Bump org.apache.maven.plugins:maven-plugins from 42 to 43 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/101">#101</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li><a
href="https://issues.apache.org/jira/browse/MANTRUN-244">[MANTRUN-244]</a>
- Upgrade to JUnit 5.12.0 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/114">#114</a>)
<a
href="https://github.com/slachiewicz"><code>@​slachiewicz</code></a></li>
<li>Bump org.hamcrest:hamcrest-core from 1.3 to 3.0 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/111">#111</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Declare dependencies explicitly (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/107">#107</a>)
<a href="https://github.com/elharo"><code>@​elharo</code></a></li>
<li>Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/96">#96</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.xmlunit:xmlunit-core from 2.9.1 to 2.10.0 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/98">#98</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li><a
href="https://issues.apache.org/jira/browse/MANTRUN-242">[MANTRUN-242]</a>
- Require Maven 3.6.3+ (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/95">#95</a>)
<a
href="https://github.com/slachiewicz"><code>@​slachiewicz</code></a></li>
<li><a
href="https://issues.apache.org/jira/browse/MANTRUN-241">[MANTRUN-241]</a>
- Bump org.junit:junit-bom from 5.10.1 to 5.10.2 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/92">#92</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump org.apache.maven.plugins:maven-plugins from 40 to 41 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/91">#91</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li><a
href="https://issues.apache.org/jira/browse/MANTRUN-241">[MANTRUN-241]</a>
- Bump org.junit.jupiter:junit-jupiter-engine to 5.10.1 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/89">#89</a>)
<a
href="https://github.com/slachiewicz"><code>@​slachiewicz</code></a></li>
<li>Bump xmlunit-matchers from 2.9.0 to 2.9.1 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/83">#83</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump xmlunit-core from 2.9.0 to 2.9.1 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/84">#84</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li><a
href="https://issues.apache.org/jira/browse/MANTRUN-240">[MANTRUN-240]</a>
- Bump org.apache.ant:ant from 1.10.13 to 1.10.14 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/87">#87</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump ant from 1.10.12 to 1.10.13 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/81">#81</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/67">#67</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump junit-jupiter-engine from 5.9.0 to 5.9.1 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/68">#68</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump plexus-utils from 3.4.1 to 3.4.2 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/57">#57</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump maven-javadoc-plugin from 3.4.0 to 3.4.1 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/65">#65</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump maven-project-info-reports-plugin from 3.3.0 to 3.4.1 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/64">#64</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump junit-jupiter-engine from 5.8.2 to 5.9.0 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/pull/63">#63</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/apache/maven-antrun-plugin/commit/d8a5220938abab3213b5506a923d8acfb2c70e31"><code>d8a5220</code></a>
[maven-release-plugin] prepare release maven-antrun-plugin-3.2.0</li>
<li><a
href="https://github.com/apache/maven-antrun-plugin/commit/a049c4dafc86fd96eba4223b3a928fe111458be4"><code>a049c4d</code></a>
Refresh download page, use site descriptor 2.0</li>
<li><a
href="https://github.com/apache/maven-antrun-plugin/commit/3e2fbe1af0d280ec4252fed9c7a6eb33ae7241a4"><code>3e2fbe1</code></a>
Add tag-template to release-drafter</li>
<li><a
href="https://github.com/apache/maven-antrun-plugin/commit/43af127f5cfcab8d2a34fb52f82ca8fb15832dd6"><code>43af127</code></a>
Add hacktoberfest label to project</li>
<li><a
href="https://github.com/apache/maven-antrun-plugin/commit/cc0189aa1e551c6d60dc18a78e237ca310ba3043"><code>cc0189a</code></a>
Run ci also with Maven 4</li>
<li><a
href="https://github.com/apache/maven-antrun-plugin/commit/ff42558761ffaeea7e9e7888d1d1b16f2f49c4a8"><code>ff42558</code></a>
Bump Maven to 3.9.11 and keep prerequisites at 3.6.3</li>
<li><a
href="https://github.com/apache/maven-antrun-plugin/commit/17c406cc6dbf2efb4ceda10672dc0a1e95cff442"><code>17c406c</code></a>
Bump version.xmlunit from 2.10.3 to 2.10.4 (<a
href="https://redirect.github.com/apache/maven-antrun-plugin/issues/338">#338</a>)</li>
<li><a
href="https://github.com/apache/maven-antrun-plugin/commit/a3135977f039674d9176d2d6792c282f6d23c5d9"><code>a313597</code></a>
feat: enable prevent branch protection rules</li>
<li><a
href="https://github.com/apache/maven-antrun-plugin/commit/e0127c7362dcbfa2336126f45501ab8bda654b44"><code>e0127c7</code></a>
Bump org.apache.maven.plugins:maven-plugins from 44 to 45</li>
<li><a
href="https://github.com/apache/maven-antrun-plugin/commit/565754cf8efc48833c9f734c785f7ffb2e06a877"><code>565754c</code></a>
fix</li>
<li>Additional commits viewable in <a
href="https://github.com/apache/maven-antrun-plugin/compare/maven-antrun-plugin-3.1.0...maven-antrun-plugin-3.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-antrun-plugin&package-manager=maven&previous-version=3.1.0&new-version=3.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 meta-bom/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta-bom/pom.xml b/meta-bom/pom.xml
index 8f3d2578..75ca6f61 100644
--- a/meta-bom/pom.xml
+++ b/meta-bom/pom.xml
@@ -51,7 +51,7 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
 
-    <maven-antrun-plugin.version>3.1.0</maven-antrun-plugin.version>
+    <maven-antrun-plugin.version>3.2.0</maven-antrun-plugin.version>
     <maven-assembly-plugin.version>3.7.1</maven-assembly-plugin.version>
     <maven-clean-plugin.version>3.4.0</maven-clean-plugin.version>
     <maven-compiler-plugin.version>3.15.0</maven-compiler-plugin.version>

From 9d3f1e62ae0af8f0d176d590884817f876400582 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 28 Mar 2026 02:36:11 +0800
Subject: [PATCH 3/4] =?UTF-8?q?chore(deps):=20=E4=BE=9D=E8=B5=96=E9=A1=B9?=
 =?UTF-8?q?=E5=8D=87=E7=BA=A7[com.alibaba.nacos:nacos-client][3.1.2=20=3D>?=
 =?UTF-8?q?=203.2.0]=20(#1072)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [com.alibaba.nacos:nacos-client](https://github.com/alibaba/nacos)
from 3.1.2 to 3.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/alibaba/nacos/releases">com.alibaba.nacos:nacos-client's
releases</a>.</em></p>
<blockquote>
<h2>3.2.0 (Mar 27th, 2026)</h2>
<p>Nacos 3.2.0 is a major release focused on plugin architecture
enhancement, AI Registry expansion, API modernization, and code quality
improvements. Key highlights include:</p>
<ul>
<li><strong>AI Registry Completes the &quot;AI Triad&quot;</strong>:
Skill Registry and Prompt Registry join existing MCP/Agent Registry,
with Nacos Copilot integration for AI-assisted management</li>
<li><strong>Plugin Architecture Modernization</strong>: Comprehensive
SPI-based plugin management with console UI, cluster-wide
synchronization, and PostgreSQL enhancements</li>
<li><strong>API Cleanup</strong>: Legacy UDP PUSH support removed, /v1
and /v2 HTTP APIs extracted to submodules for future removal</li>
<li><strong>Security &amp; Code Quality</strong>: OIDC/OAuth2
authentication plugin, multiple FindBugs fixes, dead code removal, and
JDK 17+ compatibility enhancements</li>
<li><strong>Console Modernization</strong>: Dual UI support for
new/legacy console switching with improved user experience</li>
</ul>
<h2>Feature</h2>
<ul>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/13699">#13699</a>
Support outputSchema for MCP tools</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14041">#14041</a>
Merge nacos-plugin PostgreSQL &amp; Base Implementation into main
repository</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14056">#14056</a>
Refactor datasource plugins structure and enhance PostgreSQL
capabilities</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14077">#14077</a>
Implement SPI-based plugin discovery and management API</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14078">#14078</a>
Implement cluster-wide state synchronization for plugins</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14079">#14079</a>
Add plugin management console UI and API</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14084">#14084</a>
Support MCP Tool _meta and annotations fields</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14085">#14085</a>
Enhance MCP tool metadata with annotations support</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14101">#14101</a>
Implement cluster-wide state synchronization</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14109">#14109</a>
Introduce Prompt Registry as core component of Nacos AI Registry</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14110">#14110</a>
Introduce Skills Registry to complement Nacos AI Registry vision</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14117">#14117</a>
Add plugin management console UI and API</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14120">#14120</a>
Add version parameter support to Maintainer SDK Get Agent Card
method</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14527">#14527</a>
Add OIDC/OAuth2 Authentication Plugin (Server)</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14534">#14534</a>
Add find-skill-from-nacos capability for intelligent skill
discovery</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14623">#14623</a>
Add skill-scanner integration for AI Skill security scanning</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14641">#14641</a>
Update Nacos console UI with modern design</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14653">#14653</a>
Support dual UI switching between new and legacy console with
contextPath adaptation</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14672">#14672</a>
Skill support for data level access and visibility Phase 2</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14677">#14677</a>
Skill support for data level access and visibility Phase 3</li>
</ul>
<h2>Enhancement/Refactor</h2>
<ul>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14048">#14048</a>
Refactor datasource plugins structure and enhance PostgreSQL
capabilities</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14050">#14050</a>
Extract /v1 and /v2 HTTP APIs to submodules for future removal</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14052">#14052</a>
Remove UDP PUSH support for naming module</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14057">#14057</a>
Refactor CreateTool and support output scheme</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14074">#14074</a>
Remove legacy UDP PUSH support from naming module</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14122">#14122</a>
Add JVM --add-opens options for JDK 17+ compatibility in startup
scripts</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14125">#14125</a>
Activate dev profile by default for plugin dependencies</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14441">#14441</a>
Refactor version comparison and JSON field handling with constants</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14461">#14461</a>
Remove obsolete p3c-pmd plugin and cleanup annotations</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14463">#14463</a>
Unify component scanning with custom package exclusion</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14468">#14468</a>
Unify component scanning with custom package exclusion</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14546">#14546</a>
Remove unused common.cache package (dead code from Guava removal
attempt)</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14585">#14585</a>
Refactor admin API input from JSON body to form params</li>
<li><a
href="https://redirect.github.com/alibaba/nacos/issues/14640">#14640</a>
Refactor database plugins and update CI report paths</li>
</ul>
<h2>BugFix</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/alibaba/nacos/commit/411f0b0be3587a881bacff56ddca7f74dd0ad6eb"><code>411f0b0</code></a>
Sync some fix into develop branch. (<a
href="https://redirect.github.com/alibaba/nacos/issues/14762">#14762</a>)</li>
<li><a
href="https://github.com/alibaba/nacos/commit/1f97ac50146d3b74d4c2e8ab7351ec8d4e4fa70a"><code>1f97ac5</code></a>
Merge remote-tracking branch 'refs/remotes/upstream/develop' into
develop-ski...</li>
<li><a
href="https://github.com/alibaba/nacos/commit/d4d3a707fa39b97a55428b3c2a05662ee3cd760c"><code>d4d3a70</code></a>
fix(test): Fix unit test async test failed.</li>
<li><a
href="https://github.com/alibaba/nacos/commit/93703e66b058281d25f867bf278ab5a485129fed"><code>93703e6</code></a>
fix(test): Fix ai module unit test.</li>
<li><a
href="https://github.com/alibaba/nacos/commit/610cf51fcb74c4f94d8cc41c8b9121c35a0557fb"><code>610cf51</code></a>
fix(console-ui-next): fix scroll lock on route change and increase panel
heig...</li>
<li><a
href="https://github.com/alibaba/nacos/commit/a01fdb3b2c954a2409e721101d71988864db6412"><code>a01fdb3</code></a>
Merge pull request <a
href="https://redirect.github.com/alibaba/nacos/issues/14760">#14760</a>
from luoxiner/support-import-data-from</li>
<li><a
href="https://github.com/alibaba/nacos/commit/2a2bb43462c1467173285a6bcc3b068086fbda42"><code>2a2bb43</code></a>
feat(ai-resource): add 'from' field to AI resource metadata.</li>
<li><a
href="https://github.com/alibaba/nacos/commit/35198beaa3055ecafc895fef99dd06acc8a70b9b"><code>35198be</code></a>
chore(build): finalize release version from beta.</li>
<li><a
href="https://github.com/alibaba/nacos/commit/84e031bf3e3aaa6642444c890a74015159af6dfb"><code>84e031b</code></a>
fix(skill): update default author value to &quot;-&quot; .</li>
<li><a
href="https://github.com/alibaba/nacos/commit/652232b828037bec01579d938efd0d991ca5731c"><code>652232b</code></a>
Merge pull request <a
href="https://redirect.github.com/alibaba/nacos/issues/14756">#14756</a>
from alibaba/develop-skill-pipeline</li>
<li>Additional commits viewable in <a
href="https://github.com/alibaba/nacos/compare/3.1.2...3.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.alibaba.nacos:nacos-client&package-manager=maven&previous-version=3.1.2&new-version=3.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 meta-bom/bom-deamon/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta-bom/bom-deamon/pom.xml b/meta-bom/bom-deamon/pom.xml
index 2afa8087..30b487f2 100644
--- a/meta-bom/bom-deamon/pom.xml
+++ b/meta-bom/bom-deamon/pom.xml
@@ -375,7 +375,7 @@
             <dependency>
                 <groupId>com.alibaba.nacos</groupId>
                 <artifactId>nacos-client</artifactId>
-                <version>3.1.2</version>
+                <version>3.2.0</version>
                 <scope>compile</scope>
             </dependency>
 

From 3ad970c8af80658cba9eed80291924e3b12e567c Mon Sep 17 00:00:00 2001
From: ACANX <acanx@qq.com>
Date: Sat, 28 Mar 2026 02:38:27 +0800
Subject: [PATCH 4/4] Feat/acanx/remove (#1074)

---
 meta-bom/bom-deamon/pom.xml | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/meta-bom/bom-deamon/pom.xml b/meta-bom/bom-deamon/pom.xml
index 30b487f2..68acf422 100644
--- a/meta-bom/bom-deamon/pom.xml
+++ b/meta-bom/bom-deamon/pom.xml
@@ -678,18 +678,6 @@
                 <artifactId>netty-all</artifactId>
                 <version>${netty.version}</version>
             </dependency>
-            <dependency>
-                <groupId>io.netty</groupId>
-                <artifactId>netty-transport-native-unix-common</artifactId>
-                <version>${netty.version}</version>
-                <scope>runtime</scope>
-            </dependency>
-            <dependency>
-                <groupId>io.netty</groupId>
-                <artifactId>netty-transport-native-unix-common</artifactId>
-                <version>${netty.version}</version>
-                <scope>runtime</scope>
-            </dependency>
             <dependency>
                 <groupId>io.netty</groupId>
                 <artifactId>netty-transport-native-epoll</artifactId>