)]}'
{
  "commit": "9943091a7a891fdf85d4d865e79c1632c401eaf6",
  "tree": "077aa412af30b50fd3a6483a8f66894898e2b5c2",
  "parents": [
    "bd46b85b636f5dba8c40d7442839914d4badeee1"
  ],
  "author": {
    "name": "dependabot[bot]",
    "email": "49699333+dependabot[bot]@users.noreply.github.com",
    "time": "Tue Nov 03 14:12:51 2026"
  },
  "committer": {
    "name": "Google Java Core Libraries",
    "email": "java-libraries-firehose+copybara@google.com",
    "time": "Tue Nov 03 14:13:51 2026"
  },
  "message": "Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.3 to 3.7.0 in the dependencies group\n\nBumps the dependencies group with 1 update: [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer).\n\nUpdates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.3 to 3.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href\u003d\"https://github.com/apache/maven-enforcer/releases\"\u003eorg.apache.maven.plugins:maven-enforcer-plugin\u0027s releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.7.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003e⚠️ Deprecated\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eName enforcer 4.0.0 as the release that removes the legacy rule API (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1047\"\u003e#1047\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slachiewicz\"\u003e\u003ccode\u003e@​slachiewicz\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDeprecate the evaluateBeanshell rule (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1034\"\u003e#1034\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slachiewicz\"\u003e\u003ccode\u003e@​slachiewicz\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🚀 New features and improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove RequireUpperBoundDeps error message (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1059\"\u003e#1059\u003c/a\u003e) \u003ca href\u003d\"https://github.com/Sambuddha-Jana\"\u003e\u003ccode\u003e@​Sambuddha-Jana\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://issues.apache.org/jira/browse/MENFORCER-433\"\u003e[MENFORCER-433]\u003c/a\u003e - Add banPropertyPrefix rule to ban Maven properties by configured prefixes (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1039\"\u003e#1039\u003c/a\u003e) \u003ca href\u003d\"https://github.com/juliojgd\"\u003e\u003ccode\u003e@​juliojgd\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove RequireUpperBoundDeps error message (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1022\"\u003e#1022\u003c/a\u003e) \u003ca href\u003d\"https://github.com/dhruv9b\"\u003e\u003ccode\u003e@​dhruv9b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://issues.apache.org/jira/browse/ENFORCER-939\"\u003e[ENFORCER-939]\u003c/a\u003e - Support enforcer.skip without a POM (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1021\"\u003e#1021\u003c/a\u003e) \u003ca href\u003d\"https://github.com/dhruv9b\"\u003e\u003ccode\u003e@​dhruv9b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix RequireUpperBoundDeps with test-scope mediation (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1064\"\u003e#1064\u003c/a\u003e) \u003ca href\u003d\"https://github.com/efegokdemir\"\u003e\u003ccode\u003e@​efegokdemir\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix EnforcerRuleCache concurrency across plugin realms (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1057\"\u003e#1057\u003c/a\u003e) \u003ca href\u003d\"https://github.com/efegokdemir\"\u003e\u003ccode\u003e@​efegokdemir\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eResolve plugins on copies of the model plugins (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1046\"\u003e#1046\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slachiewicz\"\u003e\u003ccode\u003e@​slachiewicz\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://issues.apache.org/jira/browse/MENFORCER-517\"\u003e[MENFORCER-517]\u003c/a\u003e - RequireReleaseDeps checks now also for optional dependencies (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1025\"\u003e#1025\u003c/a\u003e) \u003ca href\u003d\"https://github.com/schwarfl\"\u003e\u003ccode\u003e@​schwarfl\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: avoid misleading legacy warning for unknown rules (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1037\"\u003e#1037\u003c/a\u003e) \u003ca href\u003d\"https://github.com/efegokdemir\"\u003e\u003ccode\u003e@​efegokdemir\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erequireFilesExist should accept a symbolic link (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1031\"\u003e#1031\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix/916 require same versions for managed report plugins (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1024\"\u003e#1024\u003c/a\u003e) \u003ca href\u003d\"https://github.com/dhruv9b\"\u003e\u003ccode\u003e@​dhruv9b\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: correct enforceBytecodeVersion excludes filtering (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/990\"\u003e#990\u003c/a\u003e) \u003ca href\u003d\"https://github.com/w3lld1\"\u003e\u003ccode\u003e@​w3lld1\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix: support custom \u003c!-- raw HTML omitted --\u003e output for 9 enforcer rules that ignored getMessage() (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1004\"\u003e#1004\u003c/a\u003e) \u003ca href\u003d\"https://github.com/btpka3\"\u003e\u003ccode\u003e@​btpka3\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRequireFilesExist should accept a file reached through .. (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/977\"\u003e#977\u003c/a\u003e) (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1011\"\u003e#1011\u003c/a\u003e) \u003ca href\u003d\"https://github.com/AzazelSensei\"\u003e\u003ccode\u003e@​AzazelSensei\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation updates\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate the evaluateBeanshell rule (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1034\"\u003e#1034\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slachiewicz\"\u003e\u003ccode\u003e@​slachiewicz\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ejavadoc grammar (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1013\"\u003e#1013\u003c/a\u003e) \u003ca href\u003d\"https://github.com/elharo\"\u003e\u003ccode\u003e@​elharo\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRestore the common wording on the download page (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1008\"\u003e#1008\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slachiewicz\"\u003e\u003ccode\u003e@​slachiewicz\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse \u0026lt;a id\u0026gt; rather than \u0026lt;a name\u0026gt; for the FAQ anchors (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1010\"\u003e#1010\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slachiewicz\"\u003e\u003ccode\u003e@​slachiewicz\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eConvert the FAQ from FML to Markdown (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1009\"\u003e#1009\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slachiewicz\"\u003e\u003ccode\u003e@​slachiewicz\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove obsolete note, clean up typos (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1001\"\u003e#1001\u003c/a\u003e) \u003ca href\u003d\"https://github.com/scordio\"\u003e\u003ccode\u003e@​scordio\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd enforceBytecodeVersion to rules index (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/983\"\u003e#983\u003c/a\u003e) \u003ca href\u003d\"https://github.com/omribz156\"\u003e\u003ccode\u003e@​omribz156\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/989\"\u003e#989\u003c/a\u003e) \u003ca href\u003d\"https://github.com/potiuk\"\u003e\u003ccode\u003e@​potiuk\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e👻 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIgnore SLF4J 2.x in Dependabot (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1062\"\u003e#1062\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slachiewicz\"\u003e\u003ccode\u003e@​slachiewicz\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove redundant rat configuration (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1061\"\u003e#1061\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix ATR project name (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1060\"\u003e#1060\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse push for PR Automation (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1058\"\u003e#1058\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse workflow_run for PR check (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1056\"\u003e#1056\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd project metadata for ATR (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1044\"\u003e#1044\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse ReaderInputStream builder in RequireTextFileChecksum (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1052\"\u003e#1052\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse Resolver RemoteRepository in BannedRepositories (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1051\"\u003e#1051\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd PR check workflow (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1053\"\u003e#1053\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slawekjaranowski\"\u003e\u003ccode\u003e@​slawekjaranowski\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace plexus-utils StringUtils with commons-lang3 in enforcer-rules (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1048\"\u003e#1048\u003c/a\u003e) \u003ca href\u003d\"https://github.com/slachiewicz\"\u003e\u003ccode\u003e@​slachiewicz\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/apache/maven-enforcer/commit/465ebf280e7f7efd9acf9f524b114df69a33c524\"\u003e\u003ccode\u003e465ebf2\u003c/code\u003e\u003c/a\u003e [maven-release-plugin] prepare release enforcer-3.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/apache/maven-enforcer/commit/b24b05c33fd23e710d28e663b83311377be6f3e2\"\u003e\u003ccode\u003eb24b05c\u003c/code\u003e\u003c/a\u003e Fix test-scope mediation in RequireUpperBoundDeps\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/apache/maven-enforcer/commit/2b75dd32499dc971ca990ba5b62d564f3709122b\"\u003e\u003ccode\u003e2b75dd3\u003c/code\u003e\u003c/a\u003e Improve RequireUpperBoundDeps error message (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1059\"\u003e#1059\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/apache/maven-enforcer/commit/b519cd0372a170ef29b8318f251f7d5067972a21\"\u003e\u003ccode\u003eb519cd0\u003c/code\u003e\u003c/a\u003e Fix EnforcerRuleCache concurrency across plugin realms (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1055\"\u003e#1055\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/apache/maven-enforcer/commit/f6222345ba1fbce5839ad45dd8ba650d2e052d31\"\u003e\u003ccode\u003ef622234\u003c/code\u003e\u003c/a\u003e Ignore SLF4J 2.x in Dependabot\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/apache/maven-enforcer/commit/5a9ebca1b513ea6c1276f40dee7c8b9288fc569c\"\u003e\u003ccode\u003e5a9ebca\u003c/code\u003e\u003c/a\u003e Remove redundant rat configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/apache/maven-enforcer/commit/e8512d0095bd082db1e933315b6f9d020b113464\"\u003e\u003ccode\u003ee8512d0\u003c/code\u003e\u003c/a\u003e Fix ATR project name\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/apache/maven-enforcer/commit/08605b22b95923741b9da272987eb96d2c10850e\"\u003e\u003ccode\u003e08605b2\u003c/code\u003e\u003c/a\u003e Use push for PR Automation\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/apache/maven-enforcer/commit/fbe1ae506c1defdb2d80d3a8298342905d68f912\"\u003e\u003ccode\u003efbe1ae5\u003c/code\u003e\u003c/a\u003e Use workflow_run for PR check (\u003ca href\u003d\"https://redirect.github.com/apache/maven-enforcer/issues/1056\"\u003e#1056\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/apache/maven-enforcer/commit/b1d59aa6cc14579577c723b0b2b8c875e463773b\"\u003e\u003ccode\u003eb1d59aa\u003c/code\u003e\u003c/a\u003e Bump commons-codec:commons-codec from 1.22.1 to 1.23.0\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href\u003d\"https://github.com/apache/maven-enforcer/compare/enforcer-3.6.3...enforcer-3.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dorg.apache.maven.plugins:maven-enforcer-plugin\u0026package-manager\u003dmaven\u0026previous-version\u003d3.6.3\u0026new-version\u003d3.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency\u0027s major version (unless you unignore this specific dependency\u0027s major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency\u0027s minor version (unless you unignore this specific dependency\u0027s minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\u003c/details\u003e\n\nFixes https://github.com/google/truth/pull/1724\n\nCOPYBARA_INTEGRATE_REVIEW\u003dhttps://github.com/google/truth/pull/1724 from google:dependabot/maven/dependencies-dc692b1369 ce5e0a5b61bfac008ae54b5011a67dd1af5574f7\nPiperOrigin-RevId: 1012954441\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9c5a608095fc724f22c3c1c0835b3ae959028d17",
      "old_mode": 33188,
      "old_path": "pom.xml",
      "new_id": "2467f836c8327fad6dadd1979488dc49ea4d48fe",
      "new_mode": 33188,
      "new_path": "pom.xml"
    }
  ]
}