SUSE-RU-2024:3971-1

This update for mojo-parent fixes the following issues:

xalan-j2 was updated from version 2.7.2 to 2.7.3:

• Security issues fixed:

  • CVE-2022-34169: Fixed integer truncation issue when processing malicious XSLT stylesheets (bsc#1201684)

• Changes and Bugs fixed:

  • Java 8 is now the minimum requirement
  • Upgraded to Apache Commons BCEL 6.7.0
  • Upgraded to Xerces-J 2.12.2

mojo-parent was updated from version 70 to 82:

• Main changes:

  • Potentially Breaking Changes:

    • mojo.java.target should be set as '8', without '1.'
    • spotless plugin must be executed by JDK 11 at least
    • ossrh-snapshots repository was removed from parent

  • New features and improvements:

    • Removed SHA-512 checksum for source release artifact
    • Use only project version as tag for release
    • Added space before close empty elements in poms by spotless
    • Using Checkstyle together with Spotless
    • Introduce spotless for automatic code formatting
    • Introduce enforcer rule for minimal version of Java and Maven
    • Use new Plugin Tools report - maven-plugin-report-plugin
    • Added sisu-maven-plugin
    • Introduced maven.version property
    • Execute spotless by JDK 11 at least
    • Use release options for m-compiler-p with newer JDKs
    • Allow override of invoker.streamLogsOnFailures
    • Require Maven 3.9.x at least for releases
    • Added maven-wrapper-plugin to pluginManagement
    • Removed ossrh-snapshots repository from MojoHaus parent
    • Added build-helper-maven-plugin to pluginManagement
    • Require Maven 3.6.3+
    • Updated palantirJavaFormat for spotless - JDK 21 compatible
    • Added dependencyManagement for maven-shade-plugin
    • Dropped recommendedJavaBuildVersion property
    • Format Markdown files with Spotless Plugin

  • Bugs fixed:

    • Restore source release distribution in child projects
    • Rename property maven.version to mavenVersion
    • minimalMavenBuildVersion should not be overriding by...