ORC-2126: Upgrade maven-shade-plugin to 3.6.2

dependabot[bot] · dongjoon-hyun · commit 4458fe825184 · 2026-03-09T10:55:06.000-07:00
Bumps [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) from 3.6.1 to 3.6.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/maven-shade-plugin/releases">org.apache.maven.plugins:maven-shade-plugin's releases</a>.</em></p> <blockquote> <h2>3.6.2</h2> <h2>🐛 Bug Fixes</h2> <ul> <li>Bug: Extra JARs and Artifacts were not subjected to filtering (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/785">#785</a>) <a href="https://github.com/cstamas"><code>​cstamas</code></a></li> </ul> <h2>👻 Maintenance</h2> <ul> <li>Drop excessive dependencies (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/786">#786</a>) <a href="https://github.com/cstamas"><code>​cstamas</code></a></li> <li>chore: remove junit3 reference (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/762">#762</a>) <a href="https://github.com/sparsick"><code>​sparsick</code></a></li> <li>Exclude Java 25 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/773">#773</a>) <a href="https://github.com/slachiewicz"><code>​slachiewicz</code></a></li> <li>Update site descriptor, use site configuration from parent (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/755">#755</a>) <a href="https://github.com/slawekjaranowski"><code>​slawekjaranowski</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>Drop unneeded dependencies (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/788">#788</a>) <a href="https://github.com/cstamas"><code>​cstamas</code></a></li> <li>Update to parent POM v 47 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/781">#781</a>) <a href="https://github.com/Bukama"><code>​Bukama</code></a></li> <li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/782">#782</a>) <a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/780">#780</a>) <a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.0 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/778">#778</a>) <a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump asmVersion from 9.9 to 9.9.1 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/774">#774</a>) <a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Update invoker plugin to 3.9.1 to Support Java 25 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/769">#769</a>) <a href="https://github.com/Bukama"><code>​Bukama</code></a></li> <li>Bump asmVersion from 9.8 to 9.9 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/761">#761</a>) <a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.xmlunit:xmlunit-legacy from 2.10.3 to 2.11.0 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/763">#763</a>) <a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven.plugin-tools:maven-plugin-annotations from 3.15.1 to 3.15.2 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/764">#764</a>) <a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.3.0 to 3.4.0 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/768">#768</a>) <a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> <li>Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0 (<a href="https://redirect.github.com/apache/maven-shade-plugin/pull/758">#758</a>) <a href="https://github.com/apps/dependabot">dependabot[bot]</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/maven-shade-plugin/commit/ad8de59b38b373a7a601209bc3e2e192805ad7cd"><code>ad8de59</code></a> [maven-release-plugin] prepare release maven-shade-plugin-3.6.2</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/8eb19dce1f587a6f67f3ab00254925e1a437afbb"><code>8eb19dc</code></a> Drop unneeded dependencies (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/788">#788</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/397b2cd7a6315cc9f0ce14b87d6a9108edee25b1"><code>397b2cd</code></a> Drop excessive dependencies (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/786">#786</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/eca6398fd26db22a8f94da99682251ab85a758d8"><code>eca6398</code></a> Bug: Extra JARs and Artifacts were not subjected to filtering (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/785">#785</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/7edce171e15fccee898a69d264bdfdbe21229952"><code>7edce17</code></a> Update to parent POM v 47 (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/781">#781</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/3171a34b15528336c5e7baaf74d18a9140076973"><code>3171a34</code></a> Mockito improvements (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/783">#783</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/678844bd0330fef60f29c5b9d9476867c82c0699"><code>678844b</code></a> Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/782">#782</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/73ec909916f71e018508b4d39e78d939578ee9fa"><code>73ec909</code></a> Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/780">#780</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/5f7a87719217bae4b18cf9d29d326e2b064edd4a"><code>5f7a877</code></a> Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/778">#778</a>)</li> <li><a href="https://github.com/apache/maven-shade-plugin/commit/73c52477a0e1b67eee420ec207a8f50c1d3e99f0"><code>73c5247</code></a> chore: remove junit3 reference (<a href="https://redirect.github.com/apache/maven-shade-plugin/issues/762">#762</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apache/maven-shade-plugin/compare/maven-shade-plugin-3.6.1...maven-shade-plugin-3.6.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-shade-plugin&package-manager=maven&previous-version=3.6.1&new-version=3.6.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `dependabot rebase` will rebase this PR - `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Closes #2574 from dependabot[bot]/dependabot/maven/java/org.apache.maven.plugins-maven-shade-plugin-3.6.2. Authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Dongjoon Hyun <dongjoon@apache.org>
diff --git a/java/pom.xml b/java/pom.xml
@@ -78,7 +78,7 @@
     <maven-assembly-plugin.version>3.8.0</maven-assembly-plugin.version>
     <maven-dependency-plugin.version>3.10.0</maven-dependency-plugin.version>
     <maven-enforcer-plugin.version>3.6.2</maven-enforcer-plugin.version>
-    <maven-shade-plugin.version>3.6.1</maven-shade-plugin.version>
+    <maven-shade-plugin.version>3.6.2</maven-shade-plugin.version>
     <maven.compiler.proc>full</maven.compiler.proc>
     <maven.compiler.release>${java.version}</maven.compiler.release>
     <maven.compiler.useIncrementalCompilation>false</maven.compiler.useIncrementalCompilation>
