Release Notes

📝 Documentation updates

• MPMD-405 - Update release notes for 3.25.0 (#166) @adangel

📦 Dependency updates

• MPMD-404 - Upgrade to PMD 7.7.0 (#170) @pzygielo
• MPMD-407 - Upgrade to Doxia 2.0.0 GA Stack (#175) @michael-o
• Bump commons-io:commons-io from 2.7 to 2.14.0 in /src/it/MPMD-318-auxclasspath-includeTests/module-a (#174) @dependabot
• Bump commons-io:commons-io from 2.16.1 to 2.17.0 (#169) @dependabot
• Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0 (#167) @dependabot

NOTE: Read the details on this release here: https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack

🚀 New features and improvements

• MPMD-390 - Dynamically calculate xrefLocation/xrefTestLocation (#126) @michael-o

🐛 Bug Fixes

• MPMD-368 - Parameter ‘localRepository’ is deprecated

👻 Maintenance

• MPMD-398 - Refresh download page (#165) @FredrikAnderson

📝 Documentation updates

• (doc) Update release notes for 3.23.0 and 3.24.0 (#161) @adangel

📦 Dependency updates

• MPMD-389 - Upgrade to Doxia 2.0.0 Milestone Stack (#126) @michael-o
• MPMD-401 - Upgrade to Parent 43 (#159) @dependabot
• Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.16.0 (#164) @dependabot
• Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0 (#163) @dependabot

💥 Breaking changes

• If you use maven-site-plugin together with maven-pmd-plugin, you need to upgrade m-site-p to 3.20.0 or later.
• Read the details on this release here: https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack

🚀 New features and improvements

• MPMD-391 - Log what developers care about and not what they don't (#156) @michael-o

🐛 Bug Fixes

• MPMD-399 - Incorrect warning: The project X does not seem to be compi… (#154) @michael-o

📦 Dependency updates

• MPMD-400 - Upgrade to PMD 7.3.0 (#157) @michael-o
• Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23 to 1.24 (#155) @dependabot
• Bump org.apache.maven.shared:maven-common-artifact-filters from 3.3.2 to 3.4.0 (#153) @dependabot

👻 Maintenance

• Remove outdated (#158) @michael-o

🐛 Bug Fixes

• MPMD-395 - Build doesn't fail for invalid CPD format (#150) @adangel

📦 Dependency updates

• MPMD-397 - Upgrade to Maven 3.6.3 (#151) @michael-o

🚀 New features and improvements

• MPMD-379 - Upgrade to use PMD 7.0.0 by default (#144) @mkolesnikov

📦 Dependency updates

• MPMD-394 - Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#148) @dependabot
• MPMD-393 - Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#147) @dependabot
• MPMD-393 - Bump commons-io:commons-io from 2.15.1 to 2.16.0 (#146) @dependabot
• Bump apache/maven-gh-actions-shared from 3 to 4 (#143) @dependabot
• Bump org.codehaus.plexus:plexus-resources from 1.2.0 to 1.3.0 (#140) @dependabot
• Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.14.0 (#137) @dependabot
• Bump commons-io:commons-io from 2.11.0 to 2.15.1 (#138) @dependabot
• MPMD-388 - Upgrade to Parent 41 @michael-o

👻 Maintenance

• Bump release-drafter/release-drafter from 5 to 6 (#142) @dependabot

🐛 Bug Fixes

• MPMD-370 - Remove remaining uses of FileReader
• MPMD-371 - Using two ruleset files with same name in different directories (#127) @harbulot
• MPMD-382 - Regression in report rendering
• MPMD-384 - maven-pmd-plugin is dowloading transitive dependencies of unmanaged version (#135) @caiwei-ebay

👻 Maintenance

• Move commons-lang3 to test scope (#131) @elharo

📝 Documentation updates

• Typo: fill –> file (#133) @elharo

📦 Dependency updates

• MPMD-380 - Prefer apache commons and JDK to Plexus utils (#132) @elharo
• MPMD-387 - Upgrade to Parent 40

🚀 New features and improvements

• MPMD-365 - Support Java 20 (#116) @adangel
• MPMD-375 - Replace *ReportGenerators with new *ReportRenderers (#130) @michael-o

🐛 Bug Fixes

• MPMD-369 - System encoding conflicts with XML encoding in CpdViolationCheckMojo (#122) @elharo
• MPMD-373 - System property java.version is overwritten in ITs as model property (#128) @michael-o

👻 Maintenance

• MPMD-374 - Remove deprecated and unused PmdCollectingRenderer (#128) @michael-o
• MNG-6829 - Replace any StringUtils#isEmpty(String) and #isNotEmpty(String) (#124) @timtebeek
• Remove vestigial useJava5 parameter (#119) @elharo
• MPMD-367 - Verify / ubuntu-latest jdk-11-temurin 3.9.1 broken at head in MPMD-270-325-JDK11 (#121) @elharo

📦 Dependency updates

• MPMD-364 - Upgrade to PMD 6.55.0 (#115) @dependabot
• MPMD-364 - Upgrade to PMD 6.54.0 (#112) @adangel
• MPMD-366 - Update parent pom to 39 (#118) @elharo
• MPMD-372 - Upgrade plugins and components (in ITs) (#128) @michael-o
• Bump animal-sniffer-maven-plugin from 1.22 to 1.23 (#117) @dependabot
• Bump release-drafter/release-drafter from 5.21.1 to 5.23.0 (#114) @dependabot
• Bump apache/maven-gh-actions-shared from 2 to 3 (#113) @dependabot
• Bump doxia-sink-api from 1.11.1 to 1.12.0 (#111) @dependabot
• Bump wagon-http-lightweight from 3.5.2 to 3.5.3 (#108) @dependabot

🐛 Bug Fixes

• MPMD-335 - Aggregate mode doesn't use additional repositories (#101) @adangel

👻 Maintenance

• MPMD-361 - Explicitly start and end tables with Doxia Sinks in report renderers

📦 Dependency updates

• MPMD-360 - Upgrade to PMD 6.53.0 (#109) @adangel
• MPMD-358 - Upgrade to PMD 6.52.0 (#104) @adangel
• MPMD-357 - Upgrade to PMD 6.51.0 (#100) @adangel
• Bump release-drafter/release-drafter from 5.21.0 to 5.21.1 (#99) @dependabot
• MPMD-356 - Upgrade to PMD 6.50.0 (#98) @adangel
• Bump maven-common-artifact-filters from 3.3.1 to 3.3.2 (#95) @dependabot
• Bump release-drafter/release-drafter from 5.20.1 to 5.21.0 (#93) @dependabot

🐛 Bug Fixes

• MPMD-353 - API incompatibility with jansi after upgrading m-shared-utils (#91) @adangel

📦 Dependency updates

• Bump animal-sniffer-maven-plugin from 1.21 to 1.22 (#88) @dependabot
• Bump wiremock from 1.49 to 2.27.2 (#57) @dependabot
• MPMD-354 - Upgrade to PMD 6.49.0 (#92) @adangel
• Bump release-drafter/release-drafter from 5.20.0 to 5.20.1 (#86) @dependabot

🚀 New features and improvements

• MPMD-348 - Support Java 19 (#82) @adangel

🐛 Bug Fixes

• [SECURITY] Fix Partial Path Traversal Vulnerability (#80) @JLLeitschuh

📦 Dependency updates

• MPMD-352 - Upgrade Maven Common Artifact Filters to 3.3.1
• MPMD-351 - Upgrade Maven Artifact Transfer to 0.13.1
• MPMD-350 - Upgrade Maven Shared Utils to 3.3.4
• MPMD-349 - Upgrade Maven Reporting API to 3.1.1/Maven Reporting Impl to 3.2.0 (#84) @michael-o
• MPMD-347 - Upgrade to PMD 6.48.0 (#81) @adangel
• Bump maven-plugins from 36 to 37 (#79) @dependabot
• MPMD-345 - Upgrade to PMD 6.47.0 (#73) @adangel
• Bump commons-lang3 from 3.8.1 to 3.12.0 (#72) @dependabot
• Bump plexus-resources from 1.1.0 to 1.2.0 (#56) @dependabot
• Bump animal-sniffer-maven-plugin from 1.16 to 1.21 (#54) @dependabot

💥 Compatibility Notice

For technical reasons the parameter sourceEncoding has been replaced with inputEncoding. For details please see MPMD-349/2b7d2d7065bae1f984c82d210062064376fbd430.

🚀 New features and improvements

• MPMD-309 - Add configuration option to show suppressed violations (#59) @adangel
• MPMD-332 - Support Java 18 (#63) @adangel

🐛 Bug Fixes

• MPMD-334 - Source Encoding parameter is ignored (#64) @laoseth
• MPMD-342 - No debug log message issued when empty report shall be ski… (#69) @michael-o

📝 Documentation updates

• MPMD-333 - Add release notes documentation (#61) @adangel

👻 Maintenance

• MPMD-336 - Replace deprecated calls to PMD (#66) @adangel

📦 Dependency updates

• MPMD-329 - Upgrade to PMD 6.45.0
• MPMD-330 - Upgrade Maven Parent to 35 (#60) @adangel
• MPMD-331 - Require Maven 3.2.5+ (#60) @adangel
• MPMD-337 - Upgrade Maven Parent to 36 (#67) @adangel
• MPMD-338 - Upgrade to Doxia/Doxia Sitetools to 1.11.1
• MPMD-339 - Upgrade plugins in ITs
• MPMD-340 - Upgrade Maven Reporting API/Impl to 3.1.0
• MPMD-341 - Upgrade Maven Plugin Test Harness to 3.3.0
• MPMD-343 - Upgrade to PMD 6.46.0 (#71) @adangel
• Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (#68) @dependabot
• Bump release-drafter/release-drafter from 5.18.1 to 5.19.0 (#58) @dependabot
• Bump commons-io from 2.6 to 2.7 in /src/it/MPMD-318-auxclasspath-includeTests/module-a (#65) @dependabot
• Bump slf4jVersion from 1.7.25 to 1.7.36 (#53) @dependabot

🐛 Bug Fixes

• MPMD-325 - Could not find class due to IncompatibleClassChangeError warning
• MPMD-324 - Ruleset URLs have hyphen replaced with forwardslash
• MPMD-323 - ResourceManager should use project base dir instead of pom location

🔧 Build

• MPMD-328 - Shared GitHub Actions

🚀 New features and improvements

• MPMD-327 - Upgrade to PMD 6.42.0

📦 Dependency updates

• MPMD-326 - Set Maven 3.1.1 as minimum version

🐛 Bug Fixes

• MPMD-314 - PMD report extension not set correctly for custom report class
• MPMD-315 - Maven PMD Plugin fails on Java 16: Unsupported targetJdk value ‘16’.
• MPMD-317 - NoClassDefFoundError for provided classes
• MPMD-318 - Incorrect aux classpath if ‘includeTests’ set to true
• MPMD-320 - Error when using toolchain and spaces in repository path

🚀 New features and improvements

• MPMD-283 - Create a real aggregate goal
• MPMD-311 - Improve excludeFromFailureFile docs
• MPMD-313 - Improve <jdkToolchain> parameter description
• MPMD-321 - Display PMD version that is being used also for pmd:pmd and pmd:cpd
• MPMD-322 - Display when PMD/CPD is skipped

🔧 Build

• MPMD-319 - Add GitHub Action to confirm build PR

📦 Dependency updates

• MPMD-308 - Set Maven 3.1.0 as minimum version
• MPMD-316 - Require Java 8
• MPMD-312 - Upgrade to PMD 6.38.0

🐛 Bug Fixes

• MPMD-297 - Classloader not being closed after PMD run
• MPMD-300 - Unable to format output with custom renderer (CodeClimateRenderer)
• MPMD-305 - CPD goal does not support txt as a format parameter
• MPMD-307 - NPE when using custom rule

🚀 New features and improvements

• MPMD-290 - Add CPD example for C#
• MPMD-301 - make build Reproducible
• MPMD-304 - maven-pmd-plugin should be toolchains-aware

📦 Dependency updates

• MPMD-298 - Upgrade Doxia Sitetools to 1.9.2 to remove dependency on Struts
• MPMD-302 - Upgrade to PMD 6.29.0

🐛 Bug Fixes

• MPMD-288 - NullPointerException when File.list() returns null
• MPMD-289 - check: unable to find pmd.xml
• MPMD-292 - PMD Log is not always integrated into maven log
• MPMD-295 - Maven PMD Plugin fails on Java 13: Unsupported targetJdk value ‘13’

🚀 New features and improvements

• MPMD-225 - Create report even if no warnings have been found by default
• MPMD-269 - Display PMD version that is being used
• MPMD-296 - Copy ruleset files into a subdirectory of target

📝 Documentation updates

• MPMD-241 - Document the version relationship between plugin and pmd
• MPMD-287 - Add additional contribution information for GitHub

🔧 Build

• MPMD-285 - remove pluginTools version override for build (which block reproducible build…)
• MPMD-293 - Fix integration test builds on jenkins

📦 Dependency updates

• MPMD-291 - Upgrade to PMD 6.21.0

🐛 Bug Fixes

• MPMD-277 - Plugin tries to download local submodules from repo

🚀 New features and improvements

• MPMD-280 - Support targetJdk 12
• MPMD-281 - Display found violations grouped by priority
• MPMD-282 - Add rule name to HTML report

📝 Documentation updates

• MPMD-279 - Improve documentation of maxAllowedViolations

📦 Dependency updates

• MPMD-275 - Upgrade to PMD 6.13.0
• MPMD-284 - Upgrade parent to 33

🐛 Bug Fixes

• MPMD-266 - Aggregate report in multi-module projects doesn't use correct auxclasspath
• MPMD-268 - Missing warnings about deprecated rules

🚀 New features and improvements

• MPMD-270 - JDK 11 compatibility
• MPMD-272 - Support ignoreAnnotations options for CPD

📦 Dependency updates

• MPMD-271 - Upgrade pmd 6.8.0

🐛 Bug Fixes

• MPMD-253 - PMD links to java Xref fail in aggregated report
• MPMD-257 - Allow to disable analysisCache completely, avoid warnings
• MPMD-258 - PMD output multiplies with every module in multi module projects
• MPMD-259 - FileNotFoundException with analysisCache=true, includeTests=true and no test classes

🚀 New features and improvements

• MPMD-256 - Add maxAllowedViolations property for PMD
• MPMD-264 - Add rule priority to HTML report

📝 Documentation updates

• MPMD-263 - Add documentation information for GitHub

📦 Dependency updates

• MPMD-252 - Upgrade parent to 31
• MPMD-261 - Upgrade to PMD 6.4.0
• MPMD-262 - Upgrade maven-surefire/failsafe-plugin 2.21.0

💥 Breaking changes

• MPMD-240 - Migrate plugin to Maven 3.0

🐛 Bug Fixes

• MPMD-244 - Maven PMD plugin fails but no reason is given for the failure
• MPMD-245 - targetJdk property should use maven.compiler.source by default
• MPMD-248 - cpd-check goal leaks file handle
• MPMD-249 - The plugin documentation point to old (deprecated) rulesets
• MPMD-251 - Invalid report XML is generated with includeXmlInSite=true

🚀 New features and improvements

• MPMD-246 - Output details of processing errors

📝 Documentation updates

• MPMD-239 - Add documentation about upgrading PMD version at runtime

🔧 Build

• MPMD-235 - Javadoc errors when building with java8

📦 Dependency updates

• MPMD-247 - Upgrade to PMD 6.0.1