Please refer to the main page for what's new https://maven.apache.org/surefire/
And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

• Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432) @AzazelSensei
• [SUREFIRE-1639] - Add ability to configure JUnit 5 TestExecutionListener (#3438) @pan3793
• Issue #838 Implement extension point to run diagnosis tools when forked JVM times out (#3372) @olamy
• [SUREFIRE-2148] - Verify recovered BeforeAll does not fail build (#3419) @wilx
• [SUREFIRE-823] - Decouple -DskipTests from Failsafe plugin (#3371) @olamy
• Use StackWalker in StackTraceProvider when available (Java 9+) (#3374) @olamy
• [Issue-3380] Send sourceQualifiedName to forked clients (#3380) (#3381) @fabriciorby

🐛 Bug Fixes

• [SUREFIRE-523] - Link all reported tests to source XRef (#3445) @wilx
• [SUREFIRE-3446] - Fix direct selection of JUnit Jupiter @nested classes (#3447) @wilx
• Discover tests in a fork when a toolchain JDK is used (#3444) @olamy
• [SUREFIRE-2239, SUREFIRE-2241, SUREFIRE-2260, SUREFIRE-2274, SUREFIRE-2300] Preserve JUnit Platform test identity across reruns (#3418) @wilx
• Fix #3428: resolve parents via TestPlan.getParent for pre-1.8 platforms (#3429) @kalayciburak
• [SUREFIRE-859] - Make random test order reproducible (#3421) @wilx
• [SUREFIRE-862, SUREFIRE-3178] Handle missing Failsafe summary files (#3417) @wilx
• fix: report AfterAll/AfterClass exceptions as errors again (#3412) (#3413) @arimu1
• Fixes #3264 : tests inside @suite incorrectly classified as flakes (#3342) @mirkoalicastro
• Fix Windows flake in CommandChannelDecoderTest (#3400) @ascheman
• Fix reportNameSuffix in XML testcase classname (#3379) @goutamadwant
• Fix: resolve relative classpath elements against the fork's working dir (#3333) @cwegener-79

📝 Documentation updates

• Magnify the home, well at least have something rather than nothing :) (#3377) @olamy
• Restore the straight quotes the FAQ conversion turned typographic (#3425) @slachiewicz
• Restore the table borders lost in the APT conversion (#3424) @slachiewicz
• Convert the FAQ from FML to Markdown (#3423) @slachiewicz
• Convert the remaining site documentation from APT to Markdown (#3422) @slachiewicz
• javadoc: clarify statelessTestsetReporter, consoleOutputReporter, (#3410) @joshinii
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk
• Update documentation we support Junit 6 as well :) (#3370) @olamy

👻 Maintenance

• Stop dependabot from updating test fixtures (#3440) @slachiewicz
• Migrate legacy plugin Javadoc annotations (#3416) @wilx
• Use the resolver's own HTTP transport in the report plugin tests (#3414) @slachiewicz
• Pin maven-jar-plugin 3.5.1 in modular IT fixtures (#3398) @ascheman
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

📦 Dependency updates

• Bump mavenVersion from 3.9.14 to 3.9.16 (#3450) @dependabot[bot]
• Bump Maven parent version from 47 to 49 (#3449) @slawekjaranowski
• Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0 (#3442) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-i18n from 1.1.0 to 1.2.0 (#3443) @dependabot[bot]
• Use the resolver's own HTTP transport in the report plugin tests (#3414) @slachiewicz
• Bump org.xmlunit:xmlunit-core from 2.12.0 to 2.13.0 (#3411) @dependabot[bot]
• Bump org.testng:testng from 6.14.3 to 7.5.1 in /surefire-its/src/test/resources/fork-count-testng (#3406) @dependabot[bot]
• Bump junit:junit from 4.12 to 4.13.1 in /surefire-its/src/test/resources/failsafe-buildfail (#3407) @dependabot[bot]
• Bump junit:junit from 4.12 to 4.13.1 in /surefire-its/src/test/resources/surefire-510-testClassPath (#3404) @dependabot[bot]
• master: bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#3388) @dependabot[bot]
• master: bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#3389) @dependabot[bot]
• master: bump apache/maven-gh-actions-shared/.github/workflows/stale.yml from 4 to 5 (#3390) @dependabot[bot]
• master: bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#3391) @dependabot[bot]
• Bump jacocoVersion from 0.8.14 to 0.8.15 (#3375) @dependabot[bot]
• Bump org.xmlunit:xmlunit-core from 2.11.0 to 2.12.0 (#3369) @dependabot[bot]

🚀 New features and improvements

• Use junit platform runner to run junit 3, junit 4 and TestNG tests via vintage engine and testng engine (#3179) @olamy
• Introduce reportTestTimestamp option and include timestamp for test sets and test cases (#3261) @kevinnammour

🐛 Bug Fixes

• [Issue-3315] Restore console output fallback report name (#3360) @officialasishkumar
• Avoid producing a trailing colon in java.class.path. (#3365) @cpovirk
• [Issue-3226] JUnit5Xml30StatelessReporter does not change class name in report (#3347) @nils-christian
• Issue #2613 Debugging failsafe tests: Message 'Listening for transport dt_socket at address' is not displayed anymore when using maven.surefire.debug (#3353) @olamy
• Fix empty and missing testcase entries for JUnit 5 @BeforeAll/@afterall failures (#3329) @MilanTyagi2004
• Ensure that the statistics filename is calculated only once. (#3326) @c00ler
• [SUREFIRE-2049] - Fix SHUTDOWN type lost during command serialization. (#3270) @aghoussaini
• Add null guard before setting context map in Pumper thread (#3269) @daniel-mohedano

📝 Documentation updates

• Update documentation we support Junit 6 as well :) (#3370) @olamy
• [Issue-3309] Clarify forkNode default communication docs (#3361) @officialasishkumar
• Use Maven site plugin 3.22.0 and setup mermaid diagrams (#3358) @olamy
• Fix documentation due to code simplification with providers (#3332) @olamy
• Update architecture docs for unified test provider (#3313) @sebtiem
• Add flakes attribute to use in testsuite report (#3306) @pzygielo

👻 Maintenance

• Upgrade Maven version and resolver version (#3325) @olamy
• Use parallel tests with Junit5 feature (#3316) @olamy
• Execute ITs in embedded mode by default (#3323) @slawekjaranowski
• Use surefire 3.5.5 by project itself for testing (#3322) @slawekjaranowski
• Remove redundant ITs and resource cleanups (#3319) @slawekjaranowski
• Fix jenkins build (#3314) @slawekjaranowski
• Upgrade tests to use Junit5 (#3312) @olamy
• Follow Oracle javadoc guidelines (#3177) @elharo

📦 Dependency updates

• Bump org.junit:junit-bom from 5.14.1 to 5.14.4 (#3357) @dependabot[bot]
• Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#3351) @dependabot[bot]
• Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4 in /surefire-its/src/test/resources/surefire-1659-stream-corruption (#3343) @dependabot[bot]
• Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (#3335) @dependabot[bot]
• Bump doxiaVersion from 2.0.0 to 2.1.0 (#3330) @dependabot[bot]
• Bump Mockito to 4.11.0 (#3320) @slawekjaranowski

🚀 New features and improvements

• Introduce reportTestTimestamp option and include timestamp for test sets and test cases (#3261) (#3302) @olamy

🐛 Bug Fixes

• Issue #2613 Debugging failsafe tests: Message 'Listening for transport dt_socket at address' is not displayed anymore when using maven.surefire.debug (#3353) (#3354) @olamy
• Ensure that the statistics filename is calculated only once. (#3326) (#3327) @olamy
• Add flakes attribute to use in testsuite report (#3306) (#3308) @olamy
• [BACKPORT 3.5.x] [SUREFIRE-2049] - Fix SHUTDOWN type lost during command serialization. (#3270) (#3289) @olamy
• fix: null guard for context map (#3269) (#3272) @olamy

👻 Maintenance

• 3.5.x/bug/cherry pick embedded mode its (#3328) @olamy
• Use surefire 3.5.5 by project itself for testing (#3324) @slawekjaranowski
• Follow Oracle javadoc guidelines (#3177) @elharo

📦 Dependency updates

• Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (#3334) @dependabot[bot]
• Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#3350) @dependabot[bot]

🚀 New features and improvements

• Replace runing external process and parsing output with simple ProcessHandle if available (Java9+) (#3252) @olamy
• Pass slf4j context to spawned thread (#3241) @scottrw93
• [SUREFIRE-3239] - allow override of statistics file checksum (#3247) @XN137
• Reduce log level for skipped tests result to info (#3232) @strangelookingnerd

🐛 Bug Fixes

• Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258) @jbliznak. Please note if you are using Windows with Java 8 and not PowerShell (you have options to: use Java 9+, install PowerShell or stay on Surefire 3.5.4)
• Properly work with test failures caused during beforeAll phase (#3194) @Frawless

📝 Documentation updates

• Clarify how late placeholder replacement (@{...}) deals with (#3208) @kwin

👻 Maintenance

• Fix Jenkin badges in README (#3254) @slawekjaranowski
• Use JUnit5 in failsafe ITs (#3251) @slawekjaranowski
• Remove long-deprecated unused encoding property from VerifyMojo (#3198) @Tomlincoln
• Add IT and deal with corner cases of handling beforeAll failures (#3200) @Frawless
• Revert PR #3194 that handle beforeAll failures to follow proper contributing rules (#3211) @Frawless

🔧 Build

• Missing many files in the GH Artifacts of CI ex-post. (#3219) @Tibor17

📦 Dependency updates

• Bump org.xmlunit:xmlunit-core from 2.10.4 to 2.11.0 (#3209) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.1 (#3260) @dependabot[bot]
• Bump parent from 44 to 47 (#3253) @slawekjaranowski
• Bump org.assertj:assertj-core from 3.16.1 to 3.27.7 in /surefire-its/src/test/resources/surefire-1733-testng (#3246) @dependabot[bot]
• Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (#3245) @dependabot[bot]
• Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.26 to 1.27 (#3243) @dependabot[bot]
• Bump org.htmlunit:htmlunit from 4.20.0 to 4.21.0 (#3236) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-java from 1.5.1 to 1.5.2 (#3235) @dependabot[bot]
• Bump org.apache.logging.log4j:log4j-core from 2.17.1 to 2.25.3 in /surefire-its/src/test/resources/surefire-1659-stream-corruption (#3234) @dependabot[bot]
• Bump org.htmlunit:htmlunit from 4.19.0 to 4.20.0 (#3228) @dependabot[bot]
• Bump org.htmlunit:htmlunit from 4.18.0 to 4.19.0 (#3224) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 (#3223) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-interpolation from 1.28 to 1.29 (#3221) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-i18n from 1.0.0 to 1.1.0 (#3220) @dependabot[bot]
• Bump commons-io:commons-io from 2.20.0 to 2.21.0 (#3217) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.3.0 to 3.4.0 (#3214) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-java from 1.5.0 to 1.5.1 (#3218) @dependabot[bot]
• Bump org.htmlunit:htmlunit from 4.16.0 to 4.18.0 (#3213) @dependabot[bot]
• Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.24 to 1.26 (#3202) @dependabot[bot]
• Bump jacocoVersion from 0.8.13 to 0.8.14 (#3204) @dependabot[bot]
• Bump org.assertj:assertj-core from 3.27.4 to 3.27.6 (#3183) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 (#3192) @dependabot[bot]
• Bump org.xmlunit:xmlunit-core from 2.10.3 to 2.10.4 (#3180) @dependabot[bot]

🚀 New features and improvements

• Name the shutdown hook (#3170) @cstamas
• Implement fail-fast behavior for JUnit Platform provider (#3155) @marcphilipp
• Create a single LauncherSession for invocations of JUnitPlatformProvider (#863) @marcphilipp

🐛 Bug Fixes

• [SUREFIRE-2298] - fix xml output with junit 5 nested classes (fix integration with Cucumber and Archunit) (#828) @olamy

👻 Maintenance

• feat: enable prevent branch protection rules (#3168) @sparsick
• Get rid of plexus-annotations (#3163) @olamy
• Remove maven-changes-plugin (#861) @sparsick
• Enable GitHub Issues (#831) @Bukama

📦 Dependency updates

• Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172) @dependabot[bot]
• Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171) @dependabot[bot]
• Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167) @dependabot[bot]
• Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0 (#3165) @dependabot[bot]
• Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#3161) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#3158) @dependabot[bot]
• Bump org.htmlunit:htmlunit from 4.12.0 to 4.13.0 (#856) @dependabot[bot]
• Bump org.xmlunit:xmlunit-core from 2.10.2 to 2.10.3 (#860) @dependabot[bot]
• Bump commons-beanutils:commons-beanutils from 1.7.0 to 1.11.0 in /surefire-its/src/test/resources/webapp (#851) @dependabot[bot]
• Bump org.htmlunit:htmlunit from 4.11.1 to 4.12.0 (#844) @dependabot[bot]
• Bump org.fusesource.jansi:jansi from 2.4.1 to 2.4.2 (#836) @dependabot[bot]
• Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#833) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28 (#829) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0 (#830) @dependabot[bot]
• Bump jacocoVersion from 0.8.12 to 0.8.13 (#827) @dependabot[bot]

🐛 Bug Fixes

• [SUREFIRE-1737] - Fix disable in statelessTestsetReporter (#816) @slawekjaranowski
• [SUREFIRE-1643] - surefire junit5 parallel tests (#815) @olamy
• [SUREFIRE-2289] - Make exceptions more appropriate to context (#798) @elharo

👻 Maintenance

• surefire shared utils version current version (#825) @olamy
• Update site descriptors (#821) @slawekjaranowski
• Use newer version of surefire for itself testing, enable JUnit 5 in tests (#822) @slawekjaranowski
• Remove dependencies from root pom (#819) @slawekjaranowski
• move this dependency to dptMngt (#818) @olamy
• [SUREFIRE-2291] - Change logger from Plexus to SLF4J (#811) @jeffjensen
• Add GitHub Automation actions (#812) @slawekjaranowski
• Convert reports to Guice (#803) @elharo
• [MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#809) @Bukama
• Update encoding docs (#802) @elharo
• Guice injection (#801) @elharo

📦 Dependency updates

• Bump org.htmlunit:htmlunit from 4.10.0 to 4.11.1 (#823) @dependabot[bot]
• Bump parent to 44 (#817) @slawekjaranowski
• Bump org.codehaus.plexus:plexus-java from 1.3.0 to 1.4.0 (#810) @dependabot[bot]
• Bump org.htmlunit:htmlunit from 4.4.0 to 4.10.0 (#813) @dependabot[bot]
• Bump commons-io:commons-io from 2.17.0 to 2.18.0 (#797) @dependabot[bot]
• Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 (#807) @dependabot[bot]
• Bump org.assertj:assertj-core from 3.27.0 to 3.27.2 (#805) @dependabot[bot]
• Bump org.assertj:assertj-core from 3.26.3 to 3.27.0 (#800) @dependabot[bot]

🚀 New features and improvements

• [SUREFIRE-2278] - Don't say please. (#792) @elharo

📦 Dependency updates

• [SUREFIRE-2281] - Doxia 2.0.0 ga (#794) @michael-o
• Bump commons-io:commons-io from 2.2 to 2.14.0 in /surefire-its/src/test/resources/surefire-979-smartStackTrace-wrongClassloader/module1 (#789) @dependabot

👻 Maintenance

• [SUREFIRE-2282] - surefire-report-plugin: Update Introduction documenta… (#796) @michael-o
• Reduce cyclomatic complexity (#793) @elharo

Full Changelog: surefire-3.5.1...surefire-3.5.2

🚀 New features and improvements

• [SUREFIRE-2270] - Use JUnit5 in surefire-shadefire (#783) @slawekjaranowski
• [SUREFIRE-2266] - Execute ITs in parallel (#781) @slawekjaranowski
• [SUREFIRE-2264] - Limit usage of commons-io from surefire-shared-utils (#777) @slawekjaranowski

🐛 Bug Fixes

• [SUREFIRE-2267] - Packages for commons-codec should be relocated in surefire-shared-utils (#782) @slawekjaranowski
• [SUREFIRE-1737] - Fix disable in statelessTestsetReporter (#780) @slawekjaranowski
• [SUREFIRE-2257] - [REGRESSION] NPEx: Cannot invoke "Object.toString()" … (#774) @michael-o

📦 Dependency updates

• [SUREFIRE-2273] - Bump org.hamcrest:hamcrest from 2.2 to 3.0 (#784) @dependabot
• [SUREFIRE-2272] - Bump org.codehaus.plexus:plexus-java from 1.2.0 to 1.3.0 - JDK 23 support (#786) @dependabot
• [SUREFIRE-2226] - Upgrade to Maven Verifier 2.0.0-M1 (#706) @michael-o
• [SUREFIRE-2265] - Bump commons-io:commons-io from 2.16.1 to 2.17.0 (#779) @dependabot
• [SUREFIRE-2263] - Use the latest version of surefire for self build (#776) @slawekjaranowski
• [SUREFIRE-2262] - Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0 (#775) @dependabot

👻 Maintenance

• [SUREFIRE-2269] - Allow fail during clean in surefire-its (#785) @slawekjaranowski

Improvement

• [SUREFIRE-2227] - Dynamically calculate xrefTestLocation

Wish

• [SUREFIRE-2199] - [WARNING] * org.apache.maven.plugins:maven-surefire-report-plugin:3.1.2

Task

• [SUREFIRE-2161] - Align Mojo class names and output names

Dependency upgrade

• [SUREFIRE-2228] - Upgrade to Doxia 2.0.0 Milestone Stack
• [SUREFIRE-2256] - Upgrade to Parent 43

What's Changed

• [SUREFIRE-2256] Upgrade to Parent 43 by @michael-o in #770
• Bump org.apache.commons:commons-compress from 1.27.0 to 1.27.1 by @dependabot in #771
• [SUREFIRE-2228] Upgrade to Doxia 2.0.0 Milestone Stack by @michael-o in #629

Full Changelog: surefire-3.4.0...surefire-3.5.0

Bug

• [SUREFIRE-2251] - [REGRESSION] java.lang.NoSuchMethodException: org.apache.maven.plugin.surefire.StartupReportConfiguration.<init>
• [SUREFIRE-2253] - [REGRESSION] Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.1 causes hang

Improvement

• [SUREFIRE-1385] - System properties defined in the Surefire and Failsafe plugin configuration should override user properties

What's Changed

• javadoc: improve description of systemPropertyVariables by @kwin in #759
• Bump org.assertj:assertj-core from 3.26.0 to 3.26.3 by @dependabot in #760
• [Doc] Failsafe Verify goal should mention failsafe by @bdemers in #764
• [SUREFIRE-1385] Add new parameter "userPropertyVariables" to overwrite by @kwin in #762
• Bump org.apache.commons:commons-compress from 1.26.2 to 1.27.0 by @dependabot in #769
• Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.16.0 by @dependabot in #767
• Bump org.htmlunit:htmlunit from 4.3.0 to 4.4.0 by @dependabot in #765

New Contributors

• @bdemers made their first contribution in #764

Full Changelog: surefire-3.3.1...surefire-3.4.0