See Release Notes

What's Changed

• Remove long-running test from ci server build by @peterkir in #7222
• CI build output improvement by @peterkir in #7223
• build(deps): bump ruby/setup-ruby from 1.306.0 to 1.307.0 by @dependabot[bot] in #7227
• build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.2 by @dependabot[bot] in #7230
• build(deps): bump github/codeql-action from 4.35.2 to 4.36.0 by @dependabot[bot] in #7246
• build(deps): bump step-security/harden-runner from 2.19.2 to 2.19.4 by @dependabot[bot] in #7245
• Create SECURITY.md for bnd security documentation by @chrisrueger in #7243
• build(deps): bump ruby/setup-ruby from 1.307.0 to 1.310.0 by @dependabot[bot] in #7240
• build(deps): bump jekyll-seo-tag from 2.8.0 to 2.9.0 in /docs by @dependabot[bot] in #7225
• Allow overriding HTTPClient request headers by @chrisrueger in #7247
• docs: update generated docs by @github-actions[bot] in #7248
• Set explicit headers before defaults and refine logging by @chrisrueger in #7249
• Cooldowns for Dependabot updates by @chrisrueger in #7250
• build(deps): bump org.apache.maven.plugins:maven-invoker-plugin from 3.10.0 to 3.10.1 in /maven-plugins by @dependabot[bot] in #7219
• build(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 in /maven-plugins by @dependabot[bot] in #7251
• Surface Sonatype deployment IDs in CI Job Summary and workflow outputs by @peterkir with @Copilot in #7252
• Stabilize SonatypeDeploymentTest deployment ID discovery across CI by @peterkir with @Copilot in #7254
• Use PAT_WORKSPACE_REPO for create-workspace-template git auth by @peterkir with @Copilot in #7253
• Readme: Update Bnd Maven and Gradle plugin versions to 7.3.0 by @chrisrueger in #7258
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #7256
• build(deps): bump actions/stale from 10.2.0 to 10.3.0 by @dependabot[bot] in #7244
• build(deps): bump github/codeql-action from 4.36.0 to 4.36.1 by @dependabot[bot] in #7257
• Bndtools Explorer Quick Links addition - Existing Bnd Workspace by @peterkir in #7259
• Update baseline version to 7.3.0 by @chrisrueger in #7260
• build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 by @dependabot[bot] in #7261
• Add sync baseline version step in postrelease workflow by @chrisrueger in #7263
• Post release 7.3.0 by @github-actions[bot] in #7266
• [maven][resolve] Provide a better logging experience for maven users when resolving by @timothyjward in #7255
• build(deps): bump gradle/actions from 6.1.0 to 6.2.0 by @dependabot[bot] in #7272
• build(deps): bump ruby/setup-ruby from 1.310.0 to 1.313.0 by @dependabot[bot] in #7271
• build(deps): bump actions/setup-java from 5.2.0 to 5.3.0 by @dependabot[bot] in #7273
• build(deps): bump concurrent-ruby from 1.3.6 to 1.3.7 in /docs by @dependabot[bot] in #7278
• build(deps): bump ruby/setup-ruby from 1.313.0 to 1.314.0 by @dependabot[bot] in #7282
• Persist and manage workspace template fragment indexes by @maho7791 in #7284
• Fix IllegalArgumentException for Maven-style SNAPSHOT versions in PomResource by @peterkir with @Copilot in #7286
• Add repo deps command to export Maven GAVs for dash-licenses by @juergen-albert in #7275
• docs: update generated docs by @github-actions[bot] in #7287
• fix IndexOutOfBoundsException by @chrisrueger in #7291
• fixing issue #7124 by @peterkir in #7292
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #7277
• build(deps): bump actions/setup-java from 5.3.0 to 5.4.0 by @dependabot[bot] in #7295
• Exclude Eclipse features from P2 Repo .versions() by @chrisrueger in #7296
• build(deps): bump ruby/setup-ruby from 1.314.0 to 1.315.0 by @dependabot[bot] in #7299
• build(deps): bump ruby/setup-ruby from 1.315.0 to 1.316.0 by @dependabot[bot] in #7301
• [Security] Maven Repositories: Add Trusted Checksum Verification by @chrisrueger in #7269
• Fix NPE in RepoCollector initialization during Project construction by @chrisrueger in #7304
• Updates to avoid memory visibility problem by @jhanders34 in #7307
• gradle: Properly configure sourceSet compile and runtime classpaths by @bjhargrave in #7313
• build(deps): bump actions/setup-java from 5.4.0 to 5.5.0 by @dependabot[bot] in #7309
• build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 by @dependabot[bot] in #7308
• build(deps): bump actions/stale from 10.3.0 to 10.4.0 by @dependabot[bot] in #7314
• bump actions/setup-java from 5.5.0 to 5.6.0 by @dependabot[bot] in #7319
• bump ruby/setup-ruby from 1.316.0 to 1.319.0 by @dependabot[bot] in #7318
• Fix task order between compileJava and processResources. by @ejjcase in #7323
• Suppress deprecation warnings and update deprecated API calls by @chrisrueger in #7321
• Bump ruby/setup-ruby from 1.319.0 to 1.321.0 by @dependabot[bot] in #7332
• Hold read lock to avoid refresh closing repository by @jhanders34 in #7324
• Skip cleanup job for fork PRs from non bnd repos by @peterkir with @Copilot in #7333
• Bump json from 2.19.5 to 2.19.9 in /docs by @dependabot[bot] in #7335
• Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #7325
• Fix thread-safety in aQute.junit.Tee class by @chrisrueger in #7336

New Contributors

• @jhanders34 made their first contribution in #7307

Full Changelog: 7.3.0...7.4.0

See Release Notes

This release fixes a mistake of previous 7.2.2.
It does not contain any functional changes, but only a deprecation warning in the build if you are using the Sonatype Publishing feature. Other than that it is equal to 7.2.1

See Release Notes.

Full Changelog: 7.2.2...7.2.3

Please ignore this release. We made a mistake, which we corrected in the next one.

See Release Notes.

Full Changelog: 7.2.1...7.2.2

See Release Notes.

Full Changelog: 7.2.0...7.2.1

See Release Notes.

What's Changed

• Bump github/codeql-action from 3.27.1 to 3.27.3 by @dependabot[bot] in #6367
• Bump gradle/actions from 4.1.0 to 4.2.0 by @dependabot[bot] in #6366
• Buid/dev7.2.0 by @pkriens in #6368
• Bump step-security/harden-runner from 2.10.1 to 2.10.2 by @dependabot[bot] in #6375
• Bump github/codeql-action from 3.27.3 to 3.27.4 by @dependabot[bot] in #6369
• Bump gradle/actions from 4.2.0 to 4.2.1 by @dependabot[bot] in #6374
• Docs: Fix broken link to version policy by @chrisrueger in #6373
• Bump github/codeql-action from 3.27.4 to 3.27.5 by @dependabot[bot] in #6376
• NPE in Resolve when running without project by @pkriens in #6382
• Add explicit dependencies to biz.aQute.bnd.maven by @laeubi in #6385
• Remove fixed bnd workspace problem markers from Problem view again by @chrisrueger in #6383
• Fix NPE by @chrisrueger in #6388
• Bump github/codeql-action from 3.27.5 to 3.27.6 by @dependabot[bot] in #6386
• Bump webrick from 1.9.0 to 1.9.1 in /docs by @dependabot[bot] in #6384
• Bump ruby/setup-ruby from 1.202.0 to 1.203.0 by @dependabot[bot] in #6392
• Fix Bnd Launcher with Java 24 by @chrisrueger in #6371
• cnf change: prevent full build although 'Build automatically' is disabled by @chrisrueger in #6391
• Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.1 to 3.9.0 in /maven-plugins by @dependabot[bot] in #6398
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.1 to 3.11.2 in /maven-plugins by @dependabot[bot] in #6397
• Bump github/codeql-action from 3.27.6 to 3.27.7 by @dependabot[bot] in #6399
• Bump github/codeql-action from 3.27.7 to 3.27.8 by @dependabot[bot] in #6402
• Fixes a number of errors in the bndrun handling by @pkriens in #6401
• Bump github/codeql-action from 3.27.8 to 3.27.9 by @dependabot[bot] in #6404
• Bump ruby/setup-ruby from 1.203.0 to 1.204.0 by @dependabot[bot] in #6405
• Docs: add anchor links to all headlines by @chrisrueger in #6409
• Bump org.junit.jupiter:junit-jupiter from 5.11.3 to 5.11.4 in /gradle-plugins by @dependabot[bot] in #6410
• Bump org.junit:junit-bom from 5.11.3 to 5.11.4 in /maven-plugins by @dependabot[bot] in #6411
• Bump gradle/actions from 4.2.1 to 4.2.2 by @dependabot[bot] in #6412
• Bump actions/setup-java from 4.5.0 to 4.6.0 by @dependabot[bot] in #6413
• Bump org.assertj:assertj-core from 3.26.3 to 3.27.0 in /maven-plugins by @dependabot[bot] in #6414
• Bump github/codeql-action from 3.27.9 to 3.28.0 by @dependabot[bot] in #6415
• Apply the -runbundles+ decorator on the computed RunBundles when resolving by @glimmerveen in #6407
• Bump ruby/setup-ruby from 1.204.0 to 1.205.0 by @dependabot[bot] in #6416
• Bump ruby/setup-ruby from 1.205.0 to 1.207.0 by @dependabot[bot] in #6419
• Bump org.assertj:assertj-core from 3.27.0 to 3.27.1 in /maven-plugins by @dependabot[bot] in #6420
• conditonalpackage missed classes added by plugins, like Blueprint. by @pkriens in #6421
• The https://repository.springsource.com repo disappeared by @pkriens in #6423
• Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 in /maven-plugins by @dependabot[bot] in #6422
• Whitespace after the quote character is skipped by @pkriens in #6424
• Bump step-security/harden-runner from 2.10.2 to 2.10.3 by @dependabot[bot] in #6425
• Bump github/codeql-action from 3.28.0 to 3.28.1 by @dependabot[bot] in #6426
• first draft of Effective tab for BndEditor by @chrisrueger in #6406
• Bump ruby/setup-ruby from 1.207.0 to 1.208.0 by @dependabot[bot] in #6428
• Bump ruby/setup-ruby from 1.208.0 to 1.210.0 by @dependabot[bot] in #6430
• Bump ruby/setup-ruby from 1.210.0 to 1.213.0 by @dependabot[bot] in #6432
• Bump step-security/harden-runner from 2.10.3 to 2.10.4 by @dependabot[bot] in #6433
• Bump org.assertj:assertj-core from 3.27.2 to 3.27.3 in /maven-plugins by @dependabot[bot] in #6434
• Add Refresh Cache (with re-download) context menue to RepoBrowser / BundleRevsion by @chrisrueger in #6435
• Bump github/codeql-action from 3.28.1 to 3.28.2 by @dependabot[bot] in #6436
• Bump actions/stale from 9.0.0 to 9.1.0 by @dependabot[bot] in #6437
• Bump github/codeql-action from 3.28.2 to 3.28.3 by @dependabot[bot] in #6438
• improve description of -nouses by @chrisrueger in #6441
• Bump github/codeql-action from 3.28.3 to 3.28.4 by @dependabot[bot] in #6443
• Fix some spotbugs findings by @chrisrueger in #6442
• Bump github/codeql-action from 3.28.4 to 3.28.5 by @dependabot[bot] in #6444
• Bump ruby/setup-ruby from 1.213.0 to 1.214.0 by @dependabot[bot] in #6446
• Bump github/codeql-action from 3.28.5 to 3.28.6 by @dependabot[bot] in #6447
• fix RunRequirements could not be saved by @chrisrueger in #6449
• Bump actions/setup-java from 4.6.0 to 4.7.0 by @dependabot[bot] in #6450
• Bump github/codeql-action from 3.28.6 to 3.28.8 by @dependabot[bot] in #6451
• Bump ruby/setup-ruby from 1.214.0 to 1.215.0 by @dependabot[bot] in #6452
• Bump gradle/actions from 4.2.2 to 4.3.0 by @dependabot[bot] in #6453
• Workspace Templates: show error when fetching templates from Github by @chrisrueger in #6440
• Fix missing '.' in filter name by @laeubi in #6455
• Fix MessageReporter#details return null instead of this by @laeubi in #6456
• Extract code to automatically derive data from maven-project by @laeubi in #6362
• Template Fragments Wizard: increase column with of template name by @chrisrueger in #6459
• Fix off-by-one error in AbstractBndMavenPlugin by @laeubi in #6457
• Bump ruby/setup-ruby from 1.215.0 to 1.218.0 by @dependabot[bot] in #6461
• fix source lookup for sub-projects via -sub instruction by @chrisrueger in #6463
• Bump github/codeql-action from 3.28.8 to 3.28.9 by @dependabot[bot] in #6462
• Bump ruby/setup-ruby from 1.218.0 to 1.219.0 by @dependabot[bot] in #6464
• Derive source file from builder when processing DS annotations by @laeubi in #6458
• Improve documentation (e.g. for -sub, -exportcontents, Export-Package, ...) by @chrisrueger in #6467
• add back summary in markdown frontmatter block by @chrisrueger in #6468
• docs: exclude /releases urls from search engines by @chrisrueger in #6469
• Add a ProjectLauncher#getCommand for easier extension by @laeubi in #6471
• Bump ruby/setup-ruby from 1.219.0 to 1.221.0 by @dependabot[bot] in #6472
• Bump step-security/harden-runner from 2.10.4 to 2.11.0 by @dependabot[bot] in #6473
• sub-bundles: show warning markers in sub .bnd file by @chrisrueger in #6470
• Docs: Add pagefind search for bnd manual by @chrisrueger in #6475
• search: fix broken close button by @chrisrueger in #6478
• Bump github/codeql-action from 3.28.9 to 3.28.10 by @dependabot[bot] in #6484
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /maven-plugins by @dependabot[bot] in #6485
• Bump org.junit.jupiter:junit-jupiter from 5.11.4 to 5.12.0 in /gradle-plugins by @dependabot[bot] i...

See Release Notes.

This is the first release on Java 17.

See Release Notes.

This is not a full release! It is maintained as a line for security and important fixes of the runtime bundles on Java 1.8.

See https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic

Release Notes

See Release Notes.

What's Changed

• Maven lifecycle participation fix by @bjhargrave in #5238
• immutable: Remove a variable store in a loop by @bjhargrave in #5241
• [httpclient] Implement log as specified in doc by @pkriens in #5242
• #5062 JVM crash by @pkriens in #5244
• build: Use -notimestamp option for javadoc for reproducibility by @bjhargrave in #5245
• ci: Separate Gradle Wrapper validation into its own workflow by @bjhargrave in #5246
• builder: Avoid modifying manifests of conduit jars by @maquinas07 in #5249
• Maven integration test refactoring by @bjhargrave in #5252
• Maven help integration tests by @bjhargrave in #5253
• Fix regression in Open Type Hierarchy by @bjhargrave in #5255
• build(deps): Bump nokogiri from 1.13.4 to 1.13.6 in /docs by @dependabot in #5256
• [export] JPMS module info calculation fails by @pkriens in #5258
• io: Make FileTree predicate methods public since they can be useful by @bjhargrave in #5259
• [decoration] Backward compatibility (Phase 1) by @bjhargrave in #5262
• Decoration phase2 by @bjhargrave in #5263
• build: Remove use of "{xxx}" non-literals on + decorations by @bjhargrave in #5264
• ci: Display build dependencies for rebuild-build by @bjhargrave in #5266
• jarsigner: Fix 2 bugs in the jarsigner support by @bjhargrave in #5267
• signing: Write META-INF signing resources immediately after manifest by @bjhargrave in #5268
• docs: Add 6.3.0 release docs by @bjhargrave in #5274
• build: Update baseline to 6.3.0 by @bjhargrave in #5273
• build(deps-dev): Bump assertj-core from 3.22.0 to 3.23.1 in /maven by @dependabot in #5272
• build(deps): Bump maven-invoker-plugin from 3.2.2 to 3.3.0 in /maven by @dependabot in #5270
• jar: Update signer test to confirm JarInputStream verifies jar by @bjhargrave in #5277
• gradle: Avoid setting a manifest object by @bjhargrave in #5276
• Remove old enroute by @bjhargrave in #5278
• gradle: Make default Bundle-SymbolicName and Bundle-Version inputs by @bjhargrave in #5280
• Improve regex expressions by @bjhargrave in #5282
• Maven updates by @bjhargrave in #5284
• gradle: Update build to include pom.properties in gradle plugin jar by @bjhargrave in #5285
• Clarify effect on ignoring Bundle-Version for package deletion by @kwin in #5291
• maven: Add testFailureIgnore configuration to bnd-testing-maven-plugin by @bjhargrave in #5296
• New lib support for string ignore case ops and preserving line separators by @bjhargrave in #5299
• baseline: Use modifiable sets by @bjhargrave in #5300
• build(deps): Bump com.gradle.plugin-publish from 0.21.0 to 1.0.0 in /gradle-plugins by @dependabot in #5302
• Feature/resolve cache by @pkriens in #5305
• gradle: Build script improvements for new publish plugin version by @bjhargrave in #5307
• maven: Compute extension from packaging type by @bjhargrave in #5309
• Improve handling of webappDirectory when building a wab by @bjhargrave in #5310
• Fixes for maven and gradle plugins by @bjhargrave in #5311
• gradle: Use configureEach on task groups by @bjhargrave in #5312
• Build updates by @bjhargrave in #5313
• build(deps-dev): Bump github-pages from 226 to 227 in /docs by @dependabot in #5314
• build: Use addmavendescriptor gradle plugin to add maven descriptor by @bjhargrave in #5315
• deps: Update osgi-test to 1.2.1 by @bjhargrave in #5317
• Gradle 7.5 by @bjhargrave in #5320
• repository: Detect recursive macro expansion in pom properties by @bjhargrave in #5321
• resource: Defer SHA-256 calculation into the future by @bjhargrave in #5323
• build(deps): Bump maven-install-plugin from 2.5.2 to 3.0.0 in /maven by @dependabot in #5325
• build(deps): Bump maven-deploy-plugin from 2.8.2 to 3.0.0 in /maven by @dependabot in #5324
• build(deps): Bump tzinfo from 1.2.9 to 1.2.10 in /docs by @dependabot in #5326
• build(deps): Bump maven-install-plugin from 3.0.0 to 3.0.1 in /maven by @dependabot in #5329
• build(deps): Bump maven-resources-plugin from 3.2.0 to 3.3.0 in /maven by @dependabot in #5328
• test: Relax time check since it started failing in the CI build by @bjhargrave in #5338
• [cached resolve] The test failed on Windows by @pkriens in #5339
• gradle: Update gradlew to 7.5.1 by @bjhargrave in #5340
• build(deps): Bump maven-javadoc-plugin from 3.4.0 to 3.4.1 in /maven by @dependabot in #5337
• build(deps): Bump junit-bom from 5.8.2 to 5.9.0 in /maven by @dependabot in #5332
• Gradle set task group in task type constructor by @bjhargrave in #5341
• gradle: Organize imports by @bjhargrave in #5342
• maven: Organize imports by @bjhargrave in #5343
• [remote link] Made tracing optional by @pkriens in #5345
• maven: Use actual file name for jar file type test by @bjhargrave in #5351
• maven: Use getExtension to map the artifact type into the file extension by @bjhargrave in #5355
• Add EE.getReleaseTarget() method by @laeubi in #5358
• build(deps): Bump spock-core from 2.1-groovy-3.0 to 2.2-groovy-3.0 in /gradle-plugins by @dependabot in #5362
• macro: Fix osfile macro to return OS specific path by @bjhargrave in #5366
• [jvm crash in swt] It is still happening by @pkriens in #5348
• [mac m1] Added a bndrun file for the m1 by @pkriens in #5347
• Adds clear option to ProjectGenerate instruction by @juergen-albert in #5369
• build(deps): Bump maven-jar-plugin from 3.2.2 to 3.3.0 in /maven by @dependabot in #5370
• workspace: Fixes to workspace lock write-upgrade detection by @bjhargrave in #5371
• build(deps): Bump junit-bom from 5.9.0 to 5.9.1 in /maven by @dependabot in #5373
• build(deps): Bump actions/stale from 5 to 6 by @dependabot in #5376
• build(deps): Bump commonmarker from 0.23.5 to 0.23.6 in /docs by @dependabot in #5377
• maven: Document access to Maven properties in Bnd instructions by @bjhargrave in #5379
• docs: Fix documentation for Metatype annotation processing instructions by @bjhargrave in #5380
• java 19: Updates for the just released Java 19 by @bjhargrave in #5381
• Use gradle-build-action to speedup builds by @Goooler in #5382
• ci: Publish build scans by @bjhargrave in #5383
• ci: Only accept gradle build scan TOS on CI builds by @bjhargrave in #5384
• build(deps): Bump spock-core from 2.2-groovy-3.0 to 2.3-groovy-3.0 in /gradle-plugins by @dependabot in #5386
• [external plugins] Added versioning support by @pkriens in #5388
• [resolve] Add a default native capability when none set by @pkriens in #5387
• #5336 Need -include loop detection by @pkriens in #5391
• Maven codegen by @bjhargrave in #5385
• repository: Add a File Resource cache to ResourceBuilder by @bjhargrave in #5372
• open bnd.reporter for external use by @stbischof in #5394
• reporter - create dirs for exported file by @stbi...