build(deps-dev): bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 in /java by dependabot[bot] · Pull Request #237 · Senzing/code-snippets-v4

dependabot · 2026-09-21T17:48:17Z

Bumps org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0.

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

Recompile when dependencies change (#1102) @wilx

Fix incremental detection of empty sources, 3.x (#1075) @wilx

🐛 Bug Fixes

[MCOMPILER-578] - Track outputs across compiler executions (#1091) @wilx

Build fails when annotation processor list is empty (but present) (#1077) @wilx

[MCOMPILER-374] - Unable to compile MR-JAR code against older directories when module-info.java is present (#1093) @wilx

Make mcompiler-120 IT locale independent (#1063) @anilvdl

📝 Documentation updates

[MCOMPILER-569] - Document implicitly compiled excluded sources (#1092) @wilx

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

👻 Maintenance

Avoid using deprecated method CompilerConfiguration.setCompilerVersion (#1121) @slawekjaranowski

Replace adopt-openj9 by semeru JDK distribution on GH (#1122) @slawekjaranowski

Port the site documentation from APT to Markdown (#1110) @slachiewicz

Verify against Maven 4.0.0-rc-6 (#1105) @slachiewicz

Fix tests on Jenkins (#1100) @slawekjaranowski

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

Refactor compiler mojo to use dependency injection and improve string… (#1066) @slachiewicz

Fix ITs for Maven 3.10.x (#1061) @slawekjaranowski

Update maven-surefire-plugin version to 3.x in the MCOMPILER-481 IT (#1035) @cdouillard

📦 Dependency updates

Bump plexusCompilerVersion from 2.16.2 to 2.17.0 (#1112) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#1113) @dependabot[bot]

use latest Maven 4 (#1045) @hboutemy

Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#1083) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#1082) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#1084) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#1068) @dependabot[bot]

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1 (#1047) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1050) @dependabot[bot]

Bump mavenVersion from 3.9.14 to 3.9.16 (#1054) @dependabot[bot]

Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1059) @dependabot[bot]

Bump org.ow2.asm:asm from 9.9.1 to 9.10 (#1053) @dependabot[bot]

Bump mavenVersion from 3.9.13 to 3.9.14 (#1041) @dependabot[bot]

Bump mavenVersion from 3.9.12 to 3.9.13 (#1038) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#1032) @dependabot[bot]

Commits

e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
beb0eda Recompile when dependencies change (#1102)
a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
2e81228 Fix incremental detection of empty sources, 3.x (#1075)
2132f5b configure ATR project
5992b77 Build fails when annotation processor list is empty (but present) (#1077)
acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
Additional commits viewable in compare view

github-actions · 2026-09-21T17:53:53Z

🤖 Claude Code Review

PR Code Review

Change summary: Single-line dependency bump in java/pom.xml — maven-compiler-plugin version 3.15.0 → 3.16.0. This is a Dependabot-style dependency update with no other code changes.

Code Quality

✅ Style conventions — Change is a single XML version string; formatting and indentation are consistent with the surrounding file (java/pom.xml:59).
✅ No commented-out code — N/A, no code touched.
✅ Meaningful variable names — N/A.
✅ DRY principle — N/A.
✅ Defects — No logic changed; this is a plugin version bump only. No bugs, race conditions, or crashes introduced. Note: I don't have network access to confirm the specifics of what changed between maven-compiler-plugin 3.15.0 and 3.16.0 upstream — recommend confirming CI passes (mvn package, and the checkstyle/spotbugs profiles per .claude/CLAUDE.md) since compiler-plugin bumps can occasionally surface new lint/compile warnings given the -Xlint:unchecked arg configured at java/pom.xml:60.
✅ CLAUDE.md considerations — .claude/CLAUDE.md is unchanged by this PR and contains no environment-specific hardcoding; not implicated here.

Testing

✅ Unit/integration tests — N/A, no functional code changed; a build-plugin version bump doesn't require new tests.
✅ Edge cases — N/A.
✅ Coverage — N/A.

Documentation

✅ README/API docs — Not applicable, no user-facing behavior change.
❌ CHANGELOG.md — Not updated. Minor/optional for a routine dependency bump; flagging per checklist but this is typically acceptable to skip for automated dependency PRs (consistent with prior merged bumps in this repo, e.g. 2cf110d, 3fc1c7c, 38be59d, none of which appear to have required CHANGELOG entries based on commit history).
✅ Markdown formatting — N/A, no .md files changed.

Security

✅ No hardcoded credentials — None present.
✅ Input validation — N/A.
✅ Error handling — N/A.
✅ No sensitive data in logs — N/A.
✅ License files (.lic) — No .lic files or AQAAAD-prefixed strings present in this diff.

Verdict

Approve. This is a low-risk, routine build-plugin dependency bump with no functional or security impact. No blocking issues found.

Automated code review analyzing defects and coding standards

Bumps [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.15.0 to 3.16.0. - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.16.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-28T17:58:43Z

🤖 Claude Code Review

This PR is a single-line dependency version bump (maven-compiler-plugin 3.15.0 → 3.16.0 in java/pom.xml:59), consistent with the automated dependabot-style commits already in this repo's history. Review below.

Code Quality

✅ Style conventions — pure version bump, XML formatting unchanged/consistent.
✅ No commented-out code.
✅ N/A — no variable names introduced.
✅ N/A — no logic duplicated.
✅ Defects — no functional code changed, only a plugin version. Maven Compiler Plugin 3.16.0 is a minor patch release; no known breaking changes to the -Xlint:unchecked/-Xlint:deprecation config used here (java/pom.xml:61-64). Low risk, but worth confirming mvn package still succeeds in CI since compiler-plugin bumps occasionally tighten lint/warning defaults.
✅ .claude/CLAUDE.md — not touched by this diff. Existing file remains general-purpose (build/run commands, env setup) with no local-machine-specific paths or secrets, so no issue to flag here.

Testing

✅ N/A — no new functions/endpoints; this is a build-tooling version bump. No test changes expected or needed.

Documentation

❌ No CHANGELOG.md entry for the dependency bump. Given the repo's convention (recent commits like b1b2d8e, e39a8ef, b633391 are all dependency bumps and none appear to touch CHANGELOG.md either based on this diff), this is likely consistent with existing practice rather than a new gap — flagging only for awareness, not blocking.
✅ No inline comments needed for a version bump.
✅ Markdown — no .md files changed in this diff.

Security

✅ No hardcoded credentials.
✅ N/A — no input handling introduced.
✅ N/A — no error handling paths changed.
✅ No sensitive data/logging changed.
✅ No .lic files or AQAAAD-prefixed strings present in this diff.

Summary: Low-risk, routine dependency version bump. No blocking issues found. Recommend merging once CI (`mvn package`, checkstyle/spotbugs profiles) passes.

Automated code review analyzing defects and coding standards

dependabot Bot assigned barrycaceres Sep 21, 2026

dependabot Bot requested a review from a team as a code owner September 21, 2026 17:48

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 21, 2026

barrycaceres approved these changes Sep 21, 2026

View reviewed changes

barrycaceres enabled auto-merge (squash) September 21, 2026 17:50

dependabot Bot force-pushed the dependabot/maven/java/org.apache.maven.plugins-maven-compiler-plugin-3.16.0 branch from 3fc786b to 1b3d09d Compare September 28, 2026 17:57

barrycaceres merged commit 9a76507 into main Sep 28, 2026
58 checks passed

barrycaceres deleted the dependabot/maven/java/org.apache.maven.plugins-maven-compiler-plugin-3.16.0 branch September 28, 2026 18:07

Navigation Menu

build(deps-dev): bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 in /java - #237

build(deps-dev): bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 in /java#237
barrycaceres merged 1 commit into
mainfrom
dependabot/maven/java/org.apache.maven.plugins-maven-compiler-plugin-3.16.0

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 21, 2026

Uh oh!

github-actions Bot commented Sep 28, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Uh oh!

github-actions Bot commented Sep 21, 2026

🤖 Claude Code Review

PR Code Review

Code Quality

Testing

Documentation

Security

Verdict

Approve. This is a low-risk, routine build-plugin dependency bump with no functional or security impact. No blocking issues found.

Uh oh!

github-actions Bot commented Sep 28, 2026

🤖 Claude Code Review

Code Quality

Testing

Documentation

Security

Summary: Low-risk, routine dependency version bump. No blocking issues found. Recommend merging once CI (mvn package, checkstyle/spotbugs profiles) passes.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading

Summary: Low-risk, routine dependency version bump. No blocking issues found. Recommend merging once CI (`mvn package`, checkstyle/spotbugs profiles) passes.