[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.codehaus.mojo:build-helper-maven-plugin (source)	3.6.2 → 3.7.0

---

Release Notes

mojohaus/build-helper-maven-plugin (org.codehaus.mojo:build-helper-maven-plugin)

v3.7.0

Compare Source

Build Helper Maven Plugin 3.7.0 adds system time zone support to timestamp-property, literal replacement support to regex-property and regex-properties, and updates the remove-project-artifact deprecation guidance. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

• System time zone in timestamp-property: Setting <timeZone>system</timeZone> (case-insensitive) formats the timestamp using the JVM's default time zone instead of GMT, working with both current and build time sources (#​250).
• Literal replacement mode in regex-property and regex-properties: Setting <replacementLiteral>true</replacementLiteral> treats backslashes (\) and dollar signs ($) in <replacement> as literal characters rather than regex group references or escapes — particularly useful when substituting Windows file paths such as ${project.build.directory} (#​249).
• Updated remove-project-artifact deprecation guidance: The documentation for the deprecated remove-project-artifact goal now points users to Maven Resolver's split local repository feature (-Daether.enhancedLocalRepository.split) as the modern alternative (#​268, #​270).

🚨 Removed

• Require Maven 3.9.0 (#​257) @​slachiewicz

🚀 New features and improvements

• Support the system time zone in timestamp-property (#​250) @​wilx
• Add literal replacement support to regex property goals (#​249) @​wilx

📝 Documentation updates

• Point the remove-project-artifact deprecation at split local repositories (#​268, #​270) @​slachiewicz
• Add AGENTS.md (#​263) @​slachiewicz

👻 Maintenance

• Run the surefire IT fixture on JUnit 5 (#​269) @​slachiewicz
• Replace deprecated @​Component with JSR 330 injection (#​267) @​slachiewicz
• Check the reserved ports' guarantees, not exact numbers (#​265) @​slachiewicz
• Apply the JUnit 5 best practices to the tests (#​261) @​slachiewicz
• Keep Dependabot on Maven 3.9.x (#​259) @​slachiewicz
• Write the regex and timestamp verify scripts as assertions (#​258) @​slachiewicz
• Port the IT scripts from BeanShell to Groovy (#​251) @​slachiewicz

🔧 Build

• Preload the lifecycle plugins of the Central-backed ITs (#​264) @​slachiewicz
• Use the runners' cached Temurin JDKs in CI (#​262) @​slachiewicz
• Run CI on Maven 4 (#​260) @​slachiewicz
• Assign merged pull requests to the release milestone (#​255) @​slachiewicz
• Point the released-version ITs at the URL the build uses for central (#​256) @​slachiewicz
• Run one integration test per CPU core (#​254) @​slachiewicz
• Check dependencies monthly and group the updates (#​253) @​slachiewicz
• Run fewer JDKs on macOS and Windows and the ITs in parallel (#​252) @​slachiewicz

Thanks to @​slachiewicz and @​wilx.

Full changelog

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: ACOMMONS-248

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[gitar-bot]

Code Review ✅ Approved 🟡 Medium risk

Upgrading build-helper-maven-plugin to 3.7.0 requires Maven 3.9+, so builds using older Maven versions could fail.

Bumps the build-helper-maven-plugin dependency from 3.6.2 to 3.7.0, which adds system time zone support to timestamp-property and literal replacement mode to regex-property goals. No issues found.

Verification Rules 2/2 met

Functional validation No results

Rules 2 passed 1 not applicable

✅ Internal artifact registries
✅ Repository license compliance

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[vdiez]

Auto-approved: Renovate dependency update.