Repository navigation
Planned releases — Q4 2026 (Doxia stack + plugins + shared deps) #13085
Description
Status (2026-11-05)
Released: Enforcer 3.7.0 (2026-10-30), Reporting API 4.1.0 (2026-10-27), Archiver 4.0.0-beta-6 (2026-10-19), Doxia 2.2.0 (2026-10-18) and DOAP Plugin 3.0.0-M2 (2026-09-27).
Next: sitetools 2.2.0, help-plugin 3.5.3 and fluido-skin 2.2.0. Everything they depend on is released.
Then: the rest of the main round waits on sitetools 2.2.0 or reporting-impl 4.1.0. Parent 51 comes last, after fluido-skin 2.2.0 and site-plugin 3.23.0.
How to read the tables
Release each component after everything in its Depends on column. A stack can share one vote window, with downstream builds against the staged upstream artifacts, as the Doxia 2.0.0-M8 stack did on 2023-10-13. The 3.x lines go in any order.
Status: ✅ released · 🟢 ready, all dependencies released · ⏸ waiting on the dependencies without ✅.
Main round
Released
| Component | Version | Date | Highlights |
|---|---|---|---|
| doxia | 2.2.0 | 2026-10-18 | New HtmlTag, Markdown sink fixes, APT macro fix |
| reporting-api | 4.1.0 | 2026-10-27 | generate(Sink, SinkFactory, Locale) in MavenReport |
| archiver | 4.0.0-beta-6 | 2026-10-19 | MSHARED-815 manifest sanitizing, NPE and performance fixes |
| doap-plugin | 3.0.0-M2 | 2026-09-27 | Off the Maven 2 API; runs without maven-compat |
Open
| Component | Version | Status | Owner | Depends on | Highlights |
|---|---|---|---|---|---|
| sitetools | 2.2.0 | 🟢 | doxia ✅, reporting-api ✅ | Pages render again after a skin change; new File/Path skin API | |
| help-plugin | 3.5.3 | 🟢 | @slawekjaranowski (offered) | reporting-api ✅ | MPH-210 and Maven 4 fixes |
| fluido-skin | 2.2.0 | 🟢 | @slachiewicz | — | Bootstrap 5.3 with a light, dark and auto theme |
| reporting-impl | 4.1.0 | ⏸ | doxia ✅, reporting-api ✅, sitetools | Doxia 1 verbatim compatibility; Maven baseline 3.10.0 | |
| reporting-exec | 2.1.0 | ⏸ | doxia ✅, reporting-api ✅, sitetools | Drops localRepository and maven-compat |
|
| project-info-reports | 3.10.0 | ⏸ | doxia ✅, reporting-api ✅, sitetools, reporting-impl | Resolver API; drops maven-dependency-tree | |
| javadoc-plugin | 3.12.1 | ⏸ | doxia ✅, reporting-api ✅, sitetools, reporting-impl | Java 25 fixes | |
| checkstyle-plugin | 3.6.1 | ⏸ | doxia ✅, reporting-api ✅, sitetools, reporting-impl | ||
| dependency-plugin | 3.12.0 | ⏸ | doxia ✅, reporting-api ✅, reporting-impl | Resolver API; drops maven-dependency-tree | |
| pmd-plugin | 3.29.0 | ⏸ | @adangel (volunteered) | doxia ✅, reporting-api ✅, reporting-impl | PMD 7.27.0; new threads control |
| invoker-plugin | 3.11.0 | ⏸ | @slawekjaranowski (offered) | doxia ✅, reporting-api ✅, reporting-impl | Hook scripts run on JDK 27; BeanShell deprecated |
| changes-plugin | 3.0.0-M4 | ⏸ | doxia ✅, reporting-api ✅, reporting-impl | ||
| jxr | 3.6.1 | ⏸ | reporting-api ✅, reporting-impl | Replaces Wagon's Repository with java.net.URI |
|
| site-plugin | 3.23.0 | ⏸ | doxia ✅, reporting-api ✅, sitetools, reporting-impl, reporting-exec | site:run on the JDK HttpServer; -D properties reach the site descriptor |
|
| maven-parent | 51 | ⏸ | fluido-skin, site-plugin | Absolute site links, publish date in the footer, new logo |
Skipped: plugin-tools 4.x, which has had only release-prepare commits since beta-3.
Details per component
doxia 2.2.0. japicmp backward-compatibility check added.
reporting-api 4.1.0 (minor). Adds generate(Sink, SinkFactory, Locale) to MavenReport (#87). getOutputName() and generate(Sink, Locale) stay abstract (#95, #96). Pins doxia-sink-api 2.2.0, because SinkEventAttributeSet moved there and doxia-core 2.2.0 needs it at runtime.
archiver 4.0.0-beta-6. MSHARED-815 manifest newline sanitizing (#363, #392); NPE fixes (#378, #381); handleSpecificationEntries and BuildHelper performance (#377, #379). Built against Maven 4.0.0-rc-6. Consumers: jar, war, ear, assembly and source on their 4.x lines.
doap-plugin 3.0.0-M2. Moves off ArtifactResolver and MavenProjectBuilder, which unblocks running without maven-compat (#8177).
sitetools 2.2.0 (minor). Pages render again after a skin change, and a failed render no longer leaves a half-written page (#727). Fixes the ISE on the deprecated DocumentRenderingContext (#639). Maven 3.9.16 baseline (#700). Bumps maven-reporting-api in doxia-integration-tools. Refactoring seams #702 to #706 are merged, with no behaviour change. Artifact-based skin methods are deprecated in favour of File/Path overloads (#707). The new public API from #707 and #672 makes this 2.2.0, not 2.1.1 (#714).
help-plugin 3.5.3. MPH-210 (#327), #393 and Maven 4 fixes.
fluido-skin 2.2.0 (minor). Bootstrap 5.3 instead of Bootstrap 2 and jQuery, with a light, dark and auto theme switch (#374); highlight.js instead of prettify; phone layout, contrast and SCM last-modified fixes. Checklist #355 is done. ITs pass on site-plugin 3.22.0; re-verify on 3.23.0 once it is out.
reporting-impl 4.1.0 (minor). Doxia 1 verbatim compatibility. Maven baseline 3.6.3 → 3.10.0. Replaces deprecated sitetools calls (#251). Bump reportingApiVersion to 4.1.0.
reporting-exec 2.1.0 (minor). Drops the deprecated localRepository (#159) and maven-compat (#163). Bump the hardcoded reporting-api version.
project-info-reports 3.10.0 (minor). MPIR-477 Resolver API migration; MPIR-458 drops maven-dependency-tree (#670). Unblocks running without maven-compat (#8177).
javadoc-plugin 3.12.1. Java 25 fixes.
dependency-plugin 3.12.0 (minor), with the plexus-io and resolver bumps. MDEP-858 Resolver migration; MDEP-927, MDEP-425, MDEP-870; MDEP-969 drops maven-dependency-tree (#1712); baseline CI job (#1701). Unblocks running without maven-compat (#8177).
pmd-plugin 3.29.0 (minor). New threads control (#700); PMD 7.27.0 (#729).
invoker-plugin 3.11.0 (minor, not patch), with script-interpreter 1.9. BeanShell hook scripts deprecated (#768, #770). Groovy 4.0.33 runs hook scripts on JDK 27; Groovy 4.0.31 in 3.10.1 fails with Unsupported class file major version 71. Afterwards, bump version.maven-invoker-plugin in the ASF parent.
jxr 3.6.1. Replaces Wagon's Repository with java.net.URI (#368).
site-plugin 3.23.0 (minor, not patch). site:run moves from Jetty 9 to the JDK HttpServer (#1303, merged). -D properties reach the site descriptor. Bump reporting-exec 2.0.1 → 2.1.0 and doxiaSitetoolsVersion 2.1.0 → 2.2.0 (still 2.1.0 on master).
maven-parent 51. Merged: absolute site links (#630), publish date in the footer (#631), leaf logo with a dark version (#632). Then bump version.maven-fluido-skin and version.maven-site-plugin. maven-site sets relativizeSiteLinks back to true while it renders with Fluido 2.1.0.
Ready outside the reporting chain
These do not depend on reporting-api, sitetools or reporting-impl, master is green, and the root POM pins no SNAPSHOT. Fixes are counted from each release draft, changes from the latest release on Central (survey 2026-10-24). Enforcer 3.7.0 from this list was released on 2026-10-30 by @slawekjaranowski (8 bugs and 2 deprecations since 3.6.3 of 2026-05; 32 files, 527 lines).
| Component | Next | Last release | Fixes | src/main changes since last release |
|---|---|---|---|---|
| shade-plugin | 3.6.3 or 3.7.0 | 3.6.2, 2026-03 | 5 bugs (MSHADE-368, MSHADE-260, infinite loop in ManifestResourceTransformer); MSHADE-374 is labelled breaking |
28 files, 1218 lines |
| archetype | 3.5.0 | 3.4.1, 2025-10 | 4 bugs, 1 deprecation | 45 files, 1338 lines |
| assembly-plugin | 3.8.1 | 3.8.0, 2025-11 | 4 bugs (MASSEMBLY-947, MASSEMBLY-1001, #1275, ThreadLocal leak) | 19 files, 404 lines |
| resolver-ant-tasks | 2.0.1 | 2.0.0, 2026-08 | 5 settings.xml bugs |
8 files, 74 lines |
| jarsigner | 3.1.1 | 3.1.0, 2024-08 | 6 bugs (MSHARED-765, unsignArchive race) |
2 files, 57 lines |
| toolchains-plugin | 3.3.1 | 3.3.0, 2026-07 | 3 bugs (#196) | 4 files, 36 lines |
| ear-plugin | 3.4.1 | 3.4.0, 2025-06 | 3 bugs; drops maven-mapping (#578) | 22 files, 324 lines |
| wrapper | 3.3.5 | 3.3.4, 2025-09 | 3 script bugs (sha256 on macOS, Windows path, distribution URL) | 1 file, 77 lines |
| artifact-plugin | 3.7.1 | 3.7.0, 2026-09 | 3 bugs | 5 files, 72 lines |
| common-artifact-filters | 3.4.1 | 3.4.0 | ArtifactTransitivityFilter NPE (#131) |
6 files, 40 lines |
| release | 3.3.2 | 3.3.1, 2025-12 | Release settings written in UTF-8 (#1514) | 37 files, 1660 lines |
| scm | 2.2.2 | 2.2.1, 2025-09 | 2 bugs | 39 files, 1121 lines |
| archetypes | 1.6.0 | 1.5, 2025-05 | goalPrefix for plugin names off the convention; Doxia 2 sites from the site archetypes; generated plugins built against Maven 3.9.16 (#150) |
44 files, 615 lines |
| doxia-converter | 1.4.0 | 1.3 | Sisu wiring, SLF4J 2, Velocity-safe conversion; most PRs carry no label, so the draft lists 1 fix | 15 files, 2491 lines |
Patch releases with one fix each: jarsigner-plugin, acr, rar, jdeps, gpg, jmod and war, which also drops maven-mapping (#670). scm-publish-plugin 3.3.1 has no fix in its release draft.
Release the shared component before its consumers, and bump the consumers through a PR against the staged artifact:
- jarsigner 3.1.1 before jarsigner-plugin, which pins 3.1.0.
- scm 2.2.2 before release, changelog and scm-publish, which pin 2.2.1.
Not ready
The following components are not ready for a release:
- mapping: war and ear inline its one method instead (war#670, ear#578, both merged; the war 4.0.x line gets the same code in war#671), so it can be retired.
- maven-invoker (shared) 3.3.1: deprecation notices only.
- build-cache-extension 1.4.0: a breaking change to the WebDAV remote cache.
- clean, resources and filtering on the 3.x line: no
src/mainchange since 3.5.0 and 3.5.1.
maven-dependency-tree: its retirement vote was cancelled on 2026-10-26.
Not counted
These are tracked elsewhere:
- The Maven 4 beta plugin lines (jar, clean, filtering, source and resources at
4.0.0-beta-x, 3–11 each), which release on the Maven 4 cadence. - maven-shared-incremental, which is in its retirement vote.
- Surefire, which its maintainers release on their own schedule.
Current 3.x lines
3.x is the current line. Its releases come from master; the 4.x line, with Maven 4 as its baseline, lives on a <repo>-4.x branch and releases on the Maven 4 cadence. plugin-tools is the exception: 3.x is on maven-plugin-tools-3.x, 4.x on master.
| Component | Version | State | Notes |
|---|---|---|---|
| deploy, install | 3.2.0 | ✅ 2026-09-11 | |
| source | 3.5.0 | New followSymlinks, hence minor |
|
| archiver | 3.6.7 | 🟢 since #404 | MSHARED-815 (#363, #392) and the #381 NPE fix; #377, #378 and #379 have no 3.x counterpart. master had only bumps since 3.6.6, which 12 plugins pin |
| plugin-tools | 3.17.0 | Minor: MPLUGIN-421 moves Javadoc extraction from QDox to JavaParser; MPLUGIN-512; #1200 drops the PathTranslator requirement for #8177 |
The other 3.x lines are refresh-only or skipped (compiler: release-prepare only on master).
Done before the round
Released: parent POMs 50, maven-shared-utils 3.5.0, maven-script-interpreter 1.9 and maven-shared-jar 3.2.1. dependency-analyzer 1.17.2 and resolver 1.9.27 / 2.0.23 were already out.
Bumped in the consumers: parent 50, shared-utils 3.5.0, script-interpreter 1.9, plexus-io 3.8.0 (apache/maven-javadoc-plugin#1384, apache/maven-assembly-plugin#1377, apache/maven-dependency-plugin#1699, apache/maven-ear-plugin#554), resolver 1.9.27 (apache/maven-dependency-plugin#1700) and mavenVersion 3.9.16 with <prerequisites> kept at 3.6.3 (apache/maven-scm-publish-plugin#162, apache/maven-mapping#75).
master versions and release drafts match the tables (apache/maven-project-info-reports-plugin#673, apache/maven-reporting-api#89, apache/maven-reporting-exec#170, apache/maven-site-plugin#1322).
Maven 4.0.0-rc-7 CI: apache/maven-javadoc-plugin#1401 (MJAVADOC-444 IT) and apache/maven-shade-plugin#843 (reduced POM <relativePath>) are merged.
Kept on purpose:
- assembly stays on
plexus-build-api1.2.0, because 1.3.0 cannot be provisioned outside a Maven session (DefaultBuildContext cannot be provisioned outside a Maven session in 1.3.0 codehaus-plexus/plexus-build-api#125). - shade stays on
plexus-utils3.6.2, because 4.x has the package split.
Skipped, bumps or docs only, released after the round: filtering 3.5.2, invoker-shared 3.3.1, filters 3.4.1, harness-3.x.
Activity
adangel commentedon Sep 10, 2026
@slachiewicz I'd like to do the release for maven-pmd-plugin
slachiewicz commentedon Sep 19, 2026
[-]Planned releases for September 2026 — Doxia stack, plugins, shared deps[/-][+]Planned releases for 09-10 2026 — Doxia stack, plugins, shared deps[/+]slawekjaranowski commentedon Oct 8, 2026
@slachiewicz , @adangel I will provided a configuration for ART in mentioned projects.
We can try releases with
push-to-atrprofile - https://maven.apache.org/pom/asf/#the-push-to-atr-profileATR today support:
slawekjaranowski commentedon Oct 8, 2026
for me to release can be help, invoker and enforcer plugins 😄
slawekjaranowski commentedon Oct 8, 2026
surefire probably @olamy have in plan
olamy commentedon Oct 8, 2026
Please refrain from using your robot on Surefire, I'm looking at fixing issues for 3.6.1 and release it in a few weeks.
As far as I can see nothing urgent here.
[-]Planned releases for 09-10 2026 — Doxia stack, plugins, shared deps[/-][+]Planned releases, autumn 2026 — Doxia stack (2.2.0 released, reporting-api 4.1.0 next), plugins, shared deps[/+][-]Planned releases, autumn 2026 — Doxia stack (2.2.0 released, reporting-api 4.1.0 next), plugins, shared deps[/-][+]Planned releases — autumn 2026 (Doxia stack + plugins + shared deps)[/+][-]Planned releases — autumn 2026 (Doxia stack + plugins + shared deps)[/-][+]Planned releases — Q4 2026 (Doxia stack + plugins + shared deps)[/+]