chore: bump org.graalvm.buildtools:native-maven-plugin from 0.11.5 to 1.1.11

[dependabot]

Bumps org.graalvm.buildtools:native-maven-plugin from 0.11.5 to 1.1.11.

Release notes

Sourced from org.graalvm.buildtools:native-maven-plugin's releases.

1.1.11

What's Changed

• Release 1.1.9 by @​graalvmbot in graalvm/native-build-tools#1022
• Bump version to 1.1.10-SNAPSHOT by @​graalvmbot in graalvm/native-build-tools#1023
• Update reachability metadata to 1.0.11 by @​graalvmbot in graalvm/native-build-tools#1028
• Make NativeImageLayerRuntimeTest platform-independent by @​vpelikh in graalvm/native-build-tools#1024
• Release 1.1.10 by @​graalvmbot in graalvm/native-build-tools#1030
• Move grund.toml to the project roots by @​vjovanov in graalvm/native-build-tools#1026
• Bump version to 1.1.11-SNAPSHOT by @​graalvmbot in graalvm/native-build-tools#1035
• Update reachability metadata to 1.0.12 by @​graalvmbot in graalvm/native-build-tools#1036
• Layers DSL follow-up: configuration-cache and test cleanup by @​jormundur00 in graalvm/native-build-tools#1034
• Fix Maven metadata copy across reactor modules by @​jormundur00 in graalvm/native-build-tools#1020
• Make embedded Maven output concise and reproducible by @​jormundur00 in graalvm/native-build-tools#1019
• Fix additive reachability metadata requires selection by @​jormundur00 in graalvm/native-build-tools#1018

New Contributors

• @​vpelikh made their first contribution in graalvm/native-build-tools#1024

Full Changelog: graalvm/native-build-tools@1.1.9...1.1.11

1.1.10

What's Changed

• Release 1.1.9 by @​graalvmbot in graalvm/native-build-tools#1022
• Bump version to 1.1.10-SNAPSHOT by @​graalvmbot in graalvm/native-build-tools#1023

Full Changelog: graalvm/native-build-tools@1.1.9...1.1.10

1.1.9

What's Changed

• Make repository test output concise by default by @​jormundur00 in graalvm/native-build-tools#1004
• Decouple Maven plugin unit tests from remote bootstrap tasks by @​jormundur00 in graalvm/native-build-tools#1007
• Clarify build prerequisites and add a core build mode by @​jormundur00 in graalvm/native-build-tools#1012
• Release 1.1.8 by @​graalvmbot in graalvm/native-build-tools#1015
• Bump version to 1.1.9-SNAPSHOT by @​graalvmbot in graalvm/native-build-tools#1016
• Uplift the Native Image layer configuration model by @​jormundur00 in graalvm/native-build-tools#1011
• Update reachability metadata to 1.0.10 by @​graalvmbot in graalvm/native-build-tools#1021

Full Changelog: graalvm/native-build-tools@1.1.8...1.1.9

1.1.8

What's Changed

• Release 1.1.7 by @​graalvmbot in graalvm/native-build-tools#1009
• Bump version to 1.1.8-SNAPSHOT by @​graalvmbot in graalvm/native-build-tools#1010
• Deprecate fallback plugin options by @​jormundur00 in graalvm/native-build-tools#997
• Update reachability metadata to 1.0.9 by @​graalvmbot in graalvm/native-build-tools#1014

Full Changelog: graalvm/native-build-tools@1.1.7...1.1.8

... (truncated)

Commits

• 6cf521c Release 1.1.11
• 37fab88 Fix additive reachability metadata requires selection (#1018)
• c300d9f Make embedded Maven output concise and reproducible (#1019)
• 1987e3c Fix Maven metadata copy across reactor modules (#1020)
• f328d3a Layers DSL follow-up: configuration-cache and test cleanup (#1034)
• 8ae8060 Update reachability metadata to 1.0.12 (#1036)
• 6a60e3b Merge pull request #1035 from graalvm/bump-version-to-1.1.11-SNAPSHOT
• 0eac49e Bump version to 1.1.11-SNAPSHOT
• f2d657c Move grund.toml to the project roots (#1026)
• 395d386 Merge pull request #1030 from graalvm/release/1.1.10
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 7 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 58fe84f.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

examples/powertools-examples-cloudformation/pom.xml

Package	Version	License	Issue Type
org.graalvm.buildtools:native-maven-plugin	1.1.11	LicenseRef-bad-non-standard	Incompatible License

examples/powertools-examples-core-utilities/sam-graalvm/pom.xml

Package	Version	License	Issue Type
org.graalvm.buildtools:native-maven-plugin	1.1.11	LicenseRef-bad-non-standard	Incompatible License

examples/powertools-examples-idempotency/sam-graalvm/pom.xml

Package	Version	License	Issue Type
org.graalvm.buildtools:native-maven-plugin	1.1.11	LicenseRef-bad-non-standard	Incompatible License

examples/powertools-examples-parameters/sam-graalvm/pom.xml

Package	Version	License	Issue Type
org.graalvm.buildtools:native-maven-plugin	1.1.11	LicenseRef-bad-non-standard	Incompatible License

examples/powertools-examples-serialization/sam-graalvm/pom.xml

Package	Version	License	Issue Type
org.graalvm.buildtools:native-maven-plugin	1.1.11	LicenseRef-bad-non-standard	Incompatible License

pom.xml

Package	Version	License	Issue Type
org.graalvm.buildtools:native-maven-plugin	1.1.11	LicenseRef-bad-non-standard	Incompatible License

powertools-e2e-tests/handlers/pom.xml

Package	Version	License	Issue Type
org.graalvm.buildtools:native-maven-plugin	1.1.11	LicenseRef-bad-non-standard	Incompatible License

Allowed Licenses:

Apache-1.1, Apache-2.0, ISC, MIT, MIT-0, MIT-CMU, MIT-enna, MIT-feh, MIT-Festival, MIT-Modern-Variant, MIT-open-group, MIT-testregex, MIT-Wu, BSD-1-Clause, BSD-2-Clause, BSD-2-Clause-Views, BSD-3-Clause, BSD-3-Clause-Attribution, BSD-3-Clause-Clear, BSD-3-Clause-flex, BSD-3-Clause-HP, BSD-3-Clause-LBNL, BSD-3-Clause-Modification, BSD-3-Clause-No-Military-License, BSD-3-Clause-No-Nuclear-License, BSD-3-Clause-No-Nuclear-License-2014, BSD-3-Clause-No-Nuclear-Warranty, BSD-3-Clause-Open-MPI, UPL-1.0

OpenSSF Scorecard

Package	Version	Score	Details
maven/org.graalvm.buildtools:native-maven-plugin	1.1.11	🟢 6.7	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 5 binaries present in source code Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.graalvm.buildtools:native-maven-plugin	1.1.11	🟢 6.7	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 5 binaries present in source code Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.graalvm.buildtools:native-maven-plugin	1.1.11	🟢 6.7	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 5 binaries present in source code Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.graalvm.buildtools:native-maven-plugin	1.1.11	🟢 6.7	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 5 binaries present in source code Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.graalvm.buildtools:native-maven-plugin	1.1.11	🟢 6.7	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 5 binaries present in source code Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.graalvm.buildtools:native-maven-plugin	1.1.11	🟢 6.7	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 5 binaries present in source code Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.graalvm.buildtools:native-maven-plugin	1.1.11	🟢 6.7	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 5 binaries present in source code Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• examples/powertools-examples-cloudformation/pom.xml
• examples/powertools-examples-core-utilities/sam-graalvm/pom.xml
• examples/powertools-examples-idempotency/sam-graalvm/pom.xml
• examples/powertools-examples-parameters/sam-graalvm/pom.xml
• examples/powertools-examples-serialization/sam-graalvm/pom.xml
• pom.xml
• powertools-e2e-tests/handlers/pom.xml

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud