[dependabot]

Bumps org.codehaus.mojo:animal-sniffer-enforcer-rule from 1.28 to 1.29.

Release notes

Sourced from org.codehaus.mojo:animal-sniffer-enforcer-rule's releases.

1.29

Animal Sniffer 1.29 improves signature checking accuracy, fixes @IgnoreJRERequirement suppression ordering in the Ant task, and modernizes signature artifact resolution in the Maven plugin and Enforcer rule. The Maven plugin and Enforcer rule require Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

• Method parameter type checking: SignatureChecker now verifies the types of declared method parameters against the target signature so methods accepting types missing from the target API are caught even if those types are not referenced in the method body. Synthetic constructor parameters generated for inner classes continue to respect @IgnoreJRERequirement (#349).
• Classified signature artifacts in animal-sniffer-maven-plugin: The <signature> configuration in animal-sniffer:check now honours <classifier>, allowing builds to resolve signature artifacts published with a classifier (#346).
• Maven Resolver support in animal-sniffer-enforcer-rule: The checkSignatureRule Enforcer rule now resolves signature artifacts through Maven Resolver instead of the legacy ArtifactResolver, ensuring compatibility with Maven 3.9+ and Maven 4 (#367).
• Reliable @IgnoreJRERequirement suppression in the Ant task: The Ant <check-signature> task now sorts classes within each container so enclosing classes are always processed before their nested/inner classes regardless of filesystem or JAR entry order, and ignores non-class resources without splitting class batches (#350).
• ASM 9.11: Upgraded org.ow2.asm:asm to 9.11 for current Java bytecode support (#354).

🚨 Removed

• Require Maven 3.9.0 (#359) @​slachiewicz

🚀 New features and improvements

• Resolve the enforcer rule's signature through Maven Resolver (#367) @​slachiewicz

🐛 Bug Fixes

• Resolve classified signature artifacts in Maven plugin (#346) @​jhy
• Detect unsupported declared method parameter types (#349) @​wilx
• Fix Ant signature suppression for unordered class files (#350) @​wilx

📝 Documentation updates

• Add AGENTS.md (#366) @​slachiewicz

👻 Maintenance

• Run CheckSignatureTaskTest on JUnit 5 (#376) @​slachiewicz
• Declare org.eclipse.sisu.inject at the version of org.eclipse.sisu.plexus (#374) @​slachiewicz
• Drop obsolete plugin pins and Java 1.5 settings from the IT projects (#371) @​slachiewicz
• Declare the Maven artifacts the code uses (#368) @​slachiewicz
• Remove redundant maven-shade-plugin version (#370) @​slachiewicz
• Replace deprecated @​Component with JSR 330 injection (#369) @​slachiewicz
• Apply the JUnit 5 best practices to the tests (#364) @​slachiewicz
• Keep Dependabot on Maven 3.9.x (#362) @​slachiewicz
• Port the BeanShell verify scripts to Groovy (#361) @​slachiewicz
• Migrate SignatureCheckerTest to JUnit 5 (#360) @​slachiewicz

🔧 Build

• Keep Dependabot on Maven 3.9.x and Resolver 1.9.x (#372) @​slachiewicz
• Use the runners' cached Temurin JDKs in CI (#365) @​slachiewicz
• Run CI on Maven 4 (#363) @​slachiewicz
• Assign merged pull requests to the release milestone (#358) @​slachiewicz
• Run one integration test per CPU core (#357) @​slachiewicz
• Check dependencies monthly and group the updates (#356) @​slachiewicz

... (truncated)

Commits

• 376927b [maven-release-plugin] prepare release 1.29
• 4ff56c7 Run CheckSignatureMojoTest on JUnit 5 with the injected constructor
• 43fa25c Update the classifier example, and test version lookup
• 52fb82c Maven plugin resolves classified signature artifacts
• 32ca482 Preserve suppression for synthetic method parameters
• 9007ee7 Cover synthetic parameter suppression regressions
• 4cadda9 Check declared method parameter types against signatures
• 28455f9 Add regression coverage for unsupported parameter types
• c957b5b Run CheckSignatureTaskTest on JUnit 5
• 21f484a Ignore resources without splitting Ant class file batches
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)