Jenkins Parent POM 1.53 release with bulk dependency updates (not plugin-pom)

[Oleg Nenashev]

Hi all,

Just a heads-up, I am planning to release a new version of Parent POM for Jenkins core and libraries. This release includes a bulk dependency update performed by dependabot, and hence there is a high risk of regressions in some components.

I deployed 1.53-20191210.095003-5 with the current changes (see the changelog below). It works well on my machine. If someone is interested to test the upgrade in their components before the release, please let me know.

Test pull requests:

• https://github.com/jenkinsci/remoting/pull/355 
• https://github.com/jenkinsci/winstone/pull/82 
• https://github.com/jenkinsci/swarm-plugin/pulls  
  
• https://github.com/jenkinsci/jenkins/pull/4353  (fails at the moment, infra issue?)

Best regards,

Oleg Nenashev

Ful changelog of the staged 1.53-20191210.095003-5 release

📦 Dependency updates

• Bump cargo-maven2-plugin from 1.7.0 to 1.7.8 (#72) @dependabot
• Bump flatten-maven-plugin from 1.0.1 to 1.1.0 (#62) @dependabot
• Bump incrementals-plugin.version from 1.0-beta-5 to 1.1 (#56) @dependabot
• Bump maven-compiler-plugin from 3.8.0 to 3.8.1 (#64) @dependabot
• Bump maven-source-plugin from 3.0.1 to 3.2.0 (#66) @dependabot
• Bump maven-assembly-plugin from 3.1.0 to 3.2.0 (#71) @dependabot
• Bump maven-license-plugin from 1.7 to 1.8 (#65) @dependabot
• Bump maven-pmd-plugin from 3.11.0 to 3.12.0 (#73) @dependabot
• Bump maven-hpi-plugin from 2.7 to 3.11 (#74) @dependabot
• Bump maven-help-plugin from 3.1.0 to 3.2.0 (#67) @dependabot
• Bump spotbugs-maven-plugin from 3.1.12 to 3.1.12.2 (#68) @dependabot
• Bump extra-enforcer-rules from 1.1 to 1.2 (#69) @dependabot
• Bump maven-war-plugin from 3.2.2 to 3.2.3 (#60) @dependabot
• Bump maven-javadoc-plugin from 3.0.1 to 3.1.1 (#51) @dependabot
• Bump maven-surefire-report-plugin from 2.20 to 2.22.2 (#57) @dependabot
• Bump animal-sniffer-plugin.version from 1.17 to 1.18 (#55) @dependabot
• Bump maven-surefire-plugin from 2.20 to 2.22.2 (#53) @dependabot
• Bump maven-checkstyle-plugin from 3.0 to 3.1.0 (#50) @dependabot
• Bump maven-site-plugin from 3.7.1 to 3.8.2 (#48) @dependabot
• Bump maven-jar-plugin from 3.1.2 to 3.2.0 (#59) @dependabot
• Bump maven-localizer-plugin from 1.24 to 1.26 (#54) @dependabot
• Bump maven-jar-plugin from 3.1.1 to 3.1.2 (#52) @dependabot
• Update test-annotations from 1.2 to 1.3 (#44) @basil

📝 Documentation updates

• Reference GitHub Releases from CHANGELOG.md (#58) @oleg-nenashev
• Update component name and description in the pom.xml to clarify the components purpose (#46) @oleg-nenashev
• Add README (#47) @oleg-nenashev

👻 Maintenance

• Add Dependabot configuration file (#45) @basil

[Oleg Nenashev]

I went ahead and released the new version: https://github.com/jenkinsci/pom/releases/tag/jenkins-1.53