💥 Breaking changes

• Bump LibreOffice library odfdom-java to 0.12.0, require JDK 11+ for generating Calc file ODS (#684) @slawekjaranowski

🚀 New features and improvements

• Bump LibreOffice library odfdom-java to 0.12.0, require JDK 11+ for generating Calc file ODS (#684) @slawekjaranowski
• Fix for issues/533 (dual licensed dependency with one license on whitelist and the other on blacklist) (#670) @wuwu2000
• Make Mojos thread-safe and improve concurrent cache handling (#674) @shaikhu

👻 Maintenance

• Add PR automation workflow (#682) @slawekjaranowski

📦 Dependency updates

• Bump org.apache.commons:commons-lang3 from 3.8.1 to 3.18.0 in /src/it/ISSUE-345 (#691) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 94 to 95 (#690) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.8.1 to 3.18.0 in /src/it/ISSUE-508 (#677) @dependabot[bot]
• Bump org.apache.maven:maven-archiver from 3.6.5 to 3.6.6 (#689) @dependabot[bot]
• Bump org.apache.logging.log4j:log4j-to-slf4j from 2.25.2 to 2.25.3 (#688) @dependabot[bot]
• Bump mavenVersion from 3.9.11 to 3.9.12 (#687) @dependabot[bot]
• Bump org.apache.poi:poi-ooxml from 5.5.0 to 5.5.1 (#683) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.9 to 3.18.0 in /src/it/ISSUE-312/child2 (#681) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 (#679) @dependabot[bot]
• Bump org.apache.poi:poi-ooxml from 5.4.1 to 5.5.0 (#680) @dependabot[bot]
• Bump org.wiremock:wiremock-standalone from 3.13.1 to 3.13.2 (#678) @dependabot[bot]
• Bump commons-io:commons-io from 2.20.0 to 2.21.0 (#676) @dependabot[bot]
• Bump org.apache.maven:maven-archiver from 3.6.4 to 3.6.5 (#671) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 93 to 94 (#669) @dependabot[bot]
• Bump org.apache.logging.log4j:log4j-to-slf4j from 2.25.1 to 2.25.2 (#667) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 (#668) @dependabot[bot]

🚀 New features and improvements

• Check project license goal (#650) @sewerwal

🐛 Bug Fixes

• Adding missing @Inject to LicenseListMojo class (#656) @jhonnymertz

🔧 Build

• Disable fail-fast build in matrix, skip download-licenses-configured IT (#657) @slawekjaranowski

📦 Dependency updates

• Bump org.apache.maven:maven-archiver from 3.6.3 to 3.6.4 (#659) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.8.1 to 3.18.0 in /src/it/add-third-party-with-deps-name-order (#661) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 92 to 93 (#660) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.8.1 to 3.18.0 in /src/it/ISSUE-423 (#653) @dependabot[bot]
• Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#655) @dependabot[bot]
• Bump mavenVersion from 3.9.10 to 3.9.11 (#654) @dependabot[bot]
• Bump org.apache.logging.log4j:log4j-to-slf4j from 2.25.0 to 2.25.1 (#652) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#649) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.8.1 to 3.18.0 in /src/it/ISSUE-345-2 (#651) @dependabot[bot]

🚀 New features and improvements

• Implement Optional Parameters to include and exclude submodules (#620) @MrBanana05

📝 Documentation updates

• Rename 'Goals' to 'Plugin Documentation' in site manu (#647) @slawekjaranowski

👻 Maintenance

• Use constant 3.6.3 in prerequisites/maven as minimal Maven version (#646) @slawekjaranowski
• Use MavenProjectHelper for adding resources (#643) @slawekjaranowski

📦 Dependency updates

• Bump mavenVersion from 3.6.3 to 3.9.10 (#645) @dependabot[bot]
• Bump org.apache.logging.log4j:log4j-to-slf4j from 2.24.3 to 2.25.0 (#648) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 87 to 92 (#644) @dependabot[bot]
• Bump org.wiremock:wiremock-standalone from 3.13.0 to 3.13.1 (#642) @dependabot[bot]
• Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0 (#635) @dependabot[bot]
• Bump org.igniterealtime.smack:smack-core from 4.1.6 to 4.1.9 in /src/it/ISSUE-361 (#634) @dependabot[bot]
• Bump org.apache.poi:poi-ooxml from 5.4.0 to 5.4.1 (#631) @dependabot[bot]
• Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#632) @dependabot[bot]
• Bump org.wiremock:wiremock-standalone from 3.12.0 to 3.12.1 (#627) @dependabot[bot]
• Bump org.wiremock:wiremock-standalone from 3.10.0 to 3.12.0 (#625) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 86 to 87 (#623) @dependabot[bot]
• Bump org.apache.poi:poi-ooxml from 5.3.0 to 5.4.0 (#618) @dependabot[bot]
• Bump org.freemarker:freemarker from 2.3.33 to 2.3.34 (#617) @dependabot[bot]
• Bump org.apache.logging.log4j:log4j-to-slf4j from 2.24.2 to 2.24.3 (#616) @dependabot[bot]
• Bump org.wiremock:wiremock-standalone from 3.9.2 to 3.10.0 (#614) @dependabot[bot]

❗ NOTICE

Due to Doxia 2.x stack maven-site-plugin 3.20+ is required.
https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack

🚀 New features and improvements

• Update Doxia to 2.x stack (#603) @slawekjaranowski
• Added an option to control if output directory is added as resource directory (#580) @AB-xdev
• Enhance exception handling for license execution when the URL tag of the license is empty. (#588) @djjeon
• Parallel processing of files (#568) @mkarg

🐛 Bug Fixes

• Manage open streams in correct way (#609) @slawekjaranowski
• licenseName is required (#607) @vitalijr2
• Fix issue #560: fail to download license file because license name contains invalid characters (#561) @nhuongmh
• Generate latest version of mvnw with no additional resources (#551) @VonUniGE

📦 Dependency updates

• Bump org.apache.logging.log4j:log4j-to-slf4j from 2.24.1 to 2.24.2 (#612) @dependabot
• Bump commons-io:commons-io from 2.17.0 to 2.18.0 (#611) @dependabot
• Update Doxia to 2.x stack (#603) @slawekjaranowski
• Bump org.codehaus.mojo:mojo-parent from 85 to 86 (#590) @dependabot
• Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (#594) @dependabot
• Bump commons-io:commons-io from 2.16.1 to 2.17.0 (#592) @dependabot
• Bump commons-logging:commons-logging from 1.3.3 to 1.3.4 (#584) @dependabot
• Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0 (#585) @dependabot
• Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.16.0 (#582) @dependabot
• Bump org.codehaus.mojo:mojo-parent from 84 to 85 (#583) @dependabot
• Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0 (#578) @dependabot
• Bump commons-logging:commons-logging from 1.3.2 to 1.3.3 (#577) @dependabot
• Bump org.apache.poi:poi-ooxml from 5.2.5 to 5.3.0 (#576) @dependabot
• Bump org.codehaus.mojo:mojo-parent from 80 to 84 (#573) @dependabot
• Bump org.freemarker:freemarker from 2.3.32 to 2.3.33 (#570) @dependabot
• Bump commons-logging:commons-logging from 1.3.1 to 1.3.2 (#565) @dependabot
• Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.1 (#566) @dependabot
• Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1 (#559) @dependabot
• Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#558) @dependabot
• Bump commons-io:commons-io from 2.15.1 to 2.16.0 (#556) @dependabot
• Bump commons-logging:commons-logging from 1.3.0 to 1.3.1 (#555) @dependabot
• Bump org.codehaus.mojo:mojo-parent from 78 to 80 (#548) @dependabot

👻 Maintenance

• Replace deprecated Component annotation (#613) @slawekjaranowski
• Use WireMock in integration test (#610) @slawekjaranowski
• Move to jUnit5 (#608) @vitalijr2
• Add Log4j2 to SLF4J Adapter (#605) @slawekjaranowski
• Drop Maven wrapper from project (#602) @slawekjaranowski
• Re-enable checkstyle plugin (#589) @slawekjaranowski
• Prepare for doxia 2.0 (#575) @slawekjaranowski
• Bump apache/maven-gh-actions-shared from 3 to 4 (#550) @dependabot

🔧 Build

• Build with Maven 4 (#574) @slawekjaranowski

🚀 New features and improvements

• Require Maven 3.6.3 as minimum (#543) @slawekjaranowski
• Get rid usage of MavenSession#lookup (#541) @slawekjaranowski
• Deploy snapshot version to oss.sonatype.org (#539) @slawekjaranowski
• Write Excel files with extensive License Information (inc. infos from the JARs) (#527) @Master-Code-Programmer

🐛 Bug Fixes

• update xsd to match generated xmls (#528) @amanica

📦 Dependency updates

• Bump org.codehaus.mojo:mojo-parent from 77 to 78 (#542) @dependabot
• Bump org.apache.poi:poi-ooxml from 5.2.4 to 5.2.5 (#537) @dependabot
• Bump commons-io:commons-io from 2.13.0 to 2.15.1 (#535) @dependabot
• Bump commons-logging:commons-logging from 1.2 to 1.3.0 (#532) @dependabot
• Bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0 (#530) @dependabot
• Bump commons-io:commons-io from 2.15.0 to 2.15.1 (#531) @dependabot
• Bump commons-io:commons-io from 2.14.0 to 2.15.0 (#526) @dependabot

👻 Maintenance

• Execute download-licenses-proxy test at the end (#545) @slawekjaranowski
• Added extended-info and spreadsheet-report author to the contributor list (#534) @Master-Code-Programmer

🔧 Build

• Use Shared ASF Action from Release Drafter (#544) @slawekjaranowski

🚀 New features and improvements

• #519 minor updates to reduce verbosity of standard execution (#520) @d-ryan-ashcraft
• #517: optionally support copyright values that only contain inception year rather than year range (#518) @d-ryan-ashcraft

🐛 Bug Fixes

• Fix #508 - Avoid NPE in AggregatorAddThirdPartyMojo (#512) @slawekjaranowski

📦 Dependency updates

• Downgrade plexus-xml to version 3.0.0 (#523) @slawekjaranowski
• Bump org.codehaus.mojo:mojo-parent from 76 to 77 (#516) @dependabot
• Bump commons-io:commons-io from 2.13.0 to 2.14.0 (#515) @dependabot
• Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0 (#514) @dependabot
• Bump plexus-xml from 4.0.1 to 4.0.2 (#510) @dependabot

👻 Maintenance

• Build improvements - one profile for ITs (#525) @slawekjaranowski
• Cleanups in FileUtil - direct use methods from NIO (#513) @slawekjaranowski

🚀 New features and improvements

• Switch components to JSR-330, Require JDK 1.8 (#501) @slawekjaranowski
• Log message about skip due to packaging in info level (#499) @slawekjaranowski

🐛 Bug Fixes

• Fix #358, #352 NPE on site generation caused by null returned by deprecated MavenProject.getDependencyArtifacts() (#373) @tomred-net
• Fix #413 Use 'GAV' for result keys in LicensedArtifactResolver (#414) @attilapuskas
• Fix #498 add-third-party should not override third-party file with the same content (#500) @slawekjaranowski
• Fix #351 License override does not work for third-party dependencies with multiple licenses (#374) @lama0206
• Fixed '[WARNING] There were 0 download errors - check the warnings above to not log warning unless download errors > 0 (#402) @blekinge

📦 Dependency updates

• Bump mojo-parent from 75 to 76 (#504) @dependabot
• Bump json from 20070829 to 20230227 in /src/it/add-third-party-missing-file (#460) @dependabot
• Bump plexus-xml from 4.0.0 to 4.0.1 (#496) @dependabot
• Bump commons-io from 2.12.0 to 2.13.0 (#493) @dependabot

👻 Maintenance

• Use project.version instead of pom.version in ITs (#507) @slawekjaranowski
• Use JDK 1.8 in ITs - allow build on JDK 20 (#506) @slawekjaranowski
• Enable spotless for automatic code formatting (#505) @slawekjaranowski
• Add LICENSE.txt file (#503) @slawekjaranowski
• Fix formatting in example-thirdparty document (#502) @slawekjaranowski

🚀 New features and improvements

• Fix #379 allow users to customize the copyright string format (#380) @davenice
• Update GPL licenses (#362) @camlloyd
• Recognize classpath protocol as external (#486) @slawekjaranowski

🐛 Bug Fixes

• fix #361 - sortArtifactByName: artifacts with the same name are lost (#363) @lrozenblyum
• Fix #354 Make artifact cache safe for concurrent access (#355) @Stephan202
• Fix cookie header warning (#472) @danHayworth

📦 Dependency updates

• Bump maven-reporting-impl from 3.0.0 to 3.2.0 (#452) @dependabot
• Bump maven-reporting-api from 3.0 to 3.1.1 (#456) @dependabot
• Bump plexus-utils from 3.5.1 to 4.0.0 (#481) @dependabot
• Bump mojo-parent from 74 to 75 (#488) @dependabot
• Bump plexus-container-default from 2.0.0 to 2.1.1 (#487) @dependabot
• Bump build-helper-maven-plugin from 1.10 to 3.4.0 (#483) @dependabot
• Bump slf4j-api from 1.7.26 to 1.7.36 (#485) @dependabot
• Bump doxia-site-renderer from 1.8.1 to 1.11.1 (#482) @dependabot
• Bump httpclient from 4.5.13 to 4.5.14 (#478) @dependabot
• Bump commons-io from 2.6 to 2.12.0 (#477) @dependabot
• Bump doxiaVersion from 1.8 to 1.12.0 (#475) @dependabot
• Bump commons-lang3 from 3.7 to 3.12.0 (#467) @dependabot
• Bump httpcore from 4.4.8 to 4.4.16 (#473) @dependabot
• Bump plexus-utils from 3.1.0 to 3.5.1 (#469) @dependabot
• Bump plexusComponentVersion from 1.7.1 to 2.1.1 (#453) @dependabot

👻 Maintenance

• Update plugins in ITs and cleanups (#492) @slawekjaranowski
• Use license plugin version from parent, update THIRD-PARTY.properties (#491) @slawekjaranowski
• fix copy&paste issue in property description (#376) @CCFenner
• Get rid of plexus-container-default from dependencies (#490) @slawekjaranowski
• Get rid of localRepository parameter (#489) @slawekjaranowski

🔧 Build

• Add release-drafter (#484) @slawekjaranowski

What's Changed

• Fix #228 Add .gitattributes by @kingle in #344
• Fix broken OpenJDK installation on TravisCI by @ppalaga in #349
• Fix #139 - "Can't find license-maven-plugin" by @AndyGee in #348
• Update FreeMarker version to 2.3.31 by @kyra-ohare in #406
• Bump commons-collections from 3.2.1 to 3.2.2 by @dependabot in #377
• Bump junit from 4.8.1 to 4.13.1 in /src/it/aggregate-add-third-party-multimodule-filters/child2 by @dependabot in #394
• Bump junit from 4.8.2 to 4.13.1 in /src/it/MLICENSE-24 by @dependabot in #392
• Bump junit from 4.12 to 4.13.1 in /src/it/ISSUE-40 by @dependabot in #391
• Bump junit from 4.12 to 4.13.1 in /src/it/download-licenses-include-exclude-types by @dependabot in #388
• Bump commons-beanutils from 1.9.3 to 1.9.4 in /src/it/download-licenses-file-names by @dependabot in #422
• Bump junit from 4.8.1 to 4.13.1 in /src/it/aggregate-third-party-report/child2 by @dependabot in #421
• Bump junit from 4.8.1 to 4.13.1 in /src/it/aggregate-add-third-party-exclude-transitive-deps/child2 by @dependabot in #395
• Bump junit from 4.8.1 to 4.13.1 in /src/it/aggregate-add-third-party-simple/child2 by @dependabot in #390
• Bump junit from 4.8.2 to 4.13.1 in /src/it/add-third-party-excluded-included by @dependabot in #389
• Bump junit from 4.12 to 4.13.1 in /src/it/download-licenses-basic by @dependabot in #393
• Bump httpclient from 4.5.4 to 4.5.13 by @dependabot in #420
• Fix #345 Only log override warning if licenseMerges provided. by @tpage-alfresco in #425
• Fix #423 Don't log warning for unused overrides in remote override file. by @tpage-alfresco in #424
• Fix build failure by configuring and upgrading editorconfig by @VonUniGE in #435
• Fix IT test add-third-party-excluded-included by @VonUniGE in #436
• Fix IT test download-licenses-file-names by @VonUniGE in #437
• Fix IT test download-licenses-basic by @VonUniGE in #438
• Add GH verify action by @slawekjaranowski in #439
• Add dependabot and release drafter file by @olamy in #450
• Fix two IT tests aggregate-add-third-party-* by @VonUniGE in #441
• Fix IT - ISSUE-324, use newer m-compiler-p by @slawekjaranowski in #459
• Fix IT - download-licenses-file-names-bad-sha1-force by @slawekjaranowski in #464
• Bump parent to 74 and cleanups by @slawekjaranowski in #465
• Bump jettison from 1.1 to 1.5.4 in /src/it/add-third-party-missing-file by @dependabot in #463
• Bump freemarker from 2.3.31 to 2.3.32 by @dependabot in #455
• Fixes issue #312: Don't overwrite existing license file by @Vlatombe in #360

New Contributors

• @kingle made their first contribution in #344
• @AndyGee made their first contribution in #348
• @kyra-ohare made their first contribution in #406
• @dependabot made their first contribution in #377
• @tpage-alfresco made their first contribution in #425
• @VonUniGE made their first contribution in #435
• @slawekjaranowski made their first contribution in #439
• @olamy made their first contribution in #450
• @Vlatombe made their first contribution in #360

Full Changelog: license-maven-plugin-2.0.0...2.0.1

What's Changed

• Fix #324 Remove unnecessary manual dependency resolution by @srdo in #325
• Fix #328 Publish integration test build directory when Appveyor build… by @srdo in #329
• Fix #326 Migrate to using Maven 3 APIs and Aether for dependency resolution by @srdo in #327
• Fix #331 overrideUrl doesn't work by @digulla in #333
• Fix #337 Use slf4j over old logging APIs in Maven by @ppalaga in #342

New Contributors

• @digulla made their first contribution in #333

Full Changelog: license-maven-plugin-1.20...license-maven-plugin-2.0.0