Mock Repository Manager 2.1.0 raises the minimum Maven version to 3.9.0. The mock repository, the Jetty servlet module and the JUnit Jupiter extension behave as in 2.0.0. The rest of the release is build, test and documentation work. Java 17 or later is still required. Java 8 users can stay on the 1.7.x line.

✨ Highlights

• Maven 3.9.0 or later is required (#326).

🚨 Removed

• Require Maven 3.9.0 (#326) @slachiewicz

📝 Documentation updates

• Add AGENTS.md (#331) @slachiewicz

👻 Maintenance

• Use the managed surefire version in the custom-base-path IT (#334) @slachiewicz
• Keep Dependabot on SLF4J 1.7.x (#333) @slachiewicz
• Drop Hamcrest from custom-base-path IT fixture (#332) @slachiewicz
• Keep Dependabot on Maven 3.9.x (#328) @slachiewicz
• Keep plexus-xml on 3.x in Dependabot (#317) @slachiewicz

🔧 Build

• Use the runners' cached Temurin JDKs in CI (#330) @slachiewicz
• Assign merged pull requests to the release milestone (#327) @slachiewicz
• Run the ITs in parallel with C1 only and the serial GC (#325) @slachiewicz
• Check dependencies monthly and group the updates (#324) @slachiewicz
• Run fewer JDKs on macOS and Windows (#323) @slachiewicz

📦 Dependency updates

• Bump the maven group with 3 updates (#335) @dependabot[bot]
• Bump the maven group with 2 updates (#329) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 (#321) @dependabot[bot]
• Bump org.mockito:mockito-bom from 5.23.0 to 5.24.0 (#320) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-io from 3.7.0 to 3.8.0 (#319) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-xml from 3.0.1 to 3.1.0 (#318) @dependabot[bot]
• Keep plexus-xml on 3.x in Dependabot (#317) @slachiewicz

Thanks to @slachiewicz.

Full changelog

Mock Repository Manager 1.8.0 is a release of the Java 8 line. It brings two features and a fix over from 2.x, and requires Maven 3.9.0 or later. Projects on Java 17 or later should use 2.1.0.

✨ Highlights

• Authentication. The mock repository server can require users, set through the new users parameter, so builds can test authenticated deploys and downloads (#300 by @rfscholte, backported in #337).
• File name transformers. The mock repository can rename files as it serves them, driven by a .mrm-transform.properties file next to the content (#290 by @rfscholte, backported in #337).
• Unknown artifact types keep their extension. An artifact whose type was not registered got a null extension and could not be resolved; it now keeps its type as the extension (#299 by @rfscholte, backported in #336).
• Maven 3.9.0 or later is required (#326). Builds on older Maven versions must stay on 1.7.1.

The 2.x content transformation (javaToClass, #291) and the JUnit Jupiter extension (#296) are not part of this line: they need Java 17 or later and the 2.0.0 module layout.

Full changelog: mrm-1.7.1...1.8.0

What's Changed in 2.0.0

MRM 2.0.0 is a major release with significant updates:

• Requires Java 17+: Java 8 and 11 support has been dropped; Java 17 language features are now used throughout.
• Requires Maven 3.9.6+ minimum build version.
• Decoupled API: Maven Core specific code (MavenSession) was removed from mrm-api in favor of Maven Resolver APIs.
• Module Restructuring: Jetty server code was moved out of mrm-maven-plugin into a dedicated mrm-servlet-jetty module.
• New Features: Added JUnit Jupiter Extension (mrm-junit-jupiter), HTTP authentication support (#23), filename transformers, and content transformations (such as javaToClass).

💥 Breaking changes

• Remove Maven (Core) specific code from the mrm-api (#295) @rfscholte
• Move Jetty code to separate module (#287) @rfscholte
• Apply several Java 17 features (#301) @rfscholte

🚀 New features and improvements

• Support authentication (#23) (#300) @rfscholte
• Introduce Jupiter Extension (#296) @rfscholte
• Support contentTransformation with first implementation: javaToClass (#291) @rfscholte
• Introduce support for FileNameTransformers (#290) @rfscholte

🐛 Bug Fixes

• Support unknown types (#299) @rfscholte

👻 Maintenance

• Build the repository system from the supplier, not the service locator (#308) @slachiewicz
• Replace JUnit Assertions with AssertJ Assertions (#302) @rfscholte

🔧 Build

• adjust github action to jdk requirements (#286) @rfscholte

📦 Dependency updates

📝 Documentation updates

• Document repositories parameter with all types and examples (#251) @copilot-swe-agent[bot]

👻 Maintenance

• JUnit 5 best practices (#262) @slachiewicz

📦 Dependency updates

• Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0 (#271) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-testing from 2.0.2 to 2.1.0 (#270) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 94 to 95 (#269) @dependabot[bot]
• Bump mavenVersion from 3.9.11 to 3.9.12 (#268) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-testing from 2.0.1 to 2.0.2 (#267) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 (#266) @dependabot[bot]
• Bump org.apache.maven.archetype:archetype-common from 3.4.0 to 3.4.1 (#254) @dependabot[bot]
• Bump org.apache.maven.archetype:archetype-catalog from 3.4.0 to 3.4.1 (#255) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4 (#264) @dependabot[bot]
• Bump commons-io:commons-io from 2.20.0 to 2.21.0 (#265) @dependabot[bot]
• Bump commons-codec:commons-codec from 1.19.0 to 1.20.0 (#263) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-testing from 2.0.0 to 2.0.1 (#261) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-testing from 1.7.0 to 2.0.0 (#259) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-testing from 1.6.0 to 1.7.0 (#258) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.2 to 4.10.3 (#256) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 93 to 94 (#253) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.10.2 (#250) @dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 (#249) @dependabot[bot]

🚀 New features and improvements

• Add x-checksum-sha1 http header for mocked repositories (#247) @slawekjaranowski
• Add support for timetstamped snapshots in mock repository (#238) @slawekjaranowski
• Allow use any plexus archiver for directory content in mock repository (#237) @slawekjaranowski

👻 Maintenance

• Remove unused class FileSystemArtifactStore (#246) @slawekjaranowski
• Exclude all groovy dependencies from archetype-common (#244) @slawekjaranowski
• Introduce dependency:analyze-* on verify (#236) @slawekjaranowski
• Migrate from commons-lang to commons-lang3 (#235) @slawekjaranowski
• Use release drafter action from Maven shared (#233) @slawekjaranowski
• Refactor classes used as repository configurations (#231) @slawekjaranowski

🔧 Build

• Build with Maven 4, with default matrix (#234) @slawekjaranowski

📦 Dependency updates

• Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1 (#245) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-testing from 1.5.0 to 1.6.0 (#243) @dependabot[bot]
• Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0 (#240) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 92 to 93 (#239) @dependabot[bot]
• Bump Maven in dependency to 3.9.11, plugin still require 3.6.3 in runtime (#232) @slawekjaranowski
• Bump jetty.version from 9.4.57.v20241219 to 9.4.58.v20250814 (#230) @dependabot[bot]
• Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#229) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 91 to 92 (#228) @dependabot[bot]
• Bump org.apache.maven.archetype:archetype-common from 3.3.1 to 3.4.0 (#223) @dependabot[bot]
• Bump org.apache.maven.archetype:archetype-catalog from 3.3.1 to 3.4.0 (#222) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 87 to 91 (#227) @dependabot[bot]
• Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#221) @dependabot[bot]
• Bump jetty.version from 9.4.56.v20240826 to 9.4.57.v20241219 (#219) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 86 to 87 (#220) @dependabot[bot]
• Bump commons-io:commons-io from 2.17.0 to 2.18.0 (#218) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 85 to 86 (#209) @dependabot[bot]
• Bump org.apache.maven.archetype:archetype-common from 3.3.0 to 3.3.1 (#216) @dependabot[bot]
• Bump org.apache.maven.archetype:archetype-catalog from 3.3.0 to 3.3.1 (#217) @dependabot[bot]
• Upgrade org.apache.maven.archetype to 3.3.0 (#215) @slachiewicz
• Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (#212) @dependabot[bot]
• Bump commons-io:commons-io from 2.16.1 to 2.17.0 (#210) @dependabot[bot]
• Bump jetty.version from 9.4.55.v20240627 to 9.4.56.v20240826 (#208) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 84 to 85 (#207) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 78 to 84 (#204) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.9.2 to 4.10.0 (#206) @dependabot[bot]
• Bump jetty.version from 9.4.54.v20240208 to 9.4.55.v20240627 (#205) @dependabot[bot]
• Bump org.apache.maven.shared:maven-common-artifact-filters from 3.3.2 to 3.4.0 (#203) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.1 (#202) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1 (#199) @dependabot[bot]
• Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#198) @dependabot[bot]
• Bump commons-io:commons-io from 2.15.1 to 2.16.0 (#197) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.9.1 to 4.9.2 (#196) @dependabot[bot]
• Bump apache/maven-gh-actions-shared from 3 to 4 (#195) @dependabot[bot]
• Bump jetty.version from 9.4.53.v20231009 to 9.4.54.v20240208 (#192) @dependabot[bot]
• Bump release-drafter/release-drafter from 5 to 6 (#191) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 77 to 78 (#190) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.9.0 to 4.9.1 (#189) @dependabot[bot]
• Bump commons-io:commons-io from 2.15.0 to 2.15.1 (#188) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.0 (#187) @dependabot[bot]

💥 Breaking changes

• Remove support for listing directory as html page and cleanups (#176) @slawekjaranowski
• Remove of downloading predefined settings.xml by run mojo (#174) @slawekjaranowski

🚀 New features and improvements

• Support SNAPSHOT versions by localRepo (#185) @slawekjaranowski
• Require Maven 3.6.3+ (#184) @slachiewicz
• Get rid of usage RepositoryMetadataManager (#182) @slawekjaranowski
• Remove ${localRepository} and other from plugin parameters (#173) @slawekjaranowski
• Get rid usage of deprecated ArtifactFactory (#171) @slawekjaranowski
• Switch to JUnit 5 (#170) @slawekjaranowski
• Resolves #99: Removing dependencies on maven-artifact-manager from Maven 2 (#157) @ajarmoniuk
• #99: First stage of maven 3 migration (#144) @ajarmoniuk

🐛 Bug Fixes

• Workaround for #179 - skip checksums for deployed metadata (#180) @slawekjaranowski

📦 Dependency updates

• Bump commons-io from 2.11.0 to 2.13.0 @dependabot
• Bump commons-io:commons-io from 2.13.0 to 2.15.0 @dependabot
• Bump jetty.version from 9.4.50.v20221201 to 9.4.53.v20231009 @dependabot
• Bump mockito-core from 4.10.0 to 4.11.0 @dependabot
• Bump parent from 72 to 76 (#168) @slawekjaranowski
• Bump org.codehaus.mojo:mojo-parent from 76 to 77 @dependabot
• Bump org.codehaus.plexus:plexus-archiver from 4.7.1 to 4.8.0 @dependabot
• Bump plexus-archiver from 4.6.0 to 4.7.1 @dependabot
• Bump plexus-utils from 3.5.0 to 3.5.1 @dependabot
• Bump plexus-utils from 3.5.1 to 4.0.0 and add plexus-xml 3.0.0 (#163) @dependabot
• Require Maven 3.6.3+ (#184) @slachiewicz

📝 Documentation updates

• Migrate documentation to Markdown (#150) @ajarmoniuk

👻 Maintenance

• Dependencies cleanups (#177) @slawekjaranowski
• Add metadata unit test for Mock repo (#172) @slawekjaranowski
• Use mavenVersion for maven-repository-metadata (#169) @slawekjaranowski

🚀 New features and improvements

• Disable Jetty debug in Maven verbose mode (#132) @slawekjaranowski
• Include Last-Modified header in the response (#117) @mscottford

🐛 Bug Fixes

• Fix missing release version in maven-metadata.xml (#129) @slawekjaranowski

📦 Dependency updates

• Bump mockito-core from 4.9.0 to 4.10.0 (#139) @dependabot
• Bump parent from 70 to 72 (#137) @slawekjaranowski
• Bump jetty.version from 9.4.49.v20220914 to 9.4.50.v20221201 (#136) @dependabot
• Bump plexus-archiver from 4.5.0 to 4.6.0 (#127) @dependabot
• Bump mockito-core from 4.8.1 to 4.9.0 (#128) @dependabot
• Bump jetty.version from 9.4.48.v20220622 to 9.4.49.v20220914 (#122) @dependabot
• Bump maven-common-artifact-filters from 3.3.1 to 3.3.2 (#124) @dependabot
• Bump mockito-core from 4.8.0 to 4.8.1 (#125) @dependabot
• Bump plexus-utils from 3.4.2 to 3.5.0 (#126) @dependabot
• Bump plexus-archiver from 4.4.0 to 4.5.0 (#121) @dependabot
• Bump mockito-core from 4.7.0 to 4.8.0 (#120) @dependabot
• Bump release-drafter/release-drafter from 5.20.0 to 5.20.1 (#119) @dependabot
• Bump mojo-parent from 69 to 70 (#118) @dependabot
• Bump mockito-core from 4.6.1 to 4.7.0 (#116) @dependabot
• Bump maven-common-artifact-filters from 3.3.0 to 3.3.1 (#115) @dependabot
• Bump mojo-parent from 68 to 69 (#114) @dependabot

👻 Maintenance

• Remove unused classes DiskFile* MemoryFile* (#140) @slawekjaranowski
• Enable Spotless plugin - automatic code formatting (#138) @slawekjaranowski
• Remove Web App module (#135) @slawekjaranowski
• Use Maven core dependencies as provided (#133) @slawekjaranowski

🔧 Build

• Enable checkstyle verification on build (#134) @slawekjaranowski
• Build improvements (#131) @slawekjaranowski
• Bump shared GitHub Action to v3 (#130) @slawekjaranowski

🐛 Bug Fixes

• Generate correct content of empty jars (#112) @slawekjaranowski

📦 Dependency updates

• Bump plexus-archiver from 4.3.0 to 4.4.0 (#111) @dependabot
• Bump jetty.version from 9.4.46.v20220331 to 9.4.48.v20220622 (#110) @dependabot

👻 Maintenance

• Site improvement (#113) @slawekjaranowski

🚀 New features and improvements

• basePath configuration parameter (#94) @ppalaga

🐛 Bug Fixes

• Fix unclosed opened stream (#105) @slawekjaranowski

📦 Dependency updates

• Bump mojo-parent from 67 to 68 (#106) @dependabot
• Bump maven-enforcer-plugin from 3.0.0 to 3.1.0 (#102) @dependabot
• Bump plexus-archiver from 4.2.7 to 4.3.0 (#101) @dependabot
• Bump maven-common-artifact-filters from 3.2.0 to 3.3.0 (#104) @dependabot
• Bump mockito-core from 4.5.1 to 4.6.1 (#98) @dependabot
• Bump plexus-utils from 3.4.1 to 3.4.2 (#93) @dependabot
• Bump release-drafter/release-drafter from 5.19.0 to 5.20.0 (#92) @dependabot
• Bump mockito-core from 4.5.0 to 4.5.1 (#89) @dependabot
• Bump mockito-core from 4.4.0 to 4.5.0 (#88) @dependabot
• Update Jetty to 9.4.46.v20220331 (#72) @jorsol
• Bump mojo-parent from 65 to 67 (#87) @dependabot
• Bump actions/setup-java from 2.5.0 to 3 (#80) @dependabot
• Bump actions/checkout from 2.4.0 to 3 (#81) @dependabot
• Bump release-drafter/release-drafter from 5.17.6 to 5.19.0 (#82) @dependabot
• Bump mockito-core from 4.3.1 to 4.4.0 (#83) @dependabot
• Bump mockito-core from 4.2.0 to 4.3.1 (#75) @dependabot
• Bump release-drafter/release-drafter from 5.15.0 to 5.17.6 (#73) @dependabot
• Bump plexus-archiver from 4.2.6 to 4.2.7 (#69) @dependabot
• Bump actions/setup-java from 2.4.0 to 2.5.0 (#67) @dependabot
• Bump mockito-core from 4.1.0 to 4.2.0 (#66) @dependabot
• Bump actions/setup-java from 2.3.1 to 2.4.0 (#65) @dependabot

📝 Documentation updates

• Refresh site descriptors, fix broken links (#100) @slawekjaranowski
• Extends example for maven-invoker-plugin (#96) @slawekjaranowski

👻 Maintenance

• Cleanup build (#107) @slawekjaranowski

🔧 Build

• use gh action shared from ASF (#90) @olamy

• making timestamp deserialization consistent (#18) @or-shachar

🚀 New features and improvements

• Upgrade to Jetty 9.4.43.v20210629 (#35) @olamy
• java 1.8 mandatory amd some codebase update (#33) @olamy
• switch to github actions, add dependabot and use release drafter (#26) @olamy

📦 Dependency updates

• Bump mockito-core from 3.12.4 to 4.1.0 (#62) @dependabot
• Bump mojo-parent from 63 to 65 (#63) @dependabot
• Bump plexus-archiver from 4.2.5 to 4.2.6 (#60) @dependabot
• Bump actions/checkout from 2.3.5 to 2.4.0 (#59) @dependabot
• Bump actions/checkout from 2.3.4 to 2.3.5 (#58) @dependabot
• Bump actions/setup-java from 2.3.0 to 2.3.1 (#54) @dependabot
• Bump maven-war-plugin from 3.3.1 to 3.3.2 (#53) @dependabot
• Bump plexus-utils from 3.4.0 to 3.4.1 (#52) @dependabot
• Bump mockito-core from 3.12.3 to 3.12.4 (#51) @dependabot
• Bump mockito-core from 3.12.1 to 3.12.3 (#50) @dependabot
• Bump actions/setup-java from 2.2.0 to 2.3.0 (#49) @dependabot
• Bump mockito-core from 3.11.2 to 3.12.1 (#48) @dependabot
• Bump commons-io from 2.7 to 2.11.0 (#46) @dependabot
• Bump mockito-core from 1.9.0 to 3.11.2 (#27) @dependabot
• Bump plexus-archiver from 3.4 to 4.2.5 (#36) @dependabot
• Bump junit from 4.13.1 to 4.13.2 (#42) @dependabot
• Bump maven-enforcer-plugin from 3.0.0-M1 to 3.0.0 (#41) @dependabot
• Bump maven-common-artifact-filters from 1.4 to 3.2.0 (#37) @dependabot
• Bump maven-war-plugin from 3.2.1 to 3.3.1 (#38) @dependabot
• Bump commons-io from 2.0.1 to 2.11.0 (#32) @dependabot
• Bump actions/setup-java from 2.1.0 to 2.2.0 (#31) @dependabot
• Bump jetty-maven-plugin from 8.0.1.v20110908 to 8.1.16.v20140903 (#29) @dependabot
• Bump mojo-parent from 50 to 63 (#30) @dependabot
• Bump junit from 4.10 to 4.13.1 (#24) @dependabot