Bump org.apache.maven.shared:maven-shared-jar from 3.2.0 to 3.2.1

[dependabot]

Bumps org.apache.maven.shared:maven-shared-jar from 3.2.0 to 3.2.1.

Release notes

Sourced from org.apache.maven.shared:maven-shared-jar's releases.

3.2.1

Maven Shared JAR 3.2.1 is a bug-fix release. The baseline is unchanged: Java 8 and Maven 3.6.3.

It fixes the file and bytecode hashes and the import analysis in the JAR analysers, and updates the runtime dependencies:

• commons-codec 1.17.1 → 1.22.1
• bcel 6.10.0 → 6.13.0
• commons-collections4 4.4 → 4.6.0
• commons-lang3 (runtime scope) 3.17.0 → 3.20.0

Behaviour changes:

• The bytecode hash now covers every class entry, not only the last one. For any JAR with more than one class, bytecodeHash differs from the value 3.2.0 computed.
• Imports discovered by ImportVisitor now include inner classes.
• JarVersionedRuntimes.getJarClasses returns null for a version that is not present, instead of throwing NullPointerException.

🐛 Bug fixes

• JarBytecodeHashAnalyzer: accumulate the SHA-1 digest across all class entries; the hash covered only the last entry (#133, #147) @​elharo
• JarFileHashAnalyzer: return the file hash that was just computed; the first call returned null (#165) @​kratos0718
• ImportVisitor: keep inner-class references ($) from the UTF-8 constant pool (#140, #149) @​elharo
• JarVersionedRuntimes.getJarClasses: return null for a missing version instead of throwing NullPointerException (#135, #157) @​elharo
• JarAnalyzer constructor: let the original ZipException propagate instead of re-wrapping it (#144, #148) @​elharo

📝 Documentation

• Port the site from APT to Markdown (#151) and migrate the site descriptor to the v2 model (#168) @​slachiewicz
• Improve the component name and introduction (#110) @​hboutemy
• Use HTTPS links (#153) @​elharo

👻 Maintenance

• Add regression tests for underscores in class names (#136, #155) and multi-digit versions in file names (#134, #156); neither reported defect reproduced @​elharo
• Mark fields final (#152) @​elharo
• Stop using an undeclared library in the tests (#51) @​elharo
• Clean up the tests (#123) @​slachiewicz
• Add the Apache 2.0 LICENSE file (#108) @​Ndacyayisenga-droid

🔧 Build and infrastructure

• Enable GitHub Issues (#56) @​Bukama
• Enable branch protection rules (#112) @​sebtiem
• Let Dependabot update GitHub Actions (#159) @​slachiewicz
• Add a tag template to the release-drafter configuration (#170) @​slawekjaranowski

📦 Dependency updates

Runtime:

• commons-codec 1.17.1 → 1.22.1 (#53, #109, #120, #128, #130, #146) @​dependabot

... (truncated)

Commits

• 36bc983 [maven-release-plugin] prepare release maven-shared-jar-3.2.1
• 535b734 Return the file hash that was just computed instead of null (#165)
• 22b63b2 Let ZipException bubble up from JarAnalyzer constructor (#148)
• 83623d5 Fix #136: allow underscores in class names matched by CLASS_FILTER (#155)
• 2c8592e Fix #134: add regression test for multi-digit version extraction (#156)
• 2a52cee Fix #135: avoid NPE in JarVersionedRuntimes.getJarClasses for missing version...
• 295440a Add tag-template to release-drafter.yml
• e175fb6 Bump org.apache.bcel:bcel from 6.12.0 to 6.13.0
• 4b4d4cb Migrate the site descriptor to the v2 model
• 8465d78 Bump org.codehaus.plexus:plexus-testing from 2.1.0 to 2.2.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)