Bump maven-plugin-api from 3.8.7 to 3.9.3

[dependabot]

Bumps maven-plugin-api from 3.8.7 to 3.9.3.

Release notes

Sourced from maven-plugin-api's releases.

3.9.2

Release Notes - Maven - Version 3.9.2

Bug

• [MNG-7750] - Interpolated properties in originalModel in an active profile.
• [MNG-7759] - java.lang.NullPointerException at org.apache.maven.repository.internal.DefaultModelCache.newInstance (DefaultModelCache.java:37)

Improvement

• [MNG-7712] - Core should issue a warning if plugin depends on maven-compat
• [MNG-7741] - Add more information when using -Dmaven.repo.local.recordReverseTree=true
• [MNG-7754] - Improvement and extension of plugin validation
• [MNG-7767] - Tone down plugin validation report
• [MNG-7778] - Maven should print suppressed exceptions when a mojo fails

Task

• [MNG-7749] - Upgrade animal-sniffer from 1.21 to 1.23
• [MNG-7774] - Maven config and command line interpolation

Dependency upgrade

• [MNG-7670] - Upgrade misc dependencies
• [MNG-7753] - Upgrade to Maven Resolver 1.9.8
• [MNG-7769] - Upgrade to Maven Resolver 1.9.10

3.9.1

Release Notes - Maven - Version 3.9.1

Overview About the Changes

Regression fixes from Maven 3.9.0. General performance and other fixes.

Potentially Breaking Core Changes (if migrating from 3.8.x)

• The Maven Resolver transport has changed from Wagon to “native HTTP”, see Resolver Transport guide.

• Maven 2.x was auto-injecting an ancient version of plexus-utils dependency into the plugin classpath, and Maven 3.x continued doing this to preserve backward compatibility. Starting with Maven 3.9, it does not happen anymore. This change may lead to plugin breakage. The fix for affected plugin maintainers is to explicitly declare a dependency on plexus-utils. The workaround for affected plugin users is to add this dependency to plugin dependencies until issue is fixed by the affected plugin maintainer. See MNG-6965.

• Mojos are prevented to boostrap new instance of RepositorySystem (for example by using deprecated ServiceLocator), they should reuse RepositorySystem instance provided by Maven instead. See MNG-7471.

• Each line in .mvn/maven.config is now interpreted as a single argument. That is, if the file contains multiple arguments, these must now be placed on separate lines, see MNG-7684.

... (truncated)

Commits

• 2112292 [maven-release-plugin] prepare release maven-3.9.3
• 9581129 [MNG-7823] Improve plugin validation level parsing (#1182)
• b050257 [MNG-7818] Removed exclusion of hamcrest from JUnit 4 (#1178)
• 917e956 [MNG-7800] Update to resolver 1.9.13 (#1180)
• ec5e1ce update logging documentation
• bd71dd7 [MNG-7800] Update resolver to 1.9.12 (#1176)
• 9801697 [MNG-7816] Update parent to 40, align maven requirements with those from plug...
• adc0d3b [MNG-7800] Update to Resolver 1.9.11 (#1140)
• e625606 [MNG-7811] Plugins verification - reporting improvements
• 804b845 [3.9.x] Update some ancient build plugins (#1165)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.