NextStack
EN 中

maven 3.10.0

minor PublishedOct 1, 2026 Sourceapache/maven

maven maven-3.10.0

🚀 New features and improvements

  • Maven 3.10.x should use Maven 3.1 validation in strict mode (#1542) @gnodet
  • Do not depend on maven-resolver-supplier-mvn3 (#13266) @cstamas
  • [MNG-6797] - Remember if Maven model problems were encountered. (#298) @wilx
  • feat: add relativePath validation (#12742) @cstamas
  • Add validation for Plexus-based plugin dependency injection (#12651) @slawekjaranowski
  • Introduce validation control (#12549) @cstamas
  • Update to Resolver 2.0.21 (#12504) @cstamas
  • [MNG-5913] - Allow defining aliases for existing server configurations in settings.xml (#12475) @slawekjaranowski

🐛 Bug Fixes

  • Issue #13265: let a settings server declare the repository origins its credentials may be used with (#13275) @slawekjaranowski
  • Backport #13040: treat reactor BOM imports as ProjectSorter edges so -am includes them (#13263) @gnodet
  • [MNG-8174] - Fix NPE when a property references itself in a plugin configuration (backport #12932) (#12936) @elharo
  • Fix #13200: publish a complete set from MavenProject.getArtifacts (#13204) @gnodet
  • Fixes #13135: ensure completeness of the reactor summary, privilege f… (#13173) @rmannibucau
  • [3.10.x] Fix #13084: sandbox profile activation context for external model builds (#13114) @gnodet
  • Fix #13100: honor repositories from legitimately-active external model profiles (#13116) @gnodet
  • Add support for MAVEN_PROJECTBASEDIR substitution in jvm.config (backport of MNG-8598 to 3.10.x) (#13115) @gnodet
  • Scope server credentials and validate legacy relocation coordinates (#12954) @slachiewicz
  • Honour configured policy and validate inputs on the legacy compat paths (#12978) @gnodet
  • Add unit test for #12600 null-guard in forked executions (#12923) @gnodet
  • Fix: make ProjectIndex thread-safe for parallel builds (backport #12832) (#12927) @gnodet
  • Fail on misconfigured plugin-requested toolchains (#12616) @wilx
  • Resolve classified POM artifacts from the reactor in Maven 3.x (#12659) @wilx
  • [3.10.x] Convert paths for MSYS2 and jvm.config placeholders in bin/mvn (#12567) @gnodet
  • Preserve dependency scope in plugin artifacts - fix #12497 (#12503) @slawekjaranowski

📝 Documentation updates

  • docs: document plugin.xml V4 vs V3 (#13261) @gnodet
  • [maven-3.10.x] Port the site documentation from APT to Markdown (#12712) @slachiewicz
  • improve doc about deprecating plugin descriptor’s requirement (#12555) @hboutemy
  • Drop mention of Plexus XML (#12482) @cstamas

👻 Maintenance

  • [3.10.x] maintenance: Align use of profiles (#13274) @cstamas
  • Remove version from rat directory deployment (#13046) @slawekjaranowski
  • Update NOTICE file in distribution packages (#13044) @slawekjaranowski
  • Restrict what a repository-resolved model contributes to the build (#12953) @slachiewicz
  • Validate coordinates and repository precedence during artifact resolution (#12952) @slachiewicz
  • [MNG-8129] - Clarify relativePath validation comment (#12966) @gnodet
  • [12811] Keep plexus-cipher at 2.0: POM note (#12879) @slachiewicz
  • [3.10.x] Use try-with-resources (#12845) @slachiewicz
  • Migrate the embedder-test-project fixture to JUnit 5 (#12717) @slachiewicz
  • [maven-3.10.x] Port the site documentation from APT to Markdown (#12712) @slachiewicz
  • Migrate legacy plugin Javadoc annotations in Maven Embedder tests (#12708) @wilx
  • Replace custom GraphLogger with DependencyGraphDumper in dependency resolution (#12639) @slawekjaranowski
  • Fix UT: do not use checkout directly (#12483) @cstamas

🔧 Build

  • Replace nicoulaj checksum plugin with maveniverse checksum plugin (#13053) @slawekjaranowski
  • 3.10.x Build by JDK 25, limit JDK to min and max LTS in build (#12848) @slawekjaranowski
  • Update Maven version to 3.10.0-rc-1 in GH configuration (#12847) @slawekjaranowski

📦 Dependency updates

Source apache/maven · maven-3.10.0 · 2026-10-01 · upstream release

Mirrored verbatim for indexing. All rights belong to the upstream project.

Release notes are published by the upstream project and mirrored here for indexing. All rights belong to their authors.