build(deps): bump io.github.ascopes:protobuf-maven-plugin from 3.8.2 to 3.10.0

[dependabot]

Bumps io.github.ascopes:protobuf-maven-plugin from 3.8.2 to 3.10.0.

Release notes

Sourced from io.github.ascopes:protobuf-maven-plugin's releases.

v3.10.0

New features

• URL parsing has been reimplemented to work with Apache Commons Compress. This allows users to extract plugins implicitly from tarballls and other archive types that are listed in the documentation. This includes:
  • jar:https://somewebsite.lan/archive.jar!/path/to/exe
  • zip:file://some/local/path/archive.zip!/path/to/exe
  • ear:https://somewebsite.lan/archive.ear!/path/to/exe
  • war:https://somewebsite.lan/archive.war!/path/to/exe
  • kar:https://somewebsite.lan/archive.kar!/path/to/exe
  • tar:https://somewebsite.lan/archive.tar!/path/to/exe
  • tar:gz:https://somewebsite.lan/archive.tgz!/path/to/exe
  • tar:bz2:https://somewebsite.lan/archive.tar.bz2!/path/to/exe
  • Further support for LZMA, CPIO archives, 7z archives, XZ, Z, etc is possible, please raise an issue to discuss.
• Deeply nested URL protocols are now valid. If you need to extract a tarball from a zip and then extract a file from that tarball, this should work as expected.

What's Changed

• Build on Java 25 in CI by @​ascopes in ascopes/protobuf-maven-plugin#805
• Include GH contributing guide and security notes in generated site by @​ascopes in ascopes/protobuf-maven-plugin#807
• Use v5 codecov action by @​ascopes in ascopes/protobuf-maven-plugin#806
• Bump com.google.api.grpc:proto-google-common-protos from 2.61.1 to 2.61.2 in /protobuf-maven-plugin/src/it/setup by @​dependabot[bot] in ascopes/protobuf-maven-plugin#811
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0 by @​dependabot[bot] in ascopes/protobuf-maven-plugin#809
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1 by @​dependabot[bot] in ascopes/protobuf-maven-plugin#808
• Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 by @​dependabot[bot] in ascopes/protobuf-maven-plugin#810
• GH-804: Document usage of ZIP/JAR archives for sourceDirectories by @​ascopes in ascopes/protobuf-maven-plugin#812
• GH-802: Reimplement URL handling by decorating input streams with commons-compress by @​ascopes in ascopes/protobuf-maven-plugin#803
• Bump org.sonatype.central:central-publishing-maven-plugin from 0.8.0 to 0.9.0 by @​dependabot[bot] in ascopes/protobuf-maven-plugin#813
• Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 by @​dependabot[bot] in ascopes/protobuf-maven-plugin#814
• Bump org.immutables:bom from 2.11.3 to 2.11.4 by @​dependabot[bot] in ascopes/protobuf-maven-plugin#815

Full Changelog: ascopes/protobuf-maven-plugin@v3.9.1...v3.10.0

v3.9.1

What's Changed

• Update ProtoSourceResolver.java to handle WAR and EAR dependencies by @​ascopes in ascopes/protobuf-maven-plugin#789
• Re-enable parallel test execution for integration tests by @​ascopes in ascopes/protobuf-maven-plugin#790
• Bump com.google.api.grpc:proto-google-common-protos from 2.61.0 to 2.61.1 in /protobuf-maven-plugin/src/it/setup by @​dependabot[bot] in ascopes/protobuf-maven-plugin#791
• Bump org.scala-lang:scala3-library_3 from 3.7.2 to 3.7.3 in /protobuf-maven-plugin/src/it/setup by @​dependabot[bot] in ascopes/protobuf-maven-plugin#793
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4 by @​dependabot[bot] in ascopes/protobuf-maven-plugin#796
• Bump com.google.protobuf:protobuf-bom from 4.32.0 to 4.32.1 by @​dependabot[bot] in ascopes/protobuf-maven-plugin#797
• Bump kotlin.version from 2.2.10 to 2.2.20 in /protobuf-maven-plugin/src/it/setup by @​dependabot[bot] in ascopes/protobuf-maven-plugin#798
• Bump net.alchim31.maven:scala-maven-plugin from 4.9.5 to 4.9.6 in /protobuf-maven-plugin/src/it/setup by @​dependabot[bot] in ascopes/protobuf-maven-plugin#799
• Bump io.projectreactor:reactor-core from 3.7.9 to 3.7.11 in /protobuf-maven-plugin/src/it/setup by @​dependabot[bot] in ascopes/protobuf-maven-plugin#800
• GH-792: Avoid modifying file permissions in ~/.m2 for executables by @​ascopes in ascopes/protobuf-maven-plugin#794
• Fix erroneous log message format in UriResourceFetcher.java by @​ascopes in ascopes/protobuf-maven-plugin#801

Full Changelog: ascopes/protobuf-maven-plugin@v3.9.0...v3.9.1

v3.9.0

... (truncated)

Commits

• a3827ea [maven-release-plugin] prepare release v3.10.0
• c4f9a58 Fix deploy.yml
• 524f637 Update deploy.yml
• 0d402b3 [maven-release-plugin] rollback the release of v3.10.0
• 588944a [maven-release-plugin] prepare release v3.10.0
• 909183c Fix mistake in JDK25 config for deploy.yml
• eb739b0 Merge pull request #815 from ascopes/dependabot/maven/main/org.immutables-bom...
• 027fa3e Merge pull request #814 from ascopes/dependabot/maven/main/org.assertj-assert...
• ae5d8de Merge pull request #813 from ascopes/dependabot/maven/main/org.sonatype.centr...
• 69ed3c2 Bump org.immutables:bom from 2.11.3 to 2.11.4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[tadayosi]

@dependabot rebase