This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+9 more
Affected surfaces
Summary
AI summaryAdded root dependency‑management upgrades and build plugin dependency bumps with clearer edit ownership.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds root dependency-management upgrade actions to recommend_pom_upgrades Adds root dependency-management upgrade actions to recommend_pom_upgrades Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Low |
Adds build plugin dependency upgrades as plugin_dep_bump actions Adds build plugin dependency upgrades as plugin_dep_bump actions Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Refactor | Low |
Changes EffectivePomResult.rootManagedDeclarations to expose only direct managed entries with unambiguous edit site Changes EffectivePomResult.rootManagedDeclarations to expose only direct managed entries with unambiguous edit site Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Refactor | Low |
Updates reference updater plugin scoping to apply literal actions only within owner plugin block Updates reference updater plugin scoping to apply literal actions only within owner plugin block Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Refactor | Low |
Aligns release metadata including version, MCP runtime, registry manifest, Docker workflow fallbacks, and build helper fallbacks for 3.2.0 Aligns release metadata including version, MCP runtime, registry manifest, Docker workflow fallbacks, and build helper fallbacks for 3.2.0 Source: llm_adapter@2026-07-14 Confidence: high |
— |
Full changelog
Owned POM Upgrade Targets — extends the POM-aware upgrade path to platform-managed and build
plugin dependency versions that are directly editable in the caller's POM.
Added
- Root dependency-management upgrade actions:
recommend_pom_upgradesnow treats direct,
non-import<dependencyManagement>declarations in the input POM as first-class upgrade targets,
even when a platform/master POM has no normal<dependencies>usage. New
managed_decl_bumpactions identify whether the client should edit a literal<version>or a
root-owned backing property (editTarget,propertyName, anddeclaredIn), so non-LLM clients
can apply the owning edit directly. - Build plugin dependency upgrades: direct dependencies under both
build/pluginsand
build/pluginManagementnow surface asplugin_dep_bumpactions. Each action carries the owner
plugin coordinate and build path in addition to literal/property edit metadata, covering cases
such ascom.puppycrawl.tools:checkstyleinsidemaven-checkstyle-plugin.
Changed
- POM analysis edit ownership:
EffectivePomResult.rootManagedDeclarationsexposes only direct
managed entries with an unambiguous edit site in the input POM. Exact property references are
included only when the property is declared by that root POM; inherited and compound property
expressions remain non-deterministic and are excluded. - Reference updater plugin scoping: literal plugin dependency actions are applied only inside
their identified owner plugin block; property-backed plugin dependencies update the exact
server-supplied property. - Release metadata: aligned the project version, MCP runtime metadata, registry manifest,
Docker workflow fallbacks, and Unix/Windows build helper fallbacks for 3.2.0.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About arvindand/maven-tools-mcp
Universal Maven Central dependency intelligence for JVM build tools (Maven, Gradle, SBT, Mill). Features bulk operations, version comparison, stability filtering, dependency age analysis, release patterns, and Context7 integration for upgrade guidance.
Related context
Related tools
Earlier breaking changes
- v3.0.0 Java toolchain upgraded from Java 24 to Java 25 (LTS); builds now require Java 25.
Beta — feedback welcome: [email protected]