Maven dependency updates 2026-10-19

.github/workflows/maven-release.yml

@@ -72,24 +72,6 @@ jobs:
           distribution: 'temurin'
           overwrite-settings: false
 
-      # central-publishing-maven-plugin 0.11.0 leaves Maven 3.10 staging metadata in the bundle,
-      # and Central rejects it. Keep this in step with the Maven version in .mise.toml.
-      - name: Set up Maven
-        shell: bash
-        env:
-          MAVEN_VERSION: 3.9.16
-          MAVEN_SHA512: 831a8591fe20c8243b1dbe7d71e3244f31d1665b0804b2e825e38cbbe5ce0cafb8338851f90780735568773e0a6cd07bbec107cda0b896b008b861075358b6f6
-        run: |
-          set -euo pipefail
-
-          archive="apache-maven-${MAVEN_VERSION}-bin.tar.gz"
-          curl -fsSL -o "${RUNNER_TEMP}/${archive}" \
-            "https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/${MAVEN_VERSION}/${archive}"
-          echo "${MAVEN_SHA512}  ${RUNNER_TEMP}/${archive}" | sha512sum -c -
-
-          tar -xzf "${RUNNER_TEMP}/${archive}" -C "${RUNNER_TEMP}"
-          echo "${RUNNER_TEMP}/apache-maven-${MAVEN_VERSION}/bin" >> "${GITHUB_PATH}"
-
       - name: Install GPG secret key
         run: |
           cat <(echo -e "${{ secrets.ORG_GPG_PRIVATE_KEY }}") | gpg --batch --import

.mise.toml

@@ -1,3 +1,3 @@
 [tools]
 java = "temurin-17.0.19+10"
-maven = "3.9.16"
+maven = "3.10.0"

pom.xml

@@ -72,7 +72,7 @@
     <xmlunit.version>2.14.0</xmlunit.version>
 
     <!-- Plugin Dependency Versions -->
-    <central-publishing-maven-plugin.version>0.11.0</central-publishing-maven-plugin.version>
+    <central-publishing-maven-plugin.version>0.12.0</central-publishing-maven-plugin.version>
     <checkstyle.version>12.3.1</checkstyle.version>
     <jaxb2-maven-plugin.version>4.2.0</jaxb2-maven-plugin.version>
     <license-tool-plugin.version>1.1.0</license-tool-plugin.version>