• Reformatting of #610 for reducing the amount of redundancies (#620) @desruisseaux
• Remove redundant project.build.sourceEncoding from IT POMs (#605) @gnodet
• Disable Jenkins build until Maven 4.0.0-rc-7 is installed on agents (#608) @gnodet
• [MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#118) @Bukama
• [MJAR-321] - Upgrade to Maven 4.0.0-beta-5 (#103) @gnodet

🚨 Removed

• Upgrade to Maven 4.0.0-rc-4 and editions (#481) @desruisseaux

🚀 New features and improvements

• More robust change detection (#594) @desruisseaux
• Skip creating a JAR when includes match no files (#598) @desruisseaux
• [Maven4] Migrate from Maven Archiver to standard jar tool (#508) @desruisseaux
• Add new "attach" configuration parameter (#482) @hgschmie
• [MJAR-323] - add Java-Version to MANIFEST.MF (#468) @hboutemy

🐛 Bug Fixes

• Fix MNG-8137: warn and skip JAR creation for packaging without main artifact (#613) @gnodet
• fix: decouple test-jar skip from maven.test.skip [MJAR-138] - (#612) @gnodet
• [MJAR-596] - Sanitize invalid Automatic-Module-Name from manifest files instead of failing (#610) @gnodet
• Fix multi-release JAR detection on Windows and add integration test (#563) @elharo
• Clamp pre-1980 outputTimestamp to DATE_MIN with a warning (#599) @gnodet
• Respect addBuildEnvironmentEntries for Build-Jdk-Spec (#544) @goutamadwant
• Fix NullPointerException and improve field visibility in AbstractJarMojo (#540) @slachiewicz

📝 Documentation updates

• More robust change detection (#594) @desruisseaux
• Make documentation consistent with new implementation (#593) @desruisseaux
• Document that skipIfEmpty wins over forceCreation (#585) @AzazelSensei
• Fix typos (#565) @elharo
• Convert the FAQ from FML to Markdown (#584) @slachiewicz
• docs: rewrite site pages in ASD-STE100 Simplified Technical English (#581) @elharo
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#548) @potiuk
• Fix javadoc (#503) @elharo

👻 Maintenance

• Use inputExcludes instead of the deprecated excludes (#609) @slawekjaranowski
• Reduce output from passing integration tests (#604) @efegokdemir
• Port the IT scripts from BeanShell to Groovy (#601) @slachiewicz
• Restore the document metadata dropped when the pages were ported (#580) @slachiewicz
• Port the site documentation from APT to Markdown (#578) @slachiewicz
• Use maven4-build instead of hand-rolling the matrix (#576) @slachiewicz
• Pass siteMvn as a String so the site stage runs on Maven 4 (#575) @slachiewicz
• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#548) @potiuk
• Update site descriptor to 2.0.0 and download page (#502) @slawekjaranowski
• Add tag-template to release-drafter configuration (#493) @slawekjaranowski
• JUnit Jupiter best practices (#489) @slachiewicz
• chore: remove junit3 references (#487) @sparsick
• Enable prevent branch protection rules (#462) @sparsick
• [MJAR-322] - Upgrade to maven 4.0.0-rc-2 (#115) @gnodet
• Add PR-automation and stale action (#131) @Bukama
• Improve release-drafter configuration (#127) @slawekjaranowski
• Add badge for 3.x version (#129) @slawekjaranowski
• Enable GitHub issues (#126) @Bukama

🔧 Build

• Fix ATR config in .asf.yaml: add template URLs, recipients, cleanup (#624) @gnodet
• Keep Dependabot off Mockito 5 on maven-jar-plugin-3.x (#614) @slachiewicz

📦 Dependency updates

• Bump maven-archiver to 4.0.0-beta-6 (#621) @ascheman
• Bump com.google.guava:guava from 33.3.1-jre to 33.7.2-jre (#133, #138, #141, #469, #527, #587, #590, #616) @dependabot[bot]
• Bump mavenVersion from 4.0.0-rc-6 to 4.0.0-rc-7 (#607) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 43 to 50 (#124, #451, #518, #533, #546, #602) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.14.0 (#463, #496, #515, #537, #588) @slachiewicz
• Upgrade from Maven 4.0.0-rc-4 to 4.0.0-rc-6. (#573) @desruisseaux
• Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#552) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#551) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#553) @dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml from 4 to 5 (#554) @dependabot[bot]
• Remove unused declared dependencies, suppress false positive for guice (#556) @elharo
• Replace maven-plugin-testing-harness with maven-testing from Maven 4 (#542) @slachiewicz
• Downgrade Guice version to 5.1.0 (#541) @slachiewicz
• Bump org.junit:junit-bom from 5.11.4 to 5.14.4 (#123, #139, #145, #147, #453, #455, #459, #497, #530) @dependabot[bot]
• Update Invokerplugin to 3.9.1 to support Java 25 (#486) @Bukama
• Upgrade to Maven 4.0.0-rc-4 and editions (#481) @desruisseaux
• Bump org.apache.maven.shared:maven-archiver from 4.0.0-beta-3 to 4.0.0-beta-4 (#460) @dependabot[bot]
• Bump org.apache.maven.shared:file-management from 3.1.0 to 3.2.0 (#142) @dependabot[bot]
• Bump org.junit.jupiter:junit-jupiter-api from 5.10.2 to 5.11.4 (#105) @dependabot[bot]
• [MJAR-320] - Bump com.google.guava:guava from 32.0.1-jre to 33.3.1-jre (#101) @dependabot[bot]
• [MJAR-318] - Bump org.codehaus.plexus:plexus-archiver from 4.9.2 to 4.10.0 (#97) @dependabot[bot]
• [MJAR-319] - Bump org.apache.maven.plugins:maven-plugins from 42 to 43 (#98) @dependabot[bot]

📝 Documentation updates

• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @potiuk

👻 Maintenance

• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @potiuk
• Use plugin version properties (3.x) (#535) @Bukama

📦 Dependency updates

• Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (#538) @dependabot[bot]
• Bump mavenVersion from 3.9.15 to 3.9.16 (#536) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534) @dependabot[bot]
• Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529) @dependabot[bot]
• Bump mavenVersion from 3.9.14 to 3.9.15 (#528) @dependabot[bot]
• Bump mavenVersion from 3.9.12 to 3.9.14 (#526) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#523) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 46 to 47 (#519) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0 (#516) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.0 (#517) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 45 to 46 (#514) @dependabot[bot]
• Bump org.apache.maven:maven-archiver from 3.6.5 to 3.6.6 (#511) @dependabot[bot]
• Bump mavenVersion from 3.9.11 to 3.9.12 (#509) @dependabot[bot]

🚀 New features and improvements

• Add new "attach" configuration parameter (3.x port of #482) (#483) @hgschmie
• add Java-Version to MANIFEST.MF (#465) @hboutemy

🐛 Bug Fixes

• Fix detecting java version for toolchains and JDK 1.8 (#500) @slawekjaranowski
• Ignore stderr when parsing javac version from toolchain (#471) @jaredstehler

👻 Maintenance

• Update site descriptor to 2.0.0 (#501) @slawekjaranowski
• chore: remove junit3 references (#494) @slawekjaranowski
• Migrate component injection to JSR-330 (#492) @slawekjaranowski
• Add PR Automation to 3.x (#132) @slawekjaranowski
• Improve release-drafter configuration (#128) @slawekjaranowski
• Fix for Maven 4.0.0-rc-3 (#130) @slawekjaranowski
• [MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#119) @Bukama

🔧 Build

• Bump m-invoker-p to 3.9.1 for Java 25 (#480) @hboutemy

📦 Dependency updates

• Bump commons-io:commons-io from 2.20.0 to 2.21.0 (#499) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4 (#498) @dependabot[bot]
• Use maven-plugin-testing-harness version 3.4.0 (#491) @slawekjaranowski
• Bump org.apache.maven.plugin-tools:maven-plugin-annotations from 3.15.1 to 3.15.2 (#488) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.10.3 (#478) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1 (#464) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 42 to 45 (#452) @dependabot[bot]
• Bump org.apache.maven:maven-archiver from 3.6.2 to 3.6.4 (#461) @dependabot[bot]
• Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#457) @dependabot[bot]
• Bump mavenVersion from 3.9.10 to 3.9.11 (#456) @dependabot[bot]
• Bump mavenVersion from 3.9.9 to 3.9.10 (#146) @dependabot[bot]
• Bump org.apache.maven.shared:file-management from 3.1.0 to 3.2.0 (#143) @dependabot[bot]
• Bump mavenVersion from 3.6.3 to 3.9.9 (#107) @dependabot[bot]
• Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#140) @dependabot[bot]
• Bump commons-io:commons-io from 2.16.1 to 2.18.0 (#114) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.9.2 to 4.10.0 (#109) @dependabot[bot]

What's Changed

• [MJAR-311] Switch to the Maven 4 API by @gnodet in #70
• Fix license/notice by @gnodet in #94
• Bump org.junit.jupiter:junit-jupiter-api from 5.10.1 to 5.10.2 by @dependabot in #91
• Build with JDK 17 and 21 in Jenkins by @gnodet in #95
• Add missing provided dependencies by @gnodet in #93

New Contributors

• @gnodet made their first contribution in #70

Full Changelog: maven-jar-plugin-3.4.2...maven-jar-plugin-4.0.0-beta-1

🐛 Bug Fixes

• [MJAR-310] - fixed toolchain version detection when toolchain paths contain white spaces (#86) @jansohn

👻 Maintenance

• Build with Maven 4 (#88) @slawekjaranowski

🐛 Bug Fixes

• [MJAR-307] - Wrong version of commons-io cause a ClassNotFound o.a.commons.io.file.attribute.FileTimes (#83) @slawekjaranowski

📦 Dependency updates

• [MJAR-308] - Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#85) @dependabot

🚀 New features and improvements

• [MJAR-296] - Allow including files excluded by default. (#67) @redzi
• [MJAR-302] - Require Maven 3.6.3 (#77) @slawekjaranowski
• [MJAR-292] - Detect MRJAR and add Multi-Release manifest entry (#57) @jorsol

🐛 Bug Fixes

• [MJAR-62] - Set Build-Jdk according to used toolchain (#73) @slawekjaranowski

📦 Dependency updates

• [MJAR-306] - Use properties for plugins versions in LifecycleMapping (#82) @slawekjaranowski
• Bump org.junit:junit-bom from 5.10.1 to 5.10.2 (#74) @dependabot
• [MJAR-298] - Update Maven-Archiver to 3.6.2 (#78) @slawekjaranowski
• Bump apache/maven-gh-actions-shared from 2 to 4 (#72) @dependabot
• Bump commons-io:commons-io from 2.14.0 to 2.15.1 (#68) @dependabot
• [MJAR-297] - Update Parent to 40 (#64) @jorsol
• [MJAR-298] - Update Maven-Archiver to 3.6.1 (#65) @jorsol
• [MJAR-293] - Update Parent to 39 (#59) @jorsol

👻 Maintenance

• [MJAR-304] - Refresh download page (#80) @slawekjaranowski
• [MJAR-303] - Cleanup declared dependencies (#79) @slawekjaranowski
• Remove dependency on plexus (#63) @elharo

🚀 New features and improvements

• [MJAR-278] - Update plugin (requires Maven 3.2.5+) (#19) @cstamas
• [MJAR-280] - Java 8 minimum (#29) @olamy

🐛 Bug Fixes

• [MJAR-275] - Fix outputTimestamp not applied to module-info; breaks reproducible builds (#43) @jorsol

📦 Dependency updates

• [MJAR-290] - Update Plexus Utils to 3.4.2 (#48) @jorsol
• [MJAR-291] - Upgrade Parent to 37 (#50) @jorsol
• Bump junit from 4.11 to 4.13.1 in /src/it/MJAR-228 (#39) @dependabot
• Bump plexus-utils from 3.3.1 to 3.4.2 (#42) @dependabot
• [MJAR-288] - Upgrade Parent to 36 (#40) @slawekjaranowski

📝 Documentation updates

• Restore mavenArchiverVersion property used in the site (#51) @jorsol
• (doc) Updated create-test-jar.apt.vm removing 'and' in Maven site Create Test JAR documentation (#34) @focbenz

👻 Maintenance

• use shared action v3 (#49) @olamy
• Code simplifications in AbstractMojo (#47) @rhowe

What's Changed

• [MJAR-260] Fail on invalid automatic module name by @sormuras in #3
• [MNGSITE-393] remove more pre Maven 3 content by @elharo in #8
• compat not needed by @elharo in #10
• ignore .checkstyle by @elharo in #12
• Two minor dependency updates by @elharo in #11
• simplify test by @elharo in #13
• fix link to issue tracker by @elharo in #14
• update minimum Maven version to 3.1.0 by @elharo in #15
• docs: grammar by @elharo in #18
• Bump maven-shared-utils from 3.3.3 to 3.3.4 by @dependabot in #20
• Bump plexus-archiver from 4.2.3 to 4.2.5 by @dependabot in #23
• use shared gh action by @olamy in #24
• Bump junit from 4.13 to 4.13.2 by @dependabot in #25
• use shared gh action - v1 by @slawekjaranowski in #28
• Bump maven-archiver from 3.5.0 to 3.5.1 by @dependabot in #27

New Contributors

• @sormuras made their first contribution in #3
• @elharo made their first contribution in #8
• @dependabot made their first contribution in #20
• @olamy made their first contribution in #24
• @slawekjaranowski made their first contribution in #28

Full Changelog: https://github.com/apache/maven-jar-plugin/commits/maven-jar-plugin-3.2.2