Upgrade Maven API 3.8.5 -> 3.8.8

[Picnic-Bot]

This PR contains the following updates:

Package	Type	Update	Change
Maven API	compile	patch	3.8.5 -> 3.8.8

---

Release Notes

apache/maven (Maven API)

v3.8.7: 3.8.7

Sub-task

• [MNG-7019] - Notify also at start when profile is missing

Bug

• [MNG-7106] - VersionRange.toString() produces a string that cannot be parsed with VersionRange.createFromVersionSpec() for same lower and upper bounds
• [MNG-7316] - REGRESSION: MavenProject.getAttachedArtifacts() is read-only
• [MNG-7352] - org.apache.maven.toolchain.java.JavaToolchainImpl should be public
• [MNG-7529] - Maven resolver makes bad repository choices when resolving version ranges
• [MNG-7563] - REGRESSION: User properties now override model properties in dependencies
• [MNG-7568] - [WARNING] The requested profile "ABCDEF" could not be activated because it does not exist.
• [MNG-7578] - Building Linux image on Windows impossible (patch incuded)
• [MNG-7600] - LocalRepositoryManager is created too early
• [MNG-7621] - Parameter '-f' causes ignoring any 'maven.config' (only on Windows)
• [MNG-7637] - Possible NPE in MavenProject#hashCode()
• [MNG-7644] - Fix version comparison where .X1 < -X2 for any string qualifier X

Improvement

• [MNG-7590] - Allow configure resolver by properties in settings.xml
• [MNG-7645] - Implement some #toString() methods

Task

• [MNG-7513] - Address commons-io_commons-io vulnerability found in maven latest version
• [MNG-7634] - Revert MNG-5982 and MNG-7417
• [MNG-7636] - Partially revert MNG-5868 to restore backward compatibility (see MNG-7316)

Dependency upgrade

• [MNG-7506] - Upgrade Maven Wagon to 3.5.2
• [MNG-7641] - Upgrade Maven Wagon to 3.5.3

v3.8.6: 3.8.6

What's Changed

• [MNG-7441] 3.8.x Update version of logback by @​cstamas in https://github.com/apache/maven/pull/708
• [MNG-7432] Resolver session contains non-MavenWorkspaceReader by @​laeubi in https://github.com/apache/maven/pull/695
• [MNG-7459] Revert "[3.8.x][MNG-7347] SessionScoped beans should be singletons for a given session" by @​gnodet in https://github.com/apache/maven/pull/715
• [3.8.x] [MNG-7476] Display a warning when an aggregator mojo locks other mojos executions by @​gnodet in https://github.com/apache/maven/pull/736

Full Changelog: apache/maven@maven-3.8.5...maven-3.8.6

---

• If you want to rebase/retry this PR, check this box

[Picnic-Bot]

Warning
Renovate's suggested commit message is being replaced with improved initial commits to enable automerging. As a side effect, these suggested commit messages might have changed. Consider comparing the initial commit message and this message to determine the most suitable one. Please leave feedback in #sys-renovate.

Suggested commit message:

Upgrade Maven API 3.8.5 -> 3.8.8

See:
- https://maven.apache.org/release-notes-all.html
- https://github.com/apache/maven/releases/tag/maven-3.8.6
- https://github.com/apache/maven/releases/tag/maven-3.8.7
- https://github.com/apache/maven/compare/maven-3.8.5...maven-3.8.7

[Picnic-Bot]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.