build(deps): bump plugin from 4.16 to 4.34

Created by: dependabot[bot]

Bumps plugin from 4.16 to 4.34.

Release notes

Sourced from plugin's releases.

4.34

🚀 New features and improvements

• Exclude HtmlUnit from code coverage checking (#492) @​timja

📦 Dependency updates

• Bump maven-hpi-plugin from 3.22 to 3.23 (#501) @​dependabot
• Bump jenkins-test-harness from 1674.v3b8b1441e939 to 1705.va_296493db_feb_ (#500, #498, #495, #491, #487) @​dependabot
• Bump maven-javadoc-plugin from 3.3.1 to 3.3.2 (#499) @​dependabot
• Bump animal-sniffer from 1.20 to 1.21 (#496) @​dependabot
• Bump maven-project-info-reports-plugin from 3.1.2 to 3.2.1 (#497) @​dependabot
• Bump mockito from 4.2.0 to 4.3.1 (#494, #493) @​dependabot
• Bump maven-jar-plugin from 3.2.0 to 3.2.2 (#490, #488) @​dependabot
• Bump maven-compiler-plugin from 3.8.1 to 3.9.0 (#489) @​dependabot
• Bump build-helper-maven-plugin from 3.2.0 to 3.3.0 (#486) @​dependabot

4.33

🚀 New features and improvements

• Bump Jenkins version to 2.249; clean up plugin parent POM (#480) @​basil

📦 Dependency updates

• Bump incrementals-maven-plugin from 1.2 to 1.3 (#483) @​dependabot
• Bump frontend-maven-plugin from 1.12.0 to 1.12.1 (#484) @​dependabot
• Bump incrementals-enforcer-rules from 1.2 to 1.3 (#485) @​dependabot
• Bump maven-site-plugin from 3.9.1 to 3.10.0 (#481) @​dependabot

👻 Maintenance

• Sort a few dependencies in the dependencyManagement section (#482) @​basil
• Adopt POM Code Convention (#479) @​basil

4.32

💥 Compatibility warning

The Enforcer update in #456 triggers new errors in many plugins involving provided scope. If a Dependabot update produces a build failure mentioning RequireUpperBoundDeps, first update the plugin BOM to 1090.v0a_33df40457a_ or later (which necessitates updating the minimum Jenkins version to 2.289.1 or later), then rebase the Dependabot update against the result with @dependabot rebase. If you cannot update the plugin BOM to 1090.v0a_33df40457a_ or later, then exclude the problematic dependency trail to satisfy Enforcer.

You will also need to switch annotations from javax.annotation.* to edu.umd.cs.findbugs.annotations.* equivalents as in jenkinsci/jenkins#4604.

🚨 Removed

• Remove JSR 305 annotations (#467) @​basil

🚀 New features and improvements

• Get annotation versions from core BOM (#470) @​basil
• Ban vulnerable versions of Apache Log4j 2 (#465) @​basil

... (truncated)

Commits

• 961a8ca [maven-release-plugin] prepare release plugin-4.34
• 94d70e2 Bump maven-hpi-plugin from 3.22 to 3.23 (#501)
• c644659 Bump Jenkins Unit Test Harness from 1700.v6d3cd3101b_12 to 1705.va_296493db_f...
• 3466ef4 Bump maven-javadoc-plugin from 3.3.1 to 3.3.2 (#499)
• 3259e78 Bump Jenkins test harness (#498)
• 3d0c3d0 Bump animal.sniffer.version from 1.20 to 1.21 (#496)
• 2e1b156 Bump maven-project-info-reports-plugin from 3.1.2 to 3.2.1 (#497)
• 8d1e75e Bump jenkins-test-harness from 1690.vfcb_959006c07 to 1698.vc58b_4e102e41 (#495)
• fbb51c8 Merge pull request #494 from jenkinsci/dependabot/maven/mockito.version-4.3.1
• 5d158f7 Bump mockito.version from 4.3.0 to 4.3.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)