Is it possible to upgrade this plugin (https://mvnrepository.com/artifact/org.codehaus.mojo/versions-maven-plugin/2.15.0) also in spring boot 3.1.x (even though policy is not to upgrade minor/major dependencies)?

There is problematic bug:

In spring boot 2.7.x, there is plugin version 2.10.0, In spring boot 3.1.x, there is plugin version 2.15.0, In spring boot 3.2.x, there is plugin version 2.16.2.

In version 2.15.0, there is critical bug, because it is ignoring configuration of allowMinor/allowMajor. It was okay in 2.10.0 and is fixed in 2.16.2.

Output of v. 2.15.0 - allow Major is false, but it updates major anyway:

[INFO] Assuming allowMajorUpdates false because allowMinorUpdates is false. 
[INFO] Updated ${somedependency.version} from 10.0.32 to 11.0.3 

Thanks

Comment From: bclozel

@tomaskodaj is there a fix for this issue in a 2.15.x maintenance version? Do you have a reference to an issue?

Comment From: tomaskodaj

@bclozel I am not aware of the fix available in 2.15.x (havent found any 2.15.1 artifact...) For the reference, I have also filed it for the plugin: https://github.com/mojohaus/versions/issues/1029

Comment From: bclozel

Thanks for creating that issue @tomaskodaj - I have subscribed to it. As you have mentioned there, we can't upgrade to 2.16 in 3.1.x as it's likely to change the behavior for maintenance upgrade. If a 2.15.1 version is released we will pick it up in the 3.1.x line.

I'm closing this issue for now as a result.