[ACS-11834]: Release Alfresco SDK 4.16.0-A2

[ACS-11834]: Release Alfresco SDK 4.16.0-A1 (#760 )
ACS-11700 - CVE Vulnerabilities in Alfresco SDK (#758 )
2026-09-16 18:13:23 +00:00 · 2026-06-01 11:22:59 +05:30 · 2026-05-28 15:50:23 +05:30 · 2026-05-21 14:55:10 +05:30 · 2026-05-14 05:25:41 +05:30 · 2026-03-26 14:17:15 +01:00
11 changed files with 116 additions and 9 deletions
@@ -0,0 +1,48 @@
+version: 2
+registries:
+  maven-alfresco-internal:
+    type: maven-repository
+    url: https://artifacts.alfresco.com/nexus/content/groups/internal
+    username: ${{secrets.NEXUS_USERNAME}}
+    password: ${{secrets.NEXUS_PASSWORD}}
+updates:
+  - package-ecosystem: "maven"
+    directory: "/"
+    registries:
+      - maven-alfresco-internal
+    schedule:
+      interval: "daily"
+      time: "22:00"
+      timezone: "Europe/London"
+    open-pull-requests-limit: 10
+    allow:
+      - dependency-type: "direct"
+    ignore:
+      - dependency-name: "org.alfresco.maven:*"
+      - dependency-name: "org.alfresco.maven.plugin:*"
+      - dependency-name: "org.alfresco.maven.archetype:*"
+    groups:
+      spring:
+        patterns:
+          - "org.springframework*"
+      alfresco:
+        patterns:
+          - "org.alfresco*"
+      apache-maven:
+        patterns:
+          - "org.apache.maven*"
+      commons:
+        patterns:
+          - "commons-*"
+          - "org.apache.commons*"
+      slf4j:
+        patterns:
+          - "org.slf4j*"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
@@ -83,6 +83,12 @@ jobs:
          - name: "26.1 Community Java 21"
            java-version: 21
            suite: -Pcommunity-261-tests
+          - name: "25.4 Enterprise Java 17"
+            java-version: 17
+            suite: -Penterprise-254-tests
+          - name: "25.4 Community Java 17"
+            java-version: 17
+            suite: -Pcommunity-254-tests
          - name: "25.2 Enterprise Java 17"
            java-version: 17
            suite: -Penterprise-252-tests
@@ -0,0 +1,27 @@
+name: "Load Dependency Graph"
+
+on:
+  push:
+    branches:
+      - "master"
+  schedule:
+    - cron: '0 6 * * *'
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  scan-dependencies:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: Alfresco/alfresco-build-tools/.github/actions/maven-dependency-scan@v17.0.0
+        with:
+          java-version: '21'
+          maven-version: '3.9.9'
+          maven-args: -Dscopes=compile,runtime
+          maven-username: ${{ secrets.NEXUS_USERNAME }}
+          maven-password: ${{ secrets.NEXUS_PASSWORD }}
+          maven-settings-path: ".ci.settings.xml"
@@ -11,7 +11,7 @@
  <parent>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.15.0</version>
+    <version>4.16.0-A2</version>
    <relativePath>../../pom.xml</relativePath>
  </parent>

@@ -5,8 +5,8 @@
    <groupId>${groupId}</groupId>
    <artifactId>${artifactId}</artifactId>
    <version>${version}</version>
-    <name>AIO - SDK 4.15.0</name>
-    <description>All-In-One (AIO) project for SDK 4.15.0</description>
+    <name>AIO - SDK 4.16.0-A2</name>
+    <description>All-In-One (AIO) project for SDK 4.16.0-A2</description>
    <packaging>pom</packaging>

    <prerequisites>
@@ -12,7 +12,7 @@
  <parent>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.15.0</version>
+    <version>4.16.0-A2</version>
    <relativePath>../../pom.xml</relativePath>
  </parent>

@@ -14,7 +14,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.15.0</version>
+        <version>4.16.0-A2</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -17,7 +17,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.15.0</version>
+        <version>4.16.0-A2</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -10,7 +10,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.15.0</version>
+        <version>4.16.0-A2</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -8,7 +8,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.15.0</version>
+        <version>4.16.0-A2</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -3,7 +3,7 @@
    <modelVersion>4.0.0</modelVersion>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.15.0</version>
+    <version>4.16.0-A2</version>
    <name>Alfresco SDK</name>
    <description>This aggregator Project builds all modules required for the Alfresco SDK</description>
    <packaging>pom</packaging>
@@ -290,6 +290,32 @@
            </properties>
        </profile>

+        <!-- 25.4 -->
+        <profile>
+            <id>community-254-tests</id>
+            <properties>
+                <alfresco.bomDependency.artifactId>acs-community-packaging</alfresco.bomDependency.artifactId>
+                <alfresco.platform.version>25.4.0-A.10</alfresco.platform.version>
+                <alfresco.share.docker.version>25.4.0-A.10</alfresco.share.docker.version>
+                <alfresco.share.version>25.4.0.53</alfresco.share.version>
+                <alfresco.platform.docker.image>alfresco/alfresco-content-repository-community</alfresco.platform.docker.image>
+                <alfresco.share.docker.image>alfresco/alfresco-share</alfresco.share.docker.image>
+                <alfresco.platform.docker.user>alfresco</alfresco.platform.docker.user>
+            </properties>
+        </profile>
+        <profile>
+            <id>enterprise-254-tests</id>
+            <properties>
+                <alfresco.bomDependency.artifactId>acs-packaging</alfresco.bomDependency.artifactId>
+                <alfresco.platform.version>25.4.0-A.10</alfresco.platform.version>
+                <alfresco.share.docker.version>25.4.0-A.10</alfresco.share.docker.version>
+                <alfresco.share.version>25.4.0.53</alfresco.share.version>
+                <alfresco.platform.docker.image>quay.io/alfresco/alfresco-content-repository</alfresco.platform.docker.image>
+                <alfresco.share.docker.image>quay.io/alfresco/alfresco-share</alfresco.share.docker.image>
+                <alfresco.platform.docker.user>alfresco</alfresco.platform.docker.user>
+            </properties>
+        </profile>
+
        <!-- 26.1 -->
        <profile>
            <id>community-261-tests</id>
Author	SHA1	Message	Date
Arindam Roy	adec06d2ac	[ACS-11834]: Release Alfresco SDK 4.16.0-A2	2026-06-01 11:22:59 +05:30
Arindam Roy	58c0d62248	[ACS-11834]: Release Alfresco SDK 4.16.0-A1 (#760 )	2026-05-28 15:50:23 +05:30
Arindam Roy	54091607c5	ACS-11700 - CVE Vulnerabilities in Alfresco SDK (#758 )	2026-05-21 14:55:10 +05:30
Satyam Sah	05cc667b51	ACS-11627 Migrate alfresco-sdk to GHAS (#747 )	2026-05-14 05:25:41 +05:30
Copilotandgionn	6c749e8d20	Scope GPG_SIGNING_PASSPHRASE to publish job and SHA-pin third-party actions (#744 ) Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: gionn <71768+gionn@users.noreply.github.com>	2026-03-26 14:17:15 +01:00