Maven Central · #2447 by repository stars

org.apache.maven.plugins:maven-pmd-plugin

3.28.0apache/maven-pmd-plugin ↗New releases in your daily digest, changelog included.

A Maven plugin for the PMD toolkit, that produces a report on both code rule violations and detected copy and paste fragments, as well as being able to fail the build based on these metrics.

Last release 1 years ago
07 Oct 2025
Ships fairly regularly
a new release about every 4 months
Rarely documented
notes for 8 of 40 stable releases
Nothing withdrawn
no release was ever pulled
20 years old
42 releases · first in 2006

Release timeline

42 releases since 2006

Releases

3.28.07 Oct 2025
🚀 New features and improvements
🚀 New features and improvements

Bump pmdVersion from 7.16.0 to 7.17.0 (#661) @timpeeters

Bump pmdVersion from 7.15.0 to 7.16.0 (#652) @dependabot[bot]

Bump pmdVersion from 7.14.0 to 7.15.0 (#643) @dependabot[bot]

📝 Documentation updates

Update historical PMD version in docs (#662) @slawekjaranowski

Document that excludes takes priority over includes (#645) @elharo

👻 Maintenance

feat: enable prevent branch protection rules (#653) @sparsick

Add Apache 2.0 LICENSE file (#650) @Ndacyayisenga-droid

Prefer JDK built-in methods for string joining (#646) @elharo

[MPMD-412] - More specific catch blocks (#642) @elharo

📦 Dependency updates

Bump org.apache.commons:commons-lang3 from 3.8.1 to 3.18.0 in ITs (#648) @dependabot[bot]

Bump pmdVersion from 7.16.0 to 7.17.0 (#661) @timpeeters

Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 (#658) @dependabot[bot]

Bump org.codehaus.plexus:plexus-resources from 1.3.0 to 1.3.1 (#654) @dependabot[bot]

Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#655) @dependabot[bot]

Bump pmdVersion from 7.15.0 to 7.16.0 (#652) @dependabot[bot]

Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#651) @dependabot[bot]

Bump mavenVersion from 3.9.10 to 3.9.11 (#649) @dependabot[bot]

Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#647) @dependabot[bot]

Bump resolverVersion from 1.9.23 to 1.9.24 (#644) @dependabot[bot]

Bump pmdVersion from 7.14.0 to 7.15.0 (#643) @dependabot[bot]

3.27.021 Jun 2025Deprecated

[MPMD-411] - Implement getOutputPath and identify getOutputName as deprecated, ( #179 ) @elharo

🚀 New features and improvements

Use constant 3.6.3 in prerequisites/maven as minimal Maven version (#640) @slawekjaranowski
Bump pmdVersion from 7.12.0 to 7.14.0 (#213) @dependabot[bot]
Allow plugin execute with Maven 4 (#209) @slawekjaranowski
Upgrade to PMD 7.12 (#196) @elharo
[MPMD-411] - Implement getOutputPath and identify getOutputName as deprecated, (#179) @elharo

🐛 Bug Fixes

[MPMD-410] - Number agreement (#181) @elharo

📝 Documentation updates

Documentation: Excludes should be placed in pluginManagement (#637) (#638) @Bukama
small parameter documentation improvement (#221) @elharo
Replace manually maintained release notes by link to GitHub (#214) @slawekjaranowski
Correct typos (#194) @elharo
Add more information about excludes (#185) @Bukama
[MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#182) @Bukama

👻 Maintenance

[MPMD-412] - Simplify stub setup by not swallowing exceptions (#226) @elharo
Use maven-embedder in test scope (#228) @slawekjaranowski
Ignore the .vscode directory in git (#227) @elharo
Clarify and simplify isDirectoryExcluded (#222) @elharo
fix return type of getFilesToProcess in Javadoc (#223) @elharo
small parameter documentation improvement (#221) @elharo
Clean up some Javadoc comments (#219) @elharo
Declare used dependency on org.apache.maven.reporting:maven-reporting… (#215) @elharo
Buffer the writers (#218) @elharo
Get rid of maven-artifact-transfer and other legacy stuff (#210) @slawekjaranowski
Introduce service executors for CPD, PMD executors (#206) @slawekjaranowski
Upgrade PR template for GitHub issues (#207) @slawekjaranowski
Update site descriptor to 2.0 (#205) @slawekjaranowski
Use shared release-drafter action (#203) @slawekjaranowski
Fix failed tests in CPD reports that were hidden by overly broad catch clauses (#192) @elharo
simplify code by preferring JDK methods (#199) @elharo
Declare javax.inject dependency (#197) @elharo
Avoid catching raw exception (#198) @elharo
[MPMD-412] - Remove unused code and otherwise cleanup tests (#178) @elharo
remove redundant code (#193) @elharo
[MPMD-412] - clean up unused code (#190) @elharo
Enable GitHub issues (#184) @Bukama
Prefer Guice injection (#177) @elharo

📦 Dependency updates

Bump org.apache.maven.plugins:maven-plugins from 44 to 45 (#639) @dependabot[bot]
Bump mavenVersion from 3.6.3 to 3.9.10 (#641) @dependabot[bot]
Bump pmdVersion from 7.12.0 to 7.14.0 (#213) @dependabot[bot]
Upgrade to PMD 7.12 (#196) @elharo
Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#188) @dependabot[bot]
Bump commons-io:commons-io from 2.17.0 to 2.18.0 (#176) @dependabot[bot]
Update to Parent 44 (#186) @Bukama

Open source →

3.26.025 Oct 2024

MPMD-405 - Update release notes for 3.25.0 ( #166 ) @adangel

📝 Documentation updates

MPMD-405 - Update release notes for 3.25.0 (#166) @adangel

📦 Dependency updates

MPMD-404 - Upgrade to PMD 7.7.0 (#170) @pzygielo
MPMD-407 - Upgrade to Doxia 2.0.0 GA Stack (#175) @michael-o
Bump commons-io:commons-io from 2.7 to 2.14.0 in /src/it/MPMD-318-auxclasspath-includeTests/module-a (#174) @dependabot
Bump commons-io:commons-io from 2.16.1 to 2.17.0 (#169) @dependabot
Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0 (#167) @dependabot

NOTE: Read the details on this release here: https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack

Open source →

3.25.022 Aug 2024Deprecated

MPMD-368 - Parameter 'localRepository' is deprecated

🚀 New features and improvements

MPMD-390 - Dynamically calculate xrefLocation/xrefTestLocation (#126) @michael-o

🐛 Bug Fixes

MPMD-368 - Parameter 'localRepository' is deprecated

👻 Maintenance

MPMD-398 - Refresh download page (#165) @FredrikAnderson

📝 Documentation updates

(doc) Update release notes for 3.23.0 and 3.24.0 (#161) @adangel

📦 Dependency updates

MPMD-389 - Upgrade to Doxia 2.0.0 Milestone Stack (#126) @michael-o
MPMD-401 - Upgrade to Parent 43 (#159) @dependabot
Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.16.0 (#164) @dependabot
Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0 (#163) @dependabot

💥 Breaking changes

If you use maven-site-plugin together with maven-pmd-plugin, you need to upgrade m-site-p to 3.20.0 or later.
Read the details on this release here: https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack

Open source →

3.24.010 Jul 2024

🚀 New features and improvements

[MPMD-391] - Log what developers care about and not what they don't (#156) @michael-o

🐛 Bug Fixes

[MPMD-399] - Incorrect warning: The project X does not seem to be compi… (#154) @michael-o

📦 Dependency updates

[MPMD-400] - Upgrade to PMD 7.3.0 (#157) @michael-o
Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.23 to 1.24 (#155) @dependabot
Bump org.apache.maven.shared:maven-common-artifact-filters from 3.3.2 to 3.4.0 (#153) @dependabot

👻 Maintenance

Remove outdated (#158) @michael-o

Open source →

3.22.018 Apr 2024

🚀 New features and improvements

[MPMD-379] - Upgrade to use PMD 7.0.0 by default (#144) @mkolesnikov

📦 Dependency updates

[MPMD-394] - Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#148) @dependabot
[MPMD-393] - Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#147) @dependabot
[MPMD-393] - Bump commons-io:commons-io from 2.15.1 to 2.16.0 (#146) @dependabot
Bump apache/maven-gh-actions-shared from 3 to 4 (#143) @dependabot
Bump org.codehaus.plexus:plexus-resources from 1.2.0 to 1.3.0 (#140) @dependabot
Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.14.0 (#137) @dependabot
Bump commons-io:commons-io from 2.11.0 to 2.15.1 (#138) @dependabot

👻 Maintenance

Bump release-drafter/release-drafter from 5 to 6 (#142) @dependabot

Open source →

3.21.230 Oct 2023

MPMD-370 - Remove remaining uses of FileReader

🐛 Bug Fixes

MPMD-370 - Remove remaining uses of FileReader
MPMD-371 - Using two ruleset files with same name in different directories (#127) @harbulot
MPMD-382 - Regression in report rendering
MPMD-384 - maven-pmd-plugin is dowloading transitive dependencies of unmanaged version (#135) @caiwei-ebay

👻 Maintenance

Move commons-lang3 to test scope (#131) @elharo

📝 Documentation updates

Typo: fill --> file (#133) @elharo

📦 Dependency updates

MPMD-380 - Prefer apache commons and JDK to Plexus utils (#132) @elharo
MPMD-387 - Upgrade to Parent 40

Open source →