Bump org.pf4j:pf4j from 2.2.0 to 3.14.1 in /spring-boot-sample-pf4j2/pf4j2-plugin-sample

[dependabot]

Bumps org.pf4j:pf4j from 2.2.0 to 3.14.1.

Release notes

Sourced from org.pf4j:pf4j's releases.

Release 3.14.1

What's Changed

Security

• Fix path traversal vulnerabilities in ZIP extraction (#618, #623)

Fixed

• Avoid instantiating Plugin class if a plugin is already unloaded (#570) by @​slovdahl

Full Changelog: pf4j/pf4j@release-3.14.0...release-3.14.1

Release 3.14.0

What's Changed

• Add Maven wrapper support by @​JohnNiang in pf4j/pf4j#598
• Exclude bin folder built by Eclipse or VSCode by @​JohnNiang in pf4j/pf4j#601
• Fix verify error under Java 21 by @​JohnNiang in pf4j/pf4j#600
• Fix the deprecation warnings from GitHub Actions by @​JohnNiang in pf4j/pf4j#599

Full Changelog: pf4j/pf4j@release-3.13.0...release-3.14.0

3.13.0

3.13.0 - 2024-11-29

Fixed

• #595: Fix StackOverFlow error on Kotlin classes without Extension annotation

Changed

• #594: Always check for ClassLoaders differences in AbstractExtensionFinder

3.12.1

3.12.1 - 2024-10-12

Fixed

• #586: Plugin Extensions should be detected with any ClassLoadingStrategy
• #590: Fix fire PluginStateEvent for STOPPED state

3.12.0

[3.12.0] - 2024-06-25

Fixed

• #576: Error due to incorrect dependency update after plugin deletion

Changed

• #584: Consolidate demo projects in the 'demo' directory
• Upgrade Mockito to 5.2.0

... (truncated)

Changelog

Sourced from org.pf4j:pf4j's changelog.

[3.14.1] - 2026-01-06

Fixed

• #618, #623: Fix path traversal vulnerabilities in ZIP extraction
• #570: Avoid instantiating Plugin class if a plugin is already unloaded

[3.14.0] - 2025-11-26

Fixed

• #614: Demo application shows zero Greeting extensions under JDK 23
• Set class loader to null on unload plugin

Added

• #598: Add Maven wrapper

[3.13.0] - 2024-11-29

Fixed

• #595: Fix StackOverFlow error on Kotlin classes without @​Extension

Changed

• #594: Always check for ClassLoaders differences in AbstractExtensionFinder

[3.12.1] - 2024-10-12

Fixed

• #586: Plugin Extensions should be detected with any ClassLoadingStrategy
• #590: Fix fire PluginStateEvent for STOPPED state

[3.12.0] - 2024-06-25

Fixed

• #576: Error due to incorrect dependency update after plugin deletion

Changed

• #584: Consolidate demo projects in the 'demo' directory
• Upgrade Mockito to 5.2.0

Added

• Add PluginClassLoader#isClosed method

[3.11.1] - 2024-05-19

Fixed

• #574: Plugin status can‘t change from STARTED to DISABLED
• #582: Remove 'final' for AbstractPluginManager.getResolveRecoveryStrategy method

[3.11.0] - 2024-03-06

Fixed

... (truncated)

Commits

• 6bfa9e8 [maven-release-plugin] prepare release release-3.14.1
• 311363a Move central-publishing-maven-plugin to release profile
• 88a05d1 Restore <extensions> section for maven-archetype packaging
• d8036da Replace unsupported archetype-packaging and update Maven archetype configur...
• 8356c14 Clean up pom.xml by removing obsolete comments
• e440c3a Add Maven cache cleanup step in workflow
• f3d4ac5 Update changelog
• 20c2f80 Fix path traversal vulnerabilities in ZIP extraction (issues #618, #623)
• 2ed63d1 Avoid instantiating Plugin class if a plugin is already unloaded (#570)
• 18c6b50 Add version 3.14.0 to changelog
• Additional commits viewable in compare view

[loong10k]

@dependabot rebase

主分支 CI 修复（PR #35）已合并，请 rebase 以便触发新的 CI 验证。

[loong10k]

关闭此 PR：pf4j 2→3 跨大版本需要源码级 API 迁移（PluginException 在 pf4j 3.0 被移除，仅改版本号无法编译）。

已由 #37 替代完成升级（pf4j 3.14.1 + 异常 API 迁移，JDK 8/17/21 全绿），合并后将自动关闭 CVE-2025-70952 告警。

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.